last executing test programs: 10.511564025s ago: executing program 1 (id=5510): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0xc3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902b1000201000000000006240600013b05240000000d240f010000000000000000ff0624"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x4}, 0x9c) 10.019570067s ago: executing program 4 (id=5514): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&\x00', 0x0, 0x0, 0xfd, 0x0, 0x1}) 9.091451666s ago: executing program 4 (id=5519): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d080000008021100000008021100000150505050", @ANYRES8=r1], 0x40}}, 0x0) 8.948285646s ago: executing program 4 (id=5520): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d08000000802110000000802110000015050505050500000", @ANYRES8=r1], 0x40}}, 0x0) 8.886537201s ago: executing program 4 (id=5521): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="3600000002"], 0x36) 8.793222884s ago: executing program 4 (id=5522): r0 = memfd_create(&(0x7f0000000dc0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb8\xd2\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x40040, 0x0) recvfrom(r3, 0x0, 0x0, 0x40000121, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close_range(r1, 0xffffffffffffffff, 0x0) 8.70941633s ago: executing program 1 (id=5523): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.70832778s ago: executing program 1 (id=5528): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x402c5342, &(0x7f0000000500)) tkill(r1, 0x7) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x402c5342, 0x0) 7.596936464s ago: executing program 3 (id=5529): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x69a7, &(0x7f0000000200)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), &(0x7f0000000180)) syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x3400, 0x822a28cc43044cf8, 0x2, 0x0, 0x0, r2}, 0x0, 0x0) r3 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2d6}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r4}], 0x1, &(0x7f0000000380), 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/139, 0x8b) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 7.328483369s ago: executing program 1 (id=5531): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&\x00', 0x0, 0x0, 0xfd, 0x0, 0x1}) 6.374576501s ago: executing program 1 (id=5534): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0xc3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902b1000201000000000006240600013b05240000000d240f010000000000000000ff0624"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x4}, 0x9c) 5.335701392s ago: executing program 4 (id=5536): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd4) syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040083) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$VT_RELDISP(r3, 0x5605) pipe(0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000380), 0x80000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x0, 0xc8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f00000005c0), 0x200005d8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r8, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000001c0)={r6, 0x6, 0xd, 0x81, 0x3, [], [0x7000000, 0x1, 0xf, 0x6], [0x5, 0x8, 0x800, 0x2ee4], [0x2c, 0xffffffffffff64f5, 0x3, 0x7]}) syz_clone3(&(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, {0x28000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.034950631s ago: executing program 2 (id=5538): iopl(0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000001000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x1000b3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a30000000000500040000000000140007800800134000000000080006400000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x11, &(0x7f00000018c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)}], 0x1, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r9, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x7001, 0x4) listen(0xffffffffffffffff, 0xc) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) memfd_secret(0x0) 4.9148322s ago: executing program 2 (id=5539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 4.602457296s ago: executing program 3 (id=5540): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.185610621s ago: executing program 0 (id=5541): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)) 3.981231234s ago: executing program 3 (id=5542): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) syz_open_dev$sg(&(0x7f0000000200), 0x97, 0xc800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) sched_getparam(r2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x0, 0x3) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040), 0x0) 3.980400996s ago: executing program 2 (id=5543): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121, 0x1ff}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x7, 0x17, [@local]}, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.480269197s ago: executing program 0 (id=5544): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) pipe2$9p(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x44}}, 0x0) sendto$netrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x24, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000240)=[{0x15, 0x0, 0x0, 0x1}, {0x54}, {0x6, 0x0, 0xa, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 2.995776991s ago: executing program 2 (id=5545): syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{}, 0x1}}}, 0x7) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.774410914s ago: executing program 1 (id=5546): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000002c0)="be", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.564527068s ago: executing program 2 (id=5547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)={0x2, 0xffffffff, 0x4, 0xd91, 0x9, 0x6, 0x80000000, 0x1, 0xb, 0x6, 0x8, 0x1, 0x8, 0x6}) 1.160970785s ago: executing program 3 (id=5548): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9400ff00", @ANYRES16=r2, @ANYBLOB="200028bd7000ffdbdf250e00000044000680040002003c00040067636d2861657329000000000000000000000000000000000000000000000000140000004c98eccf719a1206e2874d5a3f3d7e02f3cc34e7100007800c00040088000000000000001c0007800c00040002000000000000000c0003000101000000000000240004800900010073797a30000000001300010062726f6164636173742d6c696e6b0000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB], 0x58}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x3c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d000001d0dbd301e5a74a2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x80800) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200100, 0x58) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000540)=@newqdisc={0x184, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2c523eb3cee51b08}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x12, 0x3, 0x6, 0x9e0a, 0x0, 0x5321, 0x9, 0x4}}, {0xc, 0x2, [0x8000, 0x2, 0x6, 0x800]}}, {{0x1c, 0x1, {0x9, 0x6, 0x1, 0x7, 0x0, 0x6, 0xc15, 0x9}}, {0x16, 0x2, [0x5, 0x9, 0x23, 0x0, 0xb70e, 0x1000, 0x3, 0xfbff, 0x0]}}, {{0x1c, 0x1, {0x10, 0x1, 0xfff9, 0xb2b55eec, 0x3, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x390, 0x0, 0xb5c2, 0x6, 0x7, 0x80, 0x5, 0x2]}}, {{0x1c, 0x1, {0x5, 0x7f, 0x8, 0xff, 0x2, 0x10001, 0x8, 0x9}}, {0x16, 0x2, [0x7fff, 0xffff, 0xa, 0x1, 0x1, 0x5, 0x9, 0x9, 0x1]}}, {{0x1c, 0x1, {0x0, 0x6, 0xa7, 0x5, 0x2, 0x80, 0xfffffffa, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x6, 0x7fff, 0x5, 0x2, 0x5, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x2, 0x9, 0x1ff, 0x0, 0x2, 0xe, 0x3}}, {0xa, 0x2, [0x6, 0x5, 0x87]}}, {{0x1c, 0x1, {0xd6, 0x7f, 0x696, 0x7408, 0x0, 0x7f, 0x4, 0x2}}, {0x8, 0x2, [0x8, 0x81a4]}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 836.196118ms ago: executing program 0 (id=5549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002340)={'xfrm0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22bb02) io_uring_setup(0x5357, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000400)=""/68}], 0x32) rt_sigprocmask(0x2, &(0x7f0000000140), &(0x7f00000001c0), 0x8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000011000010000047500000000", @ANYRES32=r3], 0x20}}, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x71, &(0x7f0000000040), 0x8) 548.460879ms ago: executing program 2 (id=5550): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703", @ANYRES8], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000500)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 314.860609ms ago: executing program 0 (id=5551): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 244.892987ms ago: executing program 0 (id=5552): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x88e5, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @local, {[@lsrr={0x83, 0xb, 0x9b, [@dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, @address_reply={0x2a, 0x0, 0x0, 0x4}}}}}, 0x0) 