last executing test programs: 1m26.898169047s ago: executing program 1 (id=7660): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x7, @win={{0x3, 0x1, 0x8, 0x9}, 0x9, 0x2, 0x0, 0x800, &(0x7f0000000300)="75d15df2d941ad6e8b51f8080f4d5792f055501bb0d3c3590647a35c3d4d40027dfc6351619b17b4ffb356ba07ad0e4f49f77d5c3c068c291488a63efbb1f9f089539f51c3cc5605e2abc770", 0x7}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 1m4.254334233s ago: executing program 1 (id=7660): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x7, @win={{0x3, 0x1, 0x8, 0x9}, 0x9, 0x2, 0x0, 0x800, &(0x7f0000000300)="75d15df2d941ad6e8b51f8080f4d5792f055501bb0d3c3590647a35c3d4d40027dfc6351619b17b4ffb356ba07ad0e4f49f77d5c3c068c291488a63efbb1f9f089539f51c3cc5605e2abc770", 0x7}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 49.602508977s ago: executing program 1 (id=7660): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x7, @win={{0x3, 0x1, 0x8, 0x9}, 0x9, 0x2, 0x0, 0x800, &(0x7f0000000300)="75d15df2d941ad6e8b51f8080f4d5792f055501bb0d3c3590647a35c3d4d40027dfc6351619b17b4ffb356ba07ad0e4f49f77d5c3c068c291488a63efbb1f9f089539f51c3cc5605e2abc770", 0x7}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 34.810545967s ago: executing program 1 (id=7660): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x7, @win={{0x3, 0x1, 0x8, 0x9}, 0x9, 0x2, 0x0, 0x800, &(0x7f0000000300)="75d15df2d941ad6e8b51f8080f4d5792f055501bb0d3c3590647a35c3d4d40027dfc6351619b17b4ffb356ba07ad0e4f49f77d5c3c068c291488a63efbb1f9f089539f51c3cc5605e2abc770", 0x7}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 18.25734476s ago: executing program 1 (id=7660): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x7, @win={{0x3, 0x1, 0x8, 0x9}, 0x9, 0x2, 0x0, 0x800, &(0x7f0000000300)="75d15df2d941ad6e8b51f8080f4d5792f055501bb0d3c3590647a35c3d4d40027dfc6351619b17b4ffb356ba07ad0e4f49f77d5c3c068c291488a63efbb1f9f089539f51c3cc5605e2abc770", 0x7}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 3.905573996s ago: executing program 0 (id=8552): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x2}) 3.697736085s ago: executing program 0 (id=8554): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x309, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'R'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 3.575412023s ago: executing program 0 (id=8556): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 3.426839141s ago: executing program 0 (id=8559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 3.280709628s ago: executing program 0 (id=8561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b"]) 3.097399737s ago: executing program 4 (id=8564): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\xe1\v[\xd0\xd8{\x98\\\x86\xe7\xf4\x1fd\xd8B-DO\xa2\x02\x19-\x10\xa8\x8e\xa1\v\xb6\x88/\xee.\x00\x00\x00\x00\x00\xd8\xf1 u\xbe\xe7J\xa0\xe3\xe1\xb5\x18n\xf0\xf3IE\x86\xaf<\x0f9\xff\x1f\xbc\xbd\xdf\xc7>\xc1\xcbE\x04\x15\x82{\x18'}], 0xa, "31c8f2"}, 0x6d) 2.964609743s ago: executing program 0 (id=8566): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.91379239s ago: executing program 4 (id=8568): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20002, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r0, &(0x7f0000000800)={0x2, 0x0, @dev}, 0x10) 2.766205728s ago: executing program 3 (id=8570): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800005, 0x4008031, 0xffffffffffffffff, 0x0) mincore(&(0x7f00001aa000/0x3000)=nil, 0x3000, 0x0) 1.900575571s ago: executing program 4 (id=8574): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000580)=0x4000000, 0x4) 1.803458215s ago: executing program 3 (id=8575): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xfffffffffffffff7) 1.723918361s ago: executing program 4 (id=8576): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000300)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101) 1.7233727s ago: executing program 2 (id=8577): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007b000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800080088a8"], 0x4c}}, 0x0) 1.675682756s ago: executing program 3 (id=8578): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) 1.578587502s ago: executing program 4 (id=8579): bind$netlink(0xffffffffffffffff, &(0x7f0000000200), 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x606900, 0x19) 1.550745819s ago: executing program 2 (id=8580): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYBLOB="c1"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 1.482290103s ago: executing program 3 (id=8581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff06010040"]) 1.458053709s ago: executing program 2 (id=8582): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'user.', '\\.-!/+\x00'}) 1.395952934s ago: executing program 1 (id=7660): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x7, @win={{0x3, 0x1, 0x8, 0x9}, 0x9, 0x2, 0x0, 0x800, &(0x7f0000000300)="75d15df2d941ad6e8b51f8080f4d5792f055501bb0d3c3590647a35c3d4d40027dfc6351619b17b4ffb356ba07ad0e4f49f77d5c3c068c291488a63efbb1f9f089539f51c3cc5605e2abc770", 0x7}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 1.378787955s ago: executing program 2 (id=8583): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000580)=""/52, 0x34}], 0x1) 273.432116ms ago: executing program 2 (id=8584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0xa, 0x0, 0x0) 272.331271ms ago: executing program 3 (id=8585): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="030700"/17]) 271.841725ms ago: executing program 4 (id=8586): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) 97.596265ms ago: executing program 2 (id=8587): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a840008864185d683f86"], 0x0) 0s ago: executing program 3 (id=8588): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000480)={'security\x00', 0x0, [0x0, 0x0, 0x4, 0x7]}, &(0x7f0000000040)=0x54) kernel console output (not intermixed with test programs): 294967295 subj=_ pid=22349 comm="syz.0.7629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 515.179090][ T29] audit: type=1326 audit(1725774455.579:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22349 comm="syz.0.7629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 515.232414][ T47] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 515.349094][T22362] team0: Device vlan5 is already an upper device of the team interface [ 515.434558][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7634'. [ 515.524107][ T47] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 515.540511][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.565623][ T47] usb 5-1: config 0 descriptor?? [ 516.009289][T22382] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 516.029449][ T47] [drm:udl_init] *ERROR* Selecting channel failed [ 516.060999][T22385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7643'. [ 516.078828][ T47] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 516.116919][ T47] [drm] Initialized udl on minor 2 [ 516.124632][ T47] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 516.153178][ T47] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 516.184278][ T47] usb 5-1: USB disconnect, device number 44 [ 516.213982][T22388] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 516.247154][T22388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 517.619396][T22428] tipc: Enabling of bearer rejected, failed to enable media [ 517.823198][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 517.834416][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 517.842541][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.850674][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.858508][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 517.873840][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.311731][T22433] chnl_net:caif_netlink_parms(): no params data found [ 518.465330][T22433] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.472903][T22433] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.480233][T22433] bridge_slave_0: entered allmulticast mode [ 518.488435][T22433] bridge_slave_0: entered promiscuous mode [ 518.498449][T22433] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.506254][T22433] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.513835][T22433] bridge_slave_1: entered allmulticast mode [ 518.521299][T22433] bridge_slave_1: entered promiscuous mode [ 518.573660][T22433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.587400][T22433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.652210][T22433] team0: Port device team_slave_0 added [ 518.674048][T22433] team0: Port device team_slave_1 added [ 518.721099][T22433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.728882][T22433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.756396][T22433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.770971][T22433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.778783][T22433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.819681][T22433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.877249][T22433] hsr_slave_0: entered promiscuous mode [ 518.903160][T22433] hsr_slave_1: entered promiscuous mode [ 518.910308][T22433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.918759][T22433] Cannot create hsr debugfs directory [ 519.367938][T22433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.556993][T22433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.788910][T22433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.896343][T22488] syzkaller1: entered promiscuous mode [ 519.912516][ T5229] Bluetooth: hci2: command tx timeout [ 519.922593][T22488] syzkaller1: entered allmulticast mode [ 520.014888][T22433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.391278][T22433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.448664][T22433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.503860][T22433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.545464][T22433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.836835][T22433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.930126][T22433] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.951533][T22536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7707'. [ 520.988513][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.995709][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.065532][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.072723][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.164571][T22433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.751551][T22433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.834701][T22433] veth0_vlan: entered promiscuous mode [ 521.877422][T22433] veth1_vlan: entered promiscuous mode [ 521.995260][ T5229] Bluetooth: hci2: command tx timeout [ 522.035272][T22433] veth0_macvtap: entered promiscuous mode [ 522.046112][T22433] veth1_macvtap: entered promiscuous mode [ 522.065901][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.077097][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.087719][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.098977][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.111442][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.135755][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.180108][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.206396][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.242935][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.272902][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.293606][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.343632][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.362894][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.385013][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.427855][T22433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.485222][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.532482][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.568695][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.592397][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.622327][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.663080][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.694185][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.719481][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.742334][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.765224][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.792635][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.812874][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.832446][T22433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.862439][T22433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.894560][T22433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.017998][T22433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.050144][T22433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.070675][T22433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.082362][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 523.092722][T22433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.276443][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.300872][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.349093][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 523.377354][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.396878][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.417205][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.425278][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.454531][ T25] usb 4-1: config 0 descriptor?? [ 523.489617][ T29] audit: type=1326 audit(1725774464.059:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22600 comm="syz.4.7731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x0 [ 523.539551][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.548396][ T29] audit: type=1326 audit(1725774464.109:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22600 comm="syz.4.7731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x0 [ 523.559078][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.875113][ T25] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 523.898767][ T25] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 524.180805][ T25] usb 4-1: USB disconnect, device number 68 [ 525.436626][ T1114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.223666][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.246435][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.255746][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.273196][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.282919][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 526.290225][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.857326][ T1114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.157904][ T1114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.228113][T22679] chnl_net:caif_netlink_parms(): no params data found [ 527.298092][T22733] sctp: [Deprecated]: syz.2.7789 (pid 22733) Use of int in max_burst socket option deprecated. [ 527.298092][T22733] Use struct sctp_assoc_value instead [ 527.393304][ T1114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.524433][T22740] sctp: [Deprecated]: syz.2.7793 (pid 22740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.524433][T22740] Use struct sctp_sack_info instead [ 527.763138][T22679] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.770279][T22679] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.808202][T22679] bridge_slave_0: entered allmulticast mode [ 527.830897][T22679] bridge_slave_0: entered promiscuous mode [ 527.863210][T22679] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.873075][T22679] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.893158][T22679] bridge_slave_1: entered allmulticast mode [ 527.914883][T22679] bridge_slave_1: entered promiscuous mode [ 527.988140][ T29] audit: type=1400 audit(1725774468.569:720): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=22750 comm="syz.4.7796" path="/dev/net/tun" dev="devtmpfs" ino=694 [ 528.045453][T22679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.077466][T22679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.139376][ T1114] bridge_slave_1: left allmulticast mode [ 528.155405][ T1114] bridge_slave_1: left promiscuous mode [ 528.165593][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.201199][ T1114] bridge_slave_0: left allmulticast mode [ 528.207131][ T1114] bridge_slave_0: left promiscuous mode [ 528.220606][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.393973][ T5229] Bluetooth: hci2: command tx timeout [ 528.562903][T22767] netlink: 'syz.4.7803': attribute type 3 has an invalid length. [ 529.089581][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.116223][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.129323][ T1114] bond0 (unregistering): Released all slaves [ 529.173921][T22679] team0: Port device team_slave_0 added [ 529.219299][T22679] team0: Port device team_slave_1 added [ 529.521897][T22679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.532646][T22679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.604535][T22679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.619627][T22779] could not open pipe file descriptor [ 529.657552][T22679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.676533][T22679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.720427][T22679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.039418][T22679] hsr_slave_0: entered promiscuous mode [ 530.063603][T22679] hsr_slave_1: entered promiscuous mode [ 530.077891][T22679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.092565][T22679] Cannot create hsr debugfs directory [ 530.144504][ T1114] hsr_slave_0: left promiscuous mode [ 530.182490][ T1114] hsr_slave_1: left promiscuous mode [ 530.188842][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.211211][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.232019][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.258650][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.473687][ T5229] Bluetooth: hci2: command tx timeout [ 531.172434][T22806] Bluetooth: hci4: Opcode 0x0c20 failed: -4 [ 531.173039][ T1114] veth1_macvtap: left promiscuous mode [ 531.212857][ T1114] veth0_macvtap: left promiscuous mode [ 531.242609][ T1114] veth1_vlan: left promiscuous mode [ 531.250051][ T1114] veth0_vlan: left promiscuous mode [ 531.565150][T21786] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 531.797942][T21786] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.815937][T21786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 531.847146][T21786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 531.859522][T21786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.907986][T21786] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.918726][T21786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.954755][T21786] usb 4-1: config 0 descriptor?? [ 531.960511][T22813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.398965][T21786] plantronics 0003:047F:FFFF.004B: unknown main item tag 0xd [ 532.428704][T21786] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 532.455669][T21786] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 532.494609][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 532.555392][ T5229] Bluetooth: hci2: command tx timeout [ 532.610205][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 532.759864][ T5239] usb 4-1: USB disconnect, device number 69 [ 534.164395][T22843] input: syz0 as /devices/virtual/input/input57 [ 534.282474][ T1854] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 534.494189][ T1854] usb 3-1: Using ep0 maxpacket: 16 [ 534.520337][ T1854] usb 3-1: config 0 has no interfaces? [ 534.532473][ T1854] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 534.562403][ T1854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.595515][ T1854] usb 3-1: config 0 descriptor?? [ 534.633128][ T5229] Bluetooth: hci2: command tx timeout [ 534.907657][T22679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 534.990437][T22679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 535.035716][T21786] usb 3-1: USB disconnect, device number 63 [ 535.052019][T22679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 535.091293][T22679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 535.417772][T22679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.491196][T22679] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.527733][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.534899][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.565893][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.573080][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.622483][ T1854] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 535.741613][T22679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.778973][ T29] audit: type=1400 audit(1725774476.359:721): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22888 comm="syz.0.7858" dest=20002 netif=wpan0 [ 535.834333][ T1854] usb 4-1: Using ep0 maxpacket: 16 [ 535.874404][ T1854] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 535.904254][ T1854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.941115][ T1854] usb 4-1: Product: syz [ 535.974941][ T1854] usb 4-1: Manufacturer: syz [ 535.979574][ T1854] usb 4-1: SerialNumber: syz [ 536.015052][ T1854] usb 4-1: config 0 descriptor?? [ 536.043180][ T1854] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 536.071172][ T1854] usb 4-1: Detected FT232H [ 536.189313][T22679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.265207][ T1854] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 536.342156][T22679] veth0_vlan: entered promiscuous mode [ 536.387061][T22679] veth1_vlan: entered promiscuous mode [ 536.482089][T22679] veth0_macvtap: entered promiscuous mode [ 536.506748][T22679] veth1_macvtap: entered promiscuous mode [ 536.548661][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.576336][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.593794][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.608685][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.622010][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.632929][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.642843][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.655416][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.665324][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.676168][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.686277][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.697970][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.709125][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.734405][ T1854] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 536.749527][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.774582][T22679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.815910][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.847196][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.872504][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.899887][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.922389][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.936395][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.946088][ T5239] usb 4-1: USB disconnect, device number 70 [ 536.952428][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.966758][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.975622][ T5239] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 536.986512][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.986601][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.986617][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.986694][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.986711][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.986787][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.989162][T22679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.048855][ T5239] ftdi_sio 4-1:0.0: device disconnected [ 537.106713][T22679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.130454][T22679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.159623][T22679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.172525][T22679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.340307][T22828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.358951][T22828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.426481][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.438650][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.545447][T22925] netlink: 'syz.4.7872': attribute type 21 has an invalid length. [ 537.584389][T22925] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7872'. [ 537.619885][T22925] netlink: 'syz.4.7872': attribute type 5 has an invalid length. [ 537.640812][T22925] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7872'. [ 537.650974][T22927] /dev/loop2: Can't open blockdev [ 537.858482][T22934] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 537.888645][ T29] audit: type=1326 audit(1725774478.469:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22933 comm="syz.2.7876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3ad7cef9 code=0x0 [ 538.178919][T22945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7881'. [ 538.397026][ T29] audit: type=1400 audit(1725774478.979:723): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22948 comm="syz.4.7883" dest=20000 netif=wpan0 [ 539.258960][T22971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7893'. [ 539.451073][T22977] [U] [ 539.454342][T22977] [U] [ 539.457054][T22977] [U] [ 539.459758][T22977] [U] [ 539.476408][T22977] [U] [ 539.479128][T22977] [U] [ 539.481830][T22977] [U] [ 539.484520][T22977] [U] [ 539.524705][T22977] [U] [ 539.527430][T22977] [U] [ 539.530126][T22977] [U] [ 539.532824][T22977] [U] [ 539.563085][T22977] [U] [ 539.565808][T22977] [U] [ 539.568508][T22977] [U] [ 539.571203][T22977] [U] [ 539.606168][T22977] [U] [ 539.608899][T22977] [U] [ 539.611608][T22977] [U] [ 539.614312][T22977] [U] [ 539.624359][T22984] Bluetooth: hci3: unsupported parameter 64512 [ 539.631052][T22977] [U] [ 539.633764][T22977] [U] [ 539.636461][T22977] [U] [ 539.639162][T22977] [U] [ 539.643907][T22984] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 539.660139][T22987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7897'. [ 539.662516][T22977] [U] [ 539.672442][T22977] [U] [ 539.675147][T22977] [U] [ 539.677842][T22977] [U] [ 539.702471][T22977] [U] [ 539.705190][T22977] [U] [ 539.707868][T22977] [U] [ 539.710547][T22977] [U] [ 539.729751][T22977] [U] [ 539.732477][T22977] [U] [ 539.735173][T22977] [U] [ 539.737851][T22977] [U] [ 539.761814][T22977] [U] [ 539.764537][T22977] [U] [ 539.767237][T22977] [U] [ 539.769934][T22977] [U] [ 539.782434][T22977] [U] [ 539.785155][T22977] [U] [ 539.787854][T22977] [U] [ 539.790553][T22977] [U] [ 539.802359][T22977] [U] [ 539.805071][T22977] [U] [ 539.807768][T22977] [U] [ 539.810489][T22977] [U] [ 539.814481][T22977] [U] [ 539.817198][T22977] [U] [ 539.819891][T22977] [U] [ 539.822595][T22977] [U] [ 539.837147][T22977] [U] [ 539.839872][T22977] [U] [ 539.842571][T22977] [U] [ 539.845269][T22977] [U] [ 539.861985][T22977] [U] [ 539.864710][T22977] [U] [ 539.867410][T22977] [U] [ 539.870109][T22977] [U] [ 539.885476][T22977] [U] [ 539.888194][T22977] [U] [ 539.890895][T22977] [U] [ 539.893595][T22977] [U] [ 539.900719][ T29] audit: type=1400 audit(1725774480.479:724): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22991 comm="syz.2.7902" dest=20000 netif=wpan0 [ 539.930030][T22977] [U] [ 539.932750][T22977] [U] [ 539.935452][T22977] [U] [ 539.938154][T22977] [U] [ 539.954494][T22977] [U] [ 539.957217][T22977] [U] [ 539.959918][T22977] [U] [ 539.962619][T22977] [U] [ 539.979173][T22977] [U] [ 539.981890][T22977] [U] [ 539.984590][T22977] [U] [ 539.987288][T22977] [U] [ 539.999980][T22977] [U] [ 540.002706][T22977] [U] [ 540.005409][T22977] [U] [ 540.008109][T22977] [U] [ 540.012499][T22977] [U] [ 540.015217][T22977] [U] [ 540.017918][T22977] [U] [ 540.020618][T22977] [U] [ 540.024875][T22977] [U] [ 540.027585][T22977] [U] [ 540.030286][T22977] [U] [ 540.032985][T22977] [U] [ 540.036873][T22977] [U] [ 540.039676][T22977] [U] [ 540.042374][T22977] [U] [ 540.045078][T22977] [U] [ 540.048485][T22977] [U] [ 540.051194][T22977] [U] [ 540.053979][T22977] [U] [ 540.056683][T22977] [U] [ 540.076199][T22977] [U] [ 540.078931][T22977] [U] [ 540.081631][T22977] [U] [ 540.084325][T22977] [U] [ 540.120198][T22977] [U] [ 540.122929][T22977] [U] [ 540.125633][T22977] [U] [ 540.128347][T22977] [U] [ 540.162653][T22977] [U] [ 540.165393][T22977] [U] [ 540.168093][T22977] [U] [ 540.170797][T22977] [U] [ 540.203198][T22977] [U] [ 540.205938][T22977] [U] [ 540.208643][T22977] [U] [ 540.211349][T22977] [U] [ 540.235830][T22977] [U] [ 540.238573][T22977] [U] [ 540.240838][T22997] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 540.241280][T22977] [U] [ 540.241313][T22977] [U] [ 540.285857][T22977] [U] [ 540.288593][T22977] [U] [ 540.291293][T22977] [U] [ 540.294088][T22977] [U] [ 540.334260][ T1114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.341335][T22977] [U] [ 540.708182][T23010] vivid-004: disconnect [ 540.750214][T23004] vivid-004: reconnect [ 541.013713][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.026535][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.037470][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.046482][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.054276][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 541.061598][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.461852][T23040] loop2: detected capacity change from 0 to 7 [ 541.514024][T23040] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 541.519351][T23040] loop2: partition table partially beyond EOD, truncated [ 541.554184][T23040] loop2: p1 size 6333 extends beyond EOD, truncated [ 541.810227][ T1114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.843611][T23050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.023044][ T1114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.098293][T23018] chnl_net:caif_netlink_parms(): no params data found [ 542.238650][ T1114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.696107][T23018] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.732642][T23018] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.752608][T23018] bridge_slave_0: entered allmulticast mode [ 542.759892][T23018] bridge_slave_0: entered promiscuous mode [ 542.857524][T23018] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.876696][T23018] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.896453][T23018] bridge_slave_1: entered allmulticast mode [ 542.921313][T23018] bridge_slave_1: entered promiscuous mode [ 543.026759][T23080] syz.2.7934 (23080) used obsolete PPPIOCDETACH ioctl [ 543.078543][T23018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.155224][T23018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.186840][ T1114] bridge_slave_1: left allmulticast mode [ 543.201848][ T1114] bridge_slave_1: left promiscuous mode [ 543.201885][ T5229] Bluetooth: hci2: command tx timeout [ 543.245368][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.355141][ T1114] bridge_slave_0: left allmulticast mode [ 543.368996][ T1114] bridge_slave_0: left promiscuous mode [ 543.382907][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.430989][ T29] audit: type=1326 audit(1725774484.009:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.491692][ T29] audit: type=1326 audit(1725774484.009:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.565983][ T29] audit: type=1326 audit(1725774484.019:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.638014][ T29] audit: type=1326 audit(1725774484.019:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.732425][ T29] audit: type=1326 audit(1725774484.019:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.780036][ T29] audit: type=1326 audit(1725774484.019:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.818643][ T29] audit: type=1326 audit(1725774484.019:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.859695][ T29] audit: type=1326 audit(1725774484.019:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.873950][T23108] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7946'. [ 543.916164][ T29] audit: type=1326 audit(1725774484.039:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 543.927841][T23108] openvswitch: netlink: Key type 29 is not supported [ 543.944852][ T29] audit: type=1326 audit(1725774484.039:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23096 comm="syz.0.