last executing test programs: 7.939510767s ago: executing program 0 (id=1973): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 7.663974881s ago: executing program 0 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) 5.284695105s ago: executing program 4 (id=1982): sendmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="c6926ca73b6cb463924ecac6d1d84c2bd9ab56b0765ea00d8d5f5159cea694405566a8717aaa3750d016bfd13478f656d6538472bbf56f247cdfadc1d072b9d085e55c3a4dc92a13e7a30a16c4123beea20f40a67ee3d626e93f", 0x5a}], 0x1}}], 0x1, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea899e2b7fb0a0110d1000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512654000"}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="c02101"], 0xda) 5.115952623s ago: executing program 4 (id=1983): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2000000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400", 0x22}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.662093771s ago: executing program 2 (id=1984): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4.525809726s ago: executing program 2 (id=1985): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.851353612s ago: executing program 2 (id=1986): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5176, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0x1d2d, 0x0, 0x0, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000140)="83", 0x1) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) 3.441651064s ago: executing program 0 (id=1987): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}}, 0x0) 3.288064776s ago: executing program 0 (id=1989): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, r3, 0x0, [0x2, 0x2]}, {r2, 0x0, 0x3, [0x0, 0x4]}, 0x2000000, [0x1]}) 3.229604247s ago: executing program 0 (id=1990): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/33, 0x21}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404806, 0x0) 3.07764525s ago: executing program 4 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(r5) 3.077284727s ago: executing program 3 (id=1993): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000001300010001000000000000000c000000010005"], 0x28}], 0x1}, 0x0) 2.896764027s ago: executing program 3 (id=1995): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2.73116191s ago: executing program 3 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r2, 0x5, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0x0, 0x0, 0xfac0c]}]]}, 0x38}}, 0x0) 2.575052056s ago: executing program 3 (id=1998): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0xbc, 0x6b, 0x20, 0x13b1, 0x42, 0x496b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x5, 0x5a}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.448958737s ago: executing program 1 (id=1999): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}}, 0x0) 2.283979322s ago: executing program 1 (id=2000): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) 2.204050829s ago: executing program 1 (id=2001): syz_usb_connect(0x0, 0x6f, &(0x7f0000000b00)=ANY=[@ANYBLOB="30010000c46f3d08a905402612550000000109025d00010000000009040000000e010008"], 0x0) 1.961856174s ago: executing program 2 (id=2002): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 1.256100487s ago: executing program 4 (id=2003): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x200, 0x0) 1.17794141s ago: executing program 3 (id=2004): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 1.116948828s ago: executing program 4 (id=2005): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020600000000000000000000000000000500040000000000020000000000000011000300686173683a69702c706f7274000000000c000780080012"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.046504239s ago: executing program 3 (id=2006): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r6) 715.93727ms ago: executing program 1 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x4cfab3f176228cef, 0x1000) 661.984674ms ago: executing program 1 (id=2008): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0c000320db"], 0xf) 606.879919ms ago: executing program 1 (id=2009): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000de00000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 360.021906ms ago: executing program 2 (id=2010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) 236.748427ms ago: executing program 2 (id=2011): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vlan0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000940)=[{&(0x7f00000009c0)="0821f6d3", 0x4}], 0x1, 0xfffffffe, 0x0) 126.258565ms ago: executing program 4 (id=2012): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r2, 0x181}, {r1, 0x8024}], 0x2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 0s ago: executing program 0 (id=2013): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f00000005c0)='net/igmp6\x00') pread64(r3, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) kernel console output (not intermixed with test programs): device team_slave_0 removed [ 339.435501][ T29] audit: type=1326 audit(1727905705.924:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.1218" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 339.948125][ T9521] veth0_vlan: entered promiscuous mode [ 339.961119][ T9521] veth1_vlan: entered promiscuous mode [ 340.023422][ T9737] chnl_net:caif_netlink_parms(): no params data found [ 340.035436][ T9521] veth0_macvtap: entered promiscuous mode [ 340.089973][ T9858] fuse: Bad value for 'fd' [ 340.143259][ T9521] veth1_macvtap: entered promiscuous mode [ 340.265653][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.309371][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.348726][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.377920][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.413908][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.432577][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.460388][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.475022][ T5236] Bluetooth: hci0: command tx timeout [ 340.488175][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.545935][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.572732][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.612632][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.639220][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.679199][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.725380][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.768345][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.786226][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.806584][ T9737] bridge_slave_0: entered allmulticast mode [ 340.834725][ T9737] bridge_slave_0: entered promiscuous mode [ 340.900062][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.939291][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.946856][ T9737] bridge_slave_1: entered allmulticast mode [ 340.984000][ T9737] bridge_slave_1: entered promiscuous mode [ 340.994598][ T29] audit: type=1326 audit(1727905707.484:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.4.1231" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 341.041097][ T9521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.069330][ T9521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.078366][ T9521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.121821][ T9521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.174778][ T9737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.212548][ T9737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.327325][ T9737] team0: Port device team_slave_0 added [ 341.347782][ T9737] team0: Port device team_slave_1 added [ 341.524291][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.531567][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.558261][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.588237][ T9737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.645552][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.665142][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.691514][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.732386][ T9737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.775972][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.805197][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.980861][ T9737] hsr_slave_0: entered promiscuous mode [ 342.011149][ T9737] hsr_slave_1: entered promiscuous mode [ 342.023630][ T9737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.042608][ T9737] Cannot create hsr debugfs directory [ 342.154926][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.193453][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.551701][ T5236] Bluetooth: hci0: command tx timeout [ 342.647606][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 343.513161][ T9737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.564763][ T9737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.608136][ T9737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.643230][ T9737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.868615][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.935441][ T9737] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.984416][ T2542] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.991688][ T2542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.062450][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.069815][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.281458][ T9737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.513716][ T9737] veth0_vlan: entered promiscuous mode [ 344.543159][ T9737] veth1_vlan: entered promiscuous mode [ 344.629683][ T5236] Bluetooth: hci0: command tx timeout [ 344.662974][ T9737] veth0_macvtap: entered promiscuous mode [ 344.747175][ T9737] veth1_macvtap: entered promiscuous mode [ 344.764760][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.775904][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.786599][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.800005][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.811383][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.823017][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.833173][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.843866][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.856338][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.882206][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.893488][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.904203][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.923757][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.953909][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.981348][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.003336][ T9737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.027199][ T9737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.085141][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.157142][ T9737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.217700][ T9737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.244581][ T9737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.264869][ T9737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.558976][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 345.639064][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.694827][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.825244][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.839584][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.889629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 345.911925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 346.769819][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.786473][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1299'. [ 346.795164][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.823189][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.837493][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.852085][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.864356][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.878786][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.894520][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.920195][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.927876][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.957021][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 346.997218][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.007090][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.029923][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.037513][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.057438][ T5287] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 347.092935][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.101566][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.109586][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.117284][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.125186][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.133145][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.141270][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.148866][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.156859][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.164900][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.173680][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.181699][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.189870][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.197431][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.205572][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.214314][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.222816][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.230618][ T936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 347.256825][ T936] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.421341][ T5287] usb 5-1: config 0 has no interfaces? [ 347.427242][ T5287] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 347.456244][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.502819][ T5287] usb 5-1: config 0 descriptor?? [ 347.737335][ T5297] usb 5-1: USB disconnect, device number 7 [ 348.108047][T10171] netlink: 'syz.1.1313': attribute type 5 has an invalid length. [ 348.452660][ T29] audit: type=1804 audit(1727905714.944:118): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1322" name="/newroot/75/file0" dev="fuse" ino=1 res=1 errno=0 [ 349.319290][T10207] IPVS: set_ctl: invalid protocol: 157 255.255.255.255:20004 [ 349.458511][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 349.578956][T10219] netlink: 'syz.0.1335': attribute type 3 has an invalid length. [ 349.775605][ T2993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.004753][ T2993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.144810][ T2993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.270430][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.286761][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.296479][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.305037][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.313119][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.318933][ T2993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.333138][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.473824][T10238] IPVS: set_ctl: invalid protocol: 157 255.255.255.255:20004 [ 350.981232][ T2993] bridge_slave_1: left allmulticast mode [ 350.996406][ T2993] bridge_slave_1: left promiscuous mode [ 351.016910][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.051752][ T2993] bridge_slave_0: left allmulticast mode [ 351.066056][ T2993] bridge_slave_0: left promiscuous mode [ 351.077937][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.895837][T10272] IPVS: set_ctl: invalid protocol: 157 255.255.255.255:20004 [ 352.084190][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.106818][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.134248][ T2993] bond0 (unregistering): Released all slaves [ 352.220024][T10236] chnl_net:caif_netlink_parms(): no params data found [ 352.258031][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 352.273424][T10288] netlink: 'syz.0.1367': attribute type 15 has an invalid length. [ 352.295305][T10288] netlink: 'syz.0.1367': attribute type 18 has an invalid length. [ 352.389381][ T5236] Bluetooth: hci1: command tx timeout [ 352.755537][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.770687][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.780011][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.819316][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.843789][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 352.851585][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.093047][T10236] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.129455][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.137000][T10236] bridge_slave_0: entered allmulticast mode [ 353.157552][T10236] bridge_slave_0: entered promiscuous mode [ 353.179398][ T2993] hsr_slave_0: left promiscuous mode [ 353.202080][ T2993] hsr_slave_1: left promiscuous mode [ 353.251123][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.258730][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.292535][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.300497][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.350201][ T2993] veth1_macvtap: left promiscuous mode [ 353.361342][ T2993] veth0_macvtap: left promiscuous mode [ 353.367036][ T2993] veth1_vlan: left promiscuous mode [ 353.381171][ T2993] veth0_vlan: left promiscuous mode [ 353.945749][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 354.005134][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 354.469548][ T5236] Bluetooth: hci1: command tx timeout [ 354.580096][T10236] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.587319][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.595026][T10236] bridge_slave_1: entered allmulticast mode [ 354.602897][T10236] bridge_slave_1: entered promiscuous mode [ 354.758350][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.781399][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.905762][ T5236] Bluetooth: hci3: command tx timeout [ 355.115112][T10236] team0: Port device team_slave_0 added [ 355.179741][T10236] team0: Port device team_slave_1 added [ 355.274848][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.287316][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.298049][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.307762][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.318396][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 355.326881][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.336233][T10310] chnl_net:caif_netlink_parms(): no params data found [ 355.414534][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.422217][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.451337][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.531195][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.538789][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.568565][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.739998][T10236] hsr_slave_0: entered promiscuous mode [ 355.750159][T10236] hsr_slave_1: entered promiscuous mode [ 355.757255][T10236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.765501][T10236] Cannot create hsr debugfs directory [ 355.899321][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.906700][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.919512][T10310] bridge_slave_0: entered allmulticast mode [ 355.927447][T10310] bridge_slave_0: entered promiscuous mode [ 355.937871][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.951390][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.979920][T10310] bridge_slave_1: entered allmulticast mode [ 355.987253][T10310] bridge_slave_1: entered promiscuous mode [ 356.192799][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.218715][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.312508][ T2993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.558119][ T2993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.571823][ T5236] Bluetooth: hci1: command tx timeout [ 356.639081][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.652052][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.678704][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.687498][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.696774][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.705691][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.748385][T10310] team0: Port device team_slave_0 added [ 356.784997][ T2993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.820575][T10310] team0: Port device team_slave_1 added [ 356.931964][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.939350][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.969022][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.970149][ T5236] Bluetooth: hci3: command tx timeout [ 356.987931][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.996422][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.024065][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.052459][ T2993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.247765][T10351] chnl_net:caif_netlink_parms(): no params data found [ 357.306710][T10310] hsr_slave_0: entered promiscuous mode [ 357.322984][T10310] hsr_slave_1: entered promiscuous mode [ 357.336505][T10310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.347843][T10310] Cannot create hsr debugfs directory [ 357.432963][ T54] Bluetooth: hci4: command tx timeout [ 357.742143][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.755204][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.765798][T10351] bridge_slave_0: entered allmulticast mode [ 357.773903][T10351] bridge_slave_0: entered promiscuous mode [ 357.874348][ T2993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.893947][ T2993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.957950][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.978070][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.995477][T10351] bridge_slave_1: entered allmulticast mode [ 358.010856][T10351] bridge_slave_1: entered promiscuous mode [ 358.102123][ T2993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.119086][ T2993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.272852][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.288168][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.348249][ T2993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.359713][ T2993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.485498][ T2993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.496352][ T2993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.525575][T10351] team0: Port device team_slave_0 added [ 358.563740][T10351] team0: Port device team_slave_1 added [ 358.615310][T10377] chnl_net:caif_netlink_parms(): no params data found [ 358.627443][T10236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.634908][ T5236] Bluetooth: hci1: command tx timeout [ 358.666291][T10236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.678893][T10351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.686144][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.724480][T10351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.739629][T10351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.746834][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.773750][T10351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.789489][ T5236] Bluetooth: hci0: command tx timeout [ 358.840443][T10236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.905620][T10236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.963204][T10377] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.971084][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.978404][T10377] bridge_slave_0: entered allmulticast mode [ 358.989245][T10377] bridge_slave_0: entered promiscuous mode [ 359.018283][T10377] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.029541][ T5236] Bluetooth: hci3: command tx timeout [ 359.051362][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.058834][T10377] bridge_slave_1: entered allmulticast mode [ 359.081230][T10377] bridge_slave_1: entered promiscuous mode [ 359.092602][T10351] hsr_slave_0: entered promiscuous mode [ 359.099055][T10351] hsr_slave_1: entered promiscuous mode [ 359.110862][T10351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.118705][T10351] Cannot create hsr debugfs directory [ 359.125731][ T2993] bridge_slave_1: left allmulticast mode [ 359.131985][ T2993] bridge_slave_1: left promiscuous mode [ 359.137942][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.150381][ T2993] bridge_slave_0: left allmulticast mode [ 359.156106][ T2993] bridge_slave_0: left promiscuous mode [ 359.162998][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.174948][ T2993] bridge_slave_1: left allmulticast mode [ 359.181268][ T2993] bridge_slave_1: left promiscuous mode [ 359.187046][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.197419][ T2993] bridge_slave_0: left allmulticast mode [ 359.203698][ T2993] bridge_slave_0: left promiscuous mode [ 359.209885][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.519653][ T5236] Bluetooth: hci4: command tx timeout [ 360.037494][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.049330][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.061297][ T2993] bond0 (unregistering): Released all slaves [ 360.224836][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.237415][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.252921][ T2993] bond0 (unregistering): Released all slaves [ 360.402323][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.516172][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.857113][T10377] team0: Port device team_slave_0 added [ 360.870376][ T5236] Bluetooth: hci0: command tx timeout [ 360.951612][T10377] team0: Port device team_slave_1 added [ 361.109605][ T5236] Bluetooth: hci3: command tx timeout [ 361.164785][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.180122][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.219468][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.291595][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.299531][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.332117][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.550567][T10377] hsr_slave_0: entered promiscuous mode [ 361.557548][T10377] hsr_slave_1: entered promiscuous mode [ 361.566038][T10377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.575749][T10377] Cannot create hsr debugfs directory [ 361.591640][ T5236] Bluetooth: hci4: command tx timeout [ 361.644667][ T2993] hsr_slave_0: left promiscuous mode [ 361.655479][ T2993] hsr_slave_1: left promiscuous mode [ 361.667280][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.676114][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.688211][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.696202][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.721630][ T2993] hsr_slave_0: left promiscuous mode [ 361.727779][ T2993] hsr_slave_1: left promiscuous mode [ 361.734516][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.742172][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.751380][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.759411][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.793348][ T2993] veth1_macvtap: left promiscuous mode [ 361.798970][ T2993] veth0_macvtap: left promiscuous mode [ 361.804665][ T2993] veth1_vlan: left promiscuous mode [ 361.810978][ T2993] veth0_vlan: left promiscuous mode [ 361.817374][ T2993] veth1_macvtap: left promiscuous mode [ 361.823329][ T2993] veth0_macvtap: left promiscuous mode [ 361.829224][ T2993] veth1_vlan: left promiscuous mode [ 361.834663][ T2993] veth0_vlan: left promiscuous mode [ 362.587723][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 362.648286][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 362.950330][ T5236] Bluetooth: hci0: command tx timeout [ 363.679375][ T5236] Bluetooth: hci4: command tx timeout [ 363.728222][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 363.787733][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 364.505438][T10310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.541933][T10310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.582872][T10310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.593797][T10310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.658018][T10236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.781918][T10236] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.818310][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.825616][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.890642][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.897829][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.045743][ T5236] Bluetooth: hci0: command tx timeout [ 365.237628][T10310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.273099][T10236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.383438][T10377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.424224][T10351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.473755][T10351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.502205][T10310] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.545052][T10377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.568970][T10351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.589577][T10351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.613479][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.620904][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.685223][T10377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.707537][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.714757][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.745749][T10236] veth0_vlan: entered promiscuous mode [ 365.818958][T10377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.898890][T10236] veth1_vlan: entered