192.155621ms ago: executing program 0 (id=5553): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="ae", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001800)="f35f79", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)='p', 0x1}], 0x1}}], 0x4, 0x4040040) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac1414bb, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 137.716964ms ago: executing program 3 (id=5554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) 0s ago: executing program 3 (id=5555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0xfffffffd, 0x3ca}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ered disabled state [ 2425.486654][T18619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2425.507286][T18619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2425.544490][T18619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2425.560672][T18619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2425.575914][T18619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2425.585954][T18619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2426.326922][T12848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2426.339662][T21998] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2426.354746][T21998] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2426.367162][T21998] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2426.379535][T21998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2426.389138][T12848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2426.389218][T21998] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2426.412145][T21998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2426.425502][T12848] bond0 (unregistering): Released all slaves [ 2426.563000][T21998] Bluetooth: hci5: command tx timeout [ 2426.816694][T12848] tipc: Disabling bearer [ 2426.829641][T12848] tipc: Left network mode [ 2427.250375][T12848] hsr_slave_0: left promiscuous mode [ 2427.257644][T12848] hsr_slave_1: left promiscuous mode [ 2427.266191][T12848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2427.279920][T12848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2427.289244][T12848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2427.296837][T12848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2427.316817][T12848] veth1_macvtap: left promiscuous mode [ 2427.322329][T12848] veth0_macvtap: left promiscuous mode [ 2427.328027][T12848] veth1_vlan: left promiscuous mode [ 2427.333444][T12848] veth0_vlan: left promiscuous mode [ 2427.687780][T21998] Bluetooth: hci2: command tx timeout [ 2427.819923][T12848] team0 (unregistering): Port device team_slave_1 removed [ 2427.875687][T12848] team0 (unregistering): Port device team_slave_0 removed [ 2428.400326][T25411] chnl_net:caif_netlink_parms(): no params data found [ 2428.511539][T25270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2428.525835][T25406] chnl_net:caif_netlink_parms(): no params data found [ 2428.565209][T21998] Bluetooth: hci7: command tx timeout [ 2428.651535][T21998] Bluetooth: hci5: command tx timeout [ 2428.766449][T25411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2428.782915][T25411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.790107][T25411] bridge_slave_0: entered allmulticast mode [ 2428.800610][T25411] bridge_slave_0: entered promiscuous mode [ 2428.809021][T25411] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.816269][T25411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.823679][T25411] bridge_slave_1: entered allmulticast mode [ 2428.830624][T25411] bridge_slave_1: entered promiscuous mode [ 2428.869320][T25270] 8021q: adding VLAN 0 to HW filter on device team0 [ 2429.010018][T25411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2429.040192][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.047353][ T7343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2429.060431][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.067581][ T7343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2429.138330][T25406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.145636][T25406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2429.153499][T25406] bridge_slave_0: entered allmulticast mode [ 2429.160481][T25406] bridge_slave_0: entered promiscuous mode [ 2429.170337][T25411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2429.186872][T25408] chnl_net:caif_netlink_parms(): no params data found [ 2429.205464][T25362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2429.215858][T25406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.228490][T25406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2429.236774][T25406] bridge_slave_1: entered allmulticast mode [ 2429.243566][T25406] bridge_slave_1: entered promiscuous mode [ 2429.284263][T12848] IPVS: stop unused estimator thread 0... [ 2429.287194][T25362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2429.317214][T25411] team0: Port device team_slave_0 added [ 2429.342055][T25362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2429.351705][T25362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2429.375868][T25406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2429.396679][T25411] team0: Port device team_slave_1 added [ 2429.439234][T25406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2429.486374][T25408] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.494812][T25408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2429.501984][T25408] bridge_slave_0: entered allmulticast mode [ 2429.509731][T25408] bridge_slave_0: entered promiscuous mode [ 2429.517481][T25408] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.525219][T25408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2429.532394][T25408] bridge_slave_1: entered allmulticast mode [ 2429.540527][T25408] bridge_slave_1: entered promiscuous mode [ 2429.602741][T25411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2429.612567][T25411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2429.639916][T25411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2429.659400][T25411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2429.667024][T25411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2429.701879][T25411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2429.732552][T25408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2429.754933][T25406] team0: Port device team_slave_0 added [ 2429.762977][T21998] Bluetooth: hci2: command tx timeout [ 2429.789489][T25270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2429.834039][T25408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2429.878329][T25406] team0: Port device team_slave_1 added [ 2430.057556][T25411] hsr_slave_0: entered promiscuous mode [ 2430.073970][T25411] hsr_slave_1: entered promiscuous mode [ 2430.096742][T25411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2430.104664][T25411] Cannot create hsr debugfs directory [ 2430.165984][T25408] team0: Port device team_slave_0 added [ 2430.175437][T25406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2430.190190][T25406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2430.217995][T25406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2430.270700][T25408] team0: Port device team_slave_1 added [ 2430.292404][T25406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2430.299696][T25406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2430.329822][T25406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2430.470061][T25408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2430.480475][T25408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2430.512358][T25408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2430.613657][T25408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2430.620647][T25408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2430.647344][T21998] Bluetooth: hci7: command tx timeout [ 2430.654448][T25408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2430.697251][T25406] hsr_slave_0: entered promiscuous mode [ 2430.706547][T25406] hsr_slave_1: entered promiscuous mode [ 2430.732266][T21998] Bluetooth: hci5: command tx timeout [ 2430.738078][T25406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2430.752994][T25406] Cannot create hsr debugfs directory [ 2430.790214][T25270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2430.958702][T25408] hsr_slave_0: entered promiscuous mode [ 2430.965616][T25408] hsr_slave_1: entered promiscuous mode [ 2430.972222][T25408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2430.980600][T25408] Cannot create hsr debugfs directory [ 2431.093805][T25362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2431.645777][T25362] 8021q: adding VLAN 0 to HW filter on device team0 [ 2431.772147][T25351] bridge0: port 1(bridge_slave_0) entered blocking state [ 2431.779323][T25351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2431.821428][T25270] veth0_vlan: entered promiscuous mode [ 2431.853212][T21998] Bluetooth: hci2: command tx timeout [ 2431.904741][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 2431.911878][T13294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2431.968287][T25270] veth1_vlan: entered promiscuous mode [ 2432.548729][T25411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2432.569979][T25270] veth0_macvtap: entered promiscuous mode [ 2432.602718][T25411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2432.630435][T25411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2432.656672][T25270] veth1_macvtap: entered promiscuous mode [ 2432.689097][T25411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2432.723061][T21998] Bluetooth: hci7: command tx timeout [ 2432.728559][T25362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2432.810944][T21998] Bluetooth: hci5: command tx timeout [ 2432.834842][T25270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2432.853337][T25270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.863461][T25270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2432.874261][T25270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.885507][T25270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2432.905593][T13296] bridge_slave_1: left allmulticast mode [ 2432.911233][T13296] bridge_slave_1: left promiscuous mode [ 2432.918338][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2432.934076][T13296] bridge_slave_0: left allmulticast mode [ 2432.939737][T13296] bridge_slave_0: left promiscuous mode [ 2432.945978][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2432.956395][T13296] bridge_slave_1: left allmulticast mode [ 2432.962094][T13296] bridge_slave_1: left promiscuous mode [ 2432.968555][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2432.978627][T13296] bridge_slave_0: left allmulticast mode [ 2432.984711][T13296] bridge_slave_0: left promiscuous mode [ 2432.990368][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.000367][T13296] bridge_slave_1: left allmulticast mode [ 2433.006249][T13296] bridge_slave_1: left promiscuous mode [ 2433.011880][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.022470][T13296] bridge_slave_0: left allmulticast mode [ 2433.028677][T13296] bridge_slave_0: left promiscuous mode [ 2433.037224][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.048536][T13296] bridge_slave_1: left allmulticast mode [ 2433.055263][T13296] bridge_slave_1: left promiscuous mode [ 2433.060905][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.069382][T13296] bridge_slave_0: left allmulticast mode [ 2433.075263][T13296] bridge_slave_0: left promiscuous mode [ 2433.080953][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.868680][T13296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2433.879632][T13296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2433.890558][T13296] bond0 (unregistering): Released all slaves [ 2433.928902][T21998] Bluetooth: hci2: command tx timeout [ 2434.063479][T13296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2434.086879][T13296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2434.113792][T13296] bond0 (unregistering): Released all slaves [ 2434.259077][T18619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2434.282112][T18619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2434.292098][T18619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2434.301860][T18619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2434.316313][T18619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2434.323756][T18619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2434.394337][T13296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2434.412056][T13296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2434.422382][T13296] bond0 (unregistering): Released all slaves [ 2434.436148][T13296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2434.451134][T13296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2434.465284][T13296] bond0 (unregistering): Released all slaves [ 2434.815583][T18619] Bluetooth: hci7: command tx timeout [ 2435.117606][T25362] veth0_vlan: entered promiscuous mode [ 2435.227483][T25411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2435.259676][T25362] veth1_vlan: entered promiscuous mode [ 2435.284304][T13296] hsr_slave_0: left promiscuous mode [ 2435.290074][T13296] hsr_slave_1: left promiscuous mode [ 2435.298544][T13296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2435.309302][T13296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2435.321985][T13296] hsr_slave_0: left promiscuous mode [ 2435.328121][T13296] hsr_slave_1: left promiscuous mode [ 2435.339142][T13296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2435.346772][T13296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2435.355363][T13296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2435.362759][T13296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2435.377333][T13296] hsr_slave_0: left promiscuous mode [ 2435.386269][T13296] hsr_slave_1: left promiscuous mode [ 2435.392095][T13296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2435.400392][T13296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2435.412384][T13296] hsr_slave_0: left promiscuous mode [ 2435.418276][T13296] hsr_slave_1: left promiscuous mode [ 2435.425714][T13296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2435.434006][T13296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2435.468091][T13296] veth1_macvtap: left promiscuous mode [ 2435.473915][T13296] veth0_macvtap: left promiscuous mode [ 2435.479558][T13296] veth1_vlan: left promiscuous mode [ 2435.485455][T13296] veth0_vlan: left promiscuous mode [ 2435.762699][T13296] team0 (unregistering): Port device team_slave_1 removed [ 2435.797916][T13296] team0 (unregistering): Port device team_slave_0 removed [ 2436.381030][T13296] team0 (unregistering): Port device team_slave_1 removed [ 2436.409383][T18619] Bluetooth: hci4: command tx timeout [ 2436.441617][T13296] team0 (unregistering): Port device team_slave_0 removed [ 2437.095892][T13296] team0 (unregistering): Port device team_slave_1 removed [ 2437.148330][T13296] team0 (unregistering): Port device team_slave_0 removed [ 2437.723002][T13296] team0 (unregistering): Port device team_slave_1 removed [ 2437.764149][T13296] team0 (unregistering): Port device team_slave_0 removed [ 2438.029957][T25411] 8021q: adding VLAN 0 to HW filter on device team0 [ 2438.075056][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.082171][T13294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.136501][T12848] bridge0: port 2(bridge_slave_1) entered blocking state [ 2438.143658][T12848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2438.212479][T25411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2438.226333][T25411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2438.381766][T25406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2438.414201][T25406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2438.445868][T25362] veth0_macvtap: entered promiscuous mode [ 2438.456271][T25406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2438.483647][T18619] Bluetooth: hci4: command tx timeout [ 2438.510231][T25406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2438.571951][T25527] chnl_net:caif_netlink_parms(): no params data found [ 2438.602585][T25362] veth1_macvtap: entered promiscuous mode [ 2438.882160][T25362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2438.897052][T25362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.919008][T25362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2438.930064][T25362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.941446][T25362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2439.087547][T25362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2439.099864][T25362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2439.124719][T25362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2439.137209][T25362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.147596][T25362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.158638][T25362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.173486][T25362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.195564][T25527] bridge0: port 1(bridge_slave_0) entered blocking state [ 2439.202753][T25527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2439.215135][T25527] bridge_slave_0: entered allmulticast mode [ 2439.222291][T25527] bridge_slave_0: entered promiscuous mode [ 2439.237183][T25527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2439.253241][T25527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.260472][T25527] bridge_slave_1: entered allmulticast mode [ 2439.279111][T25527] bridge_slave_1: entered promiscuous mode [ 