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143937cef9 code=0x7ffc0000 [ 544.696462][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.710271][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.723498][ T1114] bond0 (unregistering): Released all slaves [ 544.766602][T23093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7940'. [ 544.807174][T23093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7940'. [ 544.819293][T23093] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.838587][T23093] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.845770][T23093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.866555][T23101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.922870][T23104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.055344][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7954'. [ 545.089008][T23122] vlan2: entered promiscuous mode [ 545.218337][T23018] team0: Port device team_slave_0 added [ 545.272692][ T5229] Bluetooth: hci2: command tx timeout [ 545.284745][T23018] team0: Port device team_slave_1 added [ 545.410488][T23018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.412636][ T1854] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 545.427734][T23018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.492271][T23018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.523875][T23018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.531216][T23018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.557112][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.584100][T23018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.611220][ T1114] hsr_slave_0: left promiscuous mode [ 545.617517][ T1114] hsr_slave_1: left promiscuous mode [ 545.627054][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.634950][ T1854] usb 4-1: Using ep0 maxpacket: 16 [ 545.643323][ T5738] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 545.652396][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.662338][ T1854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.681478][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.691423][ T1854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.701318][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.711889][ T1854] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 545.742510][ T1854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.760596][ T1114] veth1_macvtap: left promiscuous mode [ 545.773738][ T1854] usb 4-1: config 0 descriptor?? [ 545.778975][ T1114] veth0_macvtap: left promiscuous mode [ 545.787439][ T1114] veth1_vlan: left promiscuous mode [ 545.797197][ T1114] veth0_vlan: left promiscuous mode [ 545.868781][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.892908][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.919315][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.934747][T23135] netlink: 5300 bytes leftover after parsing attributes in process `syz.4.7960'. [ 545.958616][ T5738] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.982371][T23135] openvswitch: netlink: IP tunnel dst address not specified [ 545.989922][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.014337][ T5738] usb 3-1: config 0 descriptor?? [ 546.228060][ T1854] hid-multitouch 0003:1FD2:6007.004C: unknown main item tag 0x0 [ 546.248448][ T1854] hid-multitouch 0003:1FD2:6007.004C: unknown main item tag 0x0 [ 546.262367][ T1854] hid-multitouch 0003:1FD2:6007.004C: unknown main item tag 0x0 [ 546.280376][ T1854] hid-multitouch 0003:1FD2:6007.004C: unknown main item tag 0x0 [ 546.289257][ T1854] hid-multitouch 0003:1FD2:6007.004C: unknown main item tag 0x0 [ 546.315501][ T1854] hid-multitouch 0003:1FD2:6007.004C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 546.463923][ T5738] plantronics 0003:047F:FFFF.004D: ignoring exceeding usage max [ 546.466355][ T5738] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 546.483513][ T25] usb 4-1: USB disconnect, device number 71 [ 546.543419][ T5738] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 546.826549][ T5278] usb 3-1: USB disconnect, device number 64 [ 547.344127][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 547.352791][ T5229] Bluetooth: hci2: command tx timeout [ 547.584413][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 548.272726][T23167] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 548.846951][T23183] input: syz1 as /devices/virtual/input/input58 [ 549.316176][T23199] Bluetooth: hci3: unsupported parameter 64512 [ 549.322568][T23199] Bluetooth: hci3: invalid len left 4, exp >= 104 [ 549.432556][ T5229] Bluetooth: hci2: command tx timeout [ 549.918459][T23018] hsr_slave_0: entered promiscuous mode [ 549.944931][T23018] hsr_slave_1: entered promiscuous mode [ 549.962021][T23018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.978812][T23018] Cannot create hsr debugfs directory [ 551.095746][ T1114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.394574][ T1114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.463141][ T5738] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 551.624214][ T1114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.661415][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.676930][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.692716][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 551.701037][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 551.708772][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 551.722195][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 551.729973][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.802929][ T5738] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.814066][ T5738] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.839402][ T1114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.851237][ T5738] usb 5-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 551.861312][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.869395][ T5738] usb 5-1: Product: syz [ 551.882880][ T5738] usb 5-1: Manufacturer: syz [ 551.887874][ T5738] usb 5-1: SerialNumber: syz [ 552.365426][T23018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.420806][T23252] : left promiscuous mode [ 552.426079][T23252] bond_slave_0: left promiscuous mode [ 552.431685][T23252] bond_slave_1: left promiscuous mode [ 552.450984][T23252] 8021q: adding VLAN 0 to HW filter on device  [ 552.465597][T23252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.514979][T23018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.546765][T23018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.586688][ T5738] hid (null): report_id 2668810406 is invalid [ 552.604649][ T5738] asus 0003:0B05:19B6.004E: report_id 2668810406 is invalid [ 552.622216][ T5738] asus 0003:0B05:19B6.004E: item 0 4 1 8 parsing failed [ 552.629929][ T5738] asus 0003:0B05:19B6.004E: Asus hid parse failed: -22 [ 552.653528][T23018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.670645][ T5738] asus 0003:0B05:19B6.004E: probe with driver asus failed with error -22 [ 552.716875][ T1114] –eth0_vlan: left allmulticast mode [ 552.732572][ T1114] –eth0_vlan: left promiscuous mode [ 552.738822][ T1114] bridge0: port 2(–eth0_vlan) entered disabled state [ 552.764089][ T1114] bridge_slave_0: left allmulticast mode [ 552.783272][ T1114] bridge_slave_0: left promiscuous mode [ 552.793132][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.933931][ T5239] usb 5-1: USB disconnect, device number 45 [ 552.952452][ T5278] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 553.146676][ T5278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.162385][ T5278] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.183122][ T5278] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.195180][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.212364][ T5278] usb 4-1: SerialNumber: syz [ 553.449500][ T5278] usb 4-1: 0:2 : does not exist [ 553.479830][ T5278] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 553.536537][ T5278] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 553.605090][ T5278] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 553.622601][ T5278] usb 4-1: USB disconnect, device number 72 [ 553.832548][ T5229] Bluetooth: hci5: command tx timeout [ 554.330836][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.356052][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.401044][ T1114] bond0 (unregistering): Released all slaves [ 554.524879][T23293] dccp_invalid_packet: invalid packet type [ 555.103270][ T5278] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 555.298930][ T1114] hsr_slave_0: left promiscuous mode [ 555.316332][ T5278] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 555.327146][ T1114] hsr_slave_1: left promiscuous mode [ 555.332978][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.345924][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.351228][ T5278] usb 5-1: Product: syz [ 555.357621][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.375537][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.380179][ T5278] usb 5-1: Manufacturer: syz [ 555.385585][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.390770][ T5278] usb 5-1: SerialNumber: syz [ 555.402602][ T5278] usb 5-1: config 0 descriptor?? [ 555.402708][ T5239] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 555.451547][ T1114] veth1_macvtap: left promiscuous mode [ 555.468351][ T1114] veth0_macvtap: left promiscuous mode [ 555.480755][ T1114] veth1_vlan: left promiscuous mode [ 555.487335][ T1114] veth0_vlan: left promiscuous mode [ 555.607023][ T5239] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 555.626792][ T5239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.665035][ T5239] usb 3-1: config 0 descriptor?? [ 555.915341][ T5229] Bluetooth: hci5: command tx timeout [ 556.082046][ T5239] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 556.479261][ T5278] usb 5-1: Firmware version (0.0) predates our first public release. [ 556.485032][ T5239] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 556.504527][ T5278] usb 5-1: Please update to version 0.2 or newer [ 556.513419][ T5239] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 556.564363][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 556.685843][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 556.766941][ T1854] usb 3-1: USB disconnect, device number 65 [ 557.816326][T23320] netlink: 'syz.4.8036': attribute type 10 has an invalid length. [ 557.860926][T23320] syz_tun: entered promiscuous mode [ 557.863890][ T5278] usb 5-1: USB disconnect, device number 46 [ 557.924096][T23320] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 557.937044][T23018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.946316][T23254] chnl_net:caif_netlink_parms(): no params data found [ 557.995237][ T5229] Bluetooth: hci5: command tx timeout [ 558.248530][T23018] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.481684][T22828] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.488991][T22828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.574769][T23254] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.588389][T23254] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.596203][T23254] bridge_slave_0: entered allmulticast mode [ 558.613666][T23254] bridge_slave_0: entered promiscuous mode [ 558.626027][T22828] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.633294][T22828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.697849][T23254] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.706058][T23254] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.724147][T23254] bridge_slave_1: entered allmulticast mode [ 558.744740][T23254] bridge_slave_1: entered promiscuous mode [ 558.946221][T23254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.017045][T23254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.023388][T23356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8051'. [ 559.261367][T23254] team0: Port device team_slave_0 added [ 559.274666][T23254] team0: Port device team_slave_1 added [ 559.391915][T23254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.412073][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.454823][T23254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.567952][T23254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.587487][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.636935][T23254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.900642][T23254] hsr_slave_0: entered promiscuous mode [ 559.935601][T23254] hsr_slave_1: entered promiscuous mode [ 559.950142][T23254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.963600][T23254] Cannot create hsr debugfs directory [ 560.072808][ T5229] Bluetooth: hci5: command tx timeout [ 560.239482][T23391] bridge0: port 5(gretap0) entered blocking state [ 560.250026][T23391] bridge0: port 5(gretap0) entered disabled state [ 560.263543][T23391] gretap0: entered allmulticast mode [ 560.278568][T23391] gretap0: entered promiscuous mode [ 560.302800][T23018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.313025][T23393] gretap0: left allmulticast mode [ 560.321498][T23393] gretap0: left promiscuous mode [ 560.338852][T23393] bridge0: port 5(gretap0) entered disabled state [ 560.711852][T23018] veth0_vlan: entered promiscuous mode [ 560.774074][T23018] veth1_vlan: entered promiscuous mode [ 560.792448][ T5328] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 560.811710][T23018] veth0_macvtap: entered promiscuous mode [ 560.824871][T23018] veth1_macvtap: entered promiscuous mode [ 560.894816][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.916476][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.926433][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.937288][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.947163][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.958560][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.974633][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.984116][ T5328] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 560.989909][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.002380][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.017111][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.017132][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.017148][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.067268][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.102069][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.106936][ T5328] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 561.123797][T23018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.157343][ T5328] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 561.161954][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.171094][ T5328] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 561.190875][ T5328] usb 4-1: Manufacturer: syz [ 561.203329][ T5328] usb 4-1: config 0 descriptor?? [ 561.226607][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.246896][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.267766][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.292740][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.314295][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.334981][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.355008][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.372427][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.394323][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.416582][T23018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.447570][T23018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.469666][T23018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.496289][T23018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.505766][T23018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.516857][T23018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.525774][T23018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.627251][ T5328] appleir 0003:05AC:8243.004F: unknown main item tag 0x0 [ 561.663506][ T5328] appleir 0003:05AC:8243.004F: No inputs registered, leaving [ 561.706356][ T5328] appleir 0003:05AC:8243.004F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 561.834015][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.841912][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.842807][T23254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.923413][T23254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.944237][ T47] usb 4-1: USB disconnect, device number 73 [ 561.973252][T23254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.013707][T23254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 562.039355][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.057657][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.359304][T23254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.390619][T23254] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.424019][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.431213][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.516709][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.523912][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.007127][ T1135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.118992][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.185046][T23254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.227628][ T1135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.335314][T23254] veth0_vlan: entered promiscuous mode [ 563.357048][T23254] veth1_vlan: entered promiscuous mode [ 563.411236][T23254] veth0_macvtap: entered promiscuous mode [ 563.423414][T23254] veth1_macvtap: entered promiscuous mode [ 563.454342][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.479065][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.501738][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.522966][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.532901][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.544662][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.554939][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.565458][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.575782][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.586301][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.597056][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.612354][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.622203][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.646230][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.660263][T23254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.689652][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.712570][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.742299][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.782674][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.802325][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.833298][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.852256][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.873720][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.892317][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.915661][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.936461][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.957187][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.988255][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.019501][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.052737][T23254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.158923][ T1135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.204676][T23254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.215495][T23254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.216040][T23456] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 564.225495][T23254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.242882][T23254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.251788][T23456] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 564.299900][T23456] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 564.316395][T23456] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 564.342990][T23456] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 564.350391][T23456] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 564.434873][ T1135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.633309][T22828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.641197][T22828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.785665][ T1135] bridge_slave_1: left allmulticast mode [ 564.785996][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.791327][ T1135] bridge_slave_1: left promiscuous mode [ 564.791510][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.822625][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.841910][ T1135] bridge_slave_0: left allmulticast mode [ 564.852522][ T1135] bridge_slave_0: left promiscuous mode [ 564.868314][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.036070][ T5229] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 565.329040][T23482] overlayfs: failed to clone upperpath [ 565.961227][T23496] input: syz1 as /devices/virtual/input/input59 [ 565.968171][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.996222][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.011779][ T1135] bond0 (unregistering): Released all slaves [ 566.069750][T23477] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8098'. [ 566.093432][T23477] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 566.165249][T23498] can0: slcan on ttyS3. [ 566.322904][T23500] can0 (unregistered): slcan off ttyS3. [ 566.397190][ T5237] Bluetooth: hci6: command tx timeout [ 566.611668][T23513] ALSA: seq fatal error: cannot create timer (-22) [ 566.917378][ T1135] hsr_slave_0: left promiscuous mode [ 566.954983][ T1135] hsr_slave_1: left promiscuous mode [ 566.973670][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.994516][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.024486][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.032047][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.043684][T21786] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 567.097521][ T1135] veth1_macvtap: left promiscuous mode [ 567.103241][ T1135] veth0_macvtap: left promiscuous mode [ 567.109013][ T1135] veth1_vlan: left promiscuous mode [ 567.115954][ T1135] veth0_vlan: left promiscuous mode [ 567.232868][T21786] usb 4-1: Using ep0 maxpacket: 32 [ 567.246556][T21786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.264954][T21786] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 567.282706][T21786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.299650][T21786] usb 4-1: Product: syz [ 567.310614][T21786] usb 4-1: Manufacturer: syz [ 567.320904][T21786] usb 4-1: SerialNumber: syz [ 567.335640][T21786] usb 4-1: config 0 descriptor?? [ 567.563982][T21786] usb 4-1: unknown interface protocol 0xf, assuming v1 [ 567.590772][T21786] usb 4-1: USB disconnect, device number 74 [ 568.394325][ T47] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 568.475224][ T5237] Bluetooth: hci6: command tx timeout [ 568.532880][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 568.592583][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 568.637149][ T47] usb 4-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=c4.6d [ 568.656587][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.673651][ T47] usb 4-1: Product: syz [ 568.677952][ T47] usb 4-1: Manufacturer: syz [ 568.698604][ T47] usb 4-1: SerialNumber: syz [ 568.735388][ T47] usb 4-1: config 0 descriptor?? [ 568.753098][ T47] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 568.777933][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 569.803315][ T47] gspca_sonixj: reg_w1 err -71 [ 569.842517][ T47] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 569.871109][ T47] usb 4-1: USB disconnect, device number 75 [ 570.077475][T23455] chnl_net:caif_netlink_parms(): no params data found [ 570.336015][T23455] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.352617][T23455] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.372622][T23455] bridge_slave_0: entered allmulticast mode [ 570.385451][T23455] bridge_slave_0: entered promiscuous mode [ 570.420120][T23455] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.452536][T23455] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.459781][T23455] bridge_slave_1: entered allmulticast mode [ 570.503807][T23455] bridge_slave_1: entered promiscuous mode [ 570.556191][ T5237] Bluetooth: hci6: command tx timeout [ 570.640987][T23455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.695664][T23455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.714506][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 570.714522][ T29] audit: type=1326 audit(1725774511.299:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23557 comm="syz.2.8128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3ad7cef9 code=0x0 [ 570.949810][T23455] team0: Port device team_slave_0 added [ 570.966218][T23455] team0: Port device team_slave_1 added [ 571.053046][T23566] sctp: [Deprecated]: syz.3.8131 (pid 23566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.053046][T23566] Use struct sctp_sack_info instead [ 571.087478][T23455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.094886][T23455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.139855][T23455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.158874][T23455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.166118][T23455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.194612][T23455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.345090][T23455] hsr_slave_0: entered promiscuous mode [ 571.362592][T23455] hsr_slave_1: entered promiscuous mode [ 571.389105][T23455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.409644][T23455] Cannot create hsr debugfs directory [ 571.753015][T23591] Process accounting resumed [ 572.112979][ T29] audit: type=1400 audit(1725774512.699:739): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=23600 comm="syz.3.8146" dest=20000 netif=wpan0 [ 572.482911][ T5328] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 572.600106][T23455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.622343][T21786] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 572.633302][ T5237] Bluetooth: hci6: command tx timeout [ 572.650220][T23455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.662389][ T5328] usb 3-1: Using ep0 maxpacket: 8 [ 572.672921][ T5328] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 572.702891][T23455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.709636][ T5328] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 572.736042][T23455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 572.743658][ T5328] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 572.763020][ T5328] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.806193][ T5328] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 572.823806][T21786] usb 5-1: Using ep0 maxpacket: 8 [ 572.835818][T21786] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 572.838172][ T5328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.858606][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 572.922419][T21786] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.943084][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 572.967783][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 572.980258][ T5239] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 573.012737][T21786] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 573.031028][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 573.040036][T23455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.062307][T21786] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.092678][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.093690][ T5328] usb 3-1: usb_control_msg returned -32 [ 573.116904][T23455] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.130501][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 573.132331][ T5280] psmouse serio4: Failed to reset mouse on : -5 [ 573.149634][ T5328] usbtmc 3-1:16.0: can't read capabilities [ 573.154520][T21786] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 573.173894][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.181063][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.199913][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 573.215414][ T5239] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.232582][ T5239] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.253979][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.261118][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.269549][T21786] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.282721][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.295923][T21786] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 573.308130][ T5239] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 573.317559][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 573.326026][ T5239] usb 4-1: SerialNumber: syz [ 573.334692][T21786] usb 5-1: string descriptor 0 read error: -22 [ 573.342068][T21786] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 573.372288][T21786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.407832][T21786] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 573.565718][ T5239] usb 4-1: 0:2 : does not exist [ 573.570669][ T5239] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 573.610795][ T5239] usb 4-1: USB disconnect, device number 76 [ 573.702148][T21786] usb 5-1: USB disconnect, device number 47 [ 573.725001][T23455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.829604][T23455] veth0_vlan: entered promiscuous mode [ 573.861605][T23455] veth1_vlan: entered promiscuous mode [ 573.921673][T23455] veth0_macvtap: entered promiscuous mode [ 573.945623][T23455] veth1_macvtap: entered promiscuous mode [ 573.987012][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.017445][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.040132][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.065233][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.089139][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.100916][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.111183][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.122162][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.133663][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.144442][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.179174][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.191662][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.244032][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.275023][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.307084][T23455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.352103][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.372832][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.384879][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.395769][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.407840][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.420776][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.456861][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.473233][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.486819][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.499580][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.510298][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.520924][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.541430][T23455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.555933][T23455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.571604][T23455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.582995][T23638] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 574.597341][T23637] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 574.607704][T23642] Bluetooth: hci3: unsupported parameter 64512 [ 