promiscuous mode [ 365.988225][ T2993] bridge_slave_1: left allmulticast mode [ 366.009822][ T2993] bridge_slave_1: left promiscuous mode [ 366.021384][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.042884][ T2993] bridge_slave_0: left allmulticast mode [ 366.048952][ T2993] bridge_slave_0: left promiscuous mode [ 366.062081][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.746379][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.759373][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.771340][ T2993] bond0 (unregistering): Released all slaves [ 366.810601][T10310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.936038][T10310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.974018][T10236] veth0_macvtap: entered promiscuous mode [ 366.990205][T10377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 367.002994][T10377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.024173][T10377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.041184][T10236] veth1_macvtap: entered promiscuous mode [ 367.078012][T10377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.172282][ T2993] hsr_slave_0: left promiscuous mode [ 367.178315][ T2993] hsr_slave_1: left promiscuous mode [ 367.188618][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.197651][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.209860][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.217404][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.239055][ T2993] veth1_macvtap: left promiscuous mode [ 367.244780][ T2993] veth0_macvtap: left promiscuous mode [ 367.250564][ T2993] veth1_vlan: left promiscuous mode [ 367.255901][ T2993] veth0_vlan: left promiscuous mode [ 367.801339][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 367.841727][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 368.291635][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.329284][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.347373][T10236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.368726][T10351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.388942][T10310] veth0_vlan: entered promiscuous mode [ 368.425333][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.443924][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.455443][T10236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.483880][T10310] veth1_vlan: entered promiscuous mode [ 368.497016][T10236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.515604][T10236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.524907][T10236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.534080][T10236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.557727][T10351] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.654446][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.661794][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.673024][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.680221][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.823922][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.853840][T10310] veth0_macvtap: entered promiscuous mode [ 368.917689][T10310] veth1_macvtap: entered promiscuous mode [ 368.938317][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.957446][T10377] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.973686][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.015571][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.022800][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.092168][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.099469][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.129802][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.146926][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.169020][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.187579][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.215934][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.227527][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.246337][T10310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.258825][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.277361][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.309609][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.329381][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.351623][T10310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.413974][T10310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.426160][T10310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.439960][T10310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.479340][T10310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.551828][T10377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.566004][T10377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.582062][T10351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.687726][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.791530][T10351] veth0_vlan: entered promiscuous mode [ 369.911865][T10351] veth1_vlan: entered promiscuous mode [ 369.921802][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.936365][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.001730][T10377] veth0_vlan: entered promiscuous mode [ 370.011932][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.025455][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.043235][T10377] veth1_vlan: entered promiscuous mode [ 370.066272][T10351] veth0_macvtap: entered promiscuous mode [ 370.105978][T10351] veth1_macvtap: entered promiscuous mode [ 370.197751][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.216595][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.243950][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.278176][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.299353][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.329328][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.341873][T10351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.362869][T10377] veth0_macvtap: entered promiscuous mode [ 370.388884][T10377] veth1_macvtap: entered promiscuous mode [ 370.402725][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.418131][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.439303][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.456613][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.467790][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.481076][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.494171][T10351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.517040][T10351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.535727][T10351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.548683][T10351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.558804][T10351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.614831][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.638879][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.654353][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.667982][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.678783][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.699489][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.718374][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.734204][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.746530][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.778238][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.792951][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.804415][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.816885][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.828103][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.845034][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.856763][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.868116][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.881462][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.915756][T10602] geneve2: entered promiscuous mode [ 370.938571][T10602] geneve2: entered allmulticast mode [ 370.962998][T10377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.977462][T10377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.987455][T10377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.002371][T10377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.127082][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.150996][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.267534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.293616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.327080][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.359518][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.457015][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.487016][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.024054][ T29] audit: type=1326 audit(1727905740.494:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10692 comm="syz.2.1474" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x0 [ 375.508129][T10754] netlink: 'syz.2.1490': attribute type 29 has an invalid length. [ 375.551967][T10756] netlink: 'syz.2.1490': attribute type 29 has an invalid length. [ 375.604779][T10754] netlink: 'syz.2.1490': attribute type 29 has an invalid length. [ 376.318224][ T29] audit: type=1326 audit(1727905742.804:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.0.1496" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 376.468903][T10792] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1498'. [ 377.245040][ T29] audit: type=1326 audit(1727905743.734:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 377.303284][ T29] audit: type=1326 audit(1727905743.734:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 377.365339][ T29] audit: type=1326 audit(1727905743.734:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 377.403010][ T29] audit: type=1326 audit(1727905743.734:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 377.426701][ T29] audit: type=1326 audit(1727905743.734:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 377.451433][ T29] audit: type=1326 audit(1727905743.734:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 377.483737][ T29] audit: type=1326 audit(1727905743.734:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 377.516470][ T29] audit: type=1326 audit(1727905743.734:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 378.271043][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 379.193961][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.200646][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.481105][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 379.481133][ T29] audit: type=1326 audit(1727905745.974:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.1.1535" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 380.060292][T10902] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1538'. [ 380.074933][T10902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1538'. [ 380.084527][T10902] unsupported nlmsg_type 40 [ 380.986416][T10928] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 381.114289][ T29] audit: type=1326 audit(1727905747.604:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.3.1552" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 382.437558][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.467339][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.495964][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.516286][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.536620][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.559309][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.599337][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.618000][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.639554][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.647050][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.654841][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.662406][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.669929][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.677397][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.684962][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.692582][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.700435][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.707900][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.715726][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.723406][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.731049][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.739221][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.739519][ T29] audit: type=1326 audit(1727905749.225:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1570" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 382.746912][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.746951][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.746982][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.747010][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.799474][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.807879][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.815596][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.823249][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.831141][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.838632][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.846586][ T5285] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 382.870872][ T5285] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.324857][T10956] rtc_cmos 00:00: Alarms can be up to one day in the future [ 383.428716][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 383.457436][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 383.478107][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 383.489498][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 383.496953][ T25] rtc rtc0: __rtc_set_alarm: err=-22 [ 383.604941][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1569'. [ 383.700852][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1575'. [ 383.778763][T10998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.821849][T10998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.270892][T11007] netlink: 'syz.4.1580': attribute type 29 has an invalid length. [ 384.303271][T11007] netlink: 'syz.4.1580': attribute type 29 has an invalid length. [ 384.325991][T11007] netlink: 'syz.4.1580': attribute type 29 has an invalid length. [ 384.649219][ T29] audit: type=1326 audit(1727905751.125:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.0.1585" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 384.759353][ T5287] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 384.923075][ T5287] usb 5-1: config 0 has no interfaces? [ 384.934875][ T5287] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 384.959335][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.980439][ T5287] usb 5-1: config 0 descriptor?? [ 385.133891][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 385.148431][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 385.167758][T11031] batadv1: entered allmulticast mode [ 