2439.395986][T25411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2439.474134][T25527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2439.490459][T25527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2439.679989][T25527] team0: Port device team_slave_0 added [ 2439.745781][T25527] team0: Port device team_slave_1 added [ 2439.831423][T25406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2439.858056][T25527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2439.871382][T25527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2439.901446][T25527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2439.945573][T25408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2439.984853][T25408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2440.019850][T25411] veth0_vlan: entered promiscuous mode [ 2440.030739][T25527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2440.037755][T25527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2440.067832][T25527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2440.104239][T25408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2440.117907][T25408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2440.148957][T12848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2440.160152][T25406] 8021q: adding VLAN 0 to HW filter on device team0 [ 2440.167568][T12848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2440.207170][T25411] veth1_vlan: entered promiscuous mode [ 2440.232599][T25527] hsr_slave_0: entered promiscuous mode [ 2440.241633][T25527] hsr_slave_1: entered promiscuous mode [ 2440.248762][T25527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2440.257065][T25527] Cannot create hsr debugfs directory [ 2440.269642][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 2440.276751][T16543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2440.295973][T16543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2440.304502][T16543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2440.327359][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2440.334447][ T7343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2440.499935][T25411] veth0_macvtap: entered promiscuous mode [ 2440.512137][T25411] veth1_macvtap: entered promiscuous mode [ 2440.563023][T18619] Bluetooth: hci4: command tx timeout [ 2440.765370][T25411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2440.777129][T25411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2440.791201][T25411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2440.793060][T25600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2057 sclass=netlink_route_socket pid=25600 comm=syz.0.4939 [ 2440.802253][T25411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2440.829887][T25411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2440.843837][T25411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2440.859405][T25411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2440.975073][T25597] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2441.007709][T25411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.028414][T25411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.050063][T25411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.061850][T25411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.080242][T25411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2441.163385][T25406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2441.226476][T25408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2441.238930][T25411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.249235][T25411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.259173][T25411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.268920][T25411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.287646][T13296] bridge_slave_1: left allmulticast mode [ 2441.297902][T13296] bridge_slave_1: left promiscuous mode [ 2441.304290][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.315130][T13296] bridge_slave_0: left allmulticast mode [ 2441.320931][T13296] bridge_slave_0: left promiscuous mode [ 2441.327923][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.857939][T13296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2441.872612][T13296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2441.890234][T13296] bond0 (unregistering): Released all slaves [ 2441.954492][T25408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2442.018397][T13296] hsr_slave_0: left promiscuous mode [ 2442.035512][T13296] hsr_slave_1: left promiscuous mode [ 2442.041842][T13296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2442.050216][T13296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2442.061861][T13296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2442.080759][T13296] veth1_macvtap: left promiscuous mode [ 2442.087031][T13296] veth0_macvtap: left promiscuous mode [ 2442.092773][T13296] veth1_vlan: left promiscuous mode [ 2442.098314][T13296] veth0_vlan: left promiscuous mode [ 2442.643565][T18619] Bluetooth: hci4: command tx timeout [ 2442.740391][T13296] team0 (unregistering): Port device team_slave_1 removed [ 2442.804515][T13296] team0 (unregistering): Port device team_slave_0 removed [ 2443.515929][T12848] bridge0: port 1(bridge_slave_0) entered blocking state [ 2443.523155][T12848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2443.557482][T12848] bridge0: port 2(bridge_slave_1) entered blocking state [ 2443.564665][T12848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2443.594996][T25406] veth0_vlan: entered promiscuous mode [ 2443.911326][T25406] veth1_vlan: entered promiscuous mode [ 2444.355036][T25406] veth0_macvtap: entered promiscuous mode [ 2444.375127][T25406] veth1_macvtap: entered promiscuous mode [ 2444.401809][T25406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.421103][T25406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.451924][T25406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.465680][T25406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.492018][T25406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.503107][T25406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.537303][T25406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2445.048911][T25406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2445.068979][T25406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2445.080515][T25406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2445.099319][T25406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2445.109946][T25406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2445.135450][T25406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2445.154356][T25406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2445.169744][T25527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2445.207690][T25406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.216995][T25406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.228182][T25406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.246296][T25406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.337649][T12848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2445.357581][T12848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2445.420367][T25527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2445.450713][T25527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2445.496096][T25527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2445.572229][T25621] ALSA: seq fatal error: cannot create timer (-22) [ 2445.819900][T25351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2445.999132][T25351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2446.230796][T13294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2446.262365][T13294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2446.354033][T12848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2446.361897][T12848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2446.513717][T25527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2446.560500][T25527] 8021q: adding VLAN 0 to HW filter on device team0 [ 2446.560969][T25635] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4919'. [ 2446.626247][T12848] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.633401][T12848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2446.811485][T25408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2446.858322][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.865644][T13294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2446.967748][T25408] veth0_vlan: entered promiscuous mode [ 2447.107777][T25408] veth1_vlan: entered promiscuous mode [ 2447.288846][T25408] veth0_macvtap: entered promiscuous mode [ 2447.351543][T25408] veth1_macvtap: entered promiscuous mode [ 