574.620527][T23455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.626329][T23642] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 574.646604][T23455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.662555][T23455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.681467][T23455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.886995][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.902553][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.968825][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.002830][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.192543][ T29] audit: type=1400 audit(1725774515.769:740): lsm=SMACK fn=smack_task_setpgid action=denied subject="N" object="_" requested=w pid=23653 comm="syz.4.8165" opid=23653 ocomm="syz.4.8165" [ 575.258794][T21786] usb 3-1: USB disconnect, device number 66 [ 575.621019][ T29] audit: type=1326 audit(1725774516.199:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.655521][ T29] audit: type=1326 audit(1725774516.199:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.700885][ T29] audit: type=1326 audit(1725774516.199:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.735254][ T29] audit: type=1326 audit(1725774516.199:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.812446][ T29] audit: type=1326 audit(1725774516.199:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.853900][ T29] audit: type=1326 audit(1725774516.199:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.888885][ T29] audit: type=1326 audit(1725774516.229:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.930023][ T29] audit: type=1326 audit(1725774516.229:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 575.968854][ T29] audit: type=1326 audit(1725774516.239:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 576.012542][ T29] audit: type=1326 audit(1725774516.239:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 576.074263][ T29] audit: type=1326 audit(1725774516.239:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23661 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x7ffc0000 [ 576.613770][ T29] audit: type=1326 audit(1725774517.199:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23682 comm="syz.4.8179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f964f17cef9 code=0x0 [ 576.792818][ T5280] misc userio: Buffer overflowed, userio client isn't keeping up [ 577.291824][ T1854] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 577.312460][ T1854] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 577.320120][ T1854] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 577.327972][ T1854] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 577.337531][ T1854] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz0] on syz0 [ 577.562366][T21786] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 577.579984][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.790524][T21786] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 577.804808][T21786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.813205][T21786] usb 4-1: Product: syz [ 577.817467][T21786] usb 4-1: Manufacturer: syz [ 577.822074][T21786] usb 4-1: SerialNumber: syz [ 577.833994][T21786] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 577.883628][ T5239] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 578.054105][ T5280] input: PS/2 Generic Mouse as /devices/serio4/input/input60 [ 578.282443][ T5280] psmouse serio4: Failed to enable mouse on [ 578.446916][T21786] usb 4-1: USB disconnect, device number 77 [ 578.833656][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.953278][ T5239] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 578.960617][ T5239] ath9k_htc: Failed to initialize the device [ 578.961474][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 578.986349][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 578.994819][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 579.020369][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.022269][T21786] usb 4-1: ath9k_htc: USB layer deinitialized [ 579.044826][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 579.062422][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 579.176982][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.208257][T23725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.501351][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.068551][ T11] bridge_slave_1: left allmulticast mode [ 580.093912][ T11] bridge_slave_1: left promiscuous mode [ 580.099718][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.130055][ T11] bridge_slave_0: left allmulticast mode [ 580.142768][ T11] bridge_slave_0: left promiscuous mode [ 580.148528][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.112672][ T5237] Bluetooth: hci2: command tx timeout [ 581.271038][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.293347][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.308157][ T11] bond0 (unregistering): Released all slaves [ 581.332835][T23719] chnl_net:caif_netlink_parms(): no params data found [ 581.893897][T23769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8212'. [ 581.940805][T23719] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.947834][T23773] binder: 23772:23773 ioctl c0306201 200001c0 returned -14 [ 581.974711][T23719] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.993640][T23719] bridge_slave_0: entered allmulticast mode [ 582.009838][T23719] bridge_slave_0: entered promiscuous mode [ 582.167931][T23719] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.188525][T23719] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.206568][T23719] bridge_slave_1: entered allmulticast mode [ 582.224168][T23719] bridge_slave_1: entered promiscuous mode [ 582.321031][ T11] hsr_slave_0: left promiscuous mode [ 582.366244][ T11] hsr_slave_1: left promiscuous mode [ 582.379994][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.398113][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.419670][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.438990][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.488461][ T11] veth1_macvtap: left promiscuous mode [ 582.496681][ T11] veth0_macvtap: left promiscuous mode [ 582.502444][ T11] veth1_vlan: left promiscuous mode [ 582.507945][ T11] veth0_vlan: left promiscuous mode [ 583.202655][ T5237] Bluetooth: hci2: command tx timeout [ 583.896042][ T11] team0 (unregistering): Port device team_slave_1 removed [ 583.948661][T23808] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 584.023828][ T11] team0 (unregistering): Port device team_slave_0 removed [ 585.031738][T23790] batadv_slave_1: entered promiscuous mode [ 585.073627][T23792] batadv_slave_1: left promiscuous mode [ 585.161681][T23719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.197650][T23719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.272664][ T5237] Bluetooth: hci2: command tx timeout [ 585.376562][T23719] team0: Port device team_slave_0 added [ 585.402388][ T47] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 585.429524][T23719] team0: Port device team_slave_1 added [ 585.509200][T23719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.529669][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.564507][T23719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.593434][T23719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.600419][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.626839][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 585.650698][ T47] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 585.659771][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.692306][ T47] usb 3-1: config 0 has no interface number 0 [ 585.712564][T23719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.732357][ T47] usb 3-1: config 0 interface 137 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 585.758150][ T47] usb 3-1: config 0 interface 137 altsetting 0 endpoint 0x3 has invalid maxpacket 959, setting to 64 [ 585.799172][ T47] usb 3-1: config 0 interface 137 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 585.825704][ T47] usb 3-1: config 0 interface 137 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 585.865236][ T47] usb 3-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=3c.93 [ 585.875086][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.893944][ T47] usb 3-1: Product: syz [ 585.898133][ T47] usb 3-1: Manufacturer: syz [ 585.912901][ T47] usb 3-1: SerialNumber: syz [ 585.921284][ T47] usb 3-1: config 0 descriptor?? [ 585.921415][T23719] hsr_slave_0: entered promiscuous mode [ 585.946184][ T47] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009 [ 585.962689][T23719] hsr_slave_1: entered promiscuous mode [ 585.973329][T23719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.991478][T23719] Cannot create hsr debugfs directory [ 586.525400][T23843] vivid-006: disconnect [ 586.530982][T23842] vivid-006: reconnect [ 586.632843][T23845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8243'. [ 586.662510][T23845] netlink: 'syz.4.8243': attribute type 2 has an invalid length. [ 586.729519][T23847] ptrace attach of "./syz-executor exec"[23848] was attempted by ""[23847] [ 586.812008][ T47] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 586.912415][T23850] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 586.923679][T23719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.975737][T23719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 587.008242][T23719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 587.079137][ T47] usb 3-1: USB disconnect, device number 67 [ 587.105116][T23719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 587.352637][ T5237] Bluetooth: hci2: command tx timeout [ 587.456843][T23719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.613777][T23719] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.674703][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.681893][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.720622][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.727806][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.076715][T23881] netlink: 'syz.2.8259': attribute type 3 has an invalid length. [ 588.106568][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8259'. [ 588.314527][T23719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.424366][T23719] veth0_vlan: entered promiscuous mode [ 588.453912][T23719] veth1_vlan: entered promiscuous mode [ 588.526763][T23719] veth0_macvtap: entered promiscuous mode [ 588.547327][T23719] veth1_macvtap: entered promiscuous mode [ 588.586524][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.608954][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.619203][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.645837][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.662800][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.686578][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.696730][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.722651][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.742315][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.763289][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.782305][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.802292][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.812147][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.834858][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.860313][T23719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.908612][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.921944][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.933884][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.945426][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.957365][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.967941][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.982271][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.002318][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.014795][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.033033][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.054558][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.072397][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.102391][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.113529][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.162086][T23719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.193588][T23719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.203134][T23719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.211872][T23719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.260069][T23719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.409120][T23907] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8270'. [ 589.453914][T23909] program syz.2.8271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.454270][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.485055][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.537891][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.546487][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.518797][T23935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8281'. [ 592.205822][T23646] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 592.396122][T23646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.428578][T23646] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.492705][T23646] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.501786][T23646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.551629][T23646] usb 4-1: config 0 descriptor?? [ 592.685807][ T1114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.045335][T23646] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 593.065888][T23646] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 593.090628][T23646] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 593.256310][ T1114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.479450][ T5308] usb 4-1: USB disconnect, device number 78 [ 593.691112][ T1114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.737622][T23991] netlink: 'syz.4.8305': attribute type 7 has an invalid length. [ 593.910148][ T1114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.018447][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.029951][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.038315][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.047609][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.056081][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 594.065494][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.509573][ T1114] bridge_slave_1: left allmulticast mode [ 594.542742][ T1114] bridge_slave_1: left promiscuous mode [ 594.548512][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.636089][ T1114] bridge_slave_0: left allmulticast mode [ 594.641766][ T1114] bridge_slave_0: left promiscuous mode [ 594.668013][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.682365][ T47] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 595.898072][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 595.908239][ T47] usb 5-1: config 1 has no interface number 0 [ 595.923266][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.924908][ T47] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.958771][ T47] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 595.969291][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.979006][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 596.005112][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 596.019589][ T1114] bond0 (unregistering): Released all slaves [ 596.122815][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.139216][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.159871][ T5229] Bluetooth: hci2: command tx timeout [ 596.167176][ T47] usb 5-1: Product: syz [ 596.171370][ T47] usb 5-1: Manufacturer: syz [ 596.178023][ T47] usb 5-1: SerialNumber: syz [ 596.324022][T24054] 9p: Unknown access argument ¯³r]:2Å: -22 [ 596.415224][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8331'. [ 596.527269][T24000] chnl_net:caif_netlink_parms(): no params data found [ 596.974849][ T1114] hsr_slave_0: left promiscuous mode [ 597.003883][ T1114] hsr_slave_1: left promiscuous mode [ 597.030943][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.063219][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.090012][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.107716][ T47] cdc_ncm 5-1:1.1: bind() failure [ 597.122663][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.247258][ T1114] veth1_macvtap: left promiscuous mode [ 597.302568][ T1114] veth0_macvtap: left promiscuous mode [ 597.319416][ T1114] veth1_vlan: left promiscuous mode [ 597.341710][ T1114] veth0_vlan: left promiscuous mode [ 597.570914][T23646] usb 5-1: USB disconnect, device number 48 [ 598.236098][ T5229] Bluetooth: hci2: command tx timeout [ 598.289790][T24096] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 598.300410][T24096] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 598.329281][T24096] overlayfs: conflicting lowerdir path [ 599.204083][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 599.344555][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 600.312534][ T5229] Bluetooth: hci2: command tx timeout [ 600.583727][T24000] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.590982][T24000] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.607692][T24000] bridge_slave_0: entered allmulticast mode [ 600.625643][T24000] bridge_slave_0: entered promiscuous mode [ 600.720245][ T29] audit: type=1326 audit(1725774541.289:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24130 comm="syz.2.8357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3ad7cef9 code=0x0 [ 600.764471][T24000] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.788804][T24000] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.810608][T24000] bridge_slave_1: entered allmulticast mode [ 600.837226][T24000] bridge_slave_1: entered promiscuous mode [ 601.021958][T24000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.077024][T24000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.248276][T24000] team0: Port device team_slave_0 added [ 601.279792][T24000] team0: Port device team_slave_1 added [ 601.308330][T24150] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 601.413419][T24000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.430700][T24000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.476902][T24000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.496172][T24000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.533234][T24000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.603229][T24000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.940779][T24000] hsr_slave_0: entered promiscuous mode [ 601.959301][T24000] hsr_slave_1: entered promiscuous mode [ 602.007462][T24000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.026497][T24000] Cannot create hsr debugfs directory [ 602.177547][T24180] loop1: detected capacity change from 0 to 16384 [ 602.342478][T23646] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 602.404245][ T5229] Bluetooth: hci2: command tx timeout [ 602.542312][T23646] usb 5-1: Using ep0 maxpacket: 8 [ 602.550669][T23646] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 602.565779][T23646] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 602.601380][T23646] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 602.632646][T23646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.998186][T24000] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 603.192496][ T29] audit: type=1326 audit(1725774543.769:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.247368][ T29] audit: type=1326 audit(1725774543.769:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.316343][ T29] audit: type=1326 audit(1725774543.799:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.336759][T24212] netlink: 'syz.2.8391': attribute type 3 has an invalid length. [ 603.354940][ T29] audit: type=1326 audit(1725774543.799:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.362853][T24212] netlink: 'syz.2.8391': attribute type 4 has an invalid length. [ 603.396288][ T29] audit: type=1326 audit(1725774543.799:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.402362][T24212] netlink: 'syz.2.8391': attribute type 7 has an invalid length. [ 603.442490][T24212] netlink: 'syz.2.8391': attribute type 8 has an invalid length. [ 603.448958][ T29] audit: type=1326 audit(1725774543.799:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.459722][T24212] netlink: 'syz.2.8391': attribute type 7 has an invalid length. [ 603.511927][T24212] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.8391'. [ 603.522012][ T29] audit: type=1326 audit(1725774543.799:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.557064][ T29] audit: type=1326 audit(1725774543.799:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.583787][ T29] audit: type=1326 audit(1725774543.809:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24207 comm="syz.3.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fcbb7cef9 code=0x7ffc0000 [ 603.759121][T24000] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.779677][T24000] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.819402][T24000] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.896191][ T5239] usb 5-1: USB disconnect, device number 49 [ 603.988509][T24000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.036876][T24000] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.064429][T22828] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.071608][T22828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.102148][T22828] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.109331][T22828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.209887][T24000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.587405][T24000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.711845][T24000] veth0_vlan: entered promiscuous mode [ 604.742169][T24000] veth1_vlan: entered promiscuous mode [ 604.867387][T24246] input: syz1 as /devices/virtual/input/input63 [ 604.960060][T24243] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 605.079404][T24000] veth0_macvtap: entered promiscuous mode [ 605.131735][T24000] veth1_macvtap: entered promiscuous mode [ 605.181112][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.214350][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.241787][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.262300][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.272141][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.312532][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.322504][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.350986][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.366945][T21786] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 605.382845][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.404319][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.430374][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.463175][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.489467][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.529528][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.560232][T24000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.590105][T21786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.622533][T21786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.644134][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.656408][T21786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.675087][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.692381][T21786] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.701436][T21786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.722665][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.755176][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.772019][T21786] usb 3-1: config 0 descriptor?? [ 605.782378][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.812344][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.843328][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.866142][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.887734][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 605.887749][ T29] audit: type=1326 audit(1725774802.466:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24272 comm="syz.0.8416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a63d7cef9 code=0x0 [ 605.896735][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.933434][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.946466][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.957781][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.967901][T24000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.978926][T24000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.997856][T24000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.058336][T24000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.073731][T24000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.095882][T24000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.120491][T24000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.245776][T21786] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 606.288374][T21786] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 606.324488][T21786] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 606.347346][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.376007][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.444290][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.465130][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.595392][ T47] usb 3-1: USB disconnect, device number 68 [ 606.836567][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8418'. [ 607.913758][T24276] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 608.989156][ T1114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.615125][ T1114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.810913][ T1114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.946475][ T1114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.231063][ T1114] bridge_slave_1: left allmulticast mode [ 610.262366][ T1114] bridge_slave_1: left promiscuous mode [ 610.268156][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.398725][ T1114] bridge_slave_0: left allmulticast mode [ 610.412348][ T1114] bridge_slave_0: left promiscuous mode [ 610.432618][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.707960][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.721834][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.741294][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.750379][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.779142][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 610.786923][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 612.082318][T23646] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 612.176153][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.202727][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.236048][ T1114] bond0 (unregistering): Released all slaves [ 612.272478][T23646] usb 5-1: Using ep0 maxpacket: 16 [ 612.320752][T23646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.348439][T23646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.382391][T23646] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 612.424716][T23646] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 612.442660][T23646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.490448][T23646] usb 5-1: config 0 descriptor?? [ 612.872533][ T5229] Bluetooth: hci2: command tx timeout [ 612.923933][T23646] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 612.936823][T23646] microsoft 0003:045E:07DA.0053: ignoring exceeding usage max [ 612.961771][T23646] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0053/input/input64 [ 613.106197][ T1114] hsr_slave_0: left promiscuous mode [ 613.133766][T23646] microsoft 0003:045E:07DA.0053: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 613.147860][ T1114] hsr_slave_1: left promiscuous mode [ 613.165453][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.179679][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.182610][T23646] usb 5-1: USB disconnect, device number 50 [ 613.203734][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.211145][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.298726][ T1114] veth1_macvtap: left promiscuous mode [ 613.330228][ T1114] veth0_macvtap: left promiscuous mode [ 613.344496][ T1114] veth1_vlan: left promiscuous mode [ 613.350315][ T1114] veth0_vlan: left promiscuous mode [ 613.855837][ T29] audit: type=1400 audit(1725774810.436:768): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24360 comm="syz.3.8449" dest=20000 netif=wpan0 [ 614.439327][T24378] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 614.952816][ T5229] Bluetooth: hci2: command tx timeout [ 615.313226][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 615.505722][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 616.400946][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 617.037714][ T5237] Bluetooth: hci2: command tx timeout [ 617.071023][T24335] chnl_net:caif_netlink_parms(): no params data found [ 617.176173][T24438] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 617.355639][T24335] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.378747][T24335] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.397064][T24335] bridge_slave_0: entered allmulticast mode [ 617.443756][T24335] bridge_slave_0: entered promiscuous mode [ 617.464304][T24335] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.482481][T24335] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.490320][T24335] bridge_slave_1: entered allmulticast mode [ 617.508895][T24335] bridge_slave_1: entered promiscuous mode [ 617.717401][T24335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.771836][T24335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.025726][T24335] team0: Port device team_slave_0 added [ 618.055460][T24335] team0: Port device team_slave_1 added [ 618.184414][T24335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.208180][T24335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.290233][T24335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.324282][T24335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.351971][T24335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.428305][T24335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.856123][T24335] hsr_slave_0: entered promiscuous mode [ 618.903932][T24335] hsr_slave_1: entered promiscuous mode [ 618.923281][T24335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.941165][T24335] Cannot create hsr debugfs directory [ 619.112931][ T5237] Bluetooth: hci2: command tx timeout [ 619.192752][T24488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.062541][T24511] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 620.082323][T24511] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 620.539087][T24335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 620.582873][T24335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 620.629181][T24335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 620.656059][T24335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 620.777603][T24527] input: syz1 as /devices/virtual/input/input65 [ 620.991696][T24335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.055561][T24335] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.075805][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.082999][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.150272][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.157450][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.627374][T24335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.750384][T24335] veth0_vlan: entered promiscuous mode [ 621.806305][T24335] veth1_vlan: entered promiscuous mode [ 621.906419][T24335] veth0_macvtap: entered promiscuous mode [ 621.927716][T24335] veth1_macvtap: entered promiscuous mode [ 