385.174773][T11031] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 385.221462][ T25] usb 5-1: USB disconnect, device number 8 [ 386.021067][T11047] netlink: 'syz.4.1594': attribute type 3 has an invalid length. [ 386.528957][ T29] audit: type=1326 audit(1727905753.015:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.2.1600" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x0 [ 387.041501][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.191828][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.391595][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.571056][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.828371][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.852130][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.863527][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.873238][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.881670][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.890606][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.931246][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 388.030041][ T12] bridge_slave_1: left allmulticast mode [ 388.035827][ T12] bridge_slave_1: left promiscuous mode [ 388.045097][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.146338][ T12] bridge_slave_0: left allmulticast mode [ 388.168509][ T12] bridge_slave_0: left promiscuous mode [ 388.178539][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.395909][ T29] audit: type=1326 audit(1727905754.885:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.424369][ T29] audit: type=1326 audit(1727905754.885:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.459537][ T29] audit: type=1326 audit(1727905754.885:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.479627][ T5235] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 388.492465][ T29] audit: type=1326 audit(1727905754.885:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.520358][ T29] audit: type=1326 audit(1727905754.885:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.552648][ T29] audit: type=1326 audit(1727905754.885:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.581834][ T29] audit: type=1326 audit(1727905754.885:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.611077][ T29] audit: type=1326 audit(1727905754.885:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 388.688757][ T5235] usb 4-1: config 0 has no interfaces? [ 388.697590][ T5235] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 388.726948][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.746603][ T5235] usb 4-1: config 0 descriptor?? [ 388.998428][ T5235] usb 4-1: USB disconnect, device number 7 [ 389.117594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.138802][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.161160][ T12] bond0 (unregistering): Released all slaves [ 389.181710][T11099] netlink: 'syz.0.1614': attribute type 29 has an invalid length. [ 389.993959][ T54] Bluetooth: hci3: command tx timeout [ 390.006130][ T29] kauditd_printk_skb: 1572 callbacks suppressed [ 390.006149][ T29] audit: type=1326 audit(1727905756.105:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.189301][ T29] audit: type=1326 audit(1727905756.495:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.249423][ T29] audit: type=1326 audit(1727905756.495:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.273364][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.300037][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.317489][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.321297][ T29] audit: type=1326 audit(1727905756.495:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.355264][ T29] audit: type=1326 audit(1727905756.495:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.385401][ T29] audit: type=1326 audit(1727905756.495:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.408093][ T29] audit: type=1326 audit(1727905756.495:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.430333][ T29] audit: type=1326 audit(1727905756.495:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.453679][ T29] audit: type=1326 audit(1727905756.495:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.476898][ T29] audit: type=1326 audit(1727905756.495:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x50000 [ 390.514852][T11088] chnl_net:caif_netlink_parms(): no params data found [ 390.559369][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.615241][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 390.630779][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.849566][ T12] hsr_slave_0: left promiscuous mode [ 391.080369][ T12] hsr_slave_1: left promiscuous mode [ 391.222805][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.230572][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.278064][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.307660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.421784][ T12] veth1_macvtap: left promiscuous mode [ 391.427410][ T12] veth0_macvtap: left promiscuous mode [ 391.449444][ T12] veth1_vlan: left promiscuous mode [ 391.454888][ T12] veth0_vlan: left promiscuous mode [ 392.079585][ T54] Bluetooth: hci3: command tx timeout [ 392.219016][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.284819][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.717299][ T54] Bluetooth: hci1: command tx timeout [ 393.067383][T11154] netlink: 'syz.4.1629': attribute type 29 has an invalid length. [ 393.413303][T11088] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.453516][T11088] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.486141][T11088] bridge_slave_0: entered allmulticast mode [ 393.495007][T11088] bridge_slave_0: entered promiscuous mode [ 393.503306][T11088] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.510957][T11088] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.518914][T11088] bridge_slave_1: entered allmulticast mode [ 393.526818][T11088] bridge_slave_1: entered promiscuous mode [ 393.677283][T11088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.763496][T11088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.043789][T11088] team0: Port device team_slave_0 added [ 394.079016][T11088] team0: Port device team_slave_1 added [ 394.159436][ T54] Bluetooth: hci3: command tx timeout [ 394.256391][T11088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.265134][T11088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.271400][T11203] fuse: Bad value for 'group_id' [ 394.319486][T11088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.360335][T11203] fuse: Bad value for 'group_id' [ 394.369461][T11088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.397598][T11088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.467167][T11088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.738087][T11088] hsr_slave_0: entered promiscuous mode [ 394.765004][ T5287] IPVS: starting estimator thread 0... [ 394.774914][T11088] hsr_slave_1: entered promiscuous mode [ 394.789220][ T54] Bluetooth: hci1: command tx timeout [ 394.806258][T11088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.831071][T11088] Cannot create hsr debugfs directory [ 394.909392][T11213] IPVS: using max 17 ests per chain, 40800 per kthread [ 394.974322][T11216] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 394.999610][T11218] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 395.097427][T11216] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 395.184456][T11140] chnl_net:caif_netlink_parms(): no params data found [ 395.601531][T11140] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.608981][T11140] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.640350][T11140] bridge_slave_0: entered allmulticast mode [ 395.678345][T11140] bridge_slave_0: entered promiscuous mode [ 395.701186][T11140] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.727056][T11140] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.744402][T11140] bridge_slave_1: entered allmulticast mode [ 395.752384][T11140] bridge_slave_1: entered promiscuous mode [ 395.773099][T11238] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1647'. [ 395.790543][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 395.940804][T11242] fuse: Bad value for 'group_id' [ 395.946978][T11242] fuse: Bad value for 'group_id' [ 396.168919][T11140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.220562][T11254] netlink: 'syz.0.1651': attribute type 29 has an invalid length. [ 396.246280][ T54] Bluetooth: hci3: command tx timeout [ 396.256502][T11140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.356935][T11256] netlink: 'syz.0.1651': attribute type 29 has an invalid length. [ 396.376714][ T29] kauditd_printk_skb: 1629 callbacks suppressed [ 396.376734][ T29] audit: type=1326 audit(1727905762.865:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.4.1653" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 396.378373][T11254] netlink: 'syz.0.1651': attribute type 29 has an invalid length. [ 396.466683][T11140] team0: Port device team_slave_0 added [ 396.491904][T11140] team0: Port device team_slave_1 added [ 396.658757][T11259] netlink: 'syz.0.1651': attribute type 29 has an invalid length. [ 396.668490][T11140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.698693][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.743030][T11140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.767433][T11140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.791561][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.821718][T11140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.870171][ T54] Bluetooth: hci1: command tx timeout [ 396.927441][T11140] hsr_slave_0: entered promiscuous mode [ 396.957589][T11140] hsr_slave_1: entered promiscuous mode [ 396.978079][T11140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.007426][T11140] Cannot create hsr debugfs directory [ 397.319318][T11088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.382048][T11278] fuse: Bad value for 'group_id' [ 397.387282][T11278] fuse: Bad value for 'group_id' [ 397.436750][T11088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.452732][T11088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.490886][T11088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.644756][T11284] netlink: 'syz.4.1662': attribute type 29 has an invalid length. [ 397.661081][T11284] netlink: 'syz.4.1662': attribute type 29 has an invalid length. [ 397.772985][T11088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.794296][T11088] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.812665][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.820517][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.868107][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.875545][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.197262][T11140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.306199][T11287] validate_nla: 4 callbacks suppressed [ 398.306223][T11287] netlink: 'syz.0.1671': attribute type 29 has an invalid length. [ 398.345802][T11291] netlink: 'syz.0.1671': attribute type 29 has an invalid length. [ 398.493490][T11140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.687191][T11140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.848181][T11088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.923283][T11088] veth0_vlan: entered promiscuous mode [ 398.937003][T11088] veth1_vlan: entered promiscuous mode [ 398.967072][T11088] veth0_macvtap: entered promiscuous mode [ 398.969243][ T54] Bluetooth: hci1: command tx timeout [ 398.977983][T11088] veth1_macvtap: entered promiscuous mode [ 398.994006][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.004749][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.014736][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.025500][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.036793][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.048686][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.060494][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.071431][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.084446][T11088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.094551][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.105207][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.115477][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.126396][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.136574][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.139512][ T29] audit: type=1326 audit(1727905765.585:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.3.1667" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 399.147869][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.179871][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.190615][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.207071][T11088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.302325][T11140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.363277][T11088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.372499][T11088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.378216][ T5286] IPVS: starting estimator thread 0... [ 399.409302][T11088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.418413][T11088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.490038][T11335] IPVS: using max 15 ests per chain, 36000 per kthread [ 399.717690][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.749319][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.876640][ T2542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.927370][ T2542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.984121][T11140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.064684][T11140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.121096][T11140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.173342][T11140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.204587][T11352] netlink: 'syz.3.1673': attribute type 29 has an invalid length. [ 400.269661][T11354] netlink: 'syz.3.1673': attribute type 29 has an invalid length. [ 400.292574][T11358] netlink: 'syz.1.1604': attribute type 10 has an invalid length. [ 400.362337][T11358] team0: Device veth1_macvtap failed to register rx_handler [ 400.426005][T11359] netlink: 'syz.3.1673': attribute type 29 has an invalid length. [ 400.467594][T11352] netlink: 'syz.3.1673': attribute type 29 has an invalid length. [ 400.888947][T11140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.909229][T11140] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.951070][ T29] audit: type=1326 audit(1727905767.435:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1681" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 401.026483][ T2542] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.033776][ T2542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.112084][ T2542] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.119466][ T2542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.315276][T11140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.410465][T11140] veth0_vlan: entered promiscuous mode [ 401.424409][T11140] veth1_vlan: entered promiscuous mode [ 401.466270][T11140] veth0_macvtap: entered promiscuous mode [ 401.480250][T11140] veth1_macvtap: entered promiscuous mode [ 401.521961][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.543199][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.558986][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.579189][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.602246][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.618907][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.637459][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.650526][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.661659][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.683469][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.704124][T11140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.860016][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.874338][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.911390][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.938912][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.979272][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.020862][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.040320][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.060184][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.079228][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.097960][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.119399][T11140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.127069][T11403] netlink: 'syz.0.1687': attribute type 29 has an invalid length. [ 402.158072][T11405] netlink: 'syz.0.1687': attribute type 29 has an invalid length. [ 402.222619][T11140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.243793][T11140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.253303][T11140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.262880][T11140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.274964][T11407] netlink: 'syz.0.1687': attribute type 29 has an invalid length. [ 402.445428][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.481649][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.571595][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.590330][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.886353][T11421] fuse: Bad value for 'fd' [ 403.174979][ T29] audit: type=1326 audit(1727905769.665:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.0.1695" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 403.743089][T11443] validate_nla: 1 callbacks suppressed [ 403.743115][T11443] netlink: 'syz.4.1698': attribute type 29 has an invalid length. [ 403.798260][T11445] netlink: 'syz.4.1698': attribute type 29 has an invalid length. [ 403.817613][T11443] netlink: 'syz.4.1698': attribute type 29 has an invalid length. [ 403.839304][T11443] netlink: 'syz.4.1698': attribute type 29 has an invalid length. [ 404.209777][T11456] fuse: Bad value for 'fd' [ 404.622167][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1710'. [ 404.665388][T11470] netlink: 'syz.3.1711': attribute type 29 has an invalid length. [ 404.702393][T11470] netlink: 'syz.3.1711': attribute type 29 has an invalid length. [ 404.730424][T11470] netlink: 'syz.3.1711': attribute type 29 has an invalid length. [ 404.758288][T11470] netlink: 'syz.3.1711': attribute type 29 has an invalid length. [ 404.857049][ T29] audit: type=1326 audit(1727905771.335:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.0.1713" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 404.935353][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 405.125292][T11489] fuse: Bad value for 'fd' [ 405.566332][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1723'. [ 405.690473][T11502] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 405.710822][T11502] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 405.866107][T11507] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1727'. [ 407.036028][T11530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1734'. [ 407.954215][ T29] audit: type=1326 audit(1727905774.445:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.0.1736" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 408.308315][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 408.834849][T11574] validate_nla: 6 callbacks suppressed [ 408.834874][T11574] netlink: 'syz.4.1753': attribute type 29 has an invalid length. [ 408.861167][T11574] netlink: 'syz.4.1753': attribute type 29 has an invalid length. [ 408.890286][T11574] netlink: 'syz.4.1753': attribute type 29 has an invalid length. [ 408.923098][T11574] netlink: 'syz.4.1753': attribute type 29 has an invalid length. [ 409.324663][T11585] IPVS: Scheduler module ip_vs_ not found [ 409.358671][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 409.729463][ T5287] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 409.919240][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 409.926658][ T5287] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 409.948252][ T5287] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 410.000520][ T5287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.019316][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 410.035431][ T5287] usb 5-1: SerialNumber: syz [ 410.070984][T11595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.199457][ T29] audit: type=1326 audit(1727905776.675:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.3.1765" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 410.293623][T11595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.313601][T11612] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 410.341000][T11612] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 410.370087][T11612] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 410.397022][T11612] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 410.784011][ T5287] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 410.941719][T11623] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 411.165735][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 411.501343][T11651] netlink: 'syz.3.1778': attribute type 29 has an invalid length. [ 411.568631][T11653] netlink: 'syz.3.1778': attribute type 29 has an invalid length. [ 411.918175][T11670] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 412.013380][ T5291] usb 5-1: USB disconnect, device number 9 [ 412.022133][ T5291] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 412.169522][ T5287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 412.321748][ T5287] usb 2-1: config 0 has no interfaces? [ 412.327758][ T5287] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 412.354968][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.388714][ T5287] usb 2-1: config 0 descriptor?? [ 412.459635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 412.480286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 412.611743][ T5288] usb 2-1: USB disconnect, device number 4 [ 413.127452][T11717] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 413.940155][T11750] validate_nla: 6 callbacks suppressed [ 413.940179][T11750] netlink: 'syz.3.1808': attribute type 29 has an invalid length. [ 414.071139][T11755] netlink: 'syz.3.1808': attribute type 29 has an invalid length. [ 414.108132][T11756] netlink: 'syz.3.1808': attribute type 29 has an invalid length. [ 414.147399][T11750] netlink: 'syz.3.1808': attribute type 29 has an invalid length. [ 414.399355][ T5287] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 414.412391][T11767] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 414.552894][ T5287] usb 3-1: config 0 has no interfaces? [ 414.572233][ T5287] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 414.619255][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.644269][ T5287] usb 3-1: config 0 descriptor?? [ 414.884460][ T5287] usb 3-1: USB disconnect, device number 11 [ 416.135762][T11817] netlink: 'syz.4.1821': attribute type 29 has an invalid length. [ 416.196942][T11817] netlink: 'syz.4.1821': attribute type 29 has an invalid length. [ 416.240420][T11817] netlink: 'syz.4.1821': attribute type 29 has an invalid length. [ 416.264202][T11817] netlink: 'syz.4.1821': attribute type 29 has an invalid length. [ 418.132433][T11861] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 418.162572][T11861] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 418.654140][T11877] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1842'. [ 418.688047][T11877] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1842'. [ 420.391511][T11898] IPVS: Scheduler module ip_vs_ not found [ 421.430048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 422.708229][T11939] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 422.815924][T11945] validate_nla: 2 callbacks suppressed [ 422.815942][T11945] netlink: 'syz.1.1869': attribute type 29 has an invalid length. [ 422.899365][T11945] netlink: 'syz.1.1869': attribute type 29 has an invalid length. [ 422.963013][T11948] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1870'. [ 422.989573][T11945] netlink: 'syz.1.1869': attribute type 29 has an invalid length. [ 423.419327][ T5286] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 423.579718][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 423.620377][ T5286] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.650790][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.693371][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 423.731456][ T5286] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 423.760736][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.780244][ T5286] usb 2-1: config 0 descriptor?? [ 424.233003][T11974] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 424.262490][ T5286] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 424.271064][ T5286] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 424.279894][ T5286] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 424.286999][ T5286] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 424.294599][ T5286] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 424.345778][ T5286] ntrig 0003:1B96:000A.000B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 424.551953][ T5286] usb 2-1: USB disconnect, device number 5 [ 424.949216][ T5285] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 425.109803][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 425.122822][ T5285] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 425.148418][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.179415][ T5285] usb 1-1: Product: syz [ 425.183675][ T5285] usb 1-1: Manufacturer: syz [ 425.188335][ T5285] usb 1-1: SerialNumber: syz [ 425.197722][ T5285] usb 1-1: config 0 descriptor?? [ 425.353698][ T29] audit: type=1326 audit(1727905791.785:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 425.399425][ T29] audit: type=1326 audit(1727905791.785:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 425.431468][ T29] audit: type=1326 audit(1727905791.795:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=57 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 425.439515][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.467612][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.477564][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.486916][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.495750][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 425.505582][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.540137][ T29] audit: type=1326 audit(1727905791.795:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 425.609511][ T29] audit: type=1326 audit(1727905791.795:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 425.867750][ T5285] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 426.010950][T11997] chnl_net:caif_netlink_parms(): no params data found [ 426.192690][T12011] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 426.200756][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.207989][T11997] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.255693][T11997] bridge_slave_0: entered allmulticast mode [ 426.308687][T11997] bridge_slave_0: entered promiscuous mode [ 426.337093][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.364477][T11997] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.394601][T11997] bridge_slave_1: entered allmulticast mode [ 426.421153][T11997] bridge_slave_1: entered promiscuous mode [ 426.565908][T11997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.593830][T11997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.679667][T11997] team0: Port device team_slave_0 added [ 426.691013][T11997] team0: Port device team_slave_1 added [ 426.787753][T11997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.805418][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.848881][T11997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.891575][T11997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.909064][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.987970][T11997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.180775][T11997] hsr_slave_0: entered promiscuous mode [ 427.205675][T11997] hsr_slave_1: entered promiscuous mode [ 427.220477][T11997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.244870][T11997] Cannot create hsr debugfs directory [ 427.277870][T12025] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.405826][ T5285] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 427.440014][ T5285] usb 1-1: USB disconnect, device number 10 [ 427.589511][ T5236] Bluetooth: hci2: command tx timeout [ 427.784797][T11997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.855543][T12038] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 427.899819][ T5288] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 427.900591][T11997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.057468][T11997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.059504][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 428.092542][ T5288] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 428.112788][ T5288] usb 5-1: config 0 has no interface number 0 [ 428.140017][ T5288] usb 5-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 428.164089][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.180091][ T5288] usb 5-1: Product: syz [ 428.188859][T11997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.189205][ T5288] usb 5-1: Manufacturer: syz [ 428.214649][ T5288] usb 5-1: SerialNumber: syz [ 428.231765][ T5288] usb 5-1: config 0 descriptor?? [ 428.246928][ T5288] ums-usbat 5-1:0.74: USB Mass Storage device detected [ 428.397943][T11997] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.416719][T11997] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.429625][T11997] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.440821][T11997] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.466653][ T5286] usb 5-1: USB disconnect, device number 10 [ 