2447.477305][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2447.501497][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2447.553456][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2447.626372][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.026081][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.036963][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.055686][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.101300][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.147664][T25408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2448.234442][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2448.282960][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.319488][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2448.341314][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.366889][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2448.621777][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.632353][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2448.713303][T25660] ALSA: seq fatal error: cannot create timer (-22) [ 2449.385587][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2449.430843][T25408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2449.808161][T25408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.851463][T25408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.880272][T25408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.922108][T25408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.976144][T25527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2450.718594][T16543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2450.747670][T16543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2450.824520][T25527] veth0_vlan: entered promiscuous mode [ 2450.876945][ T7343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2450.890602][T25527] veth1_vlan: entered promiscuous mode [ 2450.921959][ T7343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2450.959860][T25527] veth0_macvtap: entered promiscuous mode [ 2450.964255][T25527] veth1_macvtap: entered promiscuous mode [ 2450.994844][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2451.021992][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.022017][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2451.022039][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.022059][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2451.022078][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.022093][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2451.022111][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.022126][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2451.022144][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.025603][T25527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2451.031541][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.031565][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.031578][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.031597][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.031611][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.031629][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.031641][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.031658][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.031670][T25527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.031687][T25527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.034708][T25527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2451.039640][T25527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.039686][T25527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.039726][T25527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.039765][T25527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.083281][T11595] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2451.243582][T16543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2451.243607][T16543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2451.256239][T11595] usb 1-1: Using ep0 maxpacket: 8 [ 2451.258028][T11595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2451.258082][T11595] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2451.258116][T11595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.260451][T11595] usb 1-1: config 0 descriptor?? [ 2451.324800][ T7343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2451.324826][ T7343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2451.812260][T11595] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2452.131725][T25699] ALSA: seq fatal error: cannot create timer (-22) [ 2452.687636][T25708] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 2452.703467][T25702] IPVS: stopping backup sync thread 25708 ... [ 2453.543162][T11595] usb 1-1: USB disconnect, device number 61 [ 2453.569178][T11595] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 2453.667552][T25720] 9pnet_virtio: no channels available for device syz [ 2456.679605][T25766] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4984'. [ 2458.959645][T25799] tmpfs: Bad value for 'mpol' [ 2459.736452][T25819] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4999'. [ 2460.814424][T18619] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 2460.994237][ T937] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2461.095180][T25607] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2461.145775][ T937] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2461.175389][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2461.189012][ T937] usb 1-1: Product: syz [ 2461.254910][ T937] usb 1-1: Manufacturer: syz [ 2461.272559][ T937] usb 1-1: SerialNumber: syz [ 2461.290471][ T937] usb 1-1: config 0 descriptor?? [ 2461.299141][T25607] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2461.310479][T25607] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2461.321608][T25607] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2461.331078][T25607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.400272][T25838] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2461.413241][T25607] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2461.562361][ T937] usb 1-1: USB disconnect, device number 62 [ 2462.326933][T25867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5015'. [ 2462.638304][ T5281] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2462.783269][T25866] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5016'. [ 2462.902918][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 2462.916875][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2462.951979][ T5281] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2462.989487][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2463.009410][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2463.042678][ T5281] usb 3-1: Product: syz [ 2463.062187][ T5281] usb 3-1: Manufacturer: syz [ 2463.081054][ T5281] usb 3-1: SerialNumber: syz [ 2463.340908][T25862] sctp: [Deprecated]: syz.2.5014 (pid 25862) Use of int in max_burst socket option deprecated. [ 2463.340908][T25862] Use struct sctp_assoc_value instead [ 2464.470016][ T5281] usb 4-1: USB disconnect, device number 70 [ 2464.494959][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5025'. [ 2464.893366][T22245] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2465.630843][T25607] usb 3-1: USB disconnect, device number 74 [ 2465.715174][T25908] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5031'. [ 2465.734902][T22245] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2465.743550][T22245] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2465.754174][T22245] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2465.764029][T22245] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2465.779265][T25910] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 2465.790230][T22245] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2465.801649][T25909] IPVS: stopping backup sync thread 25910 ... [ 2465.820634][T22245] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2465.830546][T22245] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2465.838975][T22245] usb 5-1: Product: syz [ 2465.839001][T22245] usb 5-1: Manufacturer: syz [ 2465.845558][T22245] cdc_wdm 5-1:1.0: skipping garbage [ 2465.893305][T22245] cdc_wdm 5-1:1.0: skipping garbage [ 2465.943143][T22245] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2465.949103][T22245] cdc_wdm 5-1:1.0: Unknown control protocol [ 2466.126552][T25894] syz.1.5025 (25894): drop_caches: 2 [ 2466.185234][ T29] audit: type=1400 audit(1728540800.290:1815): avc: denied { ioctl } for pid=25917 comm="syz.2.5034" path="socket:[133448]" dev="sockfs" ino=133448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2466.307222][T25925] fuse: Unknown parameter 'use00000000000000000000' [ 2466.736097][T22245] usb 5-1: USB disconnect, device number 53 [ 2466.785169][T25937] Process accounting resumed [ 2467.151196][T25947] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5045'. [ 