last executing test programs: 4.857978276s ago: executing program 4 (id=3002): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) fcntl$getown(r0, 0x9) 4.643906266s ago: executing program 4 (id=3005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, 0x0}) 4.35399554s ago: executing program 4 (id=3008): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007cc0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="64c885f9d881", 0x6}], 0x1}], 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 2.619483095s ago: executing program 4 (id=3019): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}}, 0x0) 2.385679782s ago: executing program 4 (id=3021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x64}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x0, 0x7, "d9e35a979474450bed046d3e24"}]}, 0x28}}, 0x0) 2.253874971s ago: executing program 4 (id=3022): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b18, 0x0) 1.531694865s ago: executing program 2 (id=3032): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)={0x38, r0, 0x701, 0x0, 0x2, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 1.407975863s ago: executing program 2 (id=3034): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000, 0x0) 1.267595004s ago: executing program 2 (id=3038): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="173331e77b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 1.176880703s ago: executing program 2 (id=3040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)={0x4c, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x4c}}, 0x0) 1.070283555s ago: executing program 3 (id=3042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) 973.383423ms ago: executing program 2 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) 918.529786ms ago: executing program 3 (id=3045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0xfe, 0x0, 0x8}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x0, 0xe, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}}) 874.782104ms ago: executing program 2 (id=3046): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) write$binfmt_misc(r1, &(0x7f0000000740), 0xfffffc8f) splice(r0, 0x0, r2, 0x0, 0x804, 0x8) 735.68883ms ago: executing program 1 (id=3048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, 0x0}) 643.896049ms ago: executing program 0 (id=3049): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x4028af11, &(0x7f0000000080)) 616.837176ms ago: executing program 3 (id=3050): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000000206050000000000000000000800000005000500000000000900020073797a3100000c5dff"], 0x4c}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2a2, @time}) 573.766252ms ago: executing program 0 (id=3051): bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002540)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900ff0f0000140001"], 0x48}}, 0x0) 528.131095ms ago: executing program 1 (id=3052): socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = io_uring_setup(0x381f, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000001680)={0x0, 0x4, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 460.953154ms ago: executing program 0 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file4/file7\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) 450.385968ms ago: executing program 1 (id=3054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 353.840836ms ago: executing program 1 (id=3055): unshare(0x4020400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) 314.651357ms ago: executing program 0 (id=3056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) 314.474129ms ago: executing program 3 (id=3057): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r0, &(0x7f0000001480)=""/4096, 0x1000) 225.190447ms ago: executing program 1 (id=3058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 171.007389ms ago: executing program 3 (id=3059): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x80000000, {0x0, 0x0, 0xfffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x800, 0x0, 0x8000005, 0x0, "b400080000deff00000000e61b00000100000400004e000000000000000040f7"}}) 170.421559ms ago: executing program 0 (id=3060): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000580)={[0x7]}, &(0x7f00000005c0), 0x8) 95.950428ms ago: executing program 3 (id=3061): r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 51.511551ms ago: executing program 1 (id=3062): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b00)="4423aa7e890632f0ccc2973cb4624058439d66079b9e097ff5fef743300e5c896d9298bdafda5c6b697b616d7253c294d3984bef7e35a0943e1992916d26d90babaa3214b97ae5e902156117178d471b545229f1809f9f02ac86ea2364bf653bf590b7951fb778db78219dd82b1fabd76749cca259e8d21416c61a4b4d5391d47b61dcd653b76f729e2c9f1c02cba2c5adf85ed98f4fb9a9a5dd4480815e98f51f7d", 0xc76e5a80554f2673}, {&(0x7f0000001bc0)="c390f7bd317408ac9174b74a060a3a828f8ac04398c42bf5232b17f54fabf4119e7e87f30ed2", 0x26}, {&(0x7f0000001d40)="61d79128540641552ca21d04565af38528ba775d5bb0d54a5ee27a0333964c8f4a420bd2f31c85cb792fca210f1a34173f1e7818064d163dd4a77b8ec70683dc91f7f4c2c0a4bea916918a0bfc5dda613a306a9efadd0835667b4206e4354d18df2ad563f35596983d4fb4915b527021f9f4266a74c05c7507165a07a4382c01a32e944d3fb4b8bde48f4a103f409069078404417d080110444f199bbd87502062afaa7af59c7191fa3f54486a3ebca6d5d2b4", 0xb3}], 0x3, &(0x7f0000001f40)=ANY=[@ANYBLOB="c0"], 0xc0}, 0x0) 0s ago: executing program 0 (id=3063): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000340)=0x5, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) kernel console output (not intermixed with test programs): 36 using dummy_hcd [ 339.803246][T12613] vxcan1: tx address claim with dest, not broadcast [ 339.825038][ T6150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.843976][ T6150] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 339.910906][ T6150] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.928732][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.937300][ T6150] usb 5-1: Product: syz [ 339.956630][ T6150] usb 5-1: Manufacturer: syz [ 339.961253][ T6150] usb 5-1: SerialNumber: syz [ 340.028801][ T63] team0 (unregistering): Port device team_slave_1 removed [ 340.108992][ T63] team0 (unregistering): Port device team_slave_0 removed [ 340.133709][ T4624] Bluetooth: hci0: command tx timeout [ 340.183354][T12620] raw_sendmsg: syz.0.2121 forgot to set AF_INET. Fix it! [ 340.784417][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.808828][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.826643][T12565] bridge_slave_0: entered allmulticast mode [ 340.843116][T12565] bridge_slave_0: entered promiscuous mode [ 340.892062][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.899454][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.922749][T12565] bridge_slave_1: entered allmulticast mode [ 340.930976][T12565] bridge_slave_1: entered promiscuous mode [ 341.009606][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.026358][ T6150] cdc_ncm 5-1:1.0: bind() failure [ 341.045097][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.077221][ T6150] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 341.088998][ T6150] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 341.118446][ T6150] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 341.145622][ T6150] usb 5-1: USB disconnect, device number 36 [ 341.180265][T12565] team0: Port device team_slave_0 added [ 341.203745][T12565] team0: Port device team_slave_1 added [ 341.292688][T12565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.299655][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.332695][T12565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.355514][T12565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.372170][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.451630][T12565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.494029][ T5240] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 341.529602][ T63] IPVS: stop unused estimator thread 0... [ 341.595738][T12565] hsr_slave_0: entered promiscuous mode [ 341.612899][T12565] hsr_slave_1: entered promiscuous mode [ 341.625106][T12565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.641629][T12565] Cannot create hsr debugfs directory [ 341.671775][ T5240] usb 2-1: Using ep0 maxpacket: 8 [ 341.688000][ T5240] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 341.720447][ T5240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.746066][ T5240] usb 2-1: Product: syz [ 341.750256][ T5240] usb 2-1: Manufacturer: syz [ 341.772021][ T5240] usb 2-1: SerialNumber: syz [ 341.788572][ T5240] usb 2-1: config 0 descriptor?? [ 341.809665][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 342.010815][ T5240] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 342.033609][ T5240] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 342.065119][ T5240] usb 2-1: USB disconnect, device number 31 [ 342.213102][ T4624] Bluetooth: hci0: command tx timeout [ 342.591720][ T25] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 342.615503][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 342.649385][T12565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.665682][T12565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.685595][T12565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.707776][T12565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.761682][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 342.769114][ T25] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 342.779410][ T25] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.788640][ T25] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.797780][ T25] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.806897][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.817750][ T25] usb 5-1: config 0 has no interface number 0 [ 342.831723][ T25] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 342.838907][T12565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.861646][ T25] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 342.869326][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.874299][ T25] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.888426][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.895563][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.898402][ T25] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.921269][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.928457][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.938080][ T5280] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 342.956562][ T25] usb 5-1: config 0 interface 125 has no altsetting 0 [ 342.983902][ T25] usb 5-1: config 0 interface 125 has no altsetting 2 [ 342.988194][T12565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.007049][ T25] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 343.015256][T12565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.028742][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.051685][ T25] usb 5-1: Product: syz [ 343.057764][ T25] usb 5-1: Manufacturer: syz [ 343.071711][ T25] usb 5-1: SerialNumber: syz [ 343.086209][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.092195][ T25] usb 5-1: config 0 descriptor?? [ 343.101658][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 343.115595][ T25] usb 5-1: selecting invalid altsetting 2 [ 343.119607][ T5280] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 343.148511][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.179976][ T5280] usb 2-1: Product: syz [ 343.188567][ T5280] usb 2-1: Manufacturer: syz [ 343.205865][T12565] veth0_vlan: entered promiscuous mode [ 343.218336][ T5280] usb 2-1: SerialNumber: syz [ 343.227539][ T5280] usb 2-1: config 0 descriptor?? [ 343.242749][T12565] veth1_vlan: entered promiscuous mode [ 343.296607][T12565] veth0_macvtap: entered promiscuous mode [ 343.327070][T12565] veth1_macvtap: entered promiscuous mode [ 343.378125][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.401707][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.416792][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.440997][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.460151][ T5280] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 343.481711][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.501616][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.521663][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.532644][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.553588][T12565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.584659][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.599291][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.609683][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.627842][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.645028][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.676888][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.690227][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.708754][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.720865][T12565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.748457][T12565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.757929][T12565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.767705][T12565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.777050][T12565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.887163][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.904069][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.930764][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.944300][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.176895][ T25] usb 5-1: USB disconnect, device number 37 [ 344.263973][ T5280] usb write operation failed. (-71) [ 344.279560][ T5280] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.292569][ T4624] Bluetooth: hci0: command tx timeout [ 344.299471][ T5280] dvbdev: DVB: registering new adapter (Terratec H7) [ 344.311205][ T5280] usb 2-1: media controller created [ 344.326156][ T5280] usb read operation failed. (-71) [ 344.341139][ T5280] usb write operation failed. (-71) [ 344.364267][ T5280] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 344.428325][ T5280] usb 2-1: USB disconnect, device number 32 [ 344.833574][ T5240] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 344.992384][ T5240] usb 3-1: Using ep0 maxpacket: 8 [ 345.006493][ T5240] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 345.033524][ T5240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.063758][ T5240] usb 3-1: config 0 descriptor?? [ 345.246527][ T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 345.402295][ T5279] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 345.442348][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.460956][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.466171][T12804] gretap0: entered promiscuous mode [ 345.484088][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.484518][T12804] macsec1: entered promiscuous mode [ 345.511740][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.513511][T12804] macsec1: entered allmulticast mode [ 345.520770][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.543463][ T25] usb 5-1: config 0 descriptor?? [ 345.548896][T12804] gretap0: entered allmulticast mode [ 345.563542][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.579793][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.580051][T12804] gretap0: left allmulticast mode [ 345.590250][ T5279] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 345.595703][T12804] gretap0: left promiscuous mode [ 