428.579334][T11997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.602756][T11997] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.628997][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.636359][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.693825][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.701050][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.854626][T11997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.953491][T11997] veth0_vlan: entered promiscuous mode [ 428.993525][T11997] veth1_vlan: entered promiscuous mode [ 429.076365][T11997] veth0_macvtap: entered promiscuous mode [ 429.122114][T11997] veth1_macvtap: entered promiscuous mode [ 429.142774][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.153647][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.169435][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.180647][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.191450][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.204787][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.215070][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.225887][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.236357][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.247245][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.259344][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.270126][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.281549][T11997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.292956][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.303648][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.315921][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.329278][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.339444][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.350391][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.360895][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.371809][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.382302][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.393493][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.403958][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.414866][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.428041][T11997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.451488][T11997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.460400][T11997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.469328][T11997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.478072][T11997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.498490][T12067] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 429.669756][ T5236] Bluetooth: hci2: command tx timeout [ 429.917639][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.925877][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.145078][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.176934][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.075015][T12094] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 431.508631][T12105] fuse: Bad value for 'fd' [ 431.639407][ T29] audit: type=1326 audit(1727905798.075:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 431.701377][ T29] audit: type=1326 audit(1727905798.075:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 431.741754][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.750293][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.757761][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.766292][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.774168][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.782013][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.789871][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.797513][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.805287][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.817749][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.825679][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.833856][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.841634][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.850580][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.858119][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.865979][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.873560][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.881162][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.888740][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.896273][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.905140][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.913244][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.921081][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.928601][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.930991][ T29] audit: type=1326 audit(1727905798.075:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=443 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 431.936196][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.967106][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.974718][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.982298][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.991531][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 431.998973][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 432.006479][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 432.013977][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 432.021486][ T5286] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 432.059431][ T5286] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 432.151014][ T29] audit: type=1326 audit(1727905798.075:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 432.238109][ T29] audit: type=1326 audit(1727905798.075:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 432.288924][ T5236] Bluetooth: hci1: unexpected cc 0x1407 length: 100 > 9 [ 432.449432][ T5283] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 432.579263][ T5283] usb 2-1: device descriptor read/64, error -71 [ 432.740688][ T5287] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 432.901727][ T5283] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 432.962112][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 432.971014][ T5287] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.991269][T12125] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 433.019313][ T5287] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.049266][ T5283] usb 2-1: device descriptor read/64, error -71 [ 433.056009][ T5287] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 433.080610][ T5287] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.120261][ T5287] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.151069][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.159805][ T5283] usb usb2-port1: attempt power cycle [ 433.433693][ T5287] usb 3-1: usb_control_msg returned -71 [ 433.440434][ T5236] Bluetooth: hci2: command tx timeout [ 433.446002][ T5287] usbtmc 3-1:16.0: can't read capabilities [ 433.459550][ T5287] usb 3-1: USB disconnect, device number 12 [ 433.649460][ T5283] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 433.650286][ T5288] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 433.731482][ T5283] usb 2-1: device descriptor read/8, error -71 [ 433.771450][T12133] fuse: Bad value for 'fd' [ 433.849516][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 433.868915][ T5288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.880751][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.910297][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.954314][ T5288] usb 5-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 433.964109][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.972385][ T5288] usb 5-1: Product: syz [ 433.976615][ T5288] usb 5-1: Manufacturer: syz [ 433.981443][ T5288] usb 5-1: SerialNumber: syz [ 434.005024][ T5288] usb 5-1: config 0 descriptor?? [ 434.019219][ T5283] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 434.039963][ T5283] usb 2-1: device descriptor read/8, error -71 [ 434.150868][ T5283] usb usb2-port1: unable to enumerate USB device [ 434.169406][ T5287] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 434.223428][ T5288] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.282424][ T5288] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 434.296990][ T5288] usb 5-1: USB disconnect, device number 11 [ 434.326914][T12026] udevd[12026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.329326][ T5287] usb 3-1: Using ep0 maxpacket: 32 [ 434.354863][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.378112][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.388623][ T5287] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 434.400412][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.423263][ T5287] usb 3-1: config 0 descriptor?? [ 434.444771][ T5287] hub 3-1:0.0: USB hub found [ 434.642591][ T5287] hub 3-1:0.0: 1 port detected [ 434.828990][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 434.853891][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 434.874140][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 434.892489][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 434.902695][ T5287] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 434.909816][ T5287] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 434.926466][ T5287] usbhid 3-1:0.0: can't add hid device: -71 [ 434.933411][ T5287] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 434.969292][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 434.994701][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.011150][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.028233][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.063560][ T5287] usb 3-1: USB disconnect, device number 13 [ 435.068297][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.089274][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.096800][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.104513][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.112668][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.120658][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.129612][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.137085][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.144776][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.152571][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.160180][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.167934][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.175452][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.183005][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.191012][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.198481][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.206081][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.213660][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.221202][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.229321][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.237776][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.246456][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.254052][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.261612][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.269188][ T5291] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 435.277555][ T5297] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 435.291878][ T5291] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 435.430326][ T5297] usb 1-1: device descriptor read/64, error -71 [ 435.569424][ T5283] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 435.594955][T12152] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 435.679817][ T5297] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 435.721517][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 435.731681][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.765776][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.788917][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 435.809700][ T5283] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 435.819802][ T5297] usb 1-1: device descriptor read/64, error -71 [ 435.826258][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.845752][ T5283] usb 5-1: config 0 descriptor?? [ 435.933859][ T5297] usb usb1-port1: attempt power cycle [ 436.282206][ T5283] ntrig 0003:1B96:000A.000E: unknown main item tag 0x0 [ 436.289562][ T5297] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 436.304497][ T5283] ntrig 0003:1B96:000A.000E: unknown main item tag 0x0 [ 436.313521][ T5236] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 436.323595][ T5236] Bluetooth: hci1: Injecting HCI hardware error event [ 436.334596][ T54] Bluetooth: hci1: hardware error 0x00 [ 436.340011][ T5297] usb 1-1: device descriptor read/8, error -71 [ 436.376959][ T5283] ntrig 0003:1B96:000A.000E: unknown main item tag 0x0 [ 436.516209][ T5283] ntrig 0003:1B96:000A.000E: unknown main item tag 0x0 [ 436.559508][ T5283] ntrig 0003:1B96:000A.000E: unknown main item tag 0x0 [ 436.584779][ T5283] ntrig 0003:1B96:000A.000E: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 436.637944][ T5283] usb 5-1: USB disconnect, device number 12 [ 436.649392][ T5297] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 436.691600][ T5297] usb 1-1: device descriptor read/8, error -71 [ 436.850620][ T5297] usb usb1-port1: unable to enumerate USB device [ 437.243130][T12176] fuse: Bad value for 'fd' [ 437.249279][T12171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1953'. [ 438.010440][T12195] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 438.389354][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 439.661267][ T5288] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 439.697507][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.721851][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.761019][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.768687][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.813850][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.847581][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.869274][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.891786][ T5288] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 439.896526][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.902867][ T5288] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.931526][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.948947][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.959231][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.966968][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 439.970409][ T5288] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.974707][ T5297] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 440.005585][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.017086][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.027810][ T5288] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 