last executing test programs: 1m38.002328586s ago: executing program 0 (id=1049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) 1m21.893519025s ago: executing program 0 (id=1049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) 1m5.734506272s ago: executing program 0 (id=1049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) 45.347121029s ago: executing program 0 (id=1049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) 30.305266345s ago: executing program 0 (id=1049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) 16.568496401s ago: executing program 0 (id=1049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) 3.912830969s ago: executing program 2 (id=2221): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x4) 3.616825304s ago: executing program 2 (id=2225): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7000000010000104000000000400000000000000", @ANYRES32=r2, @ANYBLOB="0000000050210600480012800b00010067656e6576650000380002800500090001000000080001000100000005000c"], 0x70}}, 0x0) 3.291952989s ago: executing program 2 (id=2229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}}, 0x0) 2.942856756s ago: executing program 2 (id=2233): pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030400e2ffffffffff0700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600020000000000060001000200000008000500", @ANYRES32=r1], 0x54}}, 0x0) 2.779718897s ago: executing program 3 (id=2235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x14, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 2.526680687s ago: executing program 1 (id=2237): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)) 2.432337845s ago: executing program 1 (id=2238): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x410, 0x130, 0x130, 0x130, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_macvtap\x00', 'syzkaller0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="09f4301ce93b", @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.354545509s ago: executing program 2 (id=2240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff074d564b"]) 2.114290492s ago: executing program 1 (id=2241): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0/file0', [{0x20, '/\xf4'}, {0x20, 'Q\x84\xf6ui\xfa\xf5\x16i\x859o\xe5\x13\xd5gV\x04\x00\x98\xb0\bQ+\xe2G\xa1\x1e\x01\xa9\xd6w\xdf\xa6\x9d\xcc<\x86\xfd\x18\x99\x19\xed\xc2\xdc\xf4\xbdV\xfeF)T\xb6\xc6\v`\xbf\xec2\xf5\x12R\xa1\x18\x9a<\x8fx\xf4\xcc\x18\xfc\xdb\x0e\xe7\xde^\x88vN\xe0\xe4P\x1dj\xd6&7\x7f\xe82\x92w\x12\t\xff\x19$\x93\xd5\xa4\xe2}\x9aA9p\xffk0\x8c\xc3\xae[n1\xb4\xd7\xe6\xa4\xc2\x86M\x83\x1d\xd7\x84\xa4\x85n(\xd3\x95\x82\xe0\xff\x89=\xe6\xceM\x12'}, {0x20, '\x9e\x01\x00\x00\x00g=\xf2vx3s4\x06A\xe7\'*p\xf1\xcf?(\xb4\x04\xad*\x10\x15\xb3F\x93\x17\xfb\xc9\xf2\x1f\x85\x7fG\x0eE\xf1\x1186\xdf\xe2\xfe\xdf\xfb\xb1\xed\t\xfc\xcc\x00y+3\x9d\xcc\xa8\xe7I\xd1\x8d\xb9D\x1dk\xf9\xa5\x1f\x10eQ\xb9rN\xf2\xbc\xd6\xa8\xff7^G\xf0\x90\r\xf4\xb0\x848\xd1^?\xdb\xd3*\x011+\"\x1d\x9c&\x13\x8eRBuESw\xf7\x05\x992:;K\xd4\xad\xb8\xcd\r7\x87\x1f\xa8\xc3\xe9W\xeb\x8b\x89\xa3\x81U\x1b?\xa0\xbd\xa0\x12;\xe3\xae\xd8\xe4|\x8d\xd3xL\xa9+\\\x9c\x970&\x87Cx\xbcx\xdbM\xbd7\xcet&\xb5\x81\n=\xe3\x89\xf0\xe3\x1cR\xc9\xe2,\xf5\xa7\xa2\xa5]2\xe3\x03X\x1b7z\xb2C \xa9'}, {0x20, '+{[{\x03'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00'/47}, {}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\x1d\xd2\x90\xa3\xf9\xc9yY\x1c\xbf\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x8e\x8bu-a\x9a\xb3\xb0{\xed\xcc\xda\xdfG\xeb\x98\xb2\xfa\xc8\xa1\x04\x9a\xe9`\xcbt\x0f`\xb3dl\x0f\x80R>\xb9n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^%\xb10\x1e\xfe\xa5\x9e\xc5\t+`\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Z\xc0\xd0\xab~\bjG\x8d\x0e\x94\xe4/\x94\xe7\xcf\xe3\xa0\x89\x89^WNI\xbc\xe6\xa4\x90\x82\xd3<\xa5\xec\xb5\xb6\x98D\xfeU\x7f\x90\x9d\x95.\x82p\x97\x12h\xa0\xd4\x8f\a+\xe6;U\xf9e\x9d#\x80O\x14q\xaa\xe3\x9d\x18\xf1\xbc\x980x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}}, 0x0) 1.719460772s ago: executing program 3 (id=2246): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.525842068s ago: executing program 4 (id=2247): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x31) 584.800609ms ago: executing program 3 (id=2248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) 385.620331ms ago: executing program 3 (id=2249): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, 0x0) 376.104543ms ago: executing program 4 (id=2250): unshare(0x20000400) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x0, 0x0) 238.024967ms ago: executing program 1 (id=2251): r0 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00') 236.971778ms ago: executing program 3 (id=2252): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0) 171.848574ms ago: executing program 4 (id=2253): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) 76.416441ms ago: executing program 1 (id=2254): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x38, r1, 0x1, 0x70bd2b, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_IE={0x9, 0x3, "f269100593"}]}]}, 0x38}}, 0x48014) 13.884536ms ago: executing program 3 (id=2255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x5, "1813709d13"}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9203effbb1bc"}, @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x0) 0s ago: executing program 4 (id=2256): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x800454d3, 0x0) kernel console output (not intermixed with test programs): .048030][T10439] netlink: 'syz.4.1361': attribute type 1 has an invalid length. [ 217.496420][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.520486][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.544484][ T35] bond0 (unregistering): Released all slaves [ 217.578999][T10445] tipc: Started in network mode [ 217.584071][T10445] tipc: Node identity 5f6c656e3a20380a, cluster identity 4711 [ 217.616972][T10445] tipc: Enabling of bearer rejected, failed to enable media [ 218.206142][ T1180] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 218.218730][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 218.408285][ T1180] usb 4-1: Using ep0 maxpacket: 8 [ 218.426026][ T5226] Bluetooth: hci1: command tx timeout [ 218.433087][ T35] hsr_slave_0: left promiscuous mode [ 218.442636][ T1180] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.454093][ T35] hsr_slave_1: left promiscuous mode [ 218.476738][ T1180] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 218.526608][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.534116][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.542036][ T1180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.577653][ T1180] usb 4-1: config 0 descriptor?? [ 218.589315][ T1180] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 218.597826][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.624194][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.644606][T10520] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1379'. [ 218.687296][ T35] veth1_macvtap: left promiscuous mode [ 218.693021][ T35] veth0_macvtap: left promiscuous mode [ 218.702900][ T35] veth1_vlan: left promiscuous mode [ 218.713530][ T35] veth0_vlan: left promiscuous mode [ 219.291198][T10531] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.313360][ T29] audit: type=1326 audit(1725999075.132:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fc1f7def9 code=0x0 [ 219.632603][ T1180] gspca_vc032x: reg_r err -71 [ 219.641462][ T1180] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 219.668363][ T1180] usb 4-1: USB disconnect, device number 12 [ 219.782204][ T35] team0 (unregistering): Port device team_slave_1 removed [ 219.855515][ T35] team0 (unregistering): Port device team_slave_0 removed [ 220.507819][ T5226] Bluetooth: hci1: command tx timeout [ 220.745497][T10513] netlink: 'syz.4.1379': attribute type 29 has an invalid length. [ 221.096506][T10393] chnl_net:caif_netlink_parms(): no params data found [ 221.463941][T10667] UBIFS error (pid: 10667): cannot open "./file0", error -22 [ 221.501156][T10668] Cannot find set identified by id 0 to match [ 221.607252][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.614469][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.640021][T10393] bridge_slave_0: entered allmulticast mode [ 221.658013][T10393] bridge_slave_0: entered promiscuous mode [ 221.687196][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.704881][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.715276][T10393] bridge_slave_1: entered allmulticast mode [ 221.733291][T10393] bridge_slave_1: entered promiscuous mode [ 221.857353][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 221.902902][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.917572][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.033012][T10393] team0: Port device team_slave_0 added [ 222.051236][ T46] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 222.058540][T10393] team0: Port device team_slave_1 added [ 222.066996][ T5280] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 222.080615][ T46] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 222.102093][ T46] usb 4-1: Manufacturer: syz [ 222.131559][ T46] usb 4-1: config 0 descriptor?? [ 222.152037][ T46] hub 4-1:0.0: bad descriptor, ignoring hub [ 222.159650][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.170200][ T46] hub 4-1:0.0: probe with driver hub failed with error -5 [ 222.173889][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.190409][ T46] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 222.221240][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.240057][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.247590][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.255660][ T46] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 222.274893][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.305169][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 222.324892][ T5280] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.338545][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.364356][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 222.379231][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 222.390271][T10393] hsr_slave_0: entered promiscuous mode [ 222.398593][T10393] hsr_slave_1: entered promiscuous mode [ 222.399739][ T5280] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.415538][ T46] usb 4-1: USB disconnect, device number 13 [ 222.422297][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.435525][ T46] ftdi_sio 4-1:0.0: device disconnected [ 222.444018][T10393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.446963][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 222.459777][T10393] Cannot create hsr debugfs directory [ 222.486897][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 222.509561][ T5280] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.517689][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.536710][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 222.561349][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 222.587106][ T5226] Bluetooth: hci1: command tx timeout [ 222.600631][ T5280] usb 2-1: string descriptor 0 read error: -22 [ 222.617828][ T5280] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 222.636612][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.672851][ T5280] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 222.960307][ T5280] usb 2-1: USB disconnect, device number 13 [ 223.258331][ T5331] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 223.270116][T10393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.284753][T10393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.312539][T10393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.327171][T10393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.362625][ T29] audit: type=1326 audit(1725999079.182:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10935 comm="syz.4.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5ff77def9 code=0x0 [ 223.460222][ T5331] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 223.480138][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.513105][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.523616][ T5331] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 223.536717][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.543966][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.553214][ T5331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.572716][ T5331] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 223.580105][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.587387][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.591577][ T5331] usb 3-1: No valid video chain found. [ 223.813827][ T5275] usb 3-1: USB disconnect, device number 12 [ 223.945374][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.045018][T10393] veth0_vlan: entered promiscuous mode [ 224.085214][T10393] veth1_vlan: entered promiscuous mode [ 224.152619][T10393] veth0_macvtap: entered promiscuous mode [ 224.165105][T10393] veth1_macvtap: entered promiscuous mode [ 224.248528][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.283972][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.305726][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.318906][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.338335][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.353949][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.366466][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.378579][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.408852][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.442022][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.469656][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.509278][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.566369][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.588966][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.615860][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.636222][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.655899][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.666447][ T5226] Bluetooth: hci1: command tx timeout [ 224.677871][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.689071][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.699487][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.742177][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.767584][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.802843][T10977] mmap: syz.3.1416 (10977): VmData 37425152 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 224.871755][T10393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.886830][T10393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.902957][T10393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.913481][T10393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.340629][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.367910][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.437966][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.454781][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.489765][T11011] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 226.446089][ T5331] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.666398][ T5331] usb 5-1: Using ep0 maxpacket: 8 [ 226.687940][ T5331] usb 5-1: New USB device found, idVendor=10c4, idProduct=81c8, bcdDevice=fa.86 [ 226.706147][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.714280][ T5331] usb 5-1: Product: syz [ 226.728643][ T5331] usb 5-1: Manufacturer: syz [ 226.932178][ T5331] usb 5-1: SerialNumber: syz [ 226.939637][ T5331] usb 5-1: config 0 descriptor?? [ 226.948247][ T5331] cp210x 5-1:0.0: cp210x converter detected [ 227.189380][ T5331] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 227.205202][ T5331] cp210x 5-1:0.0: querying part number failed [ 227.216618][ T5331] usb 5-1: cp210x converter now attached to ttyUSB0 [ 227.241164][ T5331] usb 5-1: USB disconnect, device number 12 [ 227.275512][ T5331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.280218][ T5331] cp210x 5-1:0.0: device