2467.484704][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2467.767026][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.102536][T25974] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5057'. [ 2468.153814][ T937] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2468.408966][ T937] usb 2-1: Using ep0 maxpacket: 32 [ 2468.476566][ T937] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2468.630356][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2468.699907][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2468.748065][ T937] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2468.799208][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.840529][ T937] usb 2-1: config 0 descriptor?? [ 2468.892202][T25970] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2468.965599][ T937] hub 2-1:0.0: USB hub found [ 2469.126292][T25986] Process accounting resumed [ 2469.189899][ T937] hub 2-1:0.0: 2 ports detected [ 2470.587271][T26019] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5070'. [ 2470.708016][T22245] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 2470.885774][T22245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2470.909283][T22245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2470.930522][T22245] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2470.952908][T22245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.984172][T22245] usb 5-1: config 0 descriptor?? [ 2471.041368][T21990] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 2471.243642][T25607] usb 2-1: USB disconnect, device number 66 [ 2471.409926][T22245] aquacomputer_d5next 0003:0C70:F0BD.001C: item fetching failed at offset 2/5 [ 2471.446168][T22245] aquacomputer_d5next 0003:0C70:F0BD.001C: probe with driver aquacomputer_d5next failed with error -22 [ 2471.609952][T26029] IPVS: stopping backup sync thread 26031 ... [ 2471.616339][T26031] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 2471.637350][T25607] usb 5-1: USB disconnect, device number 54 [ 2472.323219][T26037] Process accounting resumed [ 2472.683530][T25607] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2472.854156][T25607] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2472.868666][T25607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2472.882487][T25607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2472.904054][T25607] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2472.925764][T25607] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2472.943249][T25607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.956310][T25607] usb 5-1: config 0 descriptor?? [ 2472.962040][T26049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2473.438568][T25607] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 2473.475182][T25607] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 2473.574980][T25607] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2473.644584][T26049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2473.752674][T26049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2473.887337][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 4129042 (n: 0)! (syz.4.5080) [ 2473.898842][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 1073741824 (n: 0)! (syz.4.5080) [ 2473.910240][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value -64385 (n: 0)! (syz.4.5080) [ 2473.921284][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 34144512 (n: 0)! (syz.4.5080) [ 2473.932501][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 65572 (n: 0)! (syz.4.5080) [ 2473.943460][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 150994944 (n: 0)! (syz.4.5080) [ 2473.954772][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 352321540 (n: 0)! (syz.4.5080) [ 2473.966075][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 3 (n: 0)! (syz.4.5080) [ 2473.976691][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 4202761 (n: 0)! (syz.4.5080) [ 2473.987833][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 253886720 (n: 0)! (syz.4.5080) [ 2473.999136][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value -16447232 (n: 0)! (syz.4.5080) [ 2474.010424][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value -1 (n: 0)! (syz.4.5080) [ 2474.021099][T26049] plantronics 0003:047F:FFFF.001D: implement() called with too large value 16777215 (n: 0)! (syz.4.5080) [ 2474.193159][T25607] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2474.413456][T25607] usb 3-1: Using ep0 maxpacket: 8 [ 2474.580211][T25607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2474.601562][T25607] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2474.639775][T25607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.696476][T25607] usb 3-1: config 0 descriptor?? [ 2474.917366][T25607] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 2475.176753][ T5281] usb 3-1: USB disconnect, device number 75 [ 2475.184683][ T5281] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected [ 2475.633887][T21990] usb 5-1: USB disconnect, device number 55 [ 2475.843451][ T5281] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 2475.879768][T26084] 9pnet_fd: Insufficient options for proto=fd [ 2476.174993][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2476.189376][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2476.202860][ T5281] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2476.212878][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.224148][ T5281] usb 1-1: config 0 descriptor?? [ 2476.689045][ T5281] aquacomputer_d5next 0003:0C70:F0BD.001E: item fetching failed at offset 2/5 [ 2476.706319][ T5281] aquacomputer_d5next 0003:0C70:F0BD.001E: probe with driver aquacomputer_d5next failed with error -22 [ 2476.846414][T21990] usb 1-1: USB disconnect, device number 63 [ 2477.739753][T26103] netlink: 'syz.0.5102': attribute type 10 has an invalid length. [ 2477.773037][T26103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2477.833057][T26103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2477.879020][T26103] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2478.097669][T26099] netlink: 'syz.1.5101': attribute type 10 has an invalid length. [ 2478.114383][T26099] syz_tun: entered promiscuous mode [ 2478.146389][T26099] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2478.224004][T26115] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5107'. [ 2478.293461][T26117] 9pnet_fd: Insufficient options for proto=fd [ 2478.742960][T22245] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 2478.812863][T26127] nbd1: detected capacity change from 0 to 12 [ 2478.837836][T26128] block nbd1: Send control failed (result -89) [ 2478.859165][T26128] block nbd1: Request send failed, requeueing [ 2478.898667][T18619] block nbd1: Receive control failed (result -32) [ 2478.902684][ T26] block nbd1: Dead connection, failed to find a fallback [ 2478.915469][ T26] block nbd1: shutting down sockets [ 2478.921120][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2478.931190][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2478.941376][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2478.965210][T22245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2478.976488][T22245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2478.992249][T22245] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2478.994063][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.002534][T22245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.050730][T22245] usb 5-1: config 0 descriptor?? [ 2479.066146][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.088551][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.113962][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.124501][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.136004][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.145486][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.170839][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.181541][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.232494][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.261852][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.298186][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.311252][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.343197][T26128] ldm_validate_partition_table(): Disk read failed. [ 2479.358153][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.372025][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.389065][T26128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2479.411850][T26128] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2479.443870][T26128] Dev nbd1: unable to read RDB block 0 [ 2479.451229][T26128] nbd1: unable to read partition table [ 2479.489333][T22245] aquacomputer_d5next 0003:0C70:F0BD.001F: item fetching failed at offset 2/5 [ 2479.501494][T26128] nbd1: partition table beyond EOD, truncated [ 2479.520847][T25843] ldm_validate_partition_table(): Disk