440.034879][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.057727][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.066894][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.066928][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.084718][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.123700][ T5288] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.129823][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.145989][ T5288] usb 1-1: invalid MIDI out EP 0 [ 440.159559][ T5297] usb 2-1: device descriptor read/64, error -71 [ 440.170731][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.198675][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.218890][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.273433][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.299995][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.328977][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.346324][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.378247][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.405362][ T5288] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 440.419434][ T5297] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 440.439569][ T5288] usb 1-1: USB disconnect, device number 15 [ 440.452809][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.471945][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.503749][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.525515][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.548290][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.574009][ T5283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 440.581883][ T5297] usb 2-1: device descriptor read/64, error -71 [ 440.609517][ T5283] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 440.643642][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.650220][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.689646][ T5297] usb usb2-port1: attempt power cycle [ 441.039332][ T5297] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 441.094916][ T5297] usb 2-1: device descriptor read/8, error -71 [ 441.362348][ T5297] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 441.399453][T12236] syzkaller0: create flow: hash 1494876265 index 1 [ 441.409745][ T5297] usb 2-1: device descriptor read/8, error -71 [ 441.429767][ T12] syzkaller0: tun_net_xmit 76 [ 441.435429][ T12] syzkaller0: tun_net_xmit 48 [ 441.449407][ T5283] syzkaller0: tun_net_xmit 76 [ 441.540287][ T5297] usb usb2-port1: unable to enumerate USB device [ 441.588333][T12234] syzkaller0: delete flow: hash 1494876265 index 1 [ 442.376596][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 442.534129][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 442.557175][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.569200][ T25] usb 5-1: Product: syz [ 442.573446][ T25] usb 5-1: Manufacturer: syz [ 442.578188][ T25] usb 5-1: SerialNumber: syz [ 442.591021][ T25] usb 5-1: config 0 descriptor?? [ 442.789646][T12250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1980'. [ 442.833935][ T25] hso 5-1:0.0: Can't find BULK IN endpoint [ 442.845328][ T25] usb-storage 5-1:0.0: USB Mass Storage device detected [ 443.041067][ T25] usb 5-1: USB disconnect, device number 13 [ 445.315517][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 445.397853][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.457288][T12262] bridge_slave_0 (unregistering): left allmulticast mode [ 445.479242][T12262] bridge_slave_0 (unregistering): left promiscuous mode [ 445.486536][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.494829][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 445.509931][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 445.555485][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 445.565002][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.574140][ T25] usb 3-1: Product: syz [ 445.578346][ T25] usb 3-1: Manufacturer: syz [ 445.583868][ T25] usb 3-1: SerialNumber: syz [ 445.612984][T12271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 445.747588][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.789303][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.799881][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.819705][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.827354][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.841225][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 445.851583][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.884895][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.899691][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 445.920234][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.927734][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.964609][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.979246][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 445.997986][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.009294][ T5291] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 446.025766][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.050824][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.058879][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.067015][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.075316][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.085680][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.094638][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.103001][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.112713][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.120926][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.129736][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.138025][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.155713][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.169940][ T5291] usb 1-1: device descriptor read/64, error -71 [ 446.199577][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.211514][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.219002][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.226809][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.234799][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.243140][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.250943][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.258418][ T5297] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 446.265008][ C1] usblp0: nonzero write bulk status received: -71 [ 446.304337][ T25] usb 3-1: USB disconnect, device number 14 [ 446.348677][ T5297] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 446.360500][ T25] usblp0: removed [ 446.469822][ T5291] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 446.589615][T12302] netlink: 'syz.1.2000': attribute type 9 has an invalid length. [ 446.600383][T12302] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.2000'. [ 446.619269][ T5291] usb 1-1: device descriptor read/64, error -71 [ 446.625844][ T5283] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 446.749671][ T5291] usb usb1-port1: attempt power cycle [ 446.791729][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 446.806678][ T5283] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 446.829172][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.850424][ T5283] usb 4-1: config 0 descriptor?? [ 446.873665][ T5283] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 446.969420][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 447.075117][ T2542] usb 4-1: Failed to submit usb control message: -71 [ 447.099223][ T5291] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 447.111263][ T2542] usb 4-1: unable to send the bmi data to the device: -71 [ 447.118463][ T2542] usb 4-1: unable to get target info from device [ 447.119593][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 447.140376][ T2542] usb 4-1: could not get target info (-71) [ 447.143513][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.146705][ T2542] usb 4-1: could not probe fw (-71) [ 447.168058][ T5291] usb 1-1: device descriptor read/8, error -71 [ 447.189428][ T25] usb 2-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 447.198638][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.209221][ T5283] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 447.227555][ T5288] usb 4-1: USB disconnect, device number 8 [ 447.266128][ T25] usb 2-1: config 0 descriptor?? [ 447.379658][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 447.387261][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.398722][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.408981][ T5283] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.420654][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.429440][ T5291] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 447.449965][ T5283] usb 3-1: config 0 descriptor?? [ 447.468577][ T5291] usb 1-1: device descriptor read/8, error -71 [ 447.482545][ T5283] hub 3-1:0.0: USB hub found [ 447.488679][ T25] usb 2-1: string descriptor 0 read error: -71 [ 447.497860][ T25] usb 2-1: Found UVC 0.00 device (05a9:2640) [ 447.511132][ T25] usb 2-1: No valid video chain found. [ 447.535832][ T25] usb 2-1: USB disconnect, device number 14 [ 447.600202][ T5291] usb usb1-port1: unable to enumerate USB device [ 447.633891][ T29] audit: type=1326 audit(1727905814.125:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 447.669570][ T5283] hub 3-1:0.0: 1 port detected [ 447.672631][ T29] audit: type=1326 audit(1727905814.125:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 447.710335][ T29] audit: type=1326 audit(1727905814.165:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 447.745332][ T29] audit: type=1326 audit(1727905814.165:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 447.784665][ T29] audit: type=1326 audit(1727905814.165:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 447.876999][ T5283] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 447.885529][ T5283] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 447.896369][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 447.911221][ T5283] usbhid 3-1:0.0: can't add hid device: -71 [ 447.917007][T12319] netlink: 'syz.4.2005': attribute type 15 has an invalid length. [ 447.917275][ T5283] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 447.937947][T12319] netlink: 'syz.4.2005': attribute type 18 has an invalid length. [ 447.950437][ T5283] usb 3-1: USB disconnect, device number 15 [ 448.932584][T12334] [ 448.934984][T12334] ===================================================== [ 448.942198][T12334] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 448.950540][T12334] 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 Not tainted [ 448.957687][T12334] ----------------------------------------------------- [ 448.964640][T12334] syz.2.2011/12334 [HC0[0]:SC0[8]:HE1:SE0] is trying to acquire: [ 448.972466][T12334] ffff88806ab959e0 (&pch->downl){+.+.}-{2:2}, at: ppp_connect_channel+0x194/0x650 [ 448.981788][T12334] [ 448.981788][T12334] and this task is already holding: [ 448.989196][T12334] ffff888031efae10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 448.998504][T12334] which would create a new lock dependency: [ 449.004401][T12334] (&ppp->rlock){+...}-{2:2} -> (&pch->downl){+.+.}-{2:2} [ 449.011578][T12334] [ 449.011578][T12334] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 449.022098][T12334] (&pch->upl){++.-}-{2:2} [ 449.022134][T12334] [ 449.022134][T12334] ... which became SOFTIRQ-READ-irq-safe at: [ 449.034787][T12334] lock_acquire+0x1ed/0x550 [ 449.039446][T12334] _raw_read_lock_bh+0x3d/0x50 [ 449.044581][T12334] ppp_input+0x3dc/0xa10 [ 449.048953][T12334] pppoe_rcv_core+0x117/0x310 [ 449.053761][T12334] __sk_receive_skb+0x82b/0x8b0 [ 449.058760][T12334] __netif_receive_skb+0x2e0/0x650 [ 449.064075][T12334] process_backlog+0x662/0x15b0 [ 449.069039][T12334] __napi_poll+0xcb/0x490 [ 449.073471][T12334] net_rx_action+0x89b/0x1240 [ 449.078394][T12334] handle_softirqs+0x2c5/0x980 [ 449.083267][T12334] do_softirq+0x11b/0x1e0 [ 449.087786][T12334] __local_bh_enable_ip+0x1bb/0x200 [ 449.093100][T12334] __inet_stream_connect+0x8bd/0xf30 [ 449.098498][T12334] inet_stream_connect+0x65/0xa0 [ 449.103560][T12334] __sys_connect+0x2d1/0x300 [ 449.108350][T12334] __ia32_sys_connect+0x7a/0x90 [ 449.113305][T12334] __do_fast_syscall_32+0xb4/0x110 [ 449.118558][T12334] do_fast_syscall_32+0x34/0x80 [ 449.123513][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.129947][T12334] [ 449.129947][T12334] to a SOFTIRQ-READ-irq-unsafe lock: [ 449.137405][T12334] (&pch->downl){+.+.}-{2:2} [ 449.137439][T12334] [ 449.137439][T12334] ... which became SOFTIRQ-READ-irq-unsafe at: [ 449.150376][T12334] ... [ 449.150388][T12334] lock_acquire+0x1ed/0x550 [ 449.157959][T12334] _raw_spin_lock+0x2e/0x40 [ 449.162749][T12334] ppp_input+0x18b/0xa10 [ 449.167227][T12334] pppoe_rcv_core+0x117/0x310 [ 449.172005][T12334] __release_sock+0x243/0x350 [ 449.176787][T12334] release_sock+0x61/0x1f0 [ 449.181400][T12334] pppoe_sendmsg+0xd5/0x750 [ 449.186021][T12334] __sock_sendmsg+0x221/0x270 [ 449.190829][T12334] ____sys_sendmsg+0x52a/0x7e0 [ 449.195696][T12334] __sys_sendmmsg+0x4a8/0x730 [ 449.200477][T12334] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 449.206124][T12334] __do_fast_syscall_32+0xb4/0x110 [ 449.211370][T12334] do_fast_syscall_32+0x34/0x80 [ 449.216407][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.222843][T12334] [ 449.222843][T12334] other info that might help us debug this: [ 449.222843][T12334] [ 449.233166][T12334] Chain exists of: [ 449.233166][T12334] &pch->upl --> &ppp->rlock --> &pch->downl [ 449.233166][T12334] [ 449.245101][T12334] Possible interrupt unsafe locking scenario: [ 449.245101][T12334] [ 449.253520][T12334] CPU0 CPU1 [ 449.258923][T12334] ---- ---- [ 449.264565][T12334] lock(&pch->downl); [ 449.268917][T12334] local_irq_disable(); [ 449.275702][T12334] lock(&pch->upl); [ 449.282207][T12334] lock(&ppp->rlock); [ 449.288920][T12334] [ 449.292469][T12334] lock(&pch->upl); [ 449.296656][T12334] [ 449.296656][T12334] *** DEADLOCK *** [ 449.296656][T12334] [ 449.304987][T12334] 5 locks held by syz.2.2011/12334: [ 449.310191][T12334] #0: ffffffff8f4b91e8 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 449.319404][T12334] #1: ffff8880272bf4c0 (&pn->all_ppp_mutex){+.+.}-{3:3}, at: ppp_connect_channel+0x5e/0x650 [ 449.330754][T12334] #2: ffff88806ab95a48 (&pch->upl){++.-}-{2:2}, at: ppp_connect_channel+0x87/0x650 [ 449.340395][T12334] #3: ffff888031efae50 (&ppp->wlock){+...}-{2:2}, at: ppp_connect_channel+0x174/0x650 [ 449.350094][T12334] #4: ffff888031efae10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 449.360235][T12334] [ 449.360235][T12334] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 449.371090][T12334] -> (&pch->upl){++.