622.010823][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.037652][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.084401][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.106152][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.132306][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.175152][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.203402][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.222245][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.252142][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.263464][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.282329][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.307674][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.323219][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.351224][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.375528][T24335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.431523][T24578] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8542'. [ 622.471736][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.532053][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.559558][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.592459][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.612244][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.635610][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.652746][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.681158][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.708730][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.732335][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.745623][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.772230][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.782114][T24335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.812278][T24335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.828773][T24335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.877434][T24335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.899549][T24335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.913100][T24335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.921858][T24335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.962364][ T5328] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 623.102816][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.119858][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.159589][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.168073][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.175776][ T5328] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 623.210939][ T5328] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 623.268182][ T5328] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.283131][ T5328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 623.311623][ T5328] usb 3-1: SerialNumber: syz [ 623.328516][T24590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.339590][T24590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.574476][T24590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.593855][T24590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.054674][ T5328] cdc_ether 3-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.2-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 624.276413][ T47] usb 3-1: USB disconnect, device number 69 [ 624.284129][ T47] cdc_ether 3-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.2-1, Mobile Broadband Network Device [ 624.560181][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.375333][T24649] netlink: 'syz.2.8577': attribute type 8 has an invalid length. [ 625.414421][T24649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8577'. [ 625.849966][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.040205][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.063057][T24673] [ 627.065415][T24673] ===================================================== [ 627.072349][T24673] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 627.079806][T24673] 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 Not tainted [ 627.086914][T24673] ----------------------------------------------------- [ 627.093845][T24673] syz.4.8586/24673 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 627.101570][T24673] ffffffff8e40a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xee/0x3c0 [ 627.110215][T24673] [ 627.110215][T24673] and this task is already holding: [ 627.117592][T24673] ffff8880284f2d98 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x29/0x3c0 [ 627.126492][T24673] which would create a new lock dependency: [ 627.132385][T24673] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 627.140162][T24673] [ 627.140162][T24673] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 627.149614][T24673] (&dev->event_lock#2){..-.}-{2:2} [ 627.149655][T24673] [ 627.149655][T24673] ... which became SOFTIRQ-irq-safe at: [ 627.162553][T24673] lock_acquire+0x1ed/0x550 [ 627.167158][T24673] _raw_spin_lock_irqsave+0xd5/0x120 [ 627.172549][T24673] input_inject_event+0xc5/0x340 [ 627.177580][T24673] led_trigger_event+0x138/0x210 [ 627.182613][T24673] kbd_bh+0x1b5/0x290 [ 627.186688][T24673] tasklet_action_common+0x321/0x4d0 [ 627.192069][T24673] handle_softirqs+0x2c4/0x970 [ 627.196929][T24673] __irq_exit_rcu+0xf4/0x1c0 [ 627.201609][T24673] irq_exit_rcu+0x9/0x30 [ 627.205942][T24673] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 627.211674][T24673] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.217744][T24673] __tasklet_schedule_common+0x1fd/0x270 [ 627.223473][T24673] vt_set_leds_compute_shiftstate+0x68/0x90 [ 627.229472][T24673] redraw_screen+0x97c/0xe90 [ 627.234161][T24673] complete_change_console+0xd1/0x730 [ 627.239637][T24673] console_callback+0x17b/0x460 [ 627.244590][T24673] process_scheduled_works+0xa2c/0x1830 [ 627.250241][T24673] worker_thread+0x86d/0xd10 [ 627.255018][T24673] kthread+0x2f0/0x390 [ 627.259189][T24673] ret_from_fork+0x4b/0x80 [ 627.263700][T24673] ret_from_fork_asm+0x1a/0x30 [ 627.268556][T24673] [ 627.268556][T24673] to a SOFTIRQ-irq-unsafe lock: [ 627.275575][T24673] (tasklist_lock){.+.+}-{2:2} [ 627.275609][T24673] [ 627.275609][T24673] ... which became SOFTIRQ-irq-unsafe at: [ 627.288244][T24673] ... [ 627.288254][T24673] lock_acquire+0x1ed/0x550 [ 627.295477][T24673] _raw_read_lock+0x36/0x50 [ 627.300089][T24673] __do_wait+0x12d/0x850 [ 627.304434][T24673] do_wait+0x1e9/0x560 [ 627.308594][T24673] kernel_wait+0xe9/0x240 [ 627.313013][T24673] call_usermodehelper_exec_work+0xbd/0x230 [ 627.319006][T24673] process_scheduled_works+0xa2c/0x1830 [ 627.324649][T24673] worker_thread+0x86d/0xd10 [ 627.329336][T24673] kthread+0x2f0/0x390 [ 627.333500][T24673] ret_from_fork+0x4b/0x80 [ 627.338008][T24673] ret_from_fork_asm+0x1a/0x30 [ 627.342892][T24673] [ 627.342892][T24673] other info that might help us debug this: [ 627.342892][T24673] [ 627.353208][T24673] Chain exists of: [ 627.353208][T24673] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 627.353208][T24673] [ 627.366444][T24673] Possible interrupt unsafe locking scenario: [ 627.366444][T24673] [ 627.374759][T24673] CPU0 CPU1 [ 627.380129][T24673] ---- ---- [ 627.385500][T24673] lock(tasklist_lock); [ 627.389750][T24673] local_irq_disable(); [ 627.396501][T24673] lock(&dev->event_lock#2); [ 627.403711][T24673] lock(&f->f_owner.lock); [ 627.410740][T24673] [ 627.414192][T24673] lock(&dev->event_lock#2); [ 627.419055][T24673] [ 627.419055][T24673] *** DEADLOCK *** [ 627.419055][T24673] [ 627.427207][T24673] 2 locks held by syz.4.8586/24673: [ 627.432408][T24673] #0: ffff88806baafe68 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x294/0x730 [ 627.440959][T24673] #1: ffff8880284f2d98 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x29/0x3c0 [ 627.450299][T24673] [ 627.450299][T24673] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 627.460881][T24673] -> (&dev->event_lock#2){..-.}-{2:2} { [ 627.466634][T24673] IN-SOFTIRQ-W at: [ 627.470790][T24673] lock_acquire+0x1ed/0x550 [ 627.477307][T24673] _raw_spin_lock_irqsave+0xd5/0x120 [ 627.484614][T24673] input_inject_event+0xc5/0x340 [ 627.491558][T24673] led_trigger_event+0x138/0x210 [ 627.498500][T24673] kbd_bh+0x1b5/0x290 [ 627.504478][T24673] tasklet_action_common+0x321/0x4d0 [ 627.511766][T24673] handle_softirqs+0x2c4/0x970 [ 627.518530][T24673] __irq_exit_rcu+0xf4/0x1c0 [ 627.525123][T24673] irq_exit_rcu+0x9/0x30 [ 627.531370][T24673] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 627.539013][T24673] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.546997][T24673] __tasklet_schedule_common+0x1fd/0x270 [ 627.554651][T24673] vt_set_leds_compute_shiftstate+0x68/0x90 [ 627.562551][T24673] redraw_screen+0x97c/0xe90 [ 627.569229][T24673] complete_change_console+0xd1/0x730 [ 627.576605][T24673] console_callback+0x17b/0x460 [ 627.583460][T24673] process_scheduled_works+0xa2c/0x1830 [ 627.591009][T24673] worker_thread+0x86d/0xd10 [ 627.597607][T24673] kthread+0x2f0/0x390 [ 627.603678][T24673] ret_from_fork+0x4b/0x80 [ 627.610100][T24673] ret_from_fork_asm+0x1a/0x30 [ 627.616865][T24673] INITIAL USE at: [ 627.620934][T24673] lock_acquire+0x1ed/0x550 [ 627.627355][T24673] _raw_spin_lock_irqsave+0xd5/0x120 [ 627.634565][T24673] input_inject_event+0xc5/0x340 [ 627.641413][T24673] kbd_led_trigger_activate+0xb8/0x100 [ 627.648786][T24673] led_trigger_set+0x582/0x9c0 [ 627.655462][T24673] led_trigger_set_default+0x229/0x260 [ 627.662833][T24673] led_classdev_register_ext+0x6e6/0x8a0 [ 627.670382][T24673] input_leds_connect+0x489/0x630 [ 627.677323][T24673] input_register_device+0xd3b/0x1110 [ 627.684618][T24673] atkbd_connect+0x752/0xa00 [ 627.691124][T24673] serio_driver_probe+0x7f/0xa0 [ 627.697889][T24673] really_probe+0x2b8/0xad0 [ 627.704306][T24673] __driver_probe_device+0x1a2/0x390 [ 627.711501][T24673] driver_probe_device+0x50/0x430 [ 627.718435][T24673] __driver_attach+0x45f/0x710 [ 627.723088][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 627.725094][T24673] bus_for_each_dev+0x239/0x2b0 [ 627.725121][T24673] serio_handle_event+0x1c7/0x920 [ 627.732515][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 627.738758][T24673] process_scheduled_works+0xa2c/0x1830 [ 627.738785][T24673] worker_thread+0x86d/0xd10 [ 627.746381][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 627.752594][T24673] kthread+0x2f0/0x390 [ 627.752622][T24673] ret_from_fork+0x4b/0x80 [ 627.761708][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 627.766523][T24673] ret_from_fork_asm+0x1a/0x30 [ 627.766551][T24673] } [ 627.766557][T24673] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 627.775393][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 627.779415][T24673] -> (&new->fa_lock){...-}-{2:2} { [ 627.779448][T24673] IN-SOFTIRQ-R at: [ 627.786289][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 627.792664][T24673] lock_acquire+0x1ed/0x550 [ 627.792692][T24673] _raw_read_lock_irqsave+0xdd/0x130 [ 627.847734][T24673] kill_fasync+0x19e/0x4d0 [ 627.853985][T24673] sock_wake_async+0x147/0x170 [ 627.860587][T24673] sock_def_readable+0x3df/0x5b0 [ 627.867359][T24673] __udp_enqueue_schedule_skb+0x81a/0xb20 [ 627.874913][T24673] udpv6_queue_rcv_one_skb+0xa22/0x18a0 [ 627.882305][T24673] udp6_unicast_rcv_skb+0x230/0x370 [ 627.889339][T24673] ip6_protocol_deliver_rcu+0xccf/0x1580 [ 627.896806][T24673] ip6_input_finish+0x187/0x2d0 [ 627.903481][T24673] NF_HOOK+0x3a4/0x450 [ 627.909374][T24673] NF_HOOK+0x3a4/0x450 [ 627.915267][T24673] __netif_receive_skb+0x1ea/0x650 [ 627.922206][T24673] process_backlog+0x662/0x15b0 [ 627.928885][T24673] __napi_poll+0xcb/0x490 [ 627.935064][T24673] net_rx_action+0x89b/0x1240 [ 627.941569][T24673] handle_softirqs+0x2c4/0x970 [ 627.948167][T24673] do_softirq+0x11b/0x1e0 [ 627.954337][T24673] __local_bh_enable_ip+0x1bb/0x200 [ 627.961372][T24673] __dev_queue_xmit+0x1763/0x3e90 [ 627.968232][T24673] ip6_finish_output2+0xfc9/0x1730 [ 627.975175][T24673] ip6_finish_output+0x41e/0x810 [ 627.981949][T24673] ip6_send_skb+0x1b1/0x3b0 [ 627.988279][T24673] udp_v6_send_skb+0xbf5/0x1870 [ 627.994960][T24673] udpv6_sendmsg+0x23b6/0x3270 [ 628.001556][T24673] __sock_sendmsg+0xef/0x270 [ 628.007970][T24673] __sys_sendto+0x3a4/0x4f0 [ 628.014303][T24673] __x64_sys_sendto+0xde/0x100 [ 628.020894][T24673] do_syscall_64+0xf3/0x230 [ 628.027229][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.034957][T24673] INITIAL USE at: [ 628.038941][T24673] lock_acquire+0x1ed/0x550 [ 628.045186][T24673] _raw_write_lock_irq+0xd3/0x120 [ 628.051956][T24673] fasync_remove_entry+0xff/0x1d0 [ 628.058727][T24673] sock_fasync+0x8a/0x100 [ 628.064809][T24673] __fput+0x73e/0x8a0 [ 628.070544][T24673] task_work_run+0x24f/0x310 [ 628.076882][T24673] syscall_exit_to_user_mode+0x168/0x370 [ 628.084266][T24673] do_syscall_64+0x100/0x230 [ 628.090597][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.098235][T24673] INITIAL READ USE at: [ 628.102656][T24673] lock_acquire+0x1ed/0x550 [ 628.109337][T24673] _raw_read_lock_irqsave+0xdd/0x130 [ 628.116803][T24673] kill_fasync+0x19e/0x4d0 [ 628.123399][T24673] sock_wake_async+0x147/0x170 [ 628.130339][T24673] sk_wake_async+0x183/0x280 [ 628.137111][T24673] unix_release_sock+0x730/0xcd0 [ 628.144224][T24673] unix_release+0x91/0xc0 [ 628.150728][T24673] sock_close+0xbc/0x240 [ 628.157148][T24673] __fput+0x24a/0x8a0 [ 628.163301][T24673] __x64_sys_close+0x7f/0x110 [ 628.170153][T24673] do_syscall_64+0xf3/0x230 [ 628.176835][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.184904][T24673] } [ 628.187485][T24673] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 628.196252][T24673] ... acquired at: [ 628.200137][T24673] lock_acquire+0x1ed/0x550 [ 628.204820][T24673] _raw_read_lock_irqsave+0xdd/0x130 [ 628.210282][T24673] kill_fasync+0x19e/0x4d0 [ 628.214877][T24673] mousedev_notify_readers+0x719/0xc80 [ 628.220515][T24673] mousedev_event+0x5d9/0x1390 [ 628.225460][T24673] input_handler_events_default+0x107/0x1c0 [ 628.231541][T24673] input_pass_values+0x286/0x860 [ 628.236654][T24673] input_event_dispose+0x30f/0x600 [ 628.241939][T24673] input_handle_event+0xa71/0xbe0 [ 628.247139][T24673] input_inject_event+0x22f/0x340 [ 628.252337][T24673] evdev_write+0x672/0x7c0 [ 628.256929][T24673] vfs_write+0x2a2/0xc90 [ 628.261352][T24673] ksys_write+0x1a0/0x2c0 [ 628.265858][T24673] do_syscall_64+0xf3/0x230 [ 628.270536][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.276616][T24673] [ 628.278942][T24673] -> (&f->f_owner.lock){...-}-{2:2} { [ 628.284346][T24673] IN-SOFTIRQ-R at: [ 628.288322][T24673] lock_acquire+0x1ed/0x550 [ 628.294483][T24673] _raw_read_lock_irqsave+0xdd/0x130 [ 628.301428][T24673] send_sigurg+0x29/0x3c0 [ 628.307409][T24673] sk_send_sigurg+0x75/0x2f0 [ 628.313658][T24673] tcp_check_urg+0x207/0x740 [ 628.319899][T24673] tcp_urg+0x15c/0x450 [ 628.325622][T24673] tcp_rcv_established+0xfaf/0x2020 [ 628.332478][T24673] tcp_v4_do_rcv+0x96d/0xc70 [ 628.338722][T24673] tcp_v4_rcv+0x2dc0/0x37f0 [ 628.344878][T24673] ip_protocol_deliver_rcu+0x22e/0x440 [ 628.351995][T24673] ip_local_deliver_finish+0x341/0x5f0 [ 628.359108][T24673] NF_HOOK+0x3a4/0x450 [ 628.364829][T24673] NF_HOOK+0x3a4/0x450 [ 628.370550][T24673] __netif_receive_skb+0x2bf/0x650 [ 628.377324][T24673] process_backlog+0x662/0x15b0 [ 628.383834][T24673] __napi_poll+0xcb/0x490 [ 628.389823][T24673] net_rx_action+0x89b/0x1240 [ 628.396149][T24673] handle_softirqs+0x2c4/0x970 [ 628.402567][T24673] do_softirq+0x11b/0x1e0 [ 628.408546][T24673] __local_bh_enable_ip+0x1bb/0x200 [ 628.415398][T24673] sk_stream_wait_memory+0x762/0xfa0 [ 628.422340][T24673] tcp_sendmsg_locked+0x1471/0x4e10 [ 628.429356][T24673] tcp_sendmsg+0x30/0x50 [ 628.436138][T24673] __sock_sendmsg+0x1a6/0x270 [ 628.443377][T24673] __sys_sendto+0x3a4/0x4f0 [ 628.449538][T24673] __x64_sys_sendto+0xde/0x100 [ 628.455958][T24673] do_syscall_64+0xf3/0x230 [ 628.462112][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.469665][T24673] INITIAL USE at: [ 628.473572][T24673] lock_acquire+0x1ed/0x550 [ 628.479653][T24673] _raw_write_lock_irq+0xd3/0x120 [ 628.486251][T24673] f_modown+0x38/0x340 [ 628.491886][T24673] f_setown+0x14f/0x200 [ 628.497604][T24673] do_fcntl+0x67d/0x1730 [ 628.503413][T24673] __se_sys_fcntl+0xd2/0x1c0 [ 628.509570][T24673] do_syscall_64+0xf3/0x230 [ 628.515637][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.523099][T24673] INITIAL READ USE at: [ 628.527432][T24673] lock_acquire+0x1ed/0x550 [ 628.533940][T24673] _raw_read_lock_irq+0xda/0x120 [ 628.540881][T24673] f_getown+0x29/0x280 [ 628.546951][T24673] sock_ioctl+0x49b/0x8e0 [ 628.553286][T24673] __se_sys_ioctl+0xfc/0x170 [ 628.559880][T24673] do_syscall_64+0xf3/0x230 [ 628.566470][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.574377][T24673] } [ 628.576877][T24673] ... key at: [] init_file.