read failed. [ 2479.528745][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2479.539531][T22245] aquacomputer_d5next 0003:0C70:F0BD.001F: probe with driver aquacomputer_d5next failed with error -22 [ 2479.547805][T25843] Dev nbd1: unable to read RDB block 0 [ 2479.554465][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=5, location=5 [ 2479.569577][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 2479.581144][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 2479.592357][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2479.593620][T25843] nbd1: unable to read partition table [ 2479.602913][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2479.634071][T25843] nbd1: partition table beyond EOD, truncated [ 2479.636086][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 2479.667473][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 2479.667852][T25843] ldm_validate_partition_table(): Disk read failed. [ 2479.676919][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 2479.685972][T25843] Dev nbd1: unable to read RDB block 0 [ 2479.712045][T22245] usb 5-1: USB disconnect, device number 56 [ 2479.719617][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2479.744452][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2479.750808][T25843] nbd1: unable to read partition table [ 2479.762610][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 2479.769722][T25843] nbd1: partition table beyond EOD, [ 2479.772274][T26128] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2479.774057][T25843] truncated [ 2479.792203][T26128] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 2480.772656][T26153] fuse: Unknown parameter 'user_i00000000000000000000' [ 2481.373131][T11595] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2481.534526][T11595] usb 2-1: Using ep0 maxpacket: 32 [ 2481.549852][T11595] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.562473][T11595] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2481.575818][T11595] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2481.586526][T11595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.600359][T11595] usb 2-1: Product: syz [ 2481.605522][T11595] usb 2-1: Manufacturer: syz [ 2481.610530][T11595] usb 2-1: SerialNumber: syz [ 2481.871107][T26167] sctp: [Deprecated]: syz.1.5125 (pid 26167) Use of int in max_burst socket option deprecated. [ 2481.871107][T26167] Use struct sctp_assoc_value instead [ 2483.358951][T21998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2483.416906][T26185] IPVS: stopping backup sync thread 26187 ... [ 2483.424370][T26187] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 2483.444361][T21998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2483.455691][T21998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2483.465618][T21998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2483.475886][T21998] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2483.484627][T21998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2484.790235][T26183] chnl_net:caif_netlink_parms(): no params data found [ 2484.859900][ T937] usb 2-1: USB disconnect, device number 67 [ 2484.950087][T26183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.993536][T26183] bridge0: port 1(bridge_slave_0) entered disabled state [ 2485.000837][T26183] bridge_slave_0: entered allmulticast mode [ 2485.051248][T26183] bridge_slave_0: entered promiscuous mode [ 2485.070990][T26183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2485.100195][T26183] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.122258][T26183] bridge_slave_1: entered allmulticast mode [ 2485.132258][T26183] bridge_slave_1: entered promiscuous mode [ 2485.185763][T26209] fuse: Unknown parameter 'user_id00000000000000000000' [ 2485.189764][T26183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2485.232198][T26183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2485.343962][T26183] team0: Port device team_slave_0 added [ 2485.384551][T26183] team0: Port device team_slave_1 added [ 2485.423168][T26183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2485.430371][T26183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.460978][T21990] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2485.470010][T21998] Bluetooth: hci5: SCO packet for unknown connection handle 1955 [ 2485.470183][T26183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2485.497226][T26183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2485.504589][T26183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.535138][T21998] Bluetooth: hci3: command tx timeout [ 2485.569487][T26183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2485.632898][T21990] usb 1-1: Using ep0 maxpacket: 16 [ 2485.660242][T21990] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2485.671470][T21990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2485.689010][T21990] usb 1-1: Product: syz [ 2485.696723][T21990] usb 1-1: Manufacturer: syz [ 2485.710790][T21990] usb 1-1: SerialNumber: syz [ 2485.736228][T26183] hsr_slave_0: entered promiscuous mode [ 2485.753119][T21990] usb 1-1: config 0 descriptor?? [ 2485.759313][T26183] hsr_slave_1: entered promiscuous mode [ 2485.776456][T21990] as10x_usb: device has been detected [ 2485.791316][T21990] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2485.808874][T26183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2485.819808][T21990] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 2485.829959][T26183] Cannot create hsr debugfs directory [ 2485.953339][T21990] as10x_usb: error during firmware upload part1 [ 2485.978525][T26206] random: crng reseeded on system resumption [ 2485.985317][ T29] audit: type=1400 audit(1728540820.080:1816): avc: denied { write } for pid=26205 comm="syz.0.5137" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2486.019017][T21990] Registered device Sky IT Digital Key (green led) [ 2486.976292][T26183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2487.245692][T26183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2487.712947][T21998] Bluetooth: hci3: command tx timeout [ 2488.276360][ T5281] usb 1-1: USB disconnect, device number 64 [ 2488.325988][ T5281] Unregistered device Sky IT Digital Key (green led) [ 2488.330153][ T5281] as10x_usb: device has been disconnected [ 2488.951511][T11595] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2489.076000][T26254] fuse: Unknown parameter 'user_id00000000000000000000' [ 2489.085878][T26183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.134787][T11595] usb 3-1: Using ep0 maxpacket: 8 [ 2489.144571][T11595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2489.156515][T11595] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2489.484887][T26183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.572244][T11595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.591682][T11595] usb 3-1: config 0 descriptor?? [ 2489.830884][T11595] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2489.858787][T11595] usb 3-1: USB disconnect, device number 76 [ 2489.890401][T11595] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2490.947274][T21998] Bluetooth: hci3: command tx timeout [ 2491.201855][T26183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2491.231246][T26183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2491.274399][T26183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2491.427364][T26183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2491.440301][T21998] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2491.482576][T26278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5159'. [ 2491.636890][ T29] audit: type=1400 audit(1728540825.730:1817): avc: denied { write } for pid=26272 comm="syz.4.5158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2491.733520][T25606] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2491.850855][T26282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5160'. [ 2491.886206][T25606] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2491.932567][T25606] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2491.950436][T26183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2492.040953][T25606] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2492.075826][T25606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.088383][T26183] 8021q: adding VLAN 0 to HW filter on device team0 [ 2492.138562][T26274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2492.148672][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 2492.155775][T13294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2492.200776][T25606] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2492.449188][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 2492.456379][T13294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2492.973368][T21998] Bluetooth: hci3: command tx timeout [ 