345.641827][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.661093][ T5279] usb 2-1: config 0 descriptor?? [ 345.737340][T12808] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.789933][ T29] audit: type=1326 audit(1728621544.128:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7fc00000 [ 345.963375][ T25] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 346.006063][ T25] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 346.085935][ T5279] hid-steam 0003:28DE:1142.002A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 346.115687][ T5240] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 346.141769][ T5240] asix 3-1:0.0: probe with driver asix failed with error -71 [ 346.170902][ T5240] usb 3-1: USB disconnect, device number 31 [ 346.171684][ T5279] hid-steam 0003:28DE:1142.002A: Steam wireless receiver connected [ 346.213223][ T5279] hid-steam 0003:28DE:1142.002B: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 346.371867][ T4624] Bluetooth: hci0: command tx timeout [ 346.399427][ T5240] usb 2-1: USB disconnect, device number 33 [ 346.427002][ T5240] hid-steam 0003:28DE:1142.002A: Steam wireless receiver disconnected [ 347.037429][T12846] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 347.053133][T12846] netlink: 'syz.3.2177': attribute type 2 has an invalid length. [ 347.791964][ T5240] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 347.952381][ T5240] usb 3-1: Using ep0 maxpacket: 32 [ 347.962438][ T5240] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 347.978545][ T5240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.010288][ T5240] usb 3-1: Product: syz [ 348.027099][ T5240] usb 3-1: Manufacturer: syz [ 348.041606][ T5240] usb 3-1: SerialNumber: syz [ 348.054883][ T5240] usb 3-1: config 0 descriptor?? [ 348.241467][T12883] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 348.295307][T12885] netlink: 'syz.0.2193': attribute type 21 has an invalid length. [ 348.318973][T12885] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2193'. [ 348.331768][ T5283] usb 5-1: reset high-speed USB device number 38 using dummy_hcd [ 348.345422][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 348.482208][ T5240] airspy 3-1:0.0: Board ID: 00 [ 348.487026][ T5240] airspy 3-1:0.0: Firmware version: [ 348.521775][ T5283] usb 5-1: device firmware changed [ 348.529509][ T5279] usb 5-1: USB disconnect, device number 38 [ 348.679251][T12893] netlink: 'syz.1.2197': attribute type 3 has an invalid length. [ 348.692014][ T5279] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 348.858552][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.900332][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.920929][ T5279] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 348.930285][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.942560][ T5279] usb 5-1: config 0 descriptor?? [ 349.100832][ T5240] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 349.110309][ T5240] airspy 3-1:0.0: Registered as swradio16 [ 349.118856][ T5240] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 349.146485][ T5240] usb 3-1: USB disconnect, device number 32 [ 349.445430][ T5279] hid-steam 0003:28DE:1142.002C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 349.521685][ T5279] hid-steam 0003:28DE:1142.002C: Steam wireless receiver connected [ 349.555361][ T5279] hid-steam 0003:28DE:1142.002D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 349.731406][ T5279] usb 5-1: USB disconnect, device number 39 [ 349.750252][ T5279] hid-steam 0003:28DE:1142.002C: Steam wireless receiver disconnected [ 350.931831][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 351.104279][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.131706][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.141490][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.185424][T12969] tipc: Started in network mode [ 351.190490][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.200246][T12969] tipc: Node identity 1, cluster identity 4711 [ 351.209579][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.218733][T12969] tipc: Node number set to 1 [ 351.237011][ T25] usb 2-1: config 0 descriptor?? [ 351.581698][ T5231] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 351.629502][T12986] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 351.675549][ T25] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max [ 351.690622][ T25] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 351.711279][ T25] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 351.762749][ T5231] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 351.786460][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.801425][ T5231] usb 3-1: config 0 descriptor?? [ 351.868955][T12995] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.2241'. [ 351.884988][T12995] openvswitch: netlink: IP tunnel dst address not specified [ 351.973860][ T5240] usb 2-1: USB disconnect, device number 34 [ 352.223943][ T5231] hackrf 3-1:0.0: Board ID: 00 [ 352.229913][ T5231] hackrf 3-1:0.0: Firmware version: [ 352.245024][ T5231] hackrf 3-1:0.0: Registered as swradio16 [ 352.273305][ T5231] hackrf 3-1:0.0: Registered as swradio17 [ 352.279976][ T5231] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 352.444194][ T25] usb 3-1: USB disconnect, device number 33 [ 352.615042][T13020] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 353.745560][ T5279] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 353.903336][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.919197][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.930096][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.944267][ T5279] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.953799][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.965854][ T5279] usb 2-1: config 0 descriptor?? [ 354.420588][ T5279] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 354.444420][ T5279] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 354.474078][ T5279] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 354.708510][ T5935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.733702][ T5279] usb 2-1: USB disconnect, device number 35 [ 354.883655][ T5935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.921616][T13092] netlink: 'syz.2.2283': attribute type 21 has an invalid length. [ 354.929486][T13092] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2283'. [ 354.961616][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 355.009828][ T5935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.091367][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.102856][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.110692][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.120148][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.127767][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 355.138313][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.223653][ T5935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.276000][T13102] input: syz1 as /devices/virtual/input/input44 [ 355.474126][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 355.834475][ T5935] bridge_slave_1: left allmulticast mode [ 355.845680][ T5935] bridge_slave_1: left promiscuous mode [ 355.855178][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.887126][ T5935] bridge_slave_0: left allmulticast mode [ 355.909955][ T5935] bridge_slave_0: left promiscuous mode [ 355.917037][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.538606][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.558399][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.576887][ T5935] bond0 (unregistering): Released all slaves [ 356.738985][T13100] chnl_net:caif_netlink_parms(): no params data found [ 356.765515][ T5935] tipc: Left network mode [ 356.960255][T13122] syz.2.2296 (13122) used greatest stack depth: 18144 bytes left [ 357.171713][ T5236] Bluetooth: hci1: command tx timeout [ 357.338795][T13100] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.348684][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.362616][T13100] bridge_slave_0: entered allmulticast mode [ 357.369670][T13100] bridge_slave_0: entered promiscuous mode [ 357.511750][T13100] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.526197][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.557541][T13100] bridge_slave_1: entered allmulticast mode [ 357.570882][T13100] bridge_slave_1: entered promiscuous mode [ 357.851758][ T5935] hsr_slave_0: left promiscuous mode [ 357.860189][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 357.869808][ T5935] hsr_slave_1: left promiscuous mode [ 357.878235][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.879534][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 357.904157][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.922376][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.938712][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.993582][ T5935] veth1_macvtap: left promiscuous mode [ 358.020607][ T5935] veth0_macvtap: left promiscuous mode [ 358.034340][ T5935] veth1_vlan: left promiscuous mode [ 358.045406][ T5935] veth0_vlan: left promiscuous mode [ 358.597933][ T5935] team0 (unregistering): Port device team_slave_1 removed [ 358.701275][ T5935] team0 (unregistering): Port device team_slave_0 removed [ 359.232938][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.251738][ T5236] Bluetooth: hci1: command tx timeout [ 359.370857][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.488103][T13100] team0: Port device team_slave_0 added [ 359.508335][T13100] team0: Port device team_slave_1 added [ 359.734311][T13207] vlan2: entered promiscuous mode [ 359.741660][T13207] vlan2: entered allmulticast mode [ 359.773445][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.780425][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.806508][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.821780][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.828759][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.854722][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.949525][T13100] hsr_slave_0: entered promiscuous mode [ 359.956802][T13100] hsr_slave_1: entered promiscuous mode [ 359.993816][T13100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.001406][T13100] Cannot create hsr debugfs directory [ 360.949344][T13100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.959832][T13100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.978397][T13100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.995175][T13100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.143751][T13100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.175949][T13100] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.193075][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.200187][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.230360][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.237503][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.280761][T13100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.329102][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.336303][ T5236] Bluetooth: hci1: command tx timeout [ 361.427468][T13100] veth0_vlan: entered promiscuous mode [ 361.449274][T13100] veth1_vlan: entered promiscuous mode [ 361.505009][T13100] veth0_macvtap: entered promiscuous mode [ 361.530169][T13100] veth1_macvtap: entered promiscuous mode [ 361.586464][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.600925][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.613905][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.628567][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.646140][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.658014][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.668448][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.685873][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.700682][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.725209][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.746578][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.760018][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.776989][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.801752][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.833466][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.861616][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.880591][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.905628][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.966421][T13100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.976185][T13100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.985970][T13100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.995868][T13100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.109183][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.138116][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.185657][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.202869][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.455924][T13310] netlink: 'syz.3.2343': attribute type 9 has an invalid length. [ 362.502625][T13310] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.2343'. [ 362.567753][ T4624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.578742][ T4624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.587049][ T4624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.595313][ T4624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.603805][ T4624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.613229][ T4624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.908228][T13316] chnl_net:caif_netlink_parms(): no params data found [ 362.981998][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 363.035041][T13316] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.043566][T13316] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.050807][T13316] bridge_slave_0: entered allmulticast mode [ 363.061311][T13316] bridge_slave_0: entered promiscuous mode [ 363.074332][T13316] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.081798][T13316] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.089714][T13316] bridge_slave_1: entered allmulticast mode [ 363.096508][T13316] bridge_slave_1: entered promiscuous mode [ 363.122514][T13316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.136894][T13316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.157401][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 363.167050][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.187554][ T8] usb 4-1: config 0 descriptor?? [ 363.196062][T13316] team0: Port device team_slave_0 added [ 363.211083][T13316] team0: Port device team_slave_1 added [ 363.249046][T13316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.256531][T13316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.285967][T13316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.301075][T13316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.310883][T13316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.311996][ T5231] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 363.336760][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.353050][T13316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.393521][T13316] hsr_slave_0: entered promiscuous mode [ 363.399877][T13316] hsr_slave_1: entered promiscuous mode [ 363.406629][T13316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.414985][ T4624] Bluetooth: hci1: command tx timeout [ 363.423546][T13316] Cannot create hsr debugfs directory [ 363.513913][ T5231] usb 5-1: Using ep0 maxpacket: 32 [ 363.534844][ T5231] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 363.535042][T13316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.551230][ T5231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.568442][ T5231] usb 5-1: Product: syz [ 363.577849][ T5231] usb 5-1: Manufacturer: syz [ 363.586878][ T5231] usb 5-1: SerialNumber: syz [ 363.593366][ T5231] usb 5-1: config 0 descriptor?? [ 363.609584][ T8] hackrf 4-1:0.0: Board ID: 00 [ 363.616630][ T8] hackrf 4-1:0.0: Firmware version: [ 363.633027][ T8] hackrf 4-1:0.0: Registered as swradio16 [ 363.640153][ T8] hackrf 4-1:0.0: Registered as swradio17 [ 363.649482][ T8] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 363.659574][T13316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.844937][ T25] usb 4-1: USB disconnect, device number 30 [ 363.852652][T13316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.945702][T13316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.069469][ T5231] airspy 5-1:0.0: Board ID: 00 [ 364.077413][ T5231] airspy 5-1:0.0: Firmware version: [ 364.150822][T13316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.179792][T13316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.208822][T13316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.236747][T13316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.360169][T13316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.437294][T13316] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.474031][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.481207][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.497226][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.504395][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.514519][T13352] tipc: Started in network mode [ 364.541887][T13352] tipc: Node identity ac1414aa, cluster identity 4711 [ 364.549311][T13352] tipc: Enabled bearer , priority 10 [ 364.577255][T13356] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 364.691985][ T4624] Bluetooth: hci4: command tx timeout [ 364.703080][ T5231] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 364.732127][T13316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.742145][ T5231] airspy 5-1:0.0: Registered as swradio16 [ 364.747928][ T5231] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 364.765641][T13316] veth0_vlan: entered promiscuous mode [ 364.801385][T13316] veth1_vlan: entered promiscuous mode [ 364.840095][ T5231] usb 5-1: USB disconnect, device number 40 [ 364.851909][T13316] veth0_macvtap: entered promiscuous mode [ 364.884066][T13316] veth1_macvtap: entered promiscuous mode [ 364.937942][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.979652][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.994020][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.008952][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.019043][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.029821][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.039752][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.050263][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.060178][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.070649][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.082127][T13316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.133975][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.144514][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.154397][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.164902][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.174921][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.185532][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.195713][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.211774][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.221830][T13316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.232501][T13316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.244807][T13316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.256418][T13316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.265210][T13316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.273969][T13316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.282749][T13316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.435105][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.468037][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.510427][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.519721][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.663064][ T5283] tipc: Node number set to 2886997162 [ 366.433163][ T5283] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 366.649886][ T5283] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 366.660002][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.672808][ T5283] usb 5-1: config 0 descriptor?? [ 366.774036][ T4624] Bluetooth: hci4: command tx timeout [ 367.001749][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 367.099641][ T5283] hackrf 5-1:0.0: Board ID: 00 [ 367.111784][ T5283] hackrf 5-1:0.0: Firmware version: [ 367.127336][ T5283] hackrf 5-1:0.0: Registered as swradio16 [ 367.145936][ T5283] hackrf 5-1:0.0: Registered as swradio17 [ 367.158640][ T5283] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 367.172912][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 367.215748][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.237033][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 367.270485][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 367.290365][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.316013][ T25] usb 2-1: config 0 descriptor?? [ 367.341691][ T5240] usb 5-1: USB disconnect, device number 41 [ 367.554852][T13441] netlink: 'syz.3.2392': attribute type 29 has an invalid length. [ 367.753045][ T25] microsoft 0003:045E:07DA.0030: ignoring exceeding usage max [ 367.780874][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0030/input/input45 [ 367.867946][ T25] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 368.004328][T13455] pim6reg: entered allmulticast mode [ 368.048506][T13455] pim6reg: left allmulticast mode [ 368.095756][ T25] usb 2-1: USB disconnect, device number 36 [ 368.335765][T13471] tipc: Started in network mode [ 368.340671][T13471] tipc: Node identity 7f000001, cluster identity 4711 [ 368.348434][T13471] tipc: Enabled bearer , priority 10 [ 368.521719][ T5279] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 368.674151][ T5279] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.687767][T13489] loop2: detected capacity change from 0 to 7 [ 368.694516][ T5279] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 368.701707][ T5240] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 368.705377][T13489] Dev loop2: unable to read RDB block 7 [ 368.717976][ T5279] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.731490][T13489] loop2: unable to read partition table [ 368.737613][T13489] loop2: partition table beyond EOD, truncated [ 368.744481][T13489] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 368.755477][ T5279] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 368.764886][T13493] netlink: 'syz.3.2418': attribute type 34 has an invalid length. [ 368.766159][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.794146][ T5279] usb 5-1: Product: syz [ 368.805198][ T5279] usb 5-1: Manufacturer: syz [ 368.821874][ T5279] usb 5-1: SerialNumber: syz [ 368.852452][ T4624] Bluetooth: hci4: command tx timeout [ 368.863155][ T5240] usb 3-1: Using ep0 maxpacket: 8 [ 368.901843][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.939210][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.964498][ T5240] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 368.980906][ T5240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.999953][ T5240] usb 3-1: config 0 descriptor?? [ 369.071418][ T5279] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 369.299250][ T5280] usb 5-1: USB disconnect, device number 42 [ 369.442762][ T5240] lenovo 0003:17EF:60EE.0031: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 369.462638][ T25] tipc: Node number set to 2130706433 [ 369.515066][T13466] usblp0: removed [ 369.638558][ T5280] usb 3-1: USB disconnect, device number 34 [ 369.652288][ T5279] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 369.811961][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 369.818687][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.831081][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.847973][ T5279] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 369.871792][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.882128][ T5279] usb 4-1: config 0 descriptor?? [ 370.323371][ T5279] ft260 0003:0403:6030.0032: unknown main item tag 0x0 [ 370.512143][ T5279] ft260 0003:0403:6030.0032: chip code: 0000 0000 [ 370.572689][T13542] vivid-001: disconnect [ 370.594353][T13541] vivid-001: reconnect [ 370.721801][ T5279] ft260 0003:0403:6030.0032: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 370.767240][T13546] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.777022][T13546] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.786248][T13546] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.795267][T13546] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.913574][ T5279] ft260 0003:0403:6030.0032: failed to retrieve status: -71, no wakeup [ 370.932459][ T4624] Bluetooth: hci4: command tx timeout [ 370.954826][ T5279] ft260 0003:0403:6030.0032: failed to retrieve status: -71 [ 370.971810][ T5279] ft260 0003:0403:6030.0032: failed to reset I2C controller: -71 [ 371.014855][ T5279] usb 4-1: USB disconnect, device number 31 [ 371.101236][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.214520][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.441152][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.463771][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.482516][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.502285][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.516223][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 371.523741][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.542403][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.724411][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.185285][ T63] bridge_slave_1: left allmulticast mode [ 372.191780][ T63] bridge_slave_1: left promiscuous mode [ 372.198535][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.214394][ T63] bridge_slave_0: left allmulticast mode [ 372.221378][ T63] bridge_slave_0: left promiscuous mode [ 372.227244][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.286731][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.322013][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.350166][ T63] bond0 (unregistering): Released all slaves [ 373.385939][T13617] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 373.393980][T13617] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2463'. [ 373.411127][T13610] tipc: Enabled bearer , priority 10 [ 373.651805][ T4624] Bluetooth: hci1: command tx timeout [ 373.797780][T13568] chnl_net:caif_netlink_parms(): no params data found [ 373.822544][ T46] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 373.882213][T13625] netlink: 'syz.0.2467': attribute type 1 has an invalid length. [ 373.906956][T13625] netlink: 'syz.0.2467': attribute type 2 has an invalid length. [ 373.983237][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 374.013886][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.037430][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.051892][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.062092][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.075508][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.084821][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.179263][T13649] loop4: detected capacity change from 0 to 7 [ 374.223679][T13649] Dev loop4: unable to read RDB block 7 [ 374.229490][T13649] loop4: unable to read partition table [ 374.235405][T13649] loop4: partition table beyond EOD, truncated [ 374.269225][T13649] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑàM– ) failed (rc=-5) [ 374.313704][ T46] usb 3-1: GET_CAPABILITIES returned 0 [ 374.319215][ T46] usbtmc 3-1:16.0: can't read capabilities [ 374.504566][ T63] hsr_slave_0: left promiscuous mode [ 374.519374][ T46] usb 3-1: USB disconnect, device number 35 [ 374.548441][ T63] hsr_slave_1: left promiscuous mode [ 374.556750][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.574092][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.582017][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.589514][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.610024][ T63] veth1_macvtap: left promiscuous mode [ 374.615650][ T63] veth0_macvtap: left promiscuous mode [ 374.621220][ T63] veth1_vlan: left promiscuous mode [ 374.641716][ T63] veth0_vlan: left promiscuous mode [ 375.092351][ T63] team0 (unregistering): Port device team_slave_1 removed [ 375.160209][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 375.172280][ T63] team0 (unregistering): Port device team_slave_0 removed [ 375.670422][T13671] tipc: Enabling of bearer rejected, already enabled [ 375.731319][T13568] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.739962][ T4624] Bluetooth: hci1: command tx timeout [ 375.772078][T13568] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.779257][T13568] bridge_slave_0: entered allmulticast mode [ 375.787288][T13568] bridge_slave_0: entered promiscuous mode [ 375.822741][T13568] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.839116][T13568] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.846379][T13568] bridge_slave_1: entered allmulticast mode [ 375.853385][T13568] bridge_slave_1: entered promiscuous mode [ 375.971158][T13568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.045750][T13568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.242967][T13568] team0: Port device team_slave_0 added [ 376.274134][T13568] team0: Port device team_slave_1 added [ 376.436047][T13568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.452058][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.478370][T13568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.494384][T13568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.501657][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.527611][T13568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.650623][T13568] hsr_slave_0: entered promiscuous mode [ 376.657970][T13568] hsr_slave_1: entered promiscuous mode [ 376.671015][T13568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.679420][T13568] Cannot create hsr debugfs directory [ 376.712292][T13714] dvmrp1: entered allmulticast mode [ 377.141874][ T5279] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 377.203268][T13738] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 377.213244][T13738] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2497'. [ 377.302254][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 377.325297][ T5279] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 377.339275][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.369792][T13744] netlink: 'syz.2.2498': attribute type 3 has an invalid length. [ 377.371846][ T5279] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.391764][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 377.403064][ T5279] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.431654][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.449969][ T5279] usb 2-1: Product: syz [ 377.457700][ T5279] usb 2-1: Manufacturer: syz [ 377.463723][ T5279] usb 2-1: SerialNumber: syz [ 377.811810][ T4624] Bluetooth: hci1: command tx timeout [ 377.951412][T13568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.969306][ T5279] usb 2-1: 0:2 : does not exist [ 377.981093][T13568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.998806][T13568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.008759][T13568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.153664][T13568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.200807][T13568] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.240172][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.247369][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.316671][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.323843][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.477197][T13568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.570244][T13568] veth0_vlan: entered promiscuous mode [ 378.602228][ T5279] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 378.609451][T13568] veth1_vlan: entered promiscuous mode [ 378.658656][ T5279] usb 2-1: USB disconnect, device number 37 [ 378.702060][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.708462][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.731832][ T5228] udevd[5228]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.782940][T13568] veth0_macvtap: entered promiscuous mode [ 378.815573][T13568] veth1_macvtap: entered promiscuous mode [ 378.861373][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.931731][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.969629][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.001457][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.021962][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.061117][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.091736][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.121676][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.131505][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.191663][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.213305][T13568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.274447][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.337442][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.361655][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.398062][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.441678][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.473902][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.500447][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.534935][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.568917][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.591708][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.631950][T13568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.706348][T13568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.715516][T13568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.733119][T13568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.752341][T13568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.892845][ T5236] Bluetooth: hci1: command tx timeout [ 380.001805][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.038403][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.101341][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.148461][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.772058][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 382.443003][ T5240] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 382.454433][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.464000][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.473334][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.481307][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.489318][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 382.498355][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.672675][ T5240] usb 2-1: Using ep0 maxpacket: 32 [ 382.715994][ T5240] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 382.753098][ T5240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.936106][ T5240] usb 2-1: config 0 descriptor?? [ 382.954619][ T5240] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 383.384832][T13832] chnl_net:caif_netlink_parms(): no params data found [ 383.957626][ T5240] gspca_nw80x: reg_w err -71 [ 383.962509][ T5240] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 384.023187][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.030307][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.051919][ T5240] usb 2-1: USB disconnect, device number 38 [ 384.163783][T13832] bridge_slave_0: entered allmulticast mode [ 384.182879][T13832] bridge_slave_0: entered promiscuous mode [ 384.213121][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.271795][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.279040][T13832] bridge_slave_1: entered allmulticast mode [ 384.316590][T13832] bridge_slave_1: entered promiscuous mode [ 384.457248][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.504705][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.553157][ T5236] Bluetooth: hci2: command tx timeout [ 384.989432][T13832] team0: Port device team_slave_0 added [ 385.035325][T13832] team0: Port device team_slave_1 added [ 385.081926][ T5231] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 385.243858][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.250837][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.287198][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.301822][ T5231] usb 2-1: Using ep0 maxpacket: 8 [ 385.319529][ T5231] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 385.333745][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.340701][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.365909][ T5231] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.401780][ T5231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.415797][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.423621][ T5231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.451744][ T5231] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.481794][ T5231] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.501931][ T5231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.656635][T13832] hsr_slave_0: entered promiscuous mode [ 385.683805][T13832] hsr_slave_1: entered promiscuous mode [ 385.720012][T13832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.768235][T13832] Cannot create hsr debugfs directory [ 386.337710][T13832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.368418][T13832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.621739][ T5236] Bluetooth: hci2: command tx timeout [ 386.964422][T13832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.993275][T13832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.084294][T13832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.103396][ T5231] usb 2-1: usb_control_msg returned -32 [ 387.109097][ T5231] usbtmc 2-1:16.0: can't read capabilities [ 387.131643][T13832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.245309][T13832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.272890][T13832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.459716][T13832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.489557][T13832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.524568][T13832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.544040][T13904] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 387.566102][T13832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.776211][ T5240] usb 2-1: USB disconnect, device number 39 [ 387.932935][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.005762][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.042975][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2530'. [ 388.065969][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.073152][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.181168][T13832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.225275][T13832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.250127][ T4624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.263378][ T4624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.271230][ T4624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.289310][ T4624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.297478][ T4624] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.303954][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.305237][ T4624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.311516][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.540708][T13928] binder: 13925:13928 ioctl c0306201 20000040 returned -14 [ 388.692434][ T5236] Bluetooth: hci2: command tx timeout [ 388.746236][T13933] netlink: 392 bytes leftover after parsing attributes in process `syz.2.2538'. [ 388.791502][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.893237][T13832] veth0_vlan: entered promiscuous mode [ 388.910465][T13832] veth1_vlan: entered promiscuous mode [ 388.938526][T13832] veth0_macvtap: entered promiscuous mode [ 389.063229][T13832] veth1_macvtap: entered promiscuous mode [ 389.094785][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.105327][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.115193][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.125827][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.135668][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.146121][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.155949][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.166489][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.176378][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.186875][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.197040][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.207790][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.218964][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.228363][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.239091][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.249119][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.260026][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.270172][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.280729][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.290581][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.301312][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.311400][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.321914][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.331825][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.342288][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.353436][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.453827][T13832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.462614][T13832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.471320][T13832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.484827][T13832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.684083][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.707634][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.766976][T13923] chnl_net:caif_netlink_parms(): no params data found [ 389.840133][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.887309][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.945589][ T1053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.241017][T13976] loop7: detected capacity change from 0 to 2 [ 390.317726][T13976] Dev loop7: unable to read RDB block 2 [ 390.338612][T13976] loop7: unable to read partition table [ 390.352390][ T1053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.373298][ T5236] Bluetooth: hci5: command tx timeout [ 390.380033][T13976] loop7: partition table beyond EOD, truncated [ 390.396797][T13976] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480• #Ð …$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]z) failed (rc=-5) [ 390.665197][ T1053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.771744][ T5236] Bluetooth: hci2: command tx timeout [ 390.809902][ T29] audit: type=1326 audit(1728621589.158:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14001 comm="syz.1.2561" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 390.929211][ T1053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.960410][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.968613][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.975914][T13923] bridge_slave_0: entered allmulticast mode [ 391.000938][T13923] bridge_slave_0: entered promiscuous mode [ 391.009055][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.016366][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.023730][T13923] bridge_slave_1: entered allmulticast mode [ 391.030671][T13923] bridge_slave_1: entered promiscuous mode [ 391.074736][T14011] team_slave_0: entered promiscuous mode [ 391.080448][T14011] team_slave_1: entered promiscuous mode [ 391.086506][T14011] macvlan2: entered promiscuous mode [ 391.092768][T14011] team0: entered promiscuous mode [ 391.098135][T14011] macvlan2: entered allmulticast mode [ 391.103851][ T46] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 391.117826][T14011] team0: entered allmulticast mode [ 391.123106][T14011] team_slave_0: entered allmulticast mode [ 391.128865][T14011] team_slave_1: entered allmulticast mode [ 391.139729][T14011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.148715][T14011] team0: left allmulticast mode [ 391.153840][T14011] team_slave_0: left allmulticast mode [ 391.159398][T14011] team_slave_1: left allmulticast mode [ 391.164952][T14011] team0: left promiscuous mode [ 391.170058][T14011] team_slave_0: left promiscuous mode [ 391.175513][T14011] team_slave_1: left promiscuous mode [ 391.204150][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.217164][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.268482][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 391.282161][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 391.302048][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 391.311181][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.323061][ T46] usb 3-1: config 0 descriptor?? [ 391.335973][ T46] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 391.398706][T13923] team0: Port device team_slave_0 added [ 391.461173][T13923] team0: Port device team_slave_1 added [ 391.620393][ T1053] bridge_slave_1: left allmulticast mode [ 391.629559][ T4671] bcm5974 3-1:0.0: could not read from device [ 391.641811][ T1053] bridge_slave_1: left promiscuous mode [ 391.647528][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.680602][T14004] bcm5974 3-1:0.0: could not read from device [ 391.700372][ T1053] bridge_slave_0: left allmulticast mode [ 391.707706][ T1053] bridge_slave_0: left promiscuous mode [ 391.714070][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.727458][ T4671] bcm5974 3-1:0.0: could not read from device [ 391.732181][ T46] usb 3-1: USB disconnect, device number 36 [ 392.152011][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.168219][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.179886][ T1053] bond0 (unregistering): Released all slaves [ 392.190160][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.197921][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.227630][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.289212][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.297303][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.343356][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.383678][ T1053] tipc: Disabling bearer [ 392.400230][ T1053] tipc: Left network mode [ 392.451629][ T5236] Bluetooth: hci5: command tx timeout [ 392.665124][T13923] hsr_slave_0: entered promiscuous mode [ 392.704677][T13923] hsr_slave_1: entered promiscuous mode [ 392.733582][T13923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.755118][T13923] Cannot create hsr debugfs directory [ 392.904121][T14041] veth1_macvtap: left promiscuous mode [ 392.912970][T14041] macsec0: entered allmulticast mode [ 392.928749][T14041] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 393.564226][ T1053] hsr_slave_0: left promiscuous mode [ 393.570243][ T1053] hsr_slave_1: left promiscuous mode [ 393.590432][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.609834][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.637498][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.661318][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.748073][ T1053] veth1_macvtap: left promiscuous mode [ 393.759400][ T1053] veth0_macvtap: left promiscuous mode [ 393.769186][ T1053] veth1_vlan: left promiscuous mode [ 393.780745][ T1053] veth0_vlan: left promiscuous mode [ 394.538446][ T5236] Bluetooth: hci5: command tx timeout [ 394.758253][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 394.837208][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 394.940933][ T29] audit: type=1326 audit(1728621593.288:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.4.2590" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x0 [ 395.341672][T14098] netlink: 'syz.2.2588': attribute type 4 has an invalid length. [ 395.547428][T14110] syzkaller1: entered promiscuous mode [ 395.576245][T14110] syzkaller1: entered allmulticast mode [ 396.612387][ T5236] Bluetooth: hci5: command tx timeout [ 396.663900][T13923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.724090][T13923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.758411][T13923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.816583][T13923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.102869][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.121812][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 397.146485][ T5231] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 397.170855][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.223329][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.230505][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.277640][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.284842][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.322289][ T5231] usb 3-1: Using ep0 maxpacket: 16 [ 397.341230][ T5231] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 397.380788][ T5231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.425034][ T5231] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.447488][T13923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.508776][T13923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.521653][ T5231] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.530742][ T5231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.554172][ T5231] usb 3-1: Product: syz [ 397.558359][ T5231] usb 3-1: Manufacturer: syz [ 397.572231][ T5231] usb 3-1: SerialNumber: syz [ 397.693319][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.821239][T13923] veth0_vlan: entered promiscuous mode [ 397.858199][T13923] veth1_vlan: entered promiscuous mode [ 397.896326][T13923] veth0_macvtap: entered promiscuous mode [ 397.919331][T13923] veth1_macvtap: entered promiscuous mode [ 397.953531][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.965289][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.976273][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.989798][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.001016][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.013834][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.030046][ T5231] usb 3-1: 0:2 : does not exist [ 398.035584][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.051582][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.061421][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.073055][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.083186][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.096677][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.110505][T13923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.136926][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.156161][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.170756][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.187152][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.202226][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.229927][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.242708][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.261833][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.280670][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.291493][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.309726][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.332215][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.352371][T13923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.375617][T13923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.394396][T13923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.409909][T13923] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.419631][T13923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.530675][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.547994][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.598238][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.612200][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.653649][ T5231] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 398.885143][ T5231] usb 3-1: USB disconnect, device number 37 [ 399.624315][T14235] ip6gretap0: entered promiscuous mode [ 399.638878][T14235] batadv_slave_1: entered promiscuous mode [ 400.202088][T14264] netlink: 'syz.4.2627': attribute type 11 has an invalid length. [ 400.492828][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 400.620894][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'. [ 400.627414][T14278] netlink: 'syz.4.2631': attribute type 3 has an invalid length. [ 401.555414][T14321] veth1_macvtap: left promiscuous mode [ 401.561159][T14321] macsec0: entered allmulticast mode [ 401.575860][T14321] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 402.021751][ T5240] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 402.191859][ T5240] usb 4-1: Using ep0 maxpacket: 16 [ 402.200890][ T5240] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 402.218962][ T5240] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 402.228876][ T5240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.241428][ T5240] usb 4-1: config 0 descriptor?? [ 402.258900][ T5240] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 402.271629][ T5278] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 402.423880][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 402.447935][ T5278] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 402.470887][ T5278] usb 5-1: config 0 has no interface number 0 [ 402.482622][ T5278] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 402.509122][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.518809][ T5278] usb 5-1: Product: syz [ 402.523267][ T5278] usb 5-1: Manufacturer: syz [ 402.527915][ T5278] usb 5-1: SerialNumber: syz [ 402.535639][ T5278] usb 5-1: config 0 descriptor?? [ 402.553483][ T5278] smsc95xx v2.0.0 [ 402.563845][ T5240] usb 4-1: USB disconnect, device number 32 [ 402.571048][ T4671] bcm5974 4-1:0.0: could not read from device [ 402.597069][ T8774] bcm5974 4-1:0.0: could not read from device [ 402.871785][T14364] loop2: detected capacity change from 0 to 7 [ 402.880399][T14364] Dev loop2: unable to read RDB block 7 [ 402.898446][T14364] loop2: unable to read partition table [ 402.909500][T14364] loop2: partition table beyond EOD, truncated [ 402.916310][T14364] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 403.263638][T14371] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 403.270516][T14371] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 403.280053][T14373] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 403.561269][ T5278] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 403.572479][ T5278] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 403.584891][ T5278] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 403.598198][ T5278] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 403.601751][ T5279] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 403.621132][ T5278] usb 5-1: USB disconnect, device number 44 [ 403.764228][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.783932][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.804963][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 403.819888][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.833655][ T5279] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.843643][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.857075][ T5279] usb 4-1: config 0 descriptor?? [ 403.981773][T14397] fuse: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 404.287421][ T5279] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 404.422397][ T5279] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 404.430349][ T5279] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 404.442336][ T5279] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 404.481849][ T5278] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 404.673497][ T5279] usb 4-1: USB disconnect, device number 33 [ 404.680161][ T5278] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.712791][ T5278] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 404.735636][ T5278] usb 5-1: config 1 has no interface number 0 [ 404.750797][ T5278] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.788756][ T5278] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 404.812389][ T5278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.834128][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.846253][T14412] syzkaller1: entered promiscuous mode [ 404.852964][ T5278] usb 5-1: Product: syz [ 404.857450][ T5278] usb 5-1: Manufacturer: syz [ 404.881614][ T5278] usb 5-1: SerialNumber: syz [ 404.881652][T14412] syzkaller1: entered allmulticast mode [ 405.379978][T14424] vlan2: entered promiscuous mode [ 405.400569][T14424] vlan2: entered allmulticast mode [ 405.406370][T14424] vlan0: entered allmulticast mode [ 405.412360][T14424] veth0_vlan: entered allmulticast mode [ 405.418217][T14424] vlan0: entered promiscuous mode [ 405.429087][T14424] team0: Port device vlan2 added [ 405.709863][ T5278] cdc_ncm 5-1:1.1: bind() failure [ 405.962545][ T5278] usb 5-1: USB disconnect, device number 45 [ 406.805613][T14468] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 407.157618][T14479] trusted_key: syz.4.2714 sent an empty control message without MSG_MORE. [ 407.309747][T14483] netlink: 'syz.3.2716': attribute type 2 has an invalid length. [ 407.358985][ T29] audit: type=1326 audit(1728621605.708:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2718" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x0 [ 407.381082][T14483] netlink: 'syz.3.2716': attribute type 8 has an invalid length. [ 407.421653][T14483] netlink: 'syz.3.2716': attribute type 1 has an invalid length. [ 407.439508][T14483] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2716'. [ 408.118032][ T5240] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 408.284702][ T5240] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.316700][ T5240] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.361376][ T5240] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.380715][ T5240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.399054][ T5240] usb 3-1: Product: syz [ 408.409178][ T5240] usb 3-1: Manufacturer: syz [ 408.422386][T14521] CUSE: unknown device info "âN0­ý" [ 408.427554][ T5240] usb 3-1: SerialNumber: syz [ 408.427678][T14521] CUSE: DEVNAME unspecified [ 408.612256][T14525] dummy0: entered promiscuous mode [ 408.626680][T14525] dummy0: left promiscuous mode [ 409.255079][ T5240] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 409.261446][ T5240] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 409.289841][ T5240] cdc_ncm 3-1:1.0: bind() failure [ 409.297269][ T5240] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 409.304520][ T5240] cdc_ncm 3-1:1.1: bind() failure [ 409.312817][ T5240] usb 3-1: USB disconnect, device number 38 [ 409.515167][T14542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2739'. [ 409.942365][T14558] sctp: [Deprecated]: syz.4.2746 (pid 14558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.942365][T14558] Use struct sctp_sack_info instead [ 410.141942][ T8] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 410.323199][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 410.341177][ T8] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 410.358241][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.366393][ T8] usb 3-1: Product: syz [ 410.370632][ T8] usb 3-1: Manufacturer: syz [ 410.381649][ T8] usb 3-1: SerialNumber: syz [ 410.393125][ T8] usb 3-1: config 0 descriptor?? [ 410.413888][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 410.501759][ T5240] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 410.667709][ T5240] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 410.689236][ T5240] usb 5-1: config 1 has no interface number 0 [ 410.718668][ T5240] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.737959][ T8] gspca_ov534_9: reg_w failed -71 [ 410.744506][ T5240] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 410.760433][ T5240] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 206 [ 410.782347][ T5240] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.791717][ T5240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.799730][ T5240] usb 5-1: Product: syz [ 410.805188][ T5240] usb 5-1: Manufacturer: syz [ 410.809808][ T5240] usb 5-1: SerialNumber: syz [ 411.034062][T14575] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 411.215316][ T8] gspca_ov534_9: Unknown sensor 0000 [ 411.215394][ T8] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 411.283060][ T8] usb 3-1: USB disconnect, device number 39 [ 411.448635][T14587] bridge0: port 3(erspan0) entered blocking state [ 411.482262][T14587] bridge0: port 3(erspan0) entered disabled state [ 411.488890][T14587] erspan0: entered allmulticast mode [ 411.505447][T14587] erspan0: entered promiscuous mode [ 411.531203][T14587] bridge0: port 3(erspan0) entered blocking state [ 411.537773][T14587] bridge0: port 3(erspan0) entered forwarding state [ 411.589045][T14596] loop0: detected capacity change from 0 to 2 [ 411.692040][T14575] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 411.702542][ T5240] cdc_ncm 5-1:1.1: bind() failure [ 411.947184][ T5278] usb 5-1: USB disconnect, device number 46 [ 412.131771][ T5240] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 412.307378][ T5240] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.325677][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.340881][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 412.363959][ T5240] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.384591][ T5240] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.398294][ T5240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.417506][ T5240] usb 3-1: config 0 descriptor?? [ 412.829758][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 412.851221][T14636] macvtap0: entered promiscuous mode [ 412.857142][ T5240] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 412.861460][T14636] macvtap0: left promiscuous mode [ 412.873482][ T5240] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 412.885375][ T5240] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 412.908258][ T5240] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 412.991742][ T8] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 413.147869][ T940] usb 3-1: USB disconnect, device number 40 [ 413.170460][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 413.193169][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.215420][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.227544][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.236848][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.251111][ T8] usb 2-1: config 0 descriptor?? [ 413.266089][ T8] hub 2-1:0.0: USB hub found [ 413.484591][ T8] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 413.700016][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 413.732240][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 413.763323][ T8] usb 2-1: USB disconnect, device number 40 [ 413.838090][ T29] audit: type=1326 audit(1728621612.188:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.4.2794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 413.870090][ T29] audit: type=1326 audit(1728621612.208:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.4.2794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 413.892429][ T29] audit: type=1326 audit(1728621612.208:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.4.2794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 413.914733][ T29] audit: type=1326 audit(1728621612.208:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.4.2794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 413.936997][ T29] audit: type=1326 audit(1728621612.208:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.4.2794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 413.959188][ T29] audit: type=1326 audit(1728621612.208:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.4.2794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 414.631658][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 414.811883][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 414.829805][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 414.860929][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.869274][ T8] usb 2-1: Product: syz [ 414.873862][ T8] usb 2-1: Manufacturer: syz [ 414.878475][ T8] usb 2-1: SerialNumber: syz [ 414.892016][ T5279] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 415.065243][ T5279] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 415.088824][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.103631][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 415.105476][ T5279] usb 4-1: Product: syz [ 415.117466][ T5279] usb 4-1: Manufacturer: syz [ 415.122916][ T5279] usb 4-1: SerialNumber: syz [ 415.129881][ T5279] usb 4-1: config 0 descriptor?? [ 415.146804][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 415.174255][ T8] usb 2-1: USB disconnect, device number 41 [ 415.185177][ T8] usblp0: removed [ 415.810343][ T5279] mos7840 4-1:0.0: required endpoints missing [ 415.822800][ T5279] usb 4-1: USB disconnect, device number 34 [ 416.141795][ T940] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 416.301655][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 416.323030][ T940] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.343171][ T940] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.359377][ T940] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 416.362535][T14755] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 416.370860][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.612177][ T4624] Bluetooth: hci3: command 0x0406 tx timeout [ 416.811035][ T940] uclogic 0003:28BD:0075.0035: interface is invalid, ignoring [ 416.851906][ T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 416.859639][ T5240] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 417.021830][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 417.031825][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.048881][ T8] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 417.062077][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.081692][ T8] usb 2-1: config 150 has no interface number 0 [ 417.091951][ T8] usb 2-1: config 150 interface 204 has no altsetting 0 [ 417.101818][ T5240] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.121771][ T8] usb 2-1: config 150 interface 1 has no altsetting 0 [ 417.136035][ T5240] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.152605][ T8] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 417.168994][ T5240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.181679][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.189694][ T8] usb 2-1: Product: syz [ 417.195497][ T940] usb 3-1: USB disconnect, device number 41 [ 417.211946][T14774] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.2838'. [ 417.218207][ T5240] usb 4-1: config 0 descriptor?? [ 417.238811][ T8] usb 2-1: Manufacturer: syz [ 417.247046][ T8] usb 2-1: SerialNumber: syz [ 417.250600][T14774] netlink: 'syz.4.2838': attribute type 1 has an invalid length. [ 417.481810][T14782] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 417.491500][T14780] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 417.493164][ T8] xr_serial 2-1:150.204: xr_serial converter detected [ 417.515091][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 417.693351][ T5240] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 417.701509][ T5240] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 417.752688][ T5240] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 418.013932][ T5279] usb 4-1: USB disconnect, device number 35 [ 418.292265][ T8] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 418.299000][ T8] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 418.327364][ T8] usb 2-1: USB disconnect, device number 42 [ 418.341016][ T8] xr_serial 2-1:150.204: device disconnected [ 419.041606][ T8] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 419.232162][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 419.239929][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.264315][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 419.285728][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.305109][ T8] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 419.320392][ T8] usb 5-1: config 1 has no interface number 1 [ 419.330130][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 419.377319][ T8] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.390289][ T8] usb 5-1: config 1 interface 2 has no altsetting 0 [ 419.405484][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.414864][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.424539][ T8] usb 5-1: Product: syz [ 419.428869][ T8] usb 5-1: Manufacturer: syz [ 419.433997][ T8] usb 5-1: SerialNumber: syz [ 419.720521][ T8] usb 5-1: USB disconnect, device number 47 [ 420.001726][ T46] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 420.167624][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 420.175417][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 420.193077][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.218332][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.235772][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.248517][ T46] usb 4-1: Product: syz [ 420.254151][ T46] usb 4-1: Manufacturer: syz [ 420.264258][ T46] usb 4-1: SerialNumber: syz [ 420.275809][T14852] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 420.501244][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.522830][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.545189][ T46] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 420.564069][ T46] usb 4-1: USB disconnect, device number 36 [ 420.861614][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 421.025116][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.036362][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.046726][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 421.055858][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.070238][ T25] usb 3-1: config 0 descriptor?? [ 421.222456][ T5279] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 421.392046][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 421.414149][ T5279] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.430302][ T5279] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 421.444813][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 421.453877][ T5279] usb 2-1: Product: syz [ 421.458534][ T5279] usb 2-1: Manufacturer: syz [ 421.464636][ T5279] usb 2-1: SerialNumber: syz [ 421.475269][ T5279] r8152-cfgselector 2-1: Unknown version 0x0000 [ 421.491753][ T5279] r8152-cfgselector 2-1: config 0 descriptor?? [ 421.522159][ T25] pyra 0003:1E7D:2CF6.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 421.753999][T14883] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 421.772929][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 421.789655][T14883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 421.828782][ T5240] r8152-cfgselector 2-1: USB disconnect, device number 43 [ 421.957118][ T5933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.092328][ T5933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.123642][ T25] pyra 0003:1E7D:2CF6.0037: couldn't init struct pyra_device [ 422.131084][ T25] pyra 0003:1E7D:2CF6.0037: couldn't install mouse [ 422.145570][ T25] pyra 0003:1E7D:2CF6.0037: probe with driver pyra failed with error -71 [ 422.155677][ T4624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.166219][ T4624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.168630][ T25] usb 3-1: USB disconnect, device number 42 [ 422.183824][ T4624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.198156][ T4624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.206040][ T4624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 422.220134][ T4624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.248619][ T5933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.351131][ T5933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.650419][ T5933] bridge_slave_1: left allmulticast mode [ 422.662093][ T5933] bridge_slave_1: left promiscuous mode [ 422.667875][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.701221][ T5933] bridge_slave_0: left allmulticast mode [ 422.739249][ T5933] bridge_slave_0: left promiscuous mode [ 422.751372][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.854773][T14917] vxcan1: tx address claim with different name [ 423.611649][ T25] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 423.767481][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 423.778536][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 423.793210][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.809605][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 423.818061][ T25] usb 2-1: SerialNumber: syz [ 423.826147][T14940] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 423.885618][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.905687][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.916788][ T5933] bond0 (unregistering): Released all slaves [ 423.930084][T14949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2920'. [ 423.945419][T14902] chnl_net:caif_netlink_parms(): no params data found [ 424.077449][ T25] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 424.091021][ T25] usb 2-1: USB disconnect, device number 44 [ 424.371762][ T5236] Bluetooth: hci0: command tx timeout [ 424.523035][T14902] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.542314][T14902] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.566424][T14902] bridge_slave_0: entered allmulticast mode [ 424.581308][T14902] bridge_slave_0: entered promiscuous mode [ 424.707028][ T5933] hsr_slave_0: left promiscuous mode [ 424.740049][ T5933] hsr_slave_1: left promiscuous mode [ 424.750608][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.768678][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.792313][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.800300][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.852619][ T5933] veth1_macvtap: left promiscuous mode [ 424.858248][ T5933] veth0_macvtap: left promiscuous mode [ 424.867090][ T5933] veth1_vlan: left promiscuous mode [ 424.872520][ T5933] veth0_vlan: left promiscuous mode [ 425.347834][ T5933] team0 (unregistering): Port device team_slave_1 removed [ 425.389718][ T5933] team0 (unregistering): Port device team_slave_0 removed [ 425.951326][T14902] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.960398][T14902] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.984285][T14902] bridge_slave_1: entered allmulticast mode [ 425.992024][T14902] bridge_slave_1: entered promiscuous mode [ 426.017233][T15007] input: syz0 as /devices/virtual/input/input48 [ 426.104665][T14902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.136361][T14902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.302962][T14902] team0: Port device team_slave_0 added [ 426.331110][T14902] team0: Port device team_slave_1 added [ 426.431372][T14902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.451667][ T5236] Bluetooth: hci0: command tx timeout [ 426.468990][T14902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.542511][T14902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.565998][T14902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.599121][T14902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.625269][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.663247][T14902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.788762][T14902] hsr_slave_0: entered promiscuous mode [ 426.818098][T14902] hsr_slave_1: entered promiscuous mode [ 426.846374][T14902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.855460][T14902] Cannot create hsr debugfs directory [ 427.141660][ T5240] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 427.339291][ T5240] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 427.378120][ T5240] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 427.411688][ T5240] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.440251][ T5240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.483836][T15037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 427.528626][ T5240] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.846698][T15070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2953'. [ 427.865724][T14902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.913308][T14902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.937727][ T5231] usb 3-1: USB disconnect, device number 43 [ 427.971097][T14902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.016892][T14902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.354918][T14902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.410925][T14902] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.452274][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.459415][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.486567][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.493719][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.530426][T14902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.540924][T14902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.548010][ T5236] Bluetooth: hci0: command tx timeout [ 428.637729][T14902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.711729][ T5279] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 428.739196][T14902] veth0_vlan: entered promiscuous mode [ 428.812516][T14902] veth1_vlan: entered promiscuous mode [ 428.894154][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 428.907256][T14902] veth0_macvtap: entered promiscuous mode [ 428.920512][T14902] veth1_macvtap: entered promiscuous mode [ 428.921108][ T5279] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 428.936187][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.953601][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.967714][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.971709][ T5279] usb 2-1: Product: syz [ 428.987526][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.011303][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.022090][ T5279] usb 2-1: Manufacturer: syz [ 429.026725][ T5279] usb 2-1: SerialNumber: syz [ 429.053847][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.091575][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.111897][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.141587][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.161615][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.189386][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.211860][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.242926][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.273375][T14902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.274373][ T5279] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 429.306092][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.341700][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.369786][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.400900][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.421189][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.451591][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.471665][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.499917][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.514719][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.530593][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.550814][T14902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.574013][T14902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.604143][T14902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.648244][T14902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.671591][T14902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.681740][ T5279] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 429.691077][T14902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.713607][T14902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.846374][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 429.856173][ T5279] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 429.876242][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.881678][ T5279] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.905185][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.942967][ T5279] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.964713][ T5937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.984109][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.000758][ T5937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.010020][ T5279] usb 3-1: Product: syz [ 430.027682][ T5279] usb 3-1: Manufacturer: syz [ 430.043659][ T5279] usb 3-1: SerialNumber: syz [ 430.066617][T15132] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 430.221166][ T25] usb 2-1: USB disconnect, device number 45 [ 430.241839][ T25] usblp0: removed [ 430.290887][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.326548][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.368957][ T5279] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 430.406392][ T5279] usb 3-1: USB disconnect, device number 44 [ 430.613711][ T5236] Bluetooth: hci0: command tx timeout [ 431.105755][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2972'. [ 431.187637][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2972'. [ 432.203005][ T940] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 432.387641][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 432.418475][ T940] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 432.442203][ T940] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 432.478354][ T940] usb 3-1: config 135 has no interface number 0 [ 432.490238][ T940] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.557739][ T940] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 432.589727][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.619024][ T940] usb 3-1: Product: syz [ 432.629565][ T940] usb 3-1: Manufacturer: syz [ 432.635312][ T940] usb 3-1: SerialNumber: syz [ 432.647985][ T940] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 432.660439][ T940] usb 3-1: No valid video chain found. [ 432.679954][T15224] input: syz1 as /devices/virtual/input/input49 [ 432.932047][ T8] usb 3-1: USB disconnect, device number 45 [ 433.112525][ T29] audit: type=1326 audit(1728621631.458:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.0.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 433.140026][ T29] audit: type=1326 audit(1728621631.458:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.0.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 433.162769][ T29] audit: type=1326 audit(1728621631.468:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.0.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 433.186712][ T29] audit: type=1326 audit(1728621631.468:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.0.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 433.208968][ T29] audit: type=1326 audit(1728621631.478:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.0.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 433.231333][ T29] audit: type=1326 audit(1728621631.478:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.0.3004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 433.401403][ T5279] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 433.411918][ T940] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 433.415718][ T5279] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 433.427824][ T5279] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 433.455037][ T5279] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 433.489692][ T5279] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz0 [ 433.587193][ T940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.611635][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 433.649016][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 433.652521][ T46] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 433.679291][ T940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.703353][ T940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.721609][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.742111][ T940] usb 4-1: config 0 descriptor?? [ 433.835280][ T46] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 433.860013][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.882865][ T46] usb 5-1: Product: syz [ 433.901762][ T46] usb 5-1: Manufacturer: syz [ 433.906389][ T46] usb 5-1: SerialNumber: syz [ 433.947039][ T46] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 434.079056][ T6150] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 434.406981][ T46] usb 5-1: USB disconnect, device number 48 [ 434.555556][T15264] sctp: [Deprecated]: syz.2.3015 (pid 15264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.555556][T15264] Use struct sctp_sack_info instead [ 434.867946][T15271] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 435.172039][ T6150] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 435.202091][ T6150] ath9k_htc: Failed to initialize the device [ 435.236001][ T46] usb 5-1: ath9k_htc: USB layer deinitialized [ 435.280113][ T940] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 435.324791][ T940] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 435.386303][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 435.529245][ T5231] usb 4-1: USB disconnect, device number 37 [ 435.681757][ T940] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 435.851623][ T940] usb 5-1: Using ep0 maxpacket: 8 [ 435.864849][ T940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 435.873748][ T940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.901729][ T940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.919733][ T940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.929953][ T940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.943413][ T940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.953105][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.191470][ T940] usb 5-1: usb_control_msg returned -32 [ 436.198838][ T940] usbtmc 5-1:16.0: can't read capabilities [ 437.634707][T15373] [ 437.637072][T15373] ===================================================== [ 437.644016][T15373] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 437.651479][T15373] 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 Not tainted [ 437.658602][T15373] ----------------------------------------------------- [ 437.665545][T15373] syz.3.3061/15373 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 437.673276][T15373] ffff888032576408 (&new->fa_lock){...-}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 437.682022][T15373] [ 437.682022][T15373] and this task is already holding: [ 437.689370][T15373] ffff88806d4b1028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 437.699105][T15373] which would create a new lock dependency: [ 437.704983][T15373] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){...-}-{2:2} [ 437.713075][T15373] [ 437.713075][T15373] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 437.722509][T15373] (&dev->event_lock#2){..-.}-{2:2} [ 437.722543][T15373] [ 437.722543][T15373] ... which became SOFTIRQ-irq-safe at: [ 437.735408][T15373] lock_acquire+0x1ed/0x550 [ 437.739996][T15373] _raw_spin_lock_irqsave+0xd5/0x120 [ 437.745362][T15373] input_inject_event+0xc5/0x340 [ 437.750381][T15373] kd_sound_helper+0x101/0x210 [ 437.755228][T15373] input_handler_for_each_handle+0x103/0x1d0 [ 437.761294][T15373] call_timer_fn+0x18e/0x650 [ 437.765962][T15373] __run_timer_base+0x66a/0x8e0 [ 437.770888][T15373] run_timer_softirq+0xb7/0x170 [ 437.775818][T15373] handle_softirqs+0x2c5/0x980 [ 437.780665][T15373] __irq_exit_rcu+0xf4/0x1c0 [ 437.785333][T15373] irq_exit_rcu+0x9/0x30 [ 437.789651][T15373] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 437.795365][T15373] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.801417][T15373] unwind_next_frame+0x4bb/0x22d0 [ 437.806520][T15373] arch_stack_walk+0x11c/0x150 [ 437.811357][T15373] stack_trace_save+0x118/0x1d0 [ 437.816281][T15373] kasan_save_stack+0x3f/0x60 [ 437.821031][T15373] __kasan_record_aux_stack+0xac/0xc0 [ 437.826494][T15373] call_rcu+0x167/0xa70 [ 437.830741][T15373] __dentry_kill+0x497/0x630 [ 437.835418][T15373] dput+0x19f/0x2b0 [ 437.839305][T15373] do_unlinkat+0x4b9/0x830 [ 437.843797][T15373] __x64_sys_unlink+0x47/0x50 [ 437.848554][T15373] do_syscall_64+0xf3/0x230 [ 437.853132][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.859105][T15373] [ 437.859105][T15373] to a SOFTIRQ-irq-unsafe lock: [ 437.866106][T15373] (tasklist_lock){.+.+}-{2:2} [ 437.866133][T15373] [ 437.866133][T15373] ... which became SOFTIRQ-irq-unsafe at: [ 437.878745][T15373] ... [ 437.878755][T15373] lock_acquire+0x1ed/0x550 [ 437.885905][T15373] _raw_read_lock+0x36/0x50 [ 437.890525][T15373] __do_wait+0x12d/0x850 [ 437.894844][T15373] do_wait+0x1e9/0x560 [ 437.898989][T15373] kernel_wait+0xe9/0x240 [ 437.903394][T15373] call_usermodehelper_exec_work+0xbd/0x230 [ 437.909361][T15373] process_scheduled_works+0xa63/0x1850 [ 437.914983][T15373] worker_thread+0x870/0xd30 [ 437.919649][T15373] kthread+0x2f0/0x390 [ 437.923790][T15373] ret_from_fork+0x4b/0x80 [ 437.928283][T15373] ret_from_fork_asm+0x1a/0x30 [ 437.933124][T15373] [ 437.933124][T15373] other info that might help us debug this: [ 437.933124][T15373] [ 437.943339][T15373] Chain exists of: [ 437.943339][T15373] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 437.943339][T15373] [ 437.956900][T15373] Possible interrupt unsafe locking scenario: [ 437.956900][T15373] [ 437.965212][T15373] CPU0 CPU1 [ 437.970593][T15373] ---- ---- [ 437.975943][T15373] lock(tasklist_lock); [ 437.980194][T15373] local_irq_disable(); [ 437.986939][T15373] lock(&dev->event_lock#2); [ 437.994135][T15373] lock(&client->buffer_lock); [ 438.001499][T15373] [ 438.004941][T15373] lock(&dev->event_lock#2); [ 438.009789][T15373] [ 438.009789][T15373] *** DEADLOCK *** [ 438.009789][T15373] [ 438.017916][T15373] 7 locks held by syz.3.3061/15373: [ 438.023095][T15373] #0: ffff888145fab110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 438.032230][T15373] #1: ffff8881472b6230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 438.042329][T15373] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 438.052012][T15373] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 438.061580][T15373] #4: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x6f/0x300 [ 438.070710][T15373] #5: ffff88806d4b1028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 438.080984][T15373] #6: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 438.090038][T15373] [ 438.090038][T15373] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 438.100431][T15373] -> (&dev->event_lock#2){..-.}-{2:2} { [ 438.106082][T15373] IN-SOFTIRQ-W at: [ 438.110140][T15373] lock_acquire+0x1ed/0x550 [ 438.116460][T15373] _raw_spin_lock_irqsave+0xd5/0x120 [ 438.123562][T15373] input_inject_event+0xc5/0x340 [ 438.130313][T15373] kd_sound_helper+0x101/0x210 [ 438.136892][T15373] input_handler_for_each_handle+0x103/0x1d0 [ 438.144691][T15373] call_timer_fn+0x18e/0x650 [ 438.151100][T15373] __run_timer_base+0x66a/0x8e0 [ 438.157766][T15373] run_timer_softirq+0xb7/0x170 [ 438.164431][T15373] handle_softirqs+0x2c5/0x980 [ 438.171009][T15373] __irq_exit_rcu+0xf4/0x1c0 [ 438.177411][T15373] irq_exit_rcu+0x9/0x30 [ 438.183465][T15373] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 438.190914][T15373] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.198708][T15373] unwind_next_frame+0x4bb/0x22d0 [ 438.205548][T15373] arch_stack_walk+0x11c/0x150 [ 438.212157][T15373] stack_trace_save+0x118/0x1d0 [ 438.218821][T15373] kasan_save_stack+0x3f/0x60 [ 438.225312][T15373] __kasan_record_aux_stack+0xac/0xc0 [ 438.232500][T15373] call_rcu+0x167/0xa70 [ 438.238469][T15373] __dentry_kill+0x497/0x630 [ 438.244880][T15373] dput+0x19f/0x2b0 [ 438.250506][T15373] do_unlinkat+0x4b9/0x830 [ 438.256741][T15373] __x64_sys_unlink+0x47/0x50 [ 438.263231][T15373] do_syscall_64+0xf3/0x230 [ 438.269545][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.277254][T15373] INITIAL USE at: [ 438.281229][T15373] lock_acquire+0x1ed/0x550 [ 438.287461][T15373] _raw_spin_lock_irqsave+0xd5/0x120 [ 438.294484][T15373] input_inject_event+0xc5/0x340 [ 438.301151][T15373] kbd_led_trigger_activate+0xb8/0x100 [ 438.308337][T15373] led_trigger_set+0x582/0x9c0 [ 438.314826][T15373] led_trigger_set_default+0x229/0x260 [ 438.322008][T15373] led_classdev_register_ext+0x6e6/0x8a0 [ 438.329367][T15373] input_leds_connect+0x489/0x630 [ 438.336116][T15373] input_register_device+0xd3b/0x1110 [ 438.343217][T15373] atkbd_connect+0x752/0xa00 [ 438.349558][T15373] serio_driver_probe+0x7f/0xa0 [ 438.356138][T15373] really_probe+0x2b8/0xad0 [ 438.362365][T15373] __driver_probe_device+0x1a2/0x390 [ 438.369373][T15373] driver_probe_device+0x50/0x430 [ 438.376122][T15373] __driver_attach+0x45f/0x710 [ 438.382607][T15373] bus_for_each_dev+0x239/0x2b0 [ 438.389184][T15373] serio_handle_event+0x1c7/0x920 [ 438.395931][T15373] process_scheduled_works+0xa63/0x1850 [ 438.403215][T15373] worker_thread+0x870/0xd30 [ 438.409530][T15373] kthread+0x2f0/0x390 [ 438.415322][T15373] ret_from_fork+0x4b/0x80 [ 438.421465][T15373] ret_from_fork_asm+0x1a/0x30 [ 438.427954][T15373] } [ 438.430532][T15373] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 438.439629][T15373] -> (&client->buffer_lock){....