disconnected [ 228.239845][T11144] loop4: detected capacity change from 0 to 2 [ 228.543003][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.211878][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.404029][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.422359][T11159] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1462'. [ 229.452148][T11159] openvswitch: netlink: Key type 29 is not supported [ 229.676650][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.063880][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.072527][ T35] bridge_slave_1: left allmulticast mode [ 230.083768][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.094578][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.102399][ T35] bridge_slave_1: left promiscuous mode [ 230.112708][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.128414][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.138064][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.138123][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.183019][ T35] bridge_slave_0: left allmulticast mode [ 230.200889][ T35] bridge_slave_0: left promiscuous mode [ 230.211314][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.316332][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 230.549281][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 230.576929][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.588336][ T8] usb 2-1: config 0 descriptor?? [ 230.845481][ T1180] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 231.040203][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 231.058621][ T1180] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 231.063016][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.074341][ T1180] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.102257][ T8] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 231.109523][ T8] [drm] Initialized udl on minor 2 [ 231.123202][ T1180] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.133038][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.147602][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.148302][ T1180] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 231.165549][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 231.179945][ T1180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.181202][ T35] bond0 (unregistering): Released all slaves [ 231.198176][ T1180] usb 3-1: config 0 descriptor?? [ 231.202942][ T5331] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.220008][ T1180] usb-storage 3-1:0.0: USB Mass Storage device detected [ 231.221042][ T8] usb 2-1: USB disconnect, device number 14 [ 231.237017][ T5331] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 231.282815][ T1180] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 231.498223][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 231.537980][T11251] macvtap0: entered promiscuous mode [ 231.545480][T11251] macvtap0: left promiscuous mode [ 232.027051][ T5280] usb 3-1: USB disconnect, device number 13 [ 232.098083][T11292] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 232.190442][ T5226] Bluetooth: hci1: command tx timeout [ 232.280087][ T35] hsr_slave_0: left promiscuous mode [ 232.403859][ T35] hsr_slave_1: left promiscuous mode [ 232.447569][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.464643][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.487575][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.521884][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.617601][ T35] veth1_macvtap: left promiscuous mode [ 232.627437][ T35] veth0_macvtap: left promiscuous mode [ 232.633260][ T35] veth1_vlan: left promiscuous mode [ 232.642555][ T35] veth0_vlan: left promiscuous mode [ 232.659660][T11385] Bluetooth: hci3: unsupported parameter 64512 [ 232.689144][T11385] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 232.721348][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 233.355174][T11400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.138723][T11420] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 234.268250][ T5226] Bluetooth: hci1: command tx timeout [ 234.885339][ T35] team0 (unregistering): Port device team_slave_1 removed [ 235.040890][ T35] team0 (unregistering): Port device team_slave_0 removed [ 235.945030][T11461] sctp: [Deprecated]: syz.1.1520 (pid 11461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.945030][T11461] Use struct sctp_sack_info instead [ 236.209641][T11186] chnl_net:caif_netlink_parms(): no params data found [ 236.347603][ T5226] Bluetooth: hci1: command tx timeout [ 236.839925][T11535] loop0: detected capacity change from 0 to 128 [ 236.973254][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.007155][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.025005][T11186] bridge_slave_0: entered allmulticast mode [ 237.049923][T11186] bridge_slave_0: entered promiscuous mode [ 237.098223][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.126592][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.137046][T11186] bridge_slave_1: entered allmulticast mode [ 237.150424][T11186] bridge_slave_1: entered promiscuous mode [ 237.166282][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 237.282640][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.354224][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.374056][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.395242][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 237.425925][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.461457][ T8] usb 2-1: config 0 descriptor?? [ 237.599956][T11186] team0: Port device team_slave_0 added [ 237.677432][T11186] team0: Port device team_slave_1 added [ 237.732290][ T5331] usb 2-1: USB disconnect, device number 15 [ 237.785434][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.831604][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.896959][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.922824][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.936058][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 237.940890][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.989284][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.119151][T11186] hsr_slave_0: entered promiscuous mode [ 238.127653][T11186] hsr_slave_1: entered promiscuous mode [ 238.135137][T11186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.145443][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 238.153876][T11186] Cannot create hsr debugfs directory [ 238.161758][ T8] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 238.176772][ T8] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 238.203302][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.231176][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.261868][ T8] usb 3-1: config 0 has no interface number 0 [ 238.272062][ T8] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 238.303694][ T8] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 238.322830][ T8] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.351337][ T8] usb 3-1: config 0 interface 125 has no altsetting 0 [ 238.363683][ T8] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 238.377708][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.406990][ T8] usb 3-1: Product: syz [ 238.414708][ T8] usb 3-1: Manufacturer: syz [ 238.422779][ T8] usb 3-1: SerialNumber: syz [ 238.428662][ T5226] Bluetooth: hci1: command tx timeout [ 238.450937][ T8] usb 3-1: config 0 descriptor?? [ 238.769963][T11773] sctp: [Deprecated]: syz.1.1537 (pid 11773) Use of int in max_burst socket option deprecated. [ 238.769963][T11773] Use struct sctp_assoc_value instead [ 238.777015][ T8] usb 3-1: USB disconnect, device number 14 [ 239.324051][T11186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.342468][T11186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.370868][T11186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.421667][T11186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.768686][T11186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.832232][T11186] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.891476][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.898889][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.960238][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.967654][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.133858][ T5275] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.148015][ T29] audit: type=1326 audit(1725999095.972:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11830 comm="syz.3.1548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08557def9 code=0x0 [ 240.174403][ T5275] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.190370][ T5275] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 240.540854][T11186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.643082][T11186] veth0_vlan: entered promiscuous mode [ 240.669465][T11186] veth1_vlan: entered promiscuous mode [ 240.755380][T11186] veth0_macvtap: entered promiscuous mode [ 240.782348][T11186] veth1_macvtap: entered promiscuous mode [ 240.823220][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.834504][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.845484][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.865618][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.889261][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.925293][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.944081][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.958969][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.970293][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.981503][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.994527][T11186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.037741][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.070008][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.082717][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.112883][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.132812][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.160312][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.180365][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.212362][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.241018][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.276678][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.308382][T11186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.353125][T11186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.383967][T11186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.404748][T11186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.427099][T11186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.635893][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 241.688687][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.715199][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.823207][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.855296][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.856932][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.903317][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.956001][ T9] usb 3-1: config 1 has no interface number 0 [ 241.962235][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.992921][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 242.019485][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.035835][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.064385][ T9] usb 3-1: Product: syz [ 242.071261][T11897] ptrace attach of ""[11898] was attempted by "./syz-executor exec"[11897] [ 242.082135][ T9] usb 3-1: Manufacturer: syz [ 242.095908][ T9] usb 3-1: SerialNumber: syz [ 242.955667][ T9] cdc_ncm 3-1:1.1: bind() failure [ 243.168251][T11948] netlink: 'syz.1.1580': attribute type 3 has an invalid length. [ 243.177502][T11948] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1580'. [ 243.232905][ T46] usb 3-1: USB disconnect, device number 15 [ 243.590544][T11972] Process accounting resumed [ 244.314214][ T29] audit: type=1326 audit(1725999100.132:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12002 comm="syz.4.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5ff77def9 code=0x0 [ 244.524064][ T1057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.109762][T12041] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 246.131244][T12041] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 246.190175][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.210219][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.225292][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.235542][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.248166][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.258086][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.349240][ T1057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.608956][ T1057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.784478][T12074] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.1618'. [ 246.813311][T12074] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 246.856455][T12074] netlink: 121 bytes leftover after parsing attributes in process `syz.3.1618'. [ 246.901181][ T1057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.620409][ T1057] bridge_slave_1: left allmulticast mode [ 247.631461][ T1057] bridge_slave_1: left promiscuous mode [ 247.663757][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.734046][ T1057] bridge_slave_0: left allmulticast mode [ 247.744337][ T1057] bridge_slave_0: left promiscuous mode [ 247.767565][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.257563][ T5331] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 248.347797][ T5226] Bluetooth: hci1: command tx timeout [ 248.458277][ T5331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.469128][ T5331] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.483632][ T5331] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.493581][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.519840][ T5331] usb 2-1: config 0 descriptor?? [ 248.772270][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.791907][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.806634][ T1057] bond0 (unregistering): Released all slaves [ 248.837310][ T5275] usb 2-1: USB disconnect, device number 16 [ 248.914292][ T5331] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 248.981999][T12043] chnl_net:caif_netlink_parms(): no params data found [ 249.170582][ T5331] usb 5-1: Using ep0 maxpacket: 16 [ 249.202332][ T5331] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 249.236069][ T5331] usb 5-1: config 0 has no interface number 0 [ 249.255219][ T5331] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 249.272921][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.281553][ T5331] usb 5-1: Product: syz [ 249.287311][ T5331] usb 5-1: Manufacturer: syz [ 249.309264][ T5331] usb 5-1: SerialNumber: syz [ 249.324572][ T5331] usb 5-1: config 0 descriptor?? [ 249.644160][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.673656][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.688501][T12303] netlink: 'syz.3.1644': attribute type 11 has an invalid length. [ 249.692061][T12043] bridge_slave_0: entered allmulticast mode [ 249.716274][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 249.721650][T12043] bridge_slave_0: entered promiscuous mode [ 249.768250][ T1057] hsr_slave_0: left promiscuous mode [ 249.774675][ T1057] hsr_slave_1: left promiscuous mode [ 249.805563][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.819781][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.837258][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.844888][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.887869][ T1057] veth1_macvtap: left promiscuous mode [ 249.893741][ T1057] veth0_macvtap: left promiscuous mode [ 249.900114][ T1057] veth1_vlan: left promiscuous mode [ 249.906377][ T1057] veth0_vlan: left promiscuous mode [ 250.428214][ T5226] Bluetooth: hci1: command tx timeout [ 250.853518][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 