-}-{2:2} { [ 449.376092][T12334] HARDIRQ-ON-W at: [ 449.380255][T12334] lock_acquire+0x1ed/0x550 [ 449.386782][T12334] _raw_write_lock_bh+0x35/0x50 [ 449.394440][T12334] ppp_disconnect_channel+0x2f/0x2d0 [ 449.401748][T12334] ppp_unregister_channel+0xb9/0x300 [ 449.409343][T12334] pppox_unbind_sock+0x5c/0xb0 [ 449.416122][T12334] pppoe_release+0x16e/0x820 [ 449.422921][T12334] sock_close+0xbc/0x240 [ 449.429801][T12334] __fput+0x23f/0x880 [ 449.435806][T12334] task_work_run+0x24f/0x310 [ 449.442412][T12334] syscall_exit_to_user_mode+0x168/0x370 [ 449.450095][T12334] __do_fast_syscall_32+0xc4/0x110 [ 449.457308][T12334] do_fast_syscall_32+0x34/0x80 [ 449.464177][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.472595][T12334] HARDIRQ-ON-R at: [ 449.476786][T12334] lock_acquire+0x1ed/0x550 [ 449.483492][T12334] _raw_read_lock_bh+0x3d/0x50 [ 449.490284][T12334] ppp_input+0x3dc/0xa10 [ 449.496575][T12334] pppoe_rcv_core+0x117/0x310 [ 449.503345][T12334] __release_sock+0x243/0x350 [ 449.510039][T12334] release_sock+0x61/0x1f0 [ 449.516477][T12334] pppoe_sendmsg+0xd5/0x750 [ 449.523031][T12334] __sock_sendmsg+0x221/0x270 [ 449.529747][T12334] ____sys_sendmsg+0x52a/0x7e0 [ 449.536623][T12334] __sys_sendmmsg+0x4a8/0x730 [ 449.543334][T12334] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 449.550911][T12334] __do_fast_syscall_32+0xb4/0x110 [ 449.558046][T12334] do_fast_syscall_32+0x34/0x80 [ 449.564913][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.573263][T12334] IN-SOFTIRQ-R at: [ 449.577521][T12334] lock_acquire+0x1ed/0x550 [ 449.584048][T12334] _raw_read_lock_bh+0x3d/0x50 [ 449.590936][T12334] ppp_input+0x3dc/0xa10 [ 449.597226][T12334] pppoe_rcv_core+0x117/0x310 [ 449.604029][T12334] __sk_receive_skb+0x82b/0x8b0 [ 449.610913][T12334] __netif_receive_skb+0x2e0/0x650 [ 449.618088][T12334] process_backlog+0x662/0x15b0 [ 449.625000][T12334] __napi_poll+0xcb/0x490 [ 449.631383][T12334] net_rx_action+0x89b/0x1240 [ 449.638289][T12334] handle_softirqs+0x2c5/0x980 [ 449.645103][T12334] do_softirq+0x11b/0x1e0 [ 449.651480][T12334] __local_bh_enable_ip+0x1bb/0x200 [ 449.658765][T12334] __inet_stream_connect+0x8bd/0xf30 [ 449.666132][T12334] inet_stream_connect+0x65/0xa0 [ 449.673133][T12334] __sys_connect+0x2d1/0x300 [ 449.679774][T12334] __ia32_sys_connect+0x7a/0x90 [ 449.686703][T12334] __do_fast_syscall_32+0xb4/0x110 [ 449.693913][T12334] do_fast_syscall_32+0x34/0x80 [ 449.700935][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.709366][T12334] INITIAL USE at: [ 449.713724][T12334] lock_acquire+0x1ed/0x550 [ 449.720294][T12334] _raw_write_lock_bh+0x35/0x50 [ 449.727219][T12334] ppp_disconnect_channel+0x2f/0x2d0 [ 449.734462][T12334] ppp_unregister_channel+0xb9/0x300 [ 449.741786][T12334] pppox_unbind_sock+0x5c/0xb0 [ 449.748668][T12334] pppoe_release+0x16e/0x820 [ 449.755358][T12334] sock_close+0xbc/0x240 [ 449.761557][T12334] __fput+0x23f/0x880 [ 449.767572][T12334] task_work_run+0x24f/0x310 [ 449.774314][T12334] syscall_exit_to_user_mode+0x168/0x370 [ 449.781904][T12334] __do_fast_syscall_32+0xc4/0x110 [ 449.788945][T12334] do_fast_syscall_32+0x34/0x80 [ 449.795918][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.804177][T12334] INITIAL READ USE at: [ 449.808690][T12334] lock_acquire+0x1ed/0x550 [ 449.815561][T12334] _raw_read_lock_bh+0x3d/0x50 [ 449.823035][T12334] ppp_input+0x3dc/0xa10 [ 449.829729][T12334] pppoe_rcv_core+0x117/0x310 [ 449.836768][T12334] __release_sock+0x243/0x350 [ 449.843810][T12334] release_sock+0x61/0x1f0 [ 449.850591][T12334] pppoe_sendmsg+0xd5/0x750 [ 449.857895][T12334] __sock_sendmsg+0x221/0x270 [ 449.864940][T12334] ____sys_sendmsg+0x52a/0x7e0 [ 449.872077][T12334] __sys_sendmmsg+0x4a8/0x730 [ 449.879128][T12334] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 449.887074][T12334] __do_fast_syscall_32+0xb4/0x110 [ 449.894579][T12334] do_fast_syscall_32+0x34/0x80 [ 449.901794][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.910488][T12334] } [ 449.913168][T12334] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 449.922649][T12334] -> (&ppp->wlock){+...}-{2:2} { [ 449.927737][T12334] HARDIRQ-ON-W at: [ 449.931839][T12334] lock_acquire+0x1ed/0x550 [ 449.938194][T12334] _raw_spin_lock_bh+0x35/0x50 [ 449.944983][T12334] ppp_get_stats64+0xc3/0x290 [ 449.951513][T12334] dev_get_stats+0xad/0xa00 [ 449.957862][T12334] rtnl_fill_stats+0x47/0x880 [ 449.964406][T12334] rtnl_fill_ifinfo+0x18da/0x2270 [ 449.971269][T12334] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 449.978516][T12334] rtmsg_ifinfo+0x91/0x1b0 [ 449.984800][T12334] register_netdevice+0x1774/0x1b00 [ 449.991844][T12334] ppp_dev_configure+0x883/0xb10 [ 449.998633][T12334] ppp_ioctl+0x797/0x1cd0 [ 450.004817][T12334] ppp_compat_ioctl+0x161/0x770 [ 450.011516][T12334] __se_compat_sys_ioctl+0x510/0xc90 [ 450.018661][T12334] __do_fast_syscall_32+0xb4/0x110 [ 450.025616][T12334] do_fast_syscall_32+0x34/0x80 [ 450.032342][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.040513][T12334] INITIAL USE at: [ 450.044517][T12334] lock_acquire+0x1ed/0x550 [ 450.050961][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.057482][T12334] ppp_get_stats64+0xc3/0x290 [ 450.063915][T12334] dev_get_stats+0xad/0xa00 [ 450.070197][T12334] rtnl_fill_stats+0x47/0x880 [ 450.076659][T12334] rtnl_fill_ifinfo+0x18da/0x2270 [ 450.083548][T12334] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 450.090676][T12334] rtmsg_ifinfo+0x91/0x1b0 [ 450.097023][T12334] register_netdevice+0x1774/0x1b00 [ 450.104064][T12334] ppp_dev_configure+0x883/0xb10 [ 450.110765][T12334] ppp_ioctl+0x797/0x1cd0 [ 450.116855][T12334] ppp_compat_ioctl+0x161/0x770 [ 450.123492][T12334] __se_compat_sys_ioctl+0x510/0xc90 [ 450.130616][T12334] __do_fast_syscall_32+0xb4/0x110 [ 450.137476][T12334] do_fast_syscall_32+0x34/0x80 [ 450.144164][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.152248][T12334] } [ 450.154850][T12334] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 450.164167][T12334] ... acquired at: [ 450.168104][T12334] lock_acquire+0x1ed/0x550 [ 450.172891][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.177849][T12334] ppp_connect_channel+0x174/0x650 [ 450.183162][T12334] ppp_ioctl+0xdd4/0x1cd0 [ 450.187698][T12334] ppp_compat_ioctl+0x161/0x770 [ 450.192755][T12334] __se_compat_sys_ioctl+0x510/0xc90 [ 450.198252][T12334] __do_fast_syscall_32+0xb4/0x110 [ 450.203605][T12334] do_fast_syscall_32+0x34/0x80 [ 450.208691][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.215222][T12334] [ 450.217640][T12334] -> (&ppp->rlock){+...}-{2:2} { [ 450.222643][T12334] HARDIRQ-ON-W at: [ 450.226641][T12334] lock_acquire+0x1ed/0x550 [ 450.232883][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.239359][T12334] ppp_get_stats64+0x33/0x290 [ 450.245717][T12334] dev_get_stats+0xad/0xa00 [ 450.251914][T12334] rtnl_fill_stats+0x47/0x880 [ 450.258347][T12334] rtnl_fill_ifinfo+0x18da/0x2270 [ 450.265137][T12334] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 450.272274][T12334] rtmsg_ifinfo+0x91/0x1b0 [ 450.278468][T12334] register_netdevice+0x1774/0x1b00 [ 450.285358][T12334] ppp_dev_configure+0x883/0xb10 [ 450.292085][T12334] ppp_ioctl+0x797/0x1cd0 [ 450.298109][T12334] ppp_compat_ioctl+0x161/0x770 [ 450.304808][T12334] __se_compat_sys_ioctl+0x510/0xc90 [ 450.311760][T12334] __do_fast_syscall_32+0xb4/0x110 [ 450.318550][T12334] do_fast_syscall_32+0x34/0x80 [ 450.325159][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.333250][T12334] INITIAL USE at: [ 450.337165][T12334] lock_acquire+0x1ed/0x550 [ 450.343293][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.349656][T12334] ppp_get_stats64+0x33/0x290 [ 450.355923][T12334] dev_get_stats+0xad/0xa00 [ 450.362015][T12334] rtnl_fill_stats+0x47/0x880 [ 450.368294][T12334] rtnl_fill_ifinfo+0x18da/0x2270 [ 450.374994][T12334] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 450.382066][T12334] rtmsg_ifinfo+0x91/0x1b0 [ 450.388088][T12334] register_netdevice+0x1774/0x1b00 [ 450.394877][T12334] ppp_dev_configure+0x883/0xb10 [ 450.401414][T12334] ppp_ioctl+0x797/0x1cd0 [ 450.407356][T12334] ppp_compat_ioctl+0x161/0x770 [ 450.413796][T12334] __se_compat_sys_ioctl+0x510/0xc90 [ 450.420773][T12334] __do_fast_syscall_32+0xb4/0x110 [ 450.427465][T12334] do_fast_syscall_32+0x34/0x80 [ 450.433893][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.441814][T12334] } [ 450.444324][T12334] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 450.452849][T12334] ... acquired at: [ 450.456660][T12334] lock_acquire+0x1ed/0x550 [ 450.461359][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.466355][T12334] ppp_dev_uninit+0x6c/0x1a0 [ 450.471231][T12334] unregister_netdevice_many_notify+0x1735/0x1da0 [ 450.477855][T12334] unregister_netdevice_queue+0x303/0x370 [ 450.483858][T12334] ppp_release+0xed/0x1f0 [ 450.488389][T12334] __fput+0x23f/0x880 [ 450.492572][T12334] task_work_run+0x24f/0x310 [ 450.497530][T12334] syscall_exit_to_user_mode+0x168/0x370 [ 450.503479][T12334] __do_fast_syscall_32+0xc4/0x110 [ 450.508776][T12334] do_fast_syscall_32+0x34/0x80 [ 450.513844][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.520415][T12334] [ 450.522773][T12334] [ 450.522773][T12334] the dependencies between the lock to be acquired [ 450.522789][T12334] and SOFTIRQ-READ-irq-unsafe lock: [ 450.536853][T12334] -> (&pch->downl){+.+.}-{2:2} { [ 450.541861][T12334] HARDIRQ-ON-W at: [ 450.545858][T12334] lock_acquire+0x1ed/0x550 [ 450.552253][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.558932][T12334] ppp_unregister_channel+0x7c/0x300 [ 450.565913][T12334] pppox_unbind_sock+0x5c/0xb0 [ 450.572459][T12334] pppoe_release+0x16e/0x820 [ 450.578729][T12334] sock_close+0xbc/0x240 [ 450.584646][T12334] __fput+0x23f/0x880 [ 450.590482][T12334] task_work_run+0x24f/0x310 [ 450.596832][T12334] syscall_exit_to_user_mode+0x168/0x370 [ 450.604143][T12334] __do_fast_syscall_32+0xc4/0x110 [ 450.611026][T12334] do_fast_syscall_32+0x34/0x80 [ 450.617713][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.625731][T12334] SOFTIRQ-ON-W at: [ 450.629727][T12334] lock_acquire+0x1ed/0x550 [ 450.635923][T12334] _raw_spin_lock+0x2e/0x40 [ 450.642108][T12334] ppp_input+0x18b/0xa10 [ 450.648119][T12334] pppoe_rcv_core+0x117/0x310 [ 450.654560][T12334] __release_sock+0x243/0x350 [ 450.660910][T12334] release_sock+0x61/0x1f0 [ 450.667001][T12334] pppoe_sendmsg+0xd5/0x750 [ 450.673176][T12334] __sock_sendmsg+0x221/0x270 [ 450.679528][T12334] ____sys_sendmsg+0x52a/0x7e0 [ 450.685978][T12334] __sys_sendmmsg+0x4a8/0x730 [ 450.692337][T12334] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 450.699574][T12334] __do_fast_syscall_32+0xb4/0x110 [ 450.706354][T12334] do_fast_syscall_32+0x34/0x80 [ 450.712889][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.720898][T12334] INITIAL USE at: [ 450.724820][T12334] lock_acquire+0x1ed/0x550 [ 450.730914][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.737444][T12334] ppp_unregister_channel+0x7c/0x300 [ 450.744950][T12334] pppox_unbind_sock+0x5c/0xb0 [ 450.751316][T12334] pppoe_release+0x16e/0x820 [ 450.757494][T12334] sock_close+0xbc/0x240 [ 450.763343][T12334] __fput+0x23f/0x880 [ 450.768944][T12334] task_work_run+0x24f/0x310 [ 450.775263][T12334] syscall_exit_to_user_mode+0x168/0x370 [ 450.782495][T12334] __do_fast_syscall_32+0xc4/0x110 [ 450.789188][T12334] do_fast_syscall_32+0x34/0x80 [ 450.795638][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.804182][T12334] } [ 450.806695][T12334] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 450.816004][T12334] ... acquired at: [ 450.819811][T12334] lock_acquire+0x1ed/0x550 [ 450.824513][T12334] _raw_spin_lock_bh+0x35/0x50 [ 450.829577][T12334] ppp_connect_channel+0x194/0x650 [ 450.835056][T12334] ppp_ioctl+0xdd4/0x1cd0 [ 450.839581][T12334] ppp_compat_ioctl+0x161/0x770 [ 450.844627][T12334] __se_compat_sys_ioctl+0x510/0xc90 [ 450.850097][T12334] __do_fast_syscall_32+0xb4/0x110 [ 450.855400][T12334] do_fast_syscall_32+0x34/0x80 [ 450.860458][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.866974][T12334] [ 450.869328][T12334] [ 450.869328][T12334] stack backtrace: [ 450.875234][T12334] CPU: 1 UID: 0 PID: 12334 Comm: syz.2.2011 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 450.886710][T12334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.896805][T12334] Call Trace: [ 450.900104][T12334] [ 450.903047][T12334] dump_stack_lvl+0x241/0x360 [ 450.907769][T12334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.913085][T12334] ? __pfx__printk+0x10/0x10 [ 450.917699][T12334] ? print_shortest_lock_dependencies+0xf2/0x160 [ 450.924055][T12334] validate_chain+0x4ebd/0x5920 [ 450.929012][T12334] ? is_bpf_text_address+0x26/0x2a0 [ 450.934246][T12334] ? __pfx_validate_chain+0x10/0x10 [ 450.939459][T12334] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.945632][T12334] ? kernel_text_address+0xa7/0xe0 [ 450.950949][T12334] ? register_lock_class+0x102/0x980 [ 450.956263][T12334] ? __pfx_register_lock_class+0x10/0x10 [ 450.961921][T12334] ? mark_lock+0x9a/0x360 [ 450.966273][T12334] __lock_acquire+0x1384/0x2050 [ 450.971154][T12334] lock_acquire+0x1ed/0x550 [ 450.975683][T12334] ? ppp_connect_channel+0x194/0x650 [ 450.981086][T12334] ? __pfx_lock_acquire+0x10/0x10 [ 450.986137][T12334] ? ppp_connect_channel+0x194/0x650 [ 450.991461][T12334] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 450.997290][T12334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.002695][T12334] ? ppp_connect_channel+0x194/0x650 [ 451.008099][T12334] _raw_spin_lock_bh+0x35/0x50 [ 451.012889][T12334] ? ppp_connect_channel+0x194/0x650 [ 451.018316][T12334] ppp_connect_channel+0x194/0x650 [ 451.023452][T12334] ? __might_fault+0xaa/0x120 [ 451.028233][T12334] ppp_ioctl+0xdd4/0x1cd0 [ 451.032684][T12334] ? __mutex_unlock_slowpath+0x21d/0x750 [ 451.038333][T12334] ? __pfx_ppp_ioctl+0x10/0x10 [ 451.043119][T12334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.049291][T12334] ? __pfx_lock_acquire+0x10/0x10 [ 451.054339][T12334] ppp_compat_ioctl+0x161/0x770 [ 451.059214][T12334] ? __pfx_ppp_compat_ioctl+0x10/0x10 [ 451.064613][T12334] ? __fget_files+0x29/0x470 [ 451.069221][T12334] ? __fget_files+0x3f3/0x470 [ 451.073916][T12334] __se_compat_sys_ioctl+0x510/0xc90 [ 451.079222][T12334] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 451.085157][T12334] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 451.091359][T12334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 451.097804][T12334] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 451.104422][T12334] ? lockdep_hardirqs_on+0x99/0x150 [ 451.110087][T12334] __do_fast_syscall_32+0xb4/0x110 [ 451.115394][T12334] ? exc_page_fault+0x590/0x8c0 [ 451.120353][T12334] do_fast_syscall_32+0x34/0x80 [ 451.125238][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.131595][T12334] RIP: 0023:0xf7fd3579 [ 451.135764][T12334] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 451.155388][T12334] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 451.163832][T12334] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004004743a [ 451.171812][T12334] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.179804][T12334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.187874][T12334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 451.195868][T12334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.204037][T12334] [ 452.319538][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 452.327989][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 452.336083][ T5236] Bluetooth: hci3: hardware error 0x00 [ 454.389593][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110