__key+0x0/0x20 [ 628.584690][T24673] ... acquired at: [ 628.588488][T24673] lock_acquire+0x1ed/0x550 [ 628.593172][T24673] _raw_read_lock_irqsave+0xdd/0x130 [ 628.598643][T24673] send_sigio+0x33/0x360 [ 628.603070][T24673] kill_fasync+0x23a/0x4d0 [ 628.607665][T24673] sock_wake_async+0x147/0x170 [ 628.612603][T24673] sk_wake_async+0x183/0x280 [ 628.617376][T24673] unix_release_sock+0x730/0xcd0 [ 628.622492][T24673] unix_release+0x91/0xc0 [ 628.627002][T24673] sock_close+0xbc/0x240 [ 628.631430][T24673] __fput+0x24a/0x8a0 [ 628.635590][T24673] __x64_sys_close+0x7f/0x110 [ 628.640445][T24673] do_syscall_64+0xf3/0x230 [ 628.645121][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.651195][T24673] [ 628.653514][T24673] [ 628.653514][T24673] the dependencies between the lock to be acquired [ 628.653525][T24673] and SOFTIRQ-irq-unsafe lock: [ 628.667031][T24673] -> (tasklist_lock){.+.+}-{2:2} { [ 628.672175][T24673] HARDIRQ-ON-R at: [ 628.676157][T24673] lock_acquire+0x1ed/0x550 [ 628.682325][T24673] _raw_read_lock+0x36/0x50 [ 628.688487][T24673] __do_wait+0x12d/0x850 [ 628.694381][T24673] do_wait+0x1e9/0x560 [ 628.700102][T24673] kernel_wait+0xe9/0x240 [ 628.706081][T24673] call_usermodehelper_exec_work+0xbd/0x230 [ 628.713627][T24673] process_scheduled_works+0xa2c/0x1830 [ 628.720827][T24673] worker_thread+0x86d/0xd10 [ 628.727076][T24673] kthread+0x2f0/0x390 [ 628.732806][T24673] ret_from_fork+0x4b/0x80 [ 628.738976][T24673] ret_from_fork_asm+0x1a/0x30 [ 628.745403][T24673] SOFTIRQ-ON-R at: [ 628.749389][T24673] lock_acquire+0x1ed/0x550 [ 628.755646][T24673] _raw_read_lock+0x36/0x50 [ 628.761808][T24673] __do_wait+0x12d/0x850 [ 628.767698][T24673] do_wait+0x1e9/0x560 [ 628.773419][T24673] kernel_wait+0xe9/0x240 [ 628.779407][T24673] call_usermodehelper_exec_work+0xbd/0x230 [ 628.786956][T24673] process_scheduled_works+0xa2c/0x1830 [ 628.794156][T24673] worker_thread+0x86d/0xd10 [ 628.800398][T24673] kthread+0x2f0/0x390 [ 628.806121][T24673] ret_from_fork+0x4b/0x80 [ 628.812193][T24673] ret_from_fork_asm+0x1a/0x30 [ 628.818611][T24673] INITIAL USE at: [ 628.822508][T24673] lock_acquire+0x1ed/0x550 [ 628.828581][T24673] _raw_write_lock_irq+0xd3/0x120 [ 628.835191][T24673] copy_process+0x228b/0x3dc0 [ 628.841444][T24673] kernel_clone+0x223/0x880 [ 628.847520][T24673] user_mode_thread+0x132/0x1a0 [ 628.853943][T24673] rest_init+0x23/0x300 [ 628.859666][T24673] start_kernel+0x47a/0x500 [ 628.865749][T24673] x86_64_start_reservations+0x2a/0x30 [ 628.872782][T24673] x86_64_start_kernel+0x9f/0xa0 [ 628.879290][T24673] common_startup_64+0x13e/0x147 [ 628.885799][T24673] INITIAL READ USE at: [ 628.890133][T24673] lock_acquire+0x1ed/0x550 [ 628.896648][T24673] _raw_read_lock+0x36/0x50 [ 628.903164][T24673] __do_wait+0x12d/0x850 [ 628.909410][T24673] do_wait+0x1e9/0x560 [ 628.915476][T24673] kernel_wait+0xe9/0x240 [ 628.921803][T24673] call_usermodehelper_exec_work+0xbd/0x230 [ 628.929706][T24673] process_scheduled_works+0xa2c/0x1830 [ 628.937259][T24673] worker_thread+0x86d/0xd10 [ 628.943849][T24673] kthread+0x2f0/0x390 [ 628.949928][T24673] ret_from_fork+0x4b/0x80 [ 628.956348][T24673] ret_from_fork_asm+0x1a/0x30 [ 628.963117][T24673] } [ 628.965611][T24673] ... key at: [] tasklist_lock+0x18/0x40 [ 628.973347][T24673] ... acquired at: [ 628.977151][T24673] lock_acquire+0x1ed/0x550 [ 628.981840][T24673] _raw_read_lock+0x36/0x50 [ 628.986526][T24673] send_sigurg+0xee/0x3c0 [ 628.991033][T24673] sk_send_sigurg+0x75/0x2f0 [ 628.995806][T24673] queue_oob+0x572/0x730 [ 629.000229][T24673] unix_stream_sendmsg+0xd24/0xf80 [ 629.005521][T24673] __sock_sendmsg+0x221/0x270 [ 629.010370][T24673] ____sys_sendmsg+0x525/0x7d0 [ 629.015311][T24673] __sys_sendmmsg+0x3b2/0x740 [ 629.020168][T24673] __x64_sys_sendmmsg+0xa0/0xb0 [ 629.025203][T24673] do_syscall_64+0xf3/0x230 [ 629.029887][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.035965][T24673] [ 629.038286][T24673] [ 629.038286][T24673] stack backtrace: [ 629.044169][T24673] CPU: 1 UID: 0 PID: 24673 Comm: syz.4.8586 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 629.055017][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 629.065073][T24673] Call Trace: [ 629.068354][T24673] [ 629.071286][T24673] dump_stack_lvl+0x241/0x360 [ 629.076065][T24673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.081285][T24673] ? __pfx__printk+0x10/0x10 [ 629.085977][T24673] ? print_shortest_lock_dependencies+0xf2/0x160 [ 629.092350][T24673] validate_chain+0x4de0/0x5900 [ 629.097208][T24673] ? unix_stream_sendmsg+0xd24/0xf80 [ 629.102502][T24673] ? __sock_sendmsg+0x221/0x270 [ 629.107367][T24673] ? __pfx_validate_chain+0x10/0x10 [ 629.112569][T24673] ? __lock_acquire+0x137a/0x2040 [ 629.117601][T24673] ? __pfx_validate_chain+0x10/0x10 [ 629.122818][T24673] ? __lock_acquire+0x137a/0x2040 [ 629.127859][T24673] ? mark_lock+0x9a/0x350 [ 629.132204][T24673] __lock_acquire+0x137a/0x2040 [ 629.137074][T24673] lock_acquire+0x1ed/0x550 [ 629.141584][T24673] ? send_sigurg+0xee/0x3c0 [ 629.146097][T24673] ? __pfx_lock_acquire+0x10/0x10 [ 629.151133][T24673] ? do_raw_read_lock+0x3c/0x90 [ 629.155988][T24673] ? _raw_read_lock_irqsave+0xe9/0x130 [ 629.161461][T24673] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 629.167364][T24673] ? __pfx_lock_release+0x10/0x10 [ 629.172397][T24673] ? do_raw_spin_lock+0x14f/0x370 [ 629.177432][T24673] _raw_read_lock+0x36/0x50 [ 629.181947][T24673] ? send_sigurg+0xee/0x3c0 [ 629.186454][T24673] send_sigurg+0xee/0x3c0 [ 629.190792][T24673] sk_send_sigurg+0x75/0x2f0 [ 629.195397][T24673] queue_oob+0x572/0x730 [ 629.199651][T24673] ? __pfx_queue_oob+0x10/0x10 [ 629.204419][T24673] ? security_socket_getpeersec_dgram+0x96/0xb0 [ 629.210681][T24673] unix_stream_sendmsg+0xd24/0xf80 [ 629.215811][T24673] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 629.222243][T24673] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 629.229027][T24673] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 629.234676][T24673] ? __pfx_lock_release+0x10/0x10 [ 629.239707][T24673] ? __import_iovec+0x536/0x820 [ 629.244568][T24673] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 629.249861][T24673] ? security_socket_sendmsg+0x87/0xb0 [ 629.255323][T24673] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 629.260963][T24673] __sock_sendmsg+0x221/0x270 [ 629.265659][T24673] ____sys_sendmsg+0x525/0x7d0 [ 629.270433][T24673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.275739][T24673] __sys_sendmmsg+0x3b2/0x740 [ 629.280433][T24673] ? __pfx___sys_sendmmsg+0x10/0x10 [ 629.285725][T24673] ? wake_up_q+0xdc/0x120 [ 629.290063][T24673] ? futex_wait+0x285/0x360 [ 629.294580][T24673] ? __pfx_futex_wait+0x10/0x10 [ 629.299455][T24673] ? do_futex+0x33b/0x560 [ 629.303808][T24673] ? __pfx_do_fcntl+0x10/0x10 [ 629.308498][T24673] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 629.314489][T24673] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 629.320829][T24673] ? do_syscall_64+0x100/0x230 [ 629.325602][T24673] __x64_sys_sendmmsg+0xa0/0xb0 [ 629.330484][T24673] do_syscall_64+0xf3/0x230 [ 629.334993][T24673] ? clear_bhb_loop+0x35/0x90 [ 629.339681][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.345678][T24673] RIP: 0033:0x7f964f17cef9 [ 629.350094][T24673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.369704][T24673] RSP: 002b:00007f9650015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 629.378125][T24673] RAX: ffffffffffffffda RBX: 00007f964f335f80 RCX: 00007f964f17cef9 [ 629.386100][T24673] RDX: 0000000000000001 RSI: 0000000020006c40 RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 629.394077][T24673] RBP: 00007f964f1ef046 R08: 0000000000000000 R09: 0000000000000000 [ 629.402051][T24673] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 629.410026][T24673] R13: 0000000000000000 R14: 00007f964f335f80 R15: 00007ffca040c888 [ 629.418006][T24673] [ 629.704960][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.832345][ T5229] Bluetooth: hci2: command tx timeout [ 630.107912][T23841] bond0: (slave syz_tun): Releasing backup interface [ 630.142386][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.289086][ T11] bridge_slave_1: left allmulticast mode [ 630.294909][ T11] bridge_slave_1: left promiscuous mode [ 630.300603][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.309781][ T11] bridge_slave_0: left allmulticast mode [ 630.319464][ T11] bridge_slave_0: left promiscuous mode [ 630.325980][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.539867][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.564174][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.583968][ T11] bond0 (unregistering): Released all slaves [ 630.853922][ T11] hsr_slave_0: left promiscuous mode [ 630.862722][ T11] hsr_slave_1: left promiscuous mode [ 630.873935][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.881360][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.913133][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.920569][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.944655][ T11] veth1_macvtap: left promiscuous mode [ 630.950178][ T11] veth0_macvtap: left promiscuous mode [ 630.962685][ T11] veth1_vlan: left promiscuous mode [ 630.968002][ T11] veth0_vlan: left promiscuous mode [ 631.459296][ T11] team0 (unregistering): Port device team_slave_1 removed [ 631.473240][ T11] team0 (unregistering): Port device team_slave_0 removed [ 632.097696][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.140188][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.199152][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.265823][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.367169][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.377503][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.440654][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.452365][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.498251][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.512382][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.574685][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.587871][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.726747][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.768169][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.818378][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.870156][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.946558][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.990938][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.048367][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.108488][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.191582][ T11] batadv1: left allmulticast mode [ 633.199952][ T11] batadv1: left promiscuous mode [ 633.207880][ T11] bridge0: port 4(batadv1) entered disabled state [ 633.216757][ T11] team0: left allmulticast mode [ 633.221631][ T11] team_slave_0: left allmulticast mode [ 633.229613][ T11] team_slave_1: left allmulticast mode [ 633.236228][ T11] bridge0: port 3(team0) entered disabled state [ 633.247543][ T11] bridge_slave_1: left allmulticast mode [ 633.254678][ T11] bridge_slave_1: left promiscuous mode [ 633.260352][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.271944][ T11] bridge_slave_0: left promiscuous mode [ 633.282743][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.296386][ T11] bridge_slave_1: left allmulticast mode [ 633.302032][ T11] bridge_slave_1: left promiscuous mode [ 633.310454][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.324542][ T11] bridge_slave_1: left allmulticast mode [ 633.330288][ T11] bridge_slave_1: left promiscuous mode [ 633.340600][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.350799][ T11] bridge_slave_0: left allmulticast mode [ 633.359683][ T11] bridge_slave_0: left promiscuous mode [ 633.366176][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.378335][ T11] bridge_slave_1: left allmulticast mode [ 633.386276][ T11] bridge_slave_1: left promiscuous mode [ 633.391969][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.405802][ T11] bridge_slave_0: left allmulticast mode [ 633.411450][ T11] bridge_slave_0: left promiscuous mode [ 633.418882][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.836257][ T11] erspan0 (unregistering): left promiscuous mode [ 633.875209][ T11] gretap0 (unregistering): left promiscuous mode [ 634.548206][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.560739][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.573932][ T11] bond0 (unregistering): Released all slaves [ 634.780942][ T11]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.799396][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.813854][ T11]  (unregistering): Released all slaves [ 634.831845][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.846990][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.857968][ T11] bond0 (unregistering): Released all slaves [ 634.879697][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.891156][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.905572][ T11] bond0 (unregistering): Released all slaves [ 635.026019][ T11] ɶƣ0GC¦!: left promiscuous mode [ 635.075251][ T11] tipc: Disabling bearer [ 635.082347][ T11] tipc: Left network mode [ 635.088340][ T11] tipc: Left network mode [ 635.194317][ T11] IPVS: stopping master sync thread 9734 ... [ 635.200548][ T11] IPVS: stopping backup sync thread 6984 ... [ 635.210304][ T11] IPVS: stopping backup sync thread 19238 ... [ 635.334468][ T11] team0: Port device wlan1 removed [ 635.822675][ T11] hsr_slave_0: left promiscuous mode [ 635.828464][ T11] hsr_slave_1: left promiscuous mode [ 635.837442][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.850899][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.861918][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.875808][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.887808][ T11] hsr_slave_0: left promiscuous mode [ 635.896668][ T11] hsr_slave_1: left promiscuous mode [ 635.902622][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.910024][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.920979][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.928550][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.944139][ T11] hsr_slave_0: left promiscuous mode [ 635.949953][ T11] hsr_slave_1: left promiscuous mode [ 635.959106][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.966731][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.978129][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.985659][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.999571][ T11] hsr_slave_0: left promiscuous mode [ 636.005789][ T11] hsr_slave_1: left promiscuous mode [ 636.011673][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.022256][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.030016][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.041010][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.061498][ T11] veth1_macvtap: left promiscuous mode [ 636.067281][ T11] veth1_vlan: left promiscuous mode [ 636.073391][ T11] veth0_vlan: left promiscuous mode [ 636.079613][ T11] veth0_macvtap: left promiscuous mode [ 636.088094][ T11] veth1_vlan: left promiscuous mode [ 636.093656][ T11] veth0_vlan: left promiscuous mode [ 636.099795][ T11] veth1_macvtap: left promiscuous mode [ 636.105590][ T11] veth0_macvtap: left promiscuous mode [ 636.111174][ T11] veth1_vlan: left promiscuous mode [ 636.116694][ T11] veth0_vlan: left promiscuous mode [ 636.123109][ T11] veth1_macvtap: left promiscuous mode [ 636.128617][ T11] veth0_macvtap: left promiscuous mode [ 636.137184][ T11] veth1_vlan: left promiscuous mode [ 636.142505][ T11] veth0_vlan: left promiscuous mode [ 636.686324][ T11] team_slave_1 (unregistering): left promiscuous mode [ 636.693839][ T11] team0 (unregistering): Port device team_slave_1 removed [ 636.714171][ T11] team_slave_0 (unregistering): left promiscuous mode [ 636.721602][ T11] team0 (unregistering): Port device team_slave_0 removed