}-{2:2} { [ 438.445355][T15373] INITIAL USE at: [ 438.449235][T15373] lock_acquire+0x1ed/0x550 [ 438.455298][T15373] _raw_spin_lock+0x2e/0x40 [ 438.461445][T15373] evdev_pass_values+0xf2/0xad0 [ 438.467849][T15373] evdev_events+0x1c2/0x300 [ 438.473902][T15373] input_pass_values+0x286/0x860 [ 438.480392][T15373] input_event_dispose+0x30f/0x600 [ 438.487053][T15373] input_handle_event+0xa71/0xbe0 [ 438.493627][T15373] input_inject_event+0x22f/0x340 [ 438.500213][T15373] evdev_write+0x5fd/0x790 [ 438.506185][T15373] vfs_write+0x29c/0xc90 [ 438.511975][T15373] ksys_write+0x183/0x2b0 [ 438.517852][T15373] __do_fast_syscall_32+0xb4/0x110 [ 438.524512][T15373] do_fast_syscall_32+0x34/0x80 [ 438.530910][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.538788][T15373] } [ 438.541271][T15373] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 438.549423][T15373] ... acquired at: [ 438.553212][T15373] lock_acquire+0x1ed/0x550 [ 438.557881][T15373] _raw_spin_lock+0x2e/0x40 [ 438.562548][T15373] evdev_pass_values+0xf2/0xad0 [ 438.567569][T15373] evdev_events+0x1c2/0x300 [ 438.572230][T15373] input_pass_values+0x286/0x860 [ 438.577331][T15373] input_event_dispose+0x30f/0x600 [ 438.582605][T15373] input_handle_event+0xa71/0xbe0 [ 438.587850][T15373] input_inject_event+0x22f/0x340 [ 438.593050][T15373] evdev_write+0x5fd/0x790 [ 438.597629][T15373] vfs_write+0x29c/0xc90 [ 438.602034][T15373] ksys_write+0x183/0x2b0 [ 438.606523][T15373] __do_fast_syscall_32+0xb4/0x110 [ 438.611798][T15373] do_fast_syscall_32+0x34/0x80 [ 438.616810][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.623303][T15373] [ 438.625613][T15373] [ 438.625613][T15373] the dependencies between the lock to be acquired [ 438.625623][T15373] and SOFTIRQ-irq-unsafe lock: [ 438.639111][T15373] -> (tasklist_lock){.+.+}-{2:2} { [ 438.644410][T15373] HARDIRQ-ON-R at: [ 438.648554][T15373] lock_acquire+0x1ed/0x550 [ 438.655050][T15373] _raw_read_lock+0x36/0x50 [ 438.661548][T15373] __do_wait+0x12d/0x850 [ 438.667784][T15373] do_wait+0x1e9/0x560 [ 438.673837][T15373] kernel_wait+0xe9/0x240 [ 438.680151][T15373] call_usermodehelper_exec_work+0xbd/0x230 [ 438.688034][T15373] process_scheduled_works+0xa63/0x1850 [ 438.695575][T15373] worker_thread+0x870/0xd30 [ 438.702252][T15373] kthread+0x2f0/0x390 [ 438.708314][T15373] ret_from_fork+0x4b/0x80 [ 438.714725][T15373] ret_from_fork_asm+0x1a/0x30 [ 438.721518][T15373] SOFTIRQ-ON-R at: [ 438.725675][T15373] lock_acquire+0x1ed/0x550 [ 438.732184][T15373] _raw_read_lock+0x36/0x50 [ 438.738679][T15373] __do_wait+0x12d/0x850 [ 438.744907][T15373] do_wait+0x1e9/0x560 [ 438.750963][T15373] kernel_wait+0xe9/0x240 [ 438.757308][T15373] call_usermodehelper_exec_work+0xbd/0x230 [ 438.765217][T15373] process_scheduled_works+0xa63/0x1850 [ 438.772752][T15373] worker_thread+0x870/0xd30 [ 438.779376][T15373] kthread+0x2f0/0x390 [ 438.785438][T15373] ret_from_fork+0x4b/0x80 [ 438.791844][T15373] ret_from_fork_asm+0x1a/0x30 [ 438.798596][T15373] INITIAL USE at: [ 438.802652][T15373] lock_acquire+0x1ed/0x550 [ 438.809073][T15373] _raw_write_lock_irq+0xd3/0x120 [ 438.816010][T15373] copy_process+0x2267/0x3d50 [ 438.822590][T15373] kernel_clone+0x226/0x8f0 [ 438.828994][T15373] user_mode_thread+0x132/0x1a0 [ 438.835747][T15373] rest_init+0x23/0x300 [ 438.841823][T15373] start_kernel+0x47f/0x500 [ 438.848227][T15373] x86_64_start_reservations+0x2a/0x30 [ 438.855590][T15373] x86_64_start_kernel+0x9f/0xa0 [ 438.862432][T15373] common_startup_64+0x13e/0x147 [ 438.869272][T15373] INITIAL READ USE at: [ 438.873765][T15373] lock_acquire+0x1ed/0x550 [ 438.880606][T15373] _raw_read_lock+0x36/0x50 [ 438.887446][T15373] __do_wait+0x12d/0x850 [ 438.894021][T15373] do_wait+0x1e9/0x560 [ 438.900452][T15373] kernel_wait+0xe9/0x240 [ 438.907114][T15373] call_usermodehelper_exec_work+0xbd/0x230 [ 438.915342][T15373] process_scheduled_works+0xa63/0x1850 [ 438.923235][T15373] worker_thread+0x870/0xd30 [ 438.930180][T15373] kthread+0x2f0/0x390 [ 438.936580][T15373] ret_from_fork+0x4b/0x80 [ 438.943338][T15373] ret_from_fork_asm+0x1a/0x30 [ 438.950439][T15373] } [ 438.953098][T15373] ... key at: [] tasklist_lock+0x18/0x40 [ 438.960981][T15373] ... acquired at: [ 438.964953][T15373] lock_acquire+0x1ed/0x550 [ 438.969655][T15373] _raw_read_lock+0x36/0x50 [ 438.974324][T15373] send_sigio+0x108/0x390 [ 438.978824][T15373] dnotify_handle_event+0x157/0x460 [ 438.984189][T15373] fsnotify+0x1946/0x1f60 [ 438.988686][T15373] path_openat+0x1686/0x3590 [ 438.993444][T15373] do_filp_open+0x235/0x490 [ 438.998114][T15373] do_sys_openat2+0x13e/0x1d0 [ 439.002955][T15373] __ia32_sys_creat+0x123/0x170 [ 439.007971][T15373] __do_fast_syscall_32+0xb4/0x110 [ 439.013244][T15373] do_fast_syscall_32+0x34/0x80 [ 439.018255][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.024743][T15373] [ 439.027062][T15373] -> (&f_owner->lock){....}-{2:2} { [ 439.032356][T15373] INITIAL USE at: [ 439.036323][T15373] lock_acquire+0x1ed/0x550 [ 439.042579][T15373] _raw_write_lock_irq+0xd3/0x120 [ 439.049332][T15373] __f_setown+0x6b/0x380 [ 439.055300][T15373] f_setown+0x243/0x310 [ 439.061185][T15373] do_fcntl+0x115/0x1a60 [ 439.067156][T15373] do_compat_fcntl64+0x572/0x1050 [ 439.073909][T15373] __do_fast_syscall_32+0xb4/0x110 [ 439.080759][T15373] do_fast_syscall_32+0x34/0x80 [ 439.087331][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.095384][T15373] INITIAL READ USE at: [ 439.099787][T15373] lock_acquire+0x1ed/0x550 [ 439.106453][T15373] _raw_read_lock_irq+0xda/0x120 [ 439.113554][T15373] do_fcntl+0x85f/0x1a60 [ 439.119957][T15373] do_compat_fcntl64+0x572/0x1050 [ 439.127142][T15373] __do_fast_syscall_32+0xb4/0x110 [ 439.134410][T15373] do_fast_syscall_32+0x34/0x80 [ 439.141425][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.149911][T15373] } [ 439.152483][T15373] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 439.161405][T15373] ... acquired at: [ 439.165305][T15373] lock_acquire+0x1ed/0x550 [ 439.169989][T15373] _raw_read_lock_irqsave+0xdd/0x130 [ 439.175438][T15373] send_sigio+0x37/0x390 [ 439.179846][T15373] kill_fasync+0x256/0x4f0 [ 439.184424][T15373] lease_break_callback+0x26/0x30 [ 439.189611][T15373] __break_lease+0x6d5/0x1820 [ 439.194453][T15373] do_dentry_open+0x8d4/0x1460 [ 439.199380][T15373] vfs_open+0x3e/0x330 [ 439.203614][T15373] path_openat+0x2c84/0x3590 [ 439.208367][T15373] do_filp_open+0x235/0x490 [ 439.213033][T15373] do_sys_openat2+0x13e/0x1d0 [ 439.217871][T15373] __ia32_compat_sys_openat+0x23f/0x290 [ 439.223582][T15373] __do_fast_syscall_32+0xb4/0x110 [ 439.228866][T15373] do_fast_syscall_32+0x34/0x80 [ 439.233877][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.240365][T15373] [ 439.242683][T15373] -> (&new->fa_lock){...-}-{2:2} { [ 439.247804][T15373] IN-SOFTIRQ-R at: [ 439.251768][T15373] lock_acquire+0x1ed/0x550 [ 439.257911][T15373] _raw_read_lock_irqsave+0xdd/0x130 [ 439.264834][T15373] kill_fasync+0x199/0x4f0 [ 439.270892][T15373] sock_wake_async+0x147/0x170 [ 439.277308][T15373] sock_def_readable+0x3df/0x5b0 [ 439.283893][T15373] __udp_enqueue_schedule_skb+0x81a/0xb20 [ 439.291248][T15373] udpv6_queue_rcv_one_skb+0xa22/0x18a0 [ 439.298435][T15373] udp6_unicast_rcv_skb+0x230/0x370 [ 439.305272][T15373] ip6_protocol_deliver_rcu+0xccf/0x1580 [ 439.312559][T15373] ip6_input_finish+0x187/0x2d0 [ 439.319044][T15373] NF_HOOK+0x3a4/0x450 [ 439.324746][T15373] NF_HOOK+0x3a4/0x450 [ 439.330448][T15373] __netif_receive_skb+0x1ea/0x650 [ 439.337195][T15373] process_backlog+0x662/0x15b0 [ 439.343687][T15373] __napi_poll+0xcb/0x490 [ 439.349653][T15373] net_rx_action+0x89b/0x1240 [ 439.355969][T15373] handle_softirqs+0x2c5/0x980 [ 439.362373][T15373] do_softirq+0x11b/0x1e0 [ 439.368353][T15373] __local_bh_enable_ip+0x1bb/0x200 [ 439.375192][T15373] __dev_queue_xmit+0x171d/0x3ed0 [ 439.381870][T15373] ip6_finish_output2+0xfc9/0x1730 [ 439.388618][T15373] ip6_finish_output+0x41e/0x810 [ 439.395195][T15373] ip6_send_skb+0x1b1/0x3b0 [ 439.401369][T15373] udp_v6_send_skb+0xbf5/0x1870 [ 439.407860][T15373] udpv6_sendmsg+0x23b6/0x3270 [ 439.414263][T15373] __sock_sendmsg+0xef/0x270 [ 439.420496][T15373] __sys_sendto+0x39b/0x4f0 [ 439.426634][T15373] __ia32_sys_sendto+0xdd/0x100 [ 439.433122][T15373] __do_fast_syscall_32+0xb4/0x110 [ 439.439869][T15373] do_fast_syscall_32+0x34/0x80 [ 439.446357][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.454335][T15373] INITIAL USE at: [ 439.458216][T15373] lock_acquire+0x1ed/0x550 [ 439.464273][T15373] _raw_write_lock_irq+0xd3/0x120 [ 439.470853][T15373] fasync_remove_entry+0xff/0x1d0 [ 439.477434][T15373] lease_modify+0x1bd/0x3a0 [ 439.483487][T15373] locks_remove_file+0x577/0x10c0 [ 439.490063][T15373] __fput+0x1a6/0x880 [ 439.495603][T15373] task_work_run+0x24f/0x310 [ 439.501746][T15373] syscall_exit_to_user_mode+0x168/0x370 [ 439.508933][T15373] __do_fast_syscall_32+0xc4/0x110 [ 439.515598][T15373] do_fast_syscall_32+0x34/0x80 [ 439.521998][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.529875][T15373] INITIAL READ USE at: [ 439.534197][T15373] lock_acquire+0x1ed/0x550 [ 439.540689][T15373] _raw_read_lock_irqsave+0xdd/0x130 [ 439.547975][T15373] kill_fasync+0x199/0x4f0 [ 439.554392][T15373] sock_wake_async+0x147/0x170 [ 439.561151][T15373] sk_wake_async+0x183/0x280 [ 439.567729][T15373] unix_release_sock+0x727/0xd00 [ 439.574658][T15373] unix_release+0x91/0xc0 [ 439.580979][T15373] sock_close+0xbc/0x240 [ 439.587211][T15373] __fput+0x23f/0x880 [ 439.593184][T15373] task_work_run+0x24f/0x310 [ 439.599792][T15373] syscall_exit_to_user_mode+0x168/0x370 [ 439.607422][T15373] __do_fast_syscall_32+0xc4/0x110 [ 439.614523][T15373] do_fast_syscall_32+0x34/0x80 [ 439.621359][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.629674][T15373] } [ 439.632158][T15373] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 439.640820][T15373] ... acquired at: [ 439.644606][T15373] lock_acquire+0x1ed/0x550 [ 439.649273][T15373] _raw_read_lock_irqsave+0xdd/0x130 [ 439.654723][T15373] kill_fasync+0x199/0x4f0 [ 439.659303][T15373] evdev_pass_values+0x58a/0xad0 [ 439.664401][T15373] evdev_events+0x1c2/0x300 [ 439.669065][T15373] input_pass_values+0x286/0x860 [ 439.674169][T15373] input_event_dispose+0x30f/0x600 [ 439.679442][T15373] input_handle_event+0xa71/0xbe0 [ 439.684669][T15373] input_inject_event+0x22f/0x340 [ 439.689856][T15373] evdev_write+0x5fd/0x790 [ 439.694434][T15373] vfs_write+0x29c/0xc90 [ 439.698835][T15373] ksys_write+0x183/0x2b0 [ 439.703323][T15373] __do_fast_syscall_32+0xb4/0x110 [ 439.708620][T15373] do_fast_syscall_32+0x34/0x80 [ 439.713642][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.720130][T15373] [ 439.722440][T15373] [ 439.722440][T15373] stack backtrace: [ 439.728323][T15373] CPU: 1 UID: 0 PID: 15373 Comm: syz.3.3061 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 439.739122][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 439.749176][T15373] Call Trace: [ 439.752446][T15373] [ 439.755366][T15373] dump_stack_lvl+0x241/0x360 [ 439.760036][T15373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.765220][T15373] ? __pfx__printk+0x10/0x10 [ 439.769806][T15373] ? print_shortest_lock_dependencies+0xf2/0x160 [ 439.776172][T15373] validate_chain+0x4ebd/0x5920 [ 439.781022][T15373] ? __pfx_validate_chain+0x10/0x10 [ 439.786215][T15373] ? rcu_read_lock_sched_held+0x8d/0x130 [ 439.791838][T15373] ? __pfx_validate_chain+0x10/0x10 [ 439.797028][T15373] ? register_lock_class+0x102/0x980 [ 439.802309][T15373] ? __pfx_register_lock_class+0x10/0x10 [ 439.807933][T15373] ? mark_lock+0x9a/0x360 [ 439.812258][T15373] __lock_acquire+0x1384/0x2050 [ 439.817113][T15373] lock_acquire+0x1ed/0x550 [ 439.821611][T15373] ? kill_fasync+0x199/0x4f0 [ 439.826199][T15373] ? __pfx_lock_acquire+0x10/0x10 [ 439.831217][T15373] ? __pfx_lock_acquire+0x10/0x10 [ 439.836235][T15373] _raw_read_lock_irqsave+0xdd/0x130 [ 439.841510][T15373] ? kill_fasync+0x199/0x4f0 [ 439.846118][T15373] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 439.852007][T15373] ? do_raw_spin_lock+0x14f/0x370 [ 439.857026][T15373] kill_fasync+0x199/0x4f0 [ 439.861452][T15373] ? kill_fasync+0x54/0x4f0 [ 439.865947][T15373] evdev_pass_values+0x58a/0xad0 [ 439.870872][T15373] ? evdev_pass_values+0x531/0xad0 [ 439.875971][T15373] evdev_events+0x1c2/0x300 [ 439.880462][T15373] ? evdev_events+0x6f/0x300 [ 439.885046][T15373] input_pass_values+0x286/0x860 [ 439.890007][T15373] ? input_pass_values+0x8f/0x860 [ 439.895028][T15373] input_event_dispose+0x30f/0x600 [ 439.900142][T15373] input_handle_event+0xa71/0xbe0 [ 439.905197][T15373] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 439.910647][T15373] ? __pfx_input_handle_event+0x10/0x10 [ 439.916187][T15373] input_inject_event+0x22f/0x340 [ 439.921231][T15373] ? input_inject_event+0xd6/0x340 [ 439.926336][T15373] evdev_write+0x5fd/0x790 [ 439.930740][T15373] ? __pfx_evdev_write+0x10/0x10 [ 439.935664][T15373] ? bpf_lsm_file_permission+0x9/0x10 [ 439.941059][T15373] ? security_file_permission+0x74/0x280 [ 439.946685][T15373] ? rw_verify_area+0x1c3/0x6f0 [ 439.951535][T15373] ? __pfx_evdev_write+0x10/0x10 [ 439.956459][T15373] vfs_write+0x29c/0xc90 [ 439.960688][T15373] ? kmem_cache_free+0x1a2/0x420 [ 439.965619][T15373] ? __pfx_vfs_write+0x10/0x10 [ 439.970370][T15373] ? __fget_files+0x29/0x470 [ 439.974950][T15373] ? __fget_files+0x3f3/0x470 [ 439.979629][T15373] ? __fget_files+0x29/0x470 [ 439.984219][T15373] ? fdget_pos+0x19a/0x320 [ 439.988628][T15373] ksys_write+0x183/0x2b0 [ 439.992950][T15373] ? __pfx_ksys_write+0x10/0x10 [ 439.997792][T15373] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 440.004374][T15373] ? lockdep_hardirqs_on+0x99/0x150 [ 440.009566][T15373] __do_fast_syscall_32+0xb4/0x110 [ 440.014669][T15373] ? exc_page_fault+0x590/0x8c0 [ 440.019512][T15373] do_fast_syscall_32+0x34/0x80 [ 440.024353][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.030678][T15373] RIP: 0023:0xf745d579 [ 440.034736][T15373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 440.054338][T15373] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 440.062743][T15373] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 440.070711][T15373] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.078670][T15373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.086630][T15373] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 440.094592][T15373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.102556][T15373] [ 440.166601][ T46] usb 5-1: USB disconnect, device number 49 [ 440.176875][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.185756][ T1269] ieee802154 phy1 wpan1: encryption failed: -22