250.937280][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 251.425831][ T5331] usb 5-1: USB disconnect, device number 13 [ 251.935157][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.957258][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.964738][T12043] bridge_slave_1: entered allmulticast mode [ 251.992325][T12043] bridge_slave_1: entered promiscuous mode [ 252.108042][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.169868][T12351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.178111][T12351] IPv6: NLM_F_CREATE should be set when creating new route [ 252.185409][T12351] IPv6: NLM_F_CREATE should be set when creating new route [ 252.264678][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.359216][T12351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.505958][ T5226] Bluetooth: hci1: command tx timeout [ 252.552258][T12043] team0: Port device team_slave_0 added [ 252.590519][T12043] team0: Port device team_slave_1 added [ 252.723274][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.736269][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.763605][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.849445][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.865074][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.891110][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.912193][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.182320][T12043] hsr_slave_0: entered promiscuous mode [ 253.203320][T12043] hsr_slave_1: entered promiscuous mode [ 253.212306][T12043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.220258][T12043] Cannot create hsr debugfs directory [ 254.409016][T12603] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1672'. [ 254.587038][ T5226] Bluetooth: hci1: command tx timeout [ 254.603813][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802fc97c00: rx timeout, send abort [ 254.617159][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802fc97c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.859386][T12043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.890520][T12043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.940529][T12043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.960331][T12043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.034169][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 255.370899][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.460875][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.501236][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.508540][ T9637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.553369][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.560734][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.270931][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.278079][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.301774][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.433749][T12043] veth0_vlan: entered promiscuous mode [ 256.510831][T12043] veth1_vlan: entered promiscuous mode [ 256.692944][T12043] veth0_macvtap: entered promiscuous mode [ 256.741863][T12043] veth1_macvtap: entered promiscuous mode [ 256.825577][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.865290][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.896478][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.915169][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.937096][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.956524][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.976429][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.998352][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.022252][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.047045][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.068364][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.133120][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.177020][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.196434][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.221364][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.234168][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.249015][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.260726][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.273234][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.284705][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.299979][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.330859][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.461168][T12043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.492188][T12043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.523186][T12043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.542927][T12043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.712862][T12732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.995050][ T9637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.022804][ T9637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.117951][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.163250][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.209496][ T940] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.418842][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.441014][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.452052][ T940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.487258][ T940] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 258.501824][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.525142][ T940] usb 5-1: config 0 descriptor?? [ 258.764180][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.828134][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.863299][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.906653][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.933284][ T940] usbhid 5-1:0.0: can't add hid device: -71 [ 258.957135][ T940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 258.978843][ T940] usb 5-1: USB disconnect, device number 14 [ 259.498398][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.556717][ T940] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 259.645315][T12859] ALSA: seq fatal error: cannot create timer (-22) [ 259.659531][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.782934][ T940] usb 5-1: Using ep0 maxpacket: 8 [ 259.791322][ T940] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.805844][ T940] usb 5-1: config 0 has no interface number 0 [ 259.831715][ T940] usb 5-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 259.858111][ T940] usb 5-1: config 0 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 256 [ 259.879799][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.891998][ T940] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.924749][T12862] rdma_rxe: rxe_newlink: failed to add team0 [ 259.930834][ T940] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.959215][ T940] usb 5-1: config 0 interface 1 has no altsetting 0 [ 259.975904][ T940] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 259.996395][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.013085][ T940] usb 5-1: config 0 descriptor?? [ 260.032747][ T940] hso 5-1:0.1: Failed to find BULK OUT ep [ 260.114677][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.328980][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.353542][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.378144][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.389107][ T5331] usb 5-1: USB disconnect, device number 15 [ 260.401927][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.420103][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.430895][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.521278][ T35] bridge_slave_1: left allmulticast mode [ 260.536709][ T35] bridge_slave_1: left promiscuous mode [ 260.544532][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.570104][ T35] bridge_slave_0: left allmulticast mode [ 260.581217][ T35] bridge_slave_0: left promiscuous mode [ 260.597925][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.385166][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.409580][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.421895][ T35] bond0 (unregistering): Released all slaves [ 261.454561][T12905] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.464607][T12905] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.473998][T12905] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.483256][T12905] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.494990][T12905] vxlan0: entered promiscuous mode [ 261.502928][T12905] vxlan0: entered allmulticast mode [ 261.513096][T12905] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.522355][T12905] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.531421][T12905] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.540683][T12905] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.215977][ T940] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 262.227849][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.240129][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.249867][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.261652][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.280557][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 262.288293][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.332556][ T35] hsr_slave_0: left promiscuous mode [ 262.365947][ T35] hsr_slave_1: left promiscuous mode [ 262.380080][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.387883][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.397204][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.408342][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.451163][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 262.463414][ T35] veth1_macvtap: left promiscuous mode [ 262.469703][ T35] veth0_macvtap: left promiscuous mode [ 262.476914][ T35] veth1_vlan: left promiscuous mode [ 262.483340][ T35] veth0_vlan: left promiscuous mode [ 262.493654][ T940] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 262.503066][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.512784][ T5230] Bluetooth: hci0: command tx timeout [ 262.521638][ T940] usb 3-1: Product: syz [ 262.526107][ T940] usb 3-1: Manufacturer: syz [ 262.530875][ T940] usb 3-1: SerialNumber: syz [ 262.549332][ T940] usb 3-1: config 0 descriptor?? [ 262.559187][ T940] gspca_main: sq905-2.14.0 probing 2770:9120 [ 263.513465][ T46] infiniband syz0: ib_query_port failed (-19) [ 263.520700][ T35] team0 (unregistering): Port device team_slave_1 removed [ 263.593844][ T940] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 263.612147][ T940] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 263.629105][ T940] usb 3-1: USB disconnect, device number 16 [ 263.665047][ T35] team0 (unregistering): Port device team_slave_0 removed [ 263.763247][ T5297] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 263.961765][ T5297] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 263.974145][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.985718][ T5297] usb 4-1: config 0 descriptor?? [ 263.998541][ T5297] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 264.354090][ T5230] Bluetooth: hci1: command tx timeout [ 264.597986][ T5230] Bluetooth: hci0: command tx timeout [ 264.843586][ T5297] gspca_stv06xx: I2C: Read error writing address: -71 [ 264.880925][ T5297] usb 4-1: USB disconnect, device number 14 [ 265.263215][T12880] chnl_net:caif_netlink_parms(): no params data found [ 265.716487][ T5275] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.922636][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.943415][T12880] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.965506][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.977078][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.984432][T12880] bridge_slave_0: entered allmulticast mode [ 265.994963][ T5275] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 266.012442][T12880] bridge_slave_0: entered promiscuous mode [ 266.029638][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.040822][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.059939][T12880] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.078082][ T5275] usb 3-1: config 0 descriptor?? [ 266.084379][T12880] bridge_slave_1: entered allmulticast mode [ 266.131365][T12880] bridge_slave_1: entered promiscuous mode [ 266.212136][T12954] chnl_net:caif_netlink_parms(): no params data found [ 266.372769][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.409589][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.426326][ T5230] Bluetooth: hci1: command tx timeout [ 266.559995][ T5275] logitech-hidpp-device 0003:046D:C086.0011: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 266.618630][T12880] team0: Port device team_slave_0 added [ 266.664747][T12880] team0: Port device team_slave_1 added [ 266.678263][ T5230] Bluetooth: hci0: command tx timeout [ 266.773603][ T5331] usb 3-1: USB disconnect, device number 17 [ 266.886848][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.055233][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.072284][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.080124][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.107493][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.179036][T13389] mkiss: ax0: crc mode is auto. [ 267.225564][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.237575][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.268748][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.338463][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.412918][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.422096][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.430203][T12954] bridge_slave_0: entered allmulticast mode [ 267.439121][T12954] bridge_slave_0: entered promiscuous mode [ 267.504183][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.521560][T13449] netlink: 'syz.2.1780': attribute type 7 has an invalid length. [ 267.613006][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.623382][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.643928][T12954] bridge_slave_1: entered allmulticast mode [ 267.655676][T12954] bridge_slave_1: entered promiscuous mode [ 267.723399][T12880] hsr_slave_0: entered promiscuous mode [ 267.746636][T12880] hsr_slave_1: entered promiscuous mode [ 267.758557][T12880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.767736][T12880] Cannot create hsr debugfs directory [ 267.879483][T12954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.963771][T12954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.977395][ T5297] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 268.160660][T12954] team0: Port device team_slave_0 added [ 268.181072][T12954] team0: Port device team_slave_1 added [ 268.222056][ T5297] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 268.236045][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.258105][ T5297] usb 3-1: config 0 descriptor?? [ 268.324650][ T35] bridge_slave_1: left allmulticast mode [ 268.332269][ T35] bridge_slave_1: left promiscuous mode [ 268.341059][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.358954][ T35] bridge_slave_0: left allmulticast mode [ 268.376240][ T35] bridge_slave_0: left promiscuous mode [ 268.382568][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.507836][ T5230] Bluetooth: hci1: command tx timeout [ 268.714948][ T5297] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 268.756196][ T5230] Bluetooth: hci0: command tx timeout [ 268.964522][T13632] netlink: 'syz.4.1790': attribute type 29 has an invalid length. [ 269.273040][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.289180][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.301435][ T35] bond0 (unregistering): Released all slaves [ 269.316828][T12954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.326520][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.354496][T12954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.508395][T12954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.515509][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.543110][T12954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.769425][ T9] usb 3-1: USB disconnect, device number 18 [ 269.853752][T12954] hsr_slave_0: entered promiscuous mode [ 269.866956][T12954] hsr_slave_1: entered promiscuous mode [ 269.873417][T12954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.882162][T12954] Cannot create hsr debugfs directory [ 269.996634][ T35] hsr_slave_0: left promiscuous mode [ 270.016032][ T5297] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 270.024021][ T35] hsr_slave_1: left promiscuous mode [ 270.033293][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.041128][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.048000][T13717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.057062][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.064781][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.115684][ T35] veth1_macvtap: left promiscuous mode [ 270.122401][ T35] veth0_macvtap: left promiscuous mode [ 270.130030][ T35] veth1_vlan: left promiscuous mode [ 270.135602][ T35] veth0_vlan: left promiscuous mode [ 270.231036][ T5297] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.249469][ T5297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.262655][ T5297] usb 4-1: Product: syz [ 270.273988][ T5297] usb 4-1: Manufacturer: syz [ 270.282895][ T5297] usb 4-1: SerialNumber: syz [ 270.300473][ T5297] usb 4-1: config 0 descriptor?? [ 270.462415][ T5275] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 270.596273][ T5230] Bluetooth: hci1: command tx timeout [ 270.679082][ T5275] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.697115][ T5275] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.718890][ T5275] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.726336][ T5297] usb 4-1: Firmware: major: 202, minor: 255, hardware type: RZUSB (3) [ 270.739737][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.759137][T13721] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.784154][ T5275] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.929631][ T5297] usb 4-1: failed to fetch extended address, random address set [ 271.063199][ T5275] usb 5-1: USB disconnect, device number 16 [ 271.422383][ T35] team0 (unregistering): Port device team_slave_1 removed [ 271.662783][ T35] team0 (unregistering): Port device team_slave_0 removed [ 273.366962][ T5297] usb 4-1: USB disconnect, device number 15 [ 274.213254][T12880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.307910][T13920] Bluetooth: MGMT ver 1.23 [ 274.389601][T12880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.417593][T12880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.442551][T12880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.659910][T13940] block nbd2: NBD_DISCONNECT [ 274.688144][T13940] block nbd2: Send disconnect failed -107 [ 274.713994][T13939] block nbd2: Disconnected due to user request. [ 274.744600][T13939] block nbd2: shutting down sockets [ 274.892062][T12880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.992684][T12880] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.055417][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.062998][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.158811][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.166099][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.252061][T12954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.338707][T12954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.374362][T12954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.389080][T13981] input: syz0 as /devices/virtual/input/input22 [ 275.449159][T12954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.836913][T12954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.896186][T12954] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.923846][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.931213][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.000284][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.007625][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.263086][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.556860][T12880] veth0_vlan: entered promiscuous mode [ 276.641009][T12880] veth1_vlan: entered promiscuous mode [ 276.801744][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.905472][T12880] veth0_macvtap: entered promiscuous mode [ 276.940014][T12880] veth1_macvtap: entered promiscuous mode [ 277.288272][T12954] veth0_vlan: entered promiscuous mode [ 277.329764][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.360554][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.377454][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.402837][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.419022][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.442347][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.452718][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.474214][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.510682][T12880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.523725][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.536715][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.550423][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.562382][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.573005][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.584670][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.606885][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.625204][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.654898][T12880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.773343][T12880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.783833][T12880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.795479][T12880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.805389][T12880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.834671][T12954] veth1_vlan: entered promiscuous mode [ 277.901695][T14055] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 278.161283][T12954] veth0_macvtap: entered promiscuous mode [ 278.212317][T12954] veth1_macvtap: entered promiscuous mode [ 278.259729][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.294244][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.337715][ T5331] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 278.375002][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.399137][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.410557][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.453320][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.472305][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.484947][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.516466][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.529714][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.543468][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.556828][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.570445][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.586428][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.611561][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.621033][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.622389][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.658048][ T5331] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 278.660181][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.689369][ T5331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.702165][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.713004][ T5331] usb 3-1: config 0 descriptor?? [ 278.713251][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.732755][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.744124][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.758992][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.771967][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.784468][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.800288][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.811857][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.839933][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.895199][T12954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.937620][T12954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.958984][T12954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.980425][T12954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.247841][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.274895][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.359316][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.381723][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.576097][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 279.586701][ T5331] hid-led 0003:27B8:01ED.0012: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 279.624620][ T5331] hid-led 0003:27B8:01ED.0012: ThingM blink(1) v1 initialized [ 279.701622][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 279.826252][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.841282][ T46] usb 3-1: USB disconnect, device number 19 [ 279.845826][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 279.874262][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.890182][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.904902][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.929047][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.940821][ T8] usb 4-1: config 0 descriptor?? [ 279.949729][T14127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 280.003271][T14181] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1869'. [ 280.013174][T14181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1869'. [ 280.162897][T14185] lo: entered allmulticast mode [ 280.439804][ T8] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 280.478593][ T8] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 280.510885][ T8] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 280.771214][ T5275] usb 4-1: USB disconnect, device number 16 [ 281.178098][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.795132][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.885092][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.963748][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.081932][ T62] bridge_slave_1: left allmulticast mode [ 282.088659][ T62] bridge_slave_1: left promiscuous mode [ 282.094553][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.104805][ T62] bridge_slave_0: left allmulticast mode [ 282.115618][ T62] bridge_slave_0: left promiscuous mode [ 282.149002][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.446620][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 282.735406][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.765024][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.781075][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.792100][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.802935][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.836479][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.184381][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.200791][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.212905][ T62] bond0 (unregistering): Released all slaves [ 283.375425][T14264] syz.4.1889 (14264) used greatest stack depth: 18176 bytes left [ 284.286915][ T62] hsr_slave_0: left promiscuous mode [ 284.326471][ T62] hsr_slave_1: left promiscuous mode [ 284.333010][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.342379][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.363008][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.376112][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.441278][ T62] veth1_macvtap: left promiscuous mode [ 284.457342][ T62] veth0_macvtap: left promiscuous mode [ 284.463109][ T62] veth1_vlan: left promiscuous mode [ 284.471122][ T62] veth0_vlan: left promiscuous mode [ 284.988890][ T5230] Bluetooth: hci1: command tx timeout [ 285.197733][T14369] hugetlbfs: Invalid gid '0x00000000ffffffff' [ 286.189502][ T62] team0 (unregistering): Port device team_slave_1 removed [ 286.314918][ T62] team0 (unregistering): Port device team_slave_0 removed [ 287.074849][ T5230] Bluetooth: hci1: command tx timeout [ 287.076045][ T5275] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 287.286956][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 287.304357][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.321641][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.341304][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.364074][ T5275] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.375358][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.389610][ T5275] usb 2-1: config 0 descriptor?? [ 287.479055][T14346] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1903'. [ 287.849466][ T5275] HID 045e:07da: Invalid code 65791 type 1 [ 287.875261][T14267] chnl_net:caif_netlink_parms(): no params data found [ 287.908979][ T5275] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input24 [ 287.939248][ T5275] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 288.175063][ T9] usb 2-1: USB disconnect, device number 17 [ 288.357103][T14267] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.365118][T14267] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.382493][T14267] bridge_slave_0: entered allmulticast mode [ 288.398107][T14267] bridge_slave_0: entered promiscuous mode [ 288.429032][T14267] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.451218][T14267] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.473349][T14267] bridge_slave_1: entered allmulticast mode [ 288.479764][T14267] bridge_slave_1: entered promiscuous mode [ 288.598044][T14267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.601870][T14267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.713386][T14267] team0: Port device team_slave_0 added [ 288.720275][T14267] team0: Port device team_slave_1 added [ 288.820953][T14267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.843040][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.905562][T14267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.937769][T14267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.953742][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.034713][T14267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.146961][ T5230] Bluetooth: hci1: command tx timeout [ 289.295140][T14267] hsr_slave_0: entered promiscuous mode [ 289.320727][T14267] hsr_slave_1: entered promiscuous mode [ 289.349047][T14267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.366815][T14267] Cannot create hsr debugfs directory [ 289.396874][T14716] team_slave_0: entered allmulticast mode [ 289.831933][T14761] input: syz0 as /devices/virtual/input/input25 [ 290.645668][T14840] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 290.666930][T14840] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.1968'. [ 290.686879][T14840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1968'. [ 290.707001][T14840] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 290.748833][T14267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.786251][T14267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.818648][T14267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.838722][T14267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.876926][ T5275] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 291.074397][ T5275] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 291.091093][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.119705][ T5275] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 291.147777][ T5275] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 291.179754][T14267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.187206][ T5275] usb 4-1: Manufacturer: syz [ 291.206970][ T5275] usb 4-1: config 0 descriptor?? [ 291.226526][ T5230] Bluetooth: hci1: command tx timeout [ 291.280630][T14267] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.327044][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.334401][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.344234][ T5275] rc_core: IR keymap rc-hauppauge not found [ 291.367656][ T5275] Registered IR keymap rc-empty [ 291.380756][ T5275] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 291.404794][ T29] audit: type=1326 audit(1725999147.222:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14869 comm="syz.1.1976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f215117def9 code=0x0 [ 291.445617][T14836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.449614][ T5275] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 291.479550][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.486808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.498950][T14836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.660945][ T9] usb 4-1: USB disconnect, device number 17 [ 291.920925][T14904] batadv0: entered promiscuous mode [ 291.941101][T14904] batadv_slave_0: entered promiscuous mode [ 291.954939][T14904] batadv_slave_0: left promiscuous mode [ 291.961432][T14904] batadv0: left promiscuous mode [ 292.075275][T14267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.202168][T14267] veth0_vlan: entered promiscuous mode [ 292.263747][T14267] veth1_vlan: entered promiscuous mode [ 292.395646][T14267] veth0_macvtap: entered promiscuous mode [ 292.455211][T14267] veth1_macvtap: entered promiscuous mode [ 292.541153][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.574205][T14925] random: crng reseeded on system resumption [ 292.588852][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.616362][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.637056][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.664753][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.702169][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.747813][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.770838][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.807621][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.827482][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.867781][T14267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.891209][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.927518][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.947032][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.967538][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.981186][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.007206][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.027705][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.049366][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.073140][T14267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.091172][T14267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.116541][T14267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.180140][T14267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.217081][T14267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.251120][T14267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.286378][T14267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.639235][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.670771][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.745590][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.761571][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.797564][ T5275] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 293.999692][ T5275] usb 3-1: config 0 interface 0 has no altsetting 0 [ 294.007514][ T5275] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 294.028316][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.055088][ T5275] usb 3-1: config 0 descriptor?? [ 295.118198][ T5275] video4linux radio32: keene_cmd_set failed (-71) [ 295.142810][ T5275] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 295.160663][ T5275] usb 3-1: USB disconnect, device number 20 [ 295.170518][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 295.225296][T14995] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.236257][T14995] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.253055][T14995] bridge0: entered allmulticast mode [ 296.241340][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.699598][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.781431][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.859688][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.981720][ T12] bridge_slave_1: left allmulticast mode [ 296.988759][ T12] bridge_slave_1: left promiscuous mode [ 296.994645][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.005011][ T12] bridge_slave_0: left allmulticast mode [ 297.011319][ T12] bridge_slave_0: left promiscuous mode [ 297.020832][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.008799][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 298.038818][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.049923][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.074960][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.148014][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.172390][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 298.180694][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.196603][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 298.238406][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.250693][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.273294][ T8] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 298.285680][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.332338][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.358318][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.383315][ T12] bond0 (unregistering): Released all slaves [ 298.707551][T15069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.733254][T15072] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 298.760319][ T8] uclogic 0003:28BD:0075.0015: interface is invalid, ignoring [ 299.007508][ T940] usb 5-1: USB disconnect, device number 17 [ 299.093211][ T12] hsr_slave_0: left promiscuous mode [ 299.100756][ T12] hsr_slave_1: left promiscuous mode [ 299.110853][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.119469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.135636][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.159071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.191084][ T12] veth1_macvtap: left promiscuous mode [ 299.196881][ T12] veth0_macvtap: left promiscuous mode [ 299.202642][ T12] veth1_vlan: left promiscuous mode [ 299.208182][ T12] veth0_vlan: left promiscuous mode [ 299.955976][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.067086][T15163] binder: 15162:15163 ioctl c0306201 0 returned -14 [ 300.277418][ T5230] Bluetooth: hci1: command tx timeout [ 300.473878][ T12] team0 (unregistering): Port device team_slave_1 removed [ 300.660741][ T12] team0 (unregistering): Port device team_slave_0 removed [ 302.022727][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 302.038144][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.346507][ T5230] Bluetooth: hci1: command tx timeout [ 302.352098][T15299] netlink: 'syz.4.2063': attribute type 10 has an invalid length. [ 302.452003][T15299] team0: Port device netdevsim0 added [ 302.505503][T15074] chnl_net:caif_netlink_parms(): no params data found [ 302.681694][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 302.881392][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 302.897212][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 302.949577][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.977351][T15074] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.988155][T15074] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.988351][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.005685][T15074] bridge_slave_0: entered allmulticast mode [ 303.013698][T15074] bridge_slave_0: entered promiscuous mode [ 303.036588][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.044680][ T8] usb 3-1: Product: syz [ 303.065671][ T8] usb 3-1: Manufacturer: syz [ 303.071016][T15074] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.086012][T15074] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.093282][ T8] usb 3-1: SerialNumber: syz [ 303.103669][T15074] bridge_slave_1: entered allmulticast mode [ 303.113052][ T8] usb 3-1: config 0 descriptor?? [ 303.128443][T15074] bridge_slave_1: entered promiscuous mode [ 303.134551][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 303.147244][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 303.336853][T15074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.365633][T15074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.544968][T15074] team0: Port device team_slave_0 added [ 303.585292][T15074] team0: Port device team_slave_1 added [ 303.717267][T15074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.717295][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.717327][T15074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.722539][T15074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.722564][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.722596][T15074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.781502][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (61) [ 303.914553][T15074] hsr_slave_0: entered promiscuous mode [ 303.930384][T15074] hsr_slave_1: entered promiscuous mode [ 303.932882][T15074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.933009][T15074] Cannot create hsr debugfs directory [ 303.988189][ T8] em28xx 3-1:0.0: Config register raw data: 0x3d [ 303.988234][ T8] em28xx 3-1:0.0: I2S Audio (5 sample rate(s)) [ 303.988255][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 304.198642][ T8] usb 3-1: USB disconnect, device number 21 [ 304.255446][ T29] audit: type=1326 audit(1725999160.072:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15551 comm="syz.3.2084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08557def9 code=0x0 [ 304.427478][ T5230] Bluetooth: hci1: command tx timeout [ 304.735888][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 304.846821][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 304.863375][T15074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.882500][T15074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.903736][T15074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.948878][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.970523][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 304.970814][T15074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.988677][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.998405][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.022470][T15579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 305.041691][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.059739][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.095170][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.148473][ T9] usb 2-1: config 0 descriptor?? [ 305.176194][ T9] cp210x 2-1:0.0: cp210x converter detected [ 305.251274][T15074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.310831][T15074] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.339151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.346451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.384979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.392317][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.514047][ T5331] usb 5-1: USB disconnect, device number 18 [ 305.596597][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 305.686066][ T940] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 305.782965][T15074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.825014][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 305.870014][T15074] veth0_vlan: entered promiscuous mode [ 305.889841][T15074] veth1_vlan: entered promiscuous mode [ 305.914779][ T940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.934778][T15074] veth0_macvtap: entered promiscuous mode [ 305.936985][ T940] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.949910][T15074] veth1_macvtap: entered promiscuous mode [ 305.973486][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.986971][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.006555][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.017842][ T940] usb 4-1: config 0 descriptor?? [ 306.020120][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.030447][ T940] pwc: Askey VC010 type 2 USB webcam detected. [ 306.038373][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.066131][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.067498][ T1180] usb 2-1: USB disconnect, device number 18 [ 306.080592][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.095339][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.101813][ T1180] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.110173][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.126443][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.158728][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.172583][T15074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.210257][ T1180] cp210x 2-1:0.0: device disconnected [ 306.214642][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.229781][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.241905][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.254670][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.267330][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.278628][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.289262][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.301153][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.311672][T15074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.325254][T15074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.342879][T15074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.383832][T15074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.398021][T15074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.415952][T15074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.424896][T15074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.457133][ T940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 306.467719][ T940] pwc: recv_control_msg error -32 req 02 val 2700 [ 306.507088][ T5226] Bluetooth: hci1: command tx timeout [ 306.651596][T15694] syzkaller1: entered promiscuous mode [ 306.658870][T15694] syzkaller1: entered allmulticast mode [ 306.684930][ T940] pwc: recv_control_msg error -71 req 04 val 1000 [ 306.698259][ T940] pwc: recv_control_msg error -71 req 04 val 1300 [ 306.709345][ T940] pwc: recv_control_msg error -71 req 04 val 1400 [ 306.717509][ T940] pwc: recv_control_msg error -71 req 02 val 2000 [ 306.724480][ T940] pwc: recv_control_msg error -71 req 02 val 2100 [ 306.732217][ T940] pwc: recv_control_msg error -71 req 04 val 1500 [ 306.740205][ T940] pwc: recv_control_msg error -71 req 02 val 2500 [ 306.749067][ T940] pwc: recv_control_msg error -71 req 02 val 2400 [ 306.766602][ T940] pwc: recv_control_msg error -71 req 02 val 2600 [ 306.786274][ T940] pwc: recv_control_msg error -71 req 02 val 2900 [ 306.803504][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.817583][ T940] pwc: recv_control_msg error -71 req 02 val 2800 [ 306.834866][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.843791][ T940] pwc: recv_control_msg error -71 req 04 val 1100 [ 306.858037][ T940] pwc: recv_control_msg error -71 req 04 val 1200 [ 306.879636][ T940] pwc: Registered as video71. [ 306.907490][ T940] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 306.928182][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.945142][ T940] usb 4-1: USB disconnect, device number 18 [ 306.952988][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.066482][ T5230] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 307.727723][T15761] syzkaller1: entered promiscuous mode [ 307.733298][T15761] syzkaller1: entered allmulticast mode [ 307.777017][ T5280] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 308.006458][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 308.014115][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.048444][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.063440][T15775] sctp: [Deprecated]: syz.2.2111 (pid 15775) Use of int in max_burst socket option. [ 308.063440][T15775] Use struct sctp_assoc_value instead [ 308.087908][ T5280] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 308.110192][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.123598][ T5280] usb 4-1: config 0 descriptor?? [ 308.161012][ T5280] usbhid 4-1:0.0: can't add hid device: -22 [ 308.182062][ T5280] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 308.193164][T15782] smk_cipso_doi:695 remove rc = -2 [ 309.369064][ T5280] usb 4-1: USB disconnect, device number 19 [ 309.783877][ T29] audit: type=1326 audit(1725999165.602:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 309.813375][ T29] audit: type=1326 audit(1725999165.602:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 309.836944][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.861202][ T1057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.898952][T15817] random: crng reseeded on system resumption [ 309.913329][ T29] audit: type=1326 audit(1725999165.602:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 309.934879][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.961028][ T29] audit: type=1326 audit(1725999165.602:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 309.982687][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.065408][ T29] audit: type=1326 audit(1725999165.602:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 310.153037][ T29] audit: type=1326 audit(1725999165.602:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 310.175172][ T29] audit: type=1326 audit(1725999165.632:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 310.208300][ T29] audit: type=1326 audit(1725999165.632:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 310.271130][ T29] audit: type=1326 audit(1725999165.632:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc1f7def9 code=0x7ffc0000 [ 311.520007][ T29] audit: type=1400 audit(1725999167.332:53): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=15833 comm="syz.2.2126" name="465" dev="tmpfs" ino=2388 [ 311.549198][T15836] loop0: detected capacity change from 0 to 127 [ 311.651576][ T1057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.892810][ T1057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.024632][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.025677][ T1057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.044540][ T5297] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 312.077209][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.092932][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.112559][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.135546][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 312.143702][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.226059][ T5297] usb 3-1: Using ep0 maxpacket: 16 [ 312.273465][ T5297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.307408][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.344125][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.382915][ T5297] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.411122][ T5297] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.436214][ T5297] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 312.455627][ T5297] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 312.501532][ T5297] usb 3-1: Manufacturer: syz [ 312.547871][ T5297] usb 3-1: config 0 descriptor?? [ 312.634957][ T1057] bridge_slave_1: left allmulticast mode [ 312.660184][ T1057] bridge_slave_1: left promiscuous mode [ 312.676286][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.727570][ T1057] bridge_slave_0: left allmulticast mode [ 312.741692][ T1057] bridge_slave_0: left promiscuous mode [ 312.752551][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.919839][ T5297] rc_core: IR keymap rc-hauppauge not found [ 312.935939][ T5297] Registered IR keymap rc-empty [ 312.941100][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.006101][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.077164][ T5297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 313.102836][ T5297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 313.147092][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.176884][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.214351][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.236844][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.266150][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.306396][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.346072][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.369300][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.407465][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.456799][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.488191][ T5297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.539919][ T5297] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 313.556777][ T5297] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 313.582466][ T5297] usb 3-1: USB disconnect, device number 22 [ 313.768518][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.785120][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.799633][ T1057] bond0 (unregistering): Released all slaves [ 313.821834][T15914] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.831141][T15914] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.840611][T15914] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.850340][T15914] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.268940][ T5230] Bluetooth: hci1: command tx timeout [ 314.378800][ T5275] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 314.578458][ T5275] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 314.619070][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.660060][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.688435][ T1057] hsr_slave_0: left promiscuous mode [ 314.707058][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 314.732121][ T1057] hsr_slave_1: left promiscuous mode [ 314.740918][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.757029][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.758277][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.778751][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.787714][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.790214][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 314.809225][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.819001][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.830626][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.839524][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.852226][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.860965][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 314.872203][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.881558][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.899753][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.913941][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 314.952231][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.964822][ T1057] veth1_macvtap: left promiscuous mode [ 314.973008][ T1057] veth0_macvtap: left promiscuous mode [ 314.981965][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.991966][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.007172][ T1057] veth1_vlan: left promiscuous mode [ 315.012721][ T1057] veth0_vlan: left promiscuous mode [ 315.026724][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.038801][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.048254][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.067451][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.089447][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.115530][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.137421][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.151675][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.193699][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.219590][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.240297][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.271838][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.294784][ T5275] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.321584][ T5275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.348988][ T5275] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 315.367765][ T5275] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 315.405991][ T5275] usb 4-1: Product: syz [ 315.410261][ T5275] usb 4-1: Manufacturer: syz [ 315.414927][ T5275] usb 4-1: SerialNumber: syz [ 315.442569][ T5275] usb 4-1: config 0 descriptor?? [ 315.464651][ T5275] yurex 4-1:0.0: Could not submitting URB [ 315.483209][ T5275] yurex 4-1:0.0: probe with driver yurex failed with error -5 [ 315.812608][ T5275] usb 4-1: USB disconnect, device number 20 [ 316.194598][T16104] overlay: ./bus is not a directory [ 316.347385][ T5230] Bluetooth: hci1: command tx timeout [ 316.386837][T16112] loop2: detected capacity change from 0 to 7 [ 316.400021][T16112] Dev loop2: unable to read RDB block 7 [ 316.407212][T16112] loop2: AHDI p1 p2 [ 316.411352][T16112] loop2: partition table partially beyond EOD, truncated [ 316.420941][T16112] loop2: p1 start 3496449972 is beyond EOD, truncated [ 316.796020][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 316.901541][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 317.568198][T16132] block nbd1: shutting down sockets [ 317.711351][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.721292][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.853331][T16141] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2181'. [ 317.863846][T16141] openvswitch: netlink: IP tunnel dst address not specified [ 317.881276][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.277743][T15855] chnl_net:caif_netlink_parms(): no params data found [ 318.428087][ T5230] Bluetooth: hci1: command tx timeout [ 318.867222][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.874514][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.898136][T15855] bridge_slave_0: entered allmulticast mode [ 318.948794][T15855] bridge_slave_0: entered promiscuous mode [ 318.956097][ T5297] IPVS: starting estimator thread 0... [ 318.979147][T16220] tipc: Started in network mode [ 318.985893][T16220] tipc: Node identity ac1414aa, cluster identity 4711 [ 319.016079][T16220] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.034328][T16220] tipc: Enabled bearer , priority 10 [ 319.054264][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.062580][T16224] IPVS: using max 16 ests per chain, 38400 per kthread [ 319.082571][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.115682][T15855] bridge_slave_1: entered allmulticast mode [ 319.136712][T15855] bridge_slave_1: entered promiscuous mode [ 319.150457][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.286028][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.354806][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.392463][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.426015][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.566088][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.573617][T15855] team0: Port device team_slave_0 added [ 319.601673][T15855] team0: Port device team_slave_1 added [ 319.645944][ T5297] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 319.705866][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.744797][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.763284][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.789347][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.810441][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.825343][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.833229][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.859317][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.866181][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.874681][ T5297] usb 2-1: Using ep0 maxpacket: 16 [ 319.885284][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.909106][ T5297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 319.943786][ T5297] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 319.969387][ T5297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.993931][ T5297] usb 2-1: config 0 descriptor?? [ 319.999189][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.031958][ T5297] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 320.139072][ T9] tipc: Node number set to 2886997162 [ 320.144645][T15855] hsr_slave_0: entered promiscuous mode [ 320.167977][T15855] hsr_slave_1: entered promiscuous mode [ 320.175247][T15855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.193764][T15855] Cannot create hsr debugfs directory [ 320.253509][ T4659] bcm5974 2-1:0.0: could not read from device [ 320.274180][ T4659] bcm5974 2-1:0.0: could not read from device [ 320.285953][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.329041][ T5297] usb 2-1: USB disconnect, device number 19 [ 320.329111][ T4659] bcm5974 2-1:0.0: could not read from device [ 320.505902][ T5230] Bluetooth: hci1: command tx timeout [ 321.306613][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 321.328731][T15855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.349154][T15855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.371373][T15855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.407279][T15855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.542406][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 321.561274][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 321.595930][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 321.626037][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 321.641141][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.658822][ T9] usb 2-1: config 0 descriptor?? [ 321.673234][T16447] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 321.673332][T16493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.691371][ T9] hub 2-1:0.0: USB hub found [ 321.743928][T15855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.822574][T15855] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.870270][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.877831][ T9637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.926632][ T9] hub 2-1:0.0: 2 ports detected [ 321.972349][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.979667][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.118818][ T29] audit: type=1326 audit(1725999177.932:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16470 comm="syz.4.