2493.384632][T26183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2493.397993][T26183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2493.494735][T26300] Bluetooth: MGMT ver 1.23 [ 2493.692058][T26183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2493.809559][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5163'. [ 2493.918378][ T29] audit: type=1400 audit(1728540827.990:1818): avc: denied { bind } for pid=26299 comm="syz.2.5163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2493.949336][T26309] fuse: Unknown parameter 'user_id00000000000000000000' [ 2494.025706][T26183] veth0_vlan: entered promiscuous mode [ 2494.075837][T26183] veth1_vlan: entered promiscuous mode [ 2494.219073][T26183] veth0_macvtap: entered promiscuous mode [ 2494.257492][T26183] veth1_macvtap: entered promiscuous mode [ 2494.412107][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2494.452248][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.470933][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2494.484547][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.503351][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2494.523024][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.533836][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2494.555247][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.570090][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2494.597565][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.616831][T26183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2494.661098][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.700159][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.730560][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.751523][ T5281] usb 2-1: USB disconnect, device number 68 [ 2494.752532][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.777940][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.801153][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.817057][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.829281][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.846550][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.860599][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.882353][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.901441][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.943170][T26183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2494.990738][T26183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.007258][T26183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.030356][T26183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.058859][T26183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.328186][T12848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2495.349931][T12848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2496.092964][T12848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2496.125628][T12848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2496.503727][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2498.897788][T26364] 9pnet_fd: Insufficient options for proto=fd [ 2500.606495][T26385] input: syz0 as /devices/virtual/input/input45 [ 2502.298310][ T8] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 2502.460709][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2502.470261][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2502.504135][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2502.605257][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2502.730956][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2502.845153][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2502.911587][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2502.942602][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2502.958510][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2502.980776][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2502.998091][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2503.007269][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2503.032833][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2503.045959][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2503.057386][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2503.078721][ T8] usb 1-1: string descriptor 0 read error: -22 [ 2503.093630][ T8] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2503.112693][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2503.161138][ T8] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2503.220102][ T29] audit: type=1400 audit(1728540837.320:1819): avc: denied { setopt } for pid=26417 comm="syz.1.5200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2503.334296][ T8] usb 1-1: USB disconnect, device number 65 [ 2503.539558][T26418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5200'. [ 2503.732966][T21990] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2504.622853][T21990] usb 4-1: Using ep0 maxpacket: 16 [ 2504.629562][T21990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2504.641519][T21990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2504.651770][T21990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2504.699755][T21990] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2504.715094][T21990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.739453][T21990] usb 4-1: config 0 descriptor?? [ 2505.053103][ T8] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2505.215537][T21990] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 2505.228085][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 2505.241360][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2505.268772][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2505.302351][T21990] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0020/input/input46 [ 2505.326532][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 2505.348204][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.366928][ T8] usb 3-1: config 0 descriptor?? [ 2505.416411][T21990] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2505.452454][T21990] usb 4-1: USB disconnect, device number 71 [ 2506.000941][T26447] netlink: 'syz.0.5209': attribute type 72 has an invalid length. [ 2506.008999][T26447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5209'. [ 2506.984574][T26453] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.5206' sets config #0 [ 2507.006873][T26453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.114376][T26453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2509.749038][T21990] usb 3-1: USB disconnect, device number 77 [ 2510.137077][T26470] 9pnet_fd: Insufficient options for proto=fd [ 2510.490415][T18619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2510.513109][T18619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2510.532415][T18619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2510.571617][T18619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2510.615863][ T8] IPVS: starting estimator thread 0... [ 2510.633384][T18619] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2510.650795][T18619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2510.712927][T26485] IPVS: using max 21 ests per chain, 50400 per kthread [ 2510.912883][ T8] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2511.082945][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 2511.090335][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2511.102623][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2511.160280][T13294] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2511.181394][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2511.193422][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2511.202598][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2511.733773][T13294] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2511.950166][ T8] usb 2-1: config 0 descriptor?? [ 2511.956538][T26488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2511.968156][ T8] hub 2-1:0.0: USB hub found [ 2512.171542][T13294] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2512.181433][ T8] hub 2-1:0.0: 2 ports detected [ 2512.250283][T26475] chnl_net:caif_netlink_parms(): no params data found [ 2512.312712][T13294] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2512.366577][ T29] audit: type=1400 audit(1728540846.470:1820): avc: denied { getopt } for pid=26513 comm="syz.2.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2512.467922][T26475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2512.476393][T26475] bridge0: port 1(bridge_slave_0) entered disabled state [ 2512.496743][T26475] bridge_slave_0: entered allmulticast mode [ 2512.515673][T26475] bridge_slave_0: entered promiscuous mode [ 2512.579548][T26475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2512.612432][T26475] bridge0: port 2(bridge_slave_1) entered disabled state [ 2512.621284][T26475] bridge_slave_1: entered allmulticast mode [ 2512.645