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ff77def9 code=0x7fc00000 [ 322.140346][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.416106][ T9] hub 2-1:0.0: set hub depth failed [ 322.431043][ T9] usb 2-1: USB disconnect, device number 20 [ 322.562447][T15855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.740838][T15855] veth0_vlan: entered promiscuous mode [ 322.794923][T15855] veth1_vlan: entered promiscuous mode [ 322.803837][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 322.814287][T16535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2225'. [ 322.943847][T15855] veth0_macvtap: entered promiscuous mode [ 322.999491][T15855] veth1_macvtap: entered promiscuous mode [ 323.088027][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.117593][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.145787][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.156518][ C0] net_ratelimit: 3 callbacks suppressed [ 323.156543][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.212716][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.228794][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.239876][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.255927][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.276436][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.306727][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.333553][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.367861][T15855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.420118][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.451762][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.481320][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.517785][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.541727][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.570329][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.585797][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.628487][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.641520][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.656403][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.681014][T15855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.698306][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 323.729632][T16555] gretap0: Device is already in use. [ 323.775323][T15855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.814780][T15855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.838178][T15855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.849054][T15855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.141326][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.158177][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.185895][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 324.266593][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.274635][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.337681][T16590] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.357640][T16590] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 324.653280][T16608] [U] [ 324.656849][T16608] [U] [ 324.659604][T16608] [U] [ 324.662351][T16608] [U] [ 324.683877][T16608] [U] [ 324.686728][T16608] [U] [ 324.689487][T16608] [U] [ 324.692235][T16608] [U] [ 324.703888][T16608] [U] [ 324.706706][T16608] [U] [ 324.709454][T16608] [U] [ 324.712202][T16608] [U] [ 324.732974][T16608] [U] [ 324.735785][T16608] [U] [ 324.738530][T16608] [U] [ 324.741269][T16608] [U] [ 324.784193][T16608] [U] [ 324.787100][T16608] [U] [ 324.789843][T16608] [U] [ 324.792581][T16608] [U] [ 324.796427][T16608] [U] [ 324.799207][T16608] [U] [ 324.801959][T16608] [U] [ 324.804701][T16608] [U] [ 324.808853][T16608] [U] [ 324.811622][T16608] [U] [ 324.814360][T16608] [U] [ 324.817113][T16608] [U] [ 324.820777][T16608] [U] [ 324.823542][T16608] [U] [ 324.826284][T16608] [U] [ 324.829016][T16608] [U] [ 324.832701][T16608] [U] [ 324.835473][T16608] [U] [ 324.838221][T16608] [U] [ 324.840967][T16608] [U] [ 324.846088][ T5297] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 324.848916][T16608] [U] [ 324.856503][T16608] [U] [ 324.859231][T16608] [U] [ 324.861968][T16608] [U] [ 324.879201][T16608] [U] [ 324.881994][T16608] [U] [ 324.884731][T16608] [U] [ 324.887505][T16608] [U] [ 324.916483][T16608] [U] [ 324.919385][T16608] [U] [ 324.922137][T16608] [U] [ 324.924888][T16608] [U] [ 324.946050][ T5275] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 324.954282][T16608] [U] [ 324.957048][T16608] [U] [ 324.959804][T16608] [U] [ 324.962548][T16608] [U] [ 324.987432][T16608] [U] [ 324.990253][T16608] [U] [ 324.993010][T16608] [U] [ 324.995759][T16608] [U] [ 325.010065][T16608] [U] [ 325.012843][T16608] [U] [ 325.015556][T16608] [U] [ 325.018264][T16608] [U] [ 325.042715][T16608] [U] [ 325.045609][T16608] [U] [ 325.048362][T16608] [U] [ 325.051116][T16608] [U] [ 325.069256][ T5297] usb 2-1: Using ep0 maxpacket: 8 [ 325.083158][ T5297] usb 2-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 325.098369][T16608] [U] [ 325.101226][T16608] [U] [ 325.102845][ T5297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.103953][T16608] [U] [ 325.103998][T16608] [U] [ 325.104053][T16608] [U] [ 325.120197][T16608] [U] [ 325.122977][T16608] [U] [ 325.125732][T16608] [U] [ 325.129114][ T5297] usb 2-1: config 0 descriptor?? [ 325.151923][ T5297] usb-storage 2-1:0.0: USB Mass Storage device detected [ 325.157044][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 325.178068][ T5297] usb-storage 2-1:0.0: Quirks match for vid 054c pid 0069: 1 [ 325.182031][ T5275] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 325.209105][T16608] [U] [ 325.211991][T16608] [U] [ 325.214752][T16608] [U] [ 325.217507][T16608] [U] [ 325.226134][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.226739][ T5275] usb 3-1: config 0 has no interface number 0 [ 325.234604][T16608] [U] [ 325.240658][ T5275] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 325.242078][T16608] [U] [ 325.254501][ T5275] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 325.255600][T16608] [U] [ 325.268104][T16608] [U] [ 325.293819][T16608] [U] [ 325.296614][T16608] [U] [ 325.299327][T16608] [U] [ 325.302034][T16608] [U] [ 325.318816][T16608] [U] [ 325.321612][T16608] [U] [ 325.324351][T16608] [U] [ 325.327099][T16608] [U] [ 325.337467][ T5275] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 325.357345][T16608] [U] [ 325.360198][T16608] [U] [ 325.363021][T16608] [U] [ 325.365776][T16608] [U] [ 325.369880][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 325.380092][ T5275] usb 3-1: Product: syz [ 325.384323][ T5275] usb 3-1: SerialNumber: syz [ 325.390502][T16608] [U] [ 325.393274][T16608] [U] [ 325.396068][T16608] [U] [ 325.398818][T16608] [U] [ 325.411802][ T5297] usb 2-1: USB disconnect, device number 21 [ 325.431005][ T5275] usb 3-1: config 0 descriptor?? [ 325.439985][T16608] [U] [ 325.442781][T16608] [U] [ 325.445516][T16608] [U] [ 325.448262][T16608] [U] [ 325.461926][ T5275] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 325.478718][ T5275] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input30 [ 325.497222][T16608] [U] [ 325.499995][T16608] [U] [ 325.502714][T16608] [U] [ 325.505520][T16608] [U] [ 325.570097][T16613] [U] [ 325.810506][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 326.265927][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.327111][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 326.334795][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 326.342089][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 326.351080][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 326.358256][ C0] [ 326.360611][ C0] ======================================================== [ 326.367843][ C0] WARNING: possible irq lock inversion dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 326.375085][ C0] 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 Not tainted [ 326.382235][ C0] -------------------------------------------------------- [ 326.389470][ C0] syz.2.2243/16594 just changed the state of lock: [ 326.396009][ C0] ffff888031856230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 326.405740][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 326.413753][ C0] (tasklist_lock){.+.+}-{2:2} [ 326.413798][ C0] [ 326.413798][ C0] [ 326.413798][ C0] and interrupts could create inverse lock ordering between them. [ 326.413798][ C0] [ 326.432916][ C0] [ 326.432916][ C0] other info that might help us debug this: [ 326.441015][ C0] Chain exists of: [ 326.441015][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 326.441015][ C0] [ 326.454654][ C0] Possible interrupt unsafe locking scenario: [ 326.454654][ C0] [ 326.463012][ C0] CPU0 CPU1 [ 326.468402][ C0] ---- ---- [ 326.473777][ C0] lock(tasklist_lock); [ 326.478040][ C0] local_irq_disable(); [ 326.485071][ C0] lock(&dev->event_lock#2); [ 326.492300][ C0] lock(&client->buffer_lock); [ 326.499694][ C0] [ 326.503155][ C0] lock(&dev->event_lock#2); [ 326.508068][ C0] [ 326.508068][ C0] *** DEADLOCK *** [ 326.508068][ C0] [ 326.516248][ C0] 4 locks held by syz.2.2243/16594: [ 326.521465][ C0] #0: ffff888028d5cd78 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 326.532033][ C0] #1: ffff888028ffa548 (&udc->connect_lock){+.+.}-{3:3}, at: gadget_unbind_driver+0xbd/0x460 [ 326.542331][ C0] #2: ffffc90000007c00 (drivers/tty/vt/keyboard.c:274){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 326.553076][ C0] #3: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: input_handler_for_each_handle+0x29/0x1d0 [ 326.563755][ C0] [ 326.563755][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 326.573186][ C0] -> (tasklist_lock){.+.+}-{2:2} { [ 326.578706][ C0] HARDIRQ-ON-R at: [ 326.583068][ C0] lock_acquire+0x1ed/0x550 [ 326.589944][ C0] _raw_read_lock+0x36/0x50 [ 326.596820][ C0] __do_wait+0x12d/0x850 [ 326.603429][ C0] do_wait+0x1e9/0x560 [ 326.609856][ C0] kernel_wait+0xe9/0x240 [ 326.616550][ C0] call_usermodehelper_exec_work+0xbd/0x230 [ 326.624841][ C0] process_scheduled_works+0xa2c/0x1830 [ 326.632755][ C0] worker_thread+0x86d/0xd10 [ 326.639719][ C0] kthread+0x2f0/0x390 [ 326.646159][ C0] ret_from_fork+0x4b/0x80 [ 326.652949][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.660085][ C0] SOFTIRQ-ON-R at: [ 326.664421][ C0] lock_acquire+0x1ed/0x550 [ 326.671295][ C0] _raw_read_lock+0x36/0x50 [ 326.678168][ C0] __do_wait+0x12d/0x850 [ 326.684767][ C0] do_wait+0x1e9/0x560 [ 326.691193][ C0] kernel_wait+0xe9/0x240 [ 326.697881][ C0] call_usermodehelper_exec_work+0xbd/0x230 [ 326.706142][ C0] process_scheduled_works+0xa2c/0x1830 [ 326.714235][ C0] worker_thread+0x86d/0xd10 [ 326.721285][ C0] kthread+0x2f0/0x390 [ 326.727722][ C0] ret_from_fork+0x4b/0x80 [ 326.734531][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.741748][ C0] INITIAL USE at: [ 326.746003][ C0] lock_acquire+0x1ed/0x550 [ 326.752886][ C0] _raw_write_lock_irq+0xd3/0x120 [ 326.760195][ C0] copy_process+0x228b/0x3dc0 [ 326.767155][ C0] kernel_clone+0x223/0x880 [ 326.773943][ C0] user_mode_thread+0x132/0x1a0 [ 326.781080][ C0] rest_init+0x23/0x300 [ 326.787524][ C0] start_kernel+0x47a/0x500 [ 326.794306][ C0] x86_64_start_reservations+0x2a/0x30 [ 326.802036][ C0] x86_64_start_kernel+0x9f/0xa0 [ 326.809271][ C0] common_startup_64+0x13e/0x147 [ 326.816488][ C0] INITIAL READ USE at: [ 326.821184][ C0] lock_acquire+0x1ed/0x550 [ 326.828405][ C0] _raw_read_lock+0x36/0x50 [ 326.835658][ C0] __do_wait+0x12d/0x850 [ 326.842629][ C0] do_wait+0x1e9/0x560 [ 326.849430][ C0] kernel_wait+0xe9/0x240 [ 326.856484][ C0] call_usermodehelper_exec_work+0xbd/0x230 [ 326.865089][ C0] process_scheduled_works+0xa2c/0x1830 [ 326.873353][ C0] worker_thread+0x86d/0xd10 [ 326.880657][ C0] kthread+0x2f0/0x390 [ 326.887460][ C0] ret_from_fork+0x4b/0x80 [ 326.894594][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.902075][ C0] } [ 326.904927][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 326.913094][ C0] ... acquired at: [ 326.917338][ C0] lock_acquire+0x1ed/0x550 [ 326.922035][ C0] _raw_read_lock+0x36/0x50 [ 326.926758][ C0] send_sigio+0xfc/0x360 [ 326.931203][ C0] kill_fasync+0x23a/0x4d0 [ 326.935808][ C0] lease_break_callback+0x26/0x30 [ 326.941029][ C0] __break_lease+0x6d5/0x1820 [ 326.945897][ C0] do_dentry_open+0x8be/0x1440 [ 326.950855][ C0] vfs_open+0x3e/0x330 [ 326.955198][ C0] path_openat+0x2b3e/0x3470 [ 326.959985][ C0] do_filp_open+0x235/0x490 [ 326.964856][ C0] do_sys_openat2+0x13e/0x1d0 [ 326.969731][ C0] __x64_sys_openat+0x247/0x2a0 [ 326.974788][ C0] do_syscall_64+0xf3/0x230 [ 326.979510][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.985592][ C0] [ 326.987927][ C0] -> (&f->f_owner.lock){....}-{2:2} { [ 326.993601][ C0] INITIAL USE at: [ 326.997783][ C0] lock_acquire+0x1ed/0x550 [ 327.004479][ C0] _raw_write_lock_irq+0xd3/0x120 [ 327.011612][ C0] f_modown+0x38/0x340 [ 327.017789][ C0] tty_fasync+0x250/0x340 [ 327.024212][ C0] do_vfs_ioctl+0x19c8/0x2e50 [ 327.030996][ C0] __se_sys_ioctl+0x81/0x170 [ 327.037694][ C0] do_syscall_64+0xf3/0x230 [ 327.044298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.052295][ C0] INITIAL READ USE at: [ 327.056894][ C0] lock_acquire+0x1ed/0x550 [ 327.063938][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 327.071772][ C0] send_sigio+0x33/0x360 [ 327.078559][ C0] kill_fasync+0x23a/0x4d0 [ 327.085509][ C0] n_tty_receive_buf_common+0x989/0x12e0 [ 327.093765][ C0] tty_port_default_receive_buf+0x6d/0xa0 [ 327.102019][ C0] flush_to_ldisc+0x328/0x860 [ 327.109251][ C0] process_scheduled_works+0xa2c/0x1830 [ 327.117336][ C0] worker_thread+0x86d/0xd10 [ 327.124460][ C0] kthread+0x2f0/0x390 [ 327.131072][ C0] ret_from_fork+0x4b/0x80 [ 327.138145][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.145445][ C0] } [ 327.148212][ C0] ... key at: [] init_file.__key+0x0/0x20 [ 327.156291][ C0] ... acquired at: [ 327.160355][ C0] lock_acquire+0x1ed/0x550 [ 327.165070][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 327.170580][ C0] send_sigio+0x33/0x360 [ 327.175102][ C0] kill_fasync+0x23a/0x4d0 [ 327.179703][ C0] n_tty_receive_buf_common+0x989/0x12e0 [ 327.185525][ C0] tty_port_default_receive_buf+0x6d/0xa0 [ 327.191471][ C0] flush_to_ldisc+0x328/0x860 [ 327.196343][ C0] process_scheduled_works+0xa2c/0x1830 [ 327.202091][ C0] worker_thread+0x86d/0xd10 [ 327.206872][ C0] kthread+0x2f0/0x390 [ 327.211132][ C0] ret_from_fork+0x4b/0x80 [ 327.215744][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.220712][ C0] [ 327.223035][ C0] -> (&new->fa_lock){....}-{2:2} { [ 327.228355][ C0] INITIAL USE at: [ 327.232430][ C0] lock_acquire+0x1ed/0x550 [ 327.238857][ C0] _raw_write_lock_irq+0xd3/0x120 [ 327.245816][ C0] fasync_remove_entry+0xff/0x1d0 [ 327.252780][ C0] tty_fasync+0x105/0x340 [ 327.259061][ C0] __fput+0x73e/0x8a0 [ 327.264970][ C0] task_work_run+0x24f/0x310 [ 327.271487][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 327.279041][ C0] do_syscall_64+0x100/0x230 [ 327.285554][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.293378][ C0] INITIAL READ USE at: [ 327.297889][ C0] lock_acquire+0x1ed/0x550 [ 327.304751][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 327.312422][ C0] kill_fasync+0x19e/0x4d0 [ 327.319199][ C0] n_tty_receive_buf_common+0x989/0x12e0 [ 327.327212][ C0] tty_port_default_receive_buf+0x6d/0xa0 [ 327.335295][ C0] flush_to_ldisc+0x328/0x860 [ 327.342337][ C0] process_scheduled_works+0xa2c/0x1830 [ 327.350251][ C0] worker_thread+0x86d/0xd10 [ 327.357290][ C0] kthread+0x2f0/0x390 [ 327.363724][ C0] ret_from_fork+0x4b/0x80 [ 327.370505][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.377640][ C0] } [ 327.380318][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 327.389214][ C0] ... acquired at: [ 327.393195][ C0] lock_acquire+0x1ed/0x550 [ 327.397919][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 327.403418][ C0] kill_fasync+0x19e/0x4d0 [ 327.408054][ C0] evdev_pass_values+0x58a/0xad0 [ 327.413186][ C0] evdev_events+0x1c2/0x300 [ 327.417878][ C0] input_pass_values+0x286/0x860 [ 327.423005][ C0] input_event_dispose+0x30f/0x600 [ 327.428317][ C0] input_handle_event+0xa71/0xbe0 [ 327.433557][ C0] input_inject_event+0x22f/0x340 [ 327.438803][ C0] evdev_write+0x672/0x7c0 [ 327.443445][ C0] vfs_write+0x2a2/0xc90 [ 327.447898][ C0] ksys_write+0x1a0/0x2c0 [ 327.452416][ C0] do_syscall_64+0xf3/0x230 [ 327.457112][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.463282][ C0] [ 327.465607][ C0] -> (&client->buffer_lock){....}-{2:2} { [ 327.471459][ C0] INITIAL USE at: [ 327.475470][ C0] lock_acquire+0x1ed/0x550 [ 327.481750][ C0] _raw_spin_lock+0x2e/0x40 [ 327.488028][ C0] evdev_handle_get_val+0x67/0x820 [ 327.494920][ C0] evdev_ioctl_handler+0x135c/0x21b0 [ 327.501962][ C0] __se_sys_ioctl+0xfc/0x170 [ 327.508315][ C0] do_syscall_64+0xf3/0x230 [ 327.514570][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.522222][ C0] } [ 327.524812][ C0] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 327.533093][ C0] ... acquired at: [ 327.536996][ C0] lock_acquire+0x1ed/0x550 [ 327.541702][ C0] _raw_spin_lock+0x2e/0x40 [ 327.546419][ C0] evdev_handle_get_val+0x67/0x820 [ 327.551744][ C0] evdev_ioctl_handler+0x135c/0x21b0 [ 327.557266][ C0] __se_sys_ioctl+0xfc/0x170 [ 327.562058][ C0] do_syscall_64+0xf3/0x230 [ 327.566750][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.572856][ C0] [ 327.575191][ C0] -> (&dev->event_lock#2){..-.}-{2:2} { [ 327.580823][ C0] IN-SOFTIRQ-W at: [ 327.584819][ C0] lock_acquire+0x1ed/0x550 [ 327.591020][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 327.598006][ C0] input_inject_event+0xc5/0x340 [ 327.604612][ C0] kd_sound_helper+0x101/0x210 [ 327.611045][ C0] input_handler_for_each_handle+0x103/0x1d0 [ 327.618747][ C0] call_timer_fn+0x18e/0x650 [ 327.625016][ C0] __run_timer_base+0x66a/0x8e0 [ 327.631553][ C0] run_timer_softirq+0xb7/0x170 [ 327.638093][ C0] handle_softirqs+0x2c4/0x970 [ 327.644524][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 327.650783][ C0] irq_exit_rcu+0x9/0x30 [ 327.656696][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 327.664002][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.671674][ C0] __schedule+0x0/0x4a10 [ 327.677606][ C0] preempt_schedule_common+0x84/0xd0 [ 327.684577][ C0] preempt_schedule+0xe1/0xf0 [ 327.690924][ C0] preempt_schedule_thunk+0x1a/0x30 [ 327.697812][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 327.705307][ C0] usb_hcd_poll_rh_status+0x3c4/0x5a0 [ 327.712355][ C0] dummy_pullup+0x19a/0x200 [ 327.718529][ C0] usb_gadget_disconnect_locked+0x13c/0x4b0 [ 327.726093][ C0] gadget_unbind_driver+0xca/0x460 [ 327.732881][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 327.740678][ C0] driver_detach+0x1fb/0x2d0 [ 327.747023][ C0] bus_remove_driver+0x1f3/0x320 [ 327.753756][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 327.761145][ C0] raw_release+0xf9/0x1e0 [ 327.767139][ C0] __fput+0x24a/0x8a0 [ 327.772791][ C0] task_work_run+0x24f/0x310 [ 327.779054][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 327.786450][ C0] do_syscall_64+0x100/0x230 [ 327.792755][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.800345][ C0] INITIAL USE at: [ 327.804247][ C0] lock_acquire+0x1ed/0x550 [ 327.810355][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 327.817229][ C0] input_inject_event+0xc5/0x340 [ 327.823746][ C0] kbd_led_trigger_activate+0xb8/0x100 [ 327.830810][ C0] led_trigger_set+0x582/0x9c0 [ 327.837151][ C0] led_trigger_set_default+0x229/0x260 [ 327.844273][ C0] led_classdev_register_ext+0x6e6/0x8a0 [ 327.851495][ C0] input_leds_connect+0x489/0x630 [ 327.858104][ C0] input_register_device+0xd3b/0x1110 [ 327.865076][ C0] atkbd_connect+0x752/0xa00 [ 327.871252][ C0] serio_driver_probe+0x7f/0xa0 [ 327.877685][ C0] really_probe+0x2b8/0xad0 [ 327.883770][ C0] __driver_probe_device+0x1a2/0x390 [ 327.890635][ C0] driver_probe_device+0x50/0x430 [ 327.897240][ C0] __driver_attach+0x45f/0x710 [ 327.903606][ C0] bus_for_each_dev+0x239/0x2b0 [ 327.910127][ C0] serio_handle_event+0x1c7/0x920 [ 327.916742][ C0] process_scheduled_works+0xa2c/0x1830 [ 327.923902][ C0] worker_thread+0x86d/0xd10 [ 327.930096][ C0] kthread+0x2f0/0x390 [ 327.935761][ C0] ret_from_fork+0x4b/0x80 [ 327.941794][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.948161][ C0] } [ 327.950683][ C0] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 327.959773][ C0] ... acquired at: [ 327.963670][ C0] mark_lock+0x223/0x350 [ 327.968111][ C0] __lock_acquire+0xbf9/0x2040 [ 327.973167][ C0] lock_acquire+0x1ed/0x550 [ 327.977881][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 327.983359][ C0] input_inject_event+0xc5/0x340 [ 327.988487][ C0] kd_sound_helper+0x101/0x210 [ 327.993442][ C0] input_handler_for_each_handle+0x103/0x1d0 [ 327.999612][ C0] call_timer_fn+0x18e/0x650 [ 328.004394][ C0] __run_timer_base+0x66a/0x8e0 [ 328.009436][ C0] run_timer_softirq+0xb7/0x170 [ 328.014482][ C0] handle_softirqs+0x2c4/0x970 [ 328.019433][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 328.024212][ C0] irq_exit_rcu+0x9/0x30 [ 328.028642][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 328.034473][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.040650][ C0] __schedule+0x0/0x4a10 [ 328.045117][ C0] preempt_schedule_common+0x84/0xd0 [ 328.050658][ C0] preempt_schedule+0xe1/0xf0 [ 328.055554][ C0] preempt_schedule_thunk+0x1a/0x30 [ 328.060937][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 328.066957][ C0] usb_hcd_poll_rh_status+0x3c4/0x5a0 [ 328.072523][ C0] dummy_pullup+0x19a/0x200 [ 328.077226][ C0] usb_gadget_disconnect_locked+0x13c/0x4b0 [ 328.083303][ C0] gadget_unbind_driver+0xca/0x460 [ 328.088606][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 328.094858][ C0] driver_detach+0x1fb/0x2d0 [ 328.099638][ C0] bus_remove_driver+0x1f3/0x320 [ 328.104765][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 328.110679][ C0] raw_release+0xf9/0x1e0 [ 328.115197][ C0] __fput+0x24a/0x8a0 [ 328.119370][ C0] task_work_run+0x24f/0x310 [ 328.124144][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 328.129962][ C0] do_syscall_64+0x100/0x230 [ 328.134748][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.140828][ C0] [ 328.143155][ C0] [ 328.143155][ C0] stack backtrace: [ 328.149070][ C0] CPU: 0 UID: 0 PID: 16594 Comm: syz.2.2243 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 328.159857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.169966][ C0] Call Trace: [ 328.173253][ C0] [ 328.176197][ C0] dump_stack_lvl+0x241/0x360 [ 328.180904][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.186119][ C0] ? print_shortest_lock_dependencies+0xf2/0x160 [ 328.192488][ C0] ? print_irq_inversion_bug+0x329/0x3a0 [ 328.198149][ C0] mark_lock_irq+0x80c/0xc20 [ 328.202764][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 328.207898][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 328.213291][ C0] ? lockdep_lock+0x123/0x2b0 [ 328.217983][ C0] ? save_trace+0x5a/0xb40 [ 328.222446][ C0] mark_lock+0x223/0x350 [ 328.226711][ C0] __lock_acquire+0xbf9/0x2040 [ 328.231499][ C0] lock_acquire+0x1ed/0x550 [ 328.236046][ C0] ? input_inject_event+0xc5/0x340 [ 328.241201][ C0] ? mark_lock+0x9a/0x350 [ 328.245748][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 328.250835][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 328.256154][ C0] ? input_inject_event+0xc5/0x340 [ 328.261290][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 328.267220][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 328.272271][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 328.277320][ C0] input_inject_event+0xc5/0x340 [ 328.282267][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.288618][ C0] kd_sound_helper+0x101/0x210 [ 328.293403][ C0] ? __pfx_kd_sound_helper+0x10/0x10 [ 328.298706][ C0] input_handler_for_each_handle+0x103/0x1d0 [ 328.304699][ C0] ? input_handler_for_each_handle+0x29/0x1d0 [ 328.310817][ C0] call_timer_fn+0x18e/0x650 [ 328.315518][ C0] ? call_timer_fn+0xc0/0x650 [ 328.320216][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 328.325090][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 328.330228][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 328.335102][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 328.339974][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 328.344844][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.350067][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 328.355282][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 328.360155][ C0] __run_timer_base+0x66a/0x8e0 [ 328.365042][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 328.370451][ C0] run_timer_softirq+0xb7/0x170 [ 328.375355][ C0] handle_softirqs+0x2c4/0x970 [ 328.380156][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 328.385028][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 328.390334][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 328.395618][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 328.400233][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 328.405472][ C0] irq_exit_rcu+0x9/0x30 [ 328.409733][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 328.415413][ C0] [ 328.418350][ C0] [ 328.421286][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.427331][ C0] RIP: 0010:__schedule+0x0/0x4a10 [ 328.432379][ C0] Code: 00 00 00 48 c7 c7 e0 94 de 8f e8 db 64 3e f6 c3 cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 328.452001][ C0] RSP: 0018:ffffc90008d6f898 EFLAGS: 00000246 [ 328.458089][ C0] RAX: 1ffff1100665ba19 RBX: ffff8880332dd0c8 RCX: ffffffff8bbb5800 [ 328.466077][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 328.474093][ C0] RBP: ffffc90008d6f958 R08: ffffffff93fa693f R09: 1ffffffff27f4d27 [ 328.482076][ C0] R10: dffffc0000000000 R11: fffffbfff27f4d28 R12: 1ffff920011adf1c [ 328.490081][ C0] R13: 1ffff920011adf38 R14: ffffffff8bb98681 R15: dffffc0000000000 [ 328.498100][ C0] ? preempt_schedule+0xe1/0xf0 [ 328.502981][ C0] ? queued_write_lock_slowpath+0x370/0x44a [ 328.508898][ C0] preempt_schedule_common+0x84/0xd0 [ 328.514211][ C0] preempt_schedule+0xe1/0xf0 [ 328.518925][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 328.524331][ C0] preempt_schedule_thunk+0x1a/0x30 [ 328.529553][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 328.535385][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.541744][ C0] ? _raw_spin_unlock+0x28/0x50 [ 328.546633][ C0] usb_hcd_poll_rh_status+0x3c4/0x5a0 [ 328.552044][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 328.557974][ C0] dummy_pullup+0x19a/0x200 [ 328.562495][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 328.567539][ C0] usb_gadget_disconnect_locked+0x13c/0x4b0 [ 328.573453][ C0] gadget_unbind_driver+0xca/0x460 [ 328.578597][ C0] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 328.584339][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 328.590106][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 328.596231][ C0] driver_detach+0x1fb/0x2d0 [ 328.600879][ C0] bus_remove_driver+0x1f3/0x320 [ 328.605844][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 328.611600][ C0] raw_release+0xf9/0x1e0 [ 328.615953][ C0] ? __pfx_raw_release+0x10/0x10 [ 328.620917][ C0] __fput+0x24a/0x8a0 [ 328.624938][ C0] task_work_run+0x24f/0x310 [ 328.629545][ C0] ? __pfx_task_work_run+0x10/0x10 [ 328.634687][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 328.640514][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 328.646169][ C0] do_syscall_64+0x100/0x230 [ 328.650809][ C0] ? clear_bhb_loop+0x35/0x90 [ 328.655506][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.661421][ C0] RIP: 0033:0x7f5fc1f7def9 [ 328.665867][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.685595][ C0] RSP: 002b:00007ffc8e053a38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 328.694131][ C0] RAX: 0000000000000000 RBX: 00007f5fc2137a80 RCX: 00007f5fc1f7def9 [ 328.702116][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 328.710095][ C0] RBP: 00007f5fc2137a80 R08: 00007f5fc2122000 R09: 00007ffc8e053d2f [ 328.718076][ C0] R10: 00000000005eb934 R11: 0000000000000246 R12: 0000000000050550 [ 328.726060][ C0] R13: 00007ffc8e053b40 R14: 0000000000000032 R15: ffffffffffffffff [ 328.734062][ C0] [ 328.737177][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.744368][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.751801][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.759029][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.766333][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.773530][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.785179][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 328.812370][ T5297] usb 3-1: USB disconnect, device number 23 [ 328.818556][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 329.064352][ T5297] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 329.548682][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.194258][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.324436][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.386357][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.469225][ T35] bridge_slave_1: left allmulticast mode [ 330.474919][ T35] bridge_slave_1: left promiscuous mode [ 330.483592][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.492885][ T35] bridge_slave_0: left allmulticast mode [ 330.500303][ T35] bridge_slave_0: left promiscuous mode [ 330.507656][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.652884][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.666871][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.681090][ T35] bond0 (unregistering): Released all slaves [ 330.928218][ T35] hsr_slave_0: left promiscuous mode [ 330.934354][ T35] hsr_slave_1: left promiscuous mode [ 330.940606][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.948207][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.959800][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.967803][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.980932][ T35] veth1_macvtap: left promiscuous mode [ 330.987035][ T35] veth0_macvtap: left promiscuous mode [ 330.992646][ T35] veth1_vlan: left promiscuous mode [ 330.998627][ T35] veth0_vlan: left promiscuous mode [ 331.267081][ T35] team0 (unregistering): Port device team_slave_1 removed [ 331.309056][ T35] team0 (unregistering): Port device team_slave_0 removed [ 331.786754][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.799136][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.852155][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.863040][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.913120][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.923801][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.991212][ T35] team0: Port device netdevsim0 removed [ 331.999424][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.009893][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.102212][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.162963][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.211736][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.253102][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.337172][ T35] bridge_slave_1: left allmulticast mode [ 332.343310][ T35] bridge_slave_1: left promiscuous mode [ 332.351075][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.360798][ T35] bridge_slave_0: left allmulticast mode [ 332.366842][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.376707][ T35] bridge_slave_1: left allmulticast mode [ 332.382386][ T35] bridge_slave_1: left promiscuous mode [ 332.390294][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.399747][ T35] bridge_slave_0: left allmulticast mode [ 332.405493][ T35] bridge_slave_0: left promiscuous mode [ 332.412220][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.703895][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.715065][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.728751][ T35] bond0 (unregistering): Released all slaves [ 332.744044][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.758612][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.771120][ T35] bond0 (unregistering): Released all slaves [ 332.783006][ T35] bond1 (unregistering): Released all slaves [ 332.859817][ T35] tipc: Left network mode [ 333.287853][ T35] hsr_slave_0: left promiscuous mode [ 333.293770][ T35] hsr_slave_1: left promiscuous mode [ 333.300823][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.310103][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.318836][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.326549][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.337864][ T35] hsr_slave_0: left promiscuous mode [ 333.343814][ T35] hsr_slave_1: left promiscuous mode [ 333.351679][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.359326][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.367786][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.375454][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.390012][ T35] veth1_macvtap: left promiscuous mode [ 333.395570][ T35] veth0_macvtap: left promiscuous mode [ 333.401978][ T35] veth1_vlan: left promiscuous mode [ 333.407596][ T35] veth0_vlan: left promiscuous mode [ 333.414083][ T35] veth1_macvtap: left promiscuous mode [ 333.420020][ T35] veth0_macvtap: left promiscuous mode [ 333.425625][ T35] veth1_vlan: left promiscuous mode [ 333.430978][ T35] veth0_vlan: left promiscuous mode [ 333.754370][ T35] team0 (unregistering): Port device team_slave_1 removed [ 333.792216][ T35] team0 (unregistering): Port device team_slave_0 removed [ 333.966754][ T35] lo (unregistering): left allmulticast mode [ 334.126146][ T35] team0 (unregistering): Port device team_slave_1 removed [ 334.169301][ T35] team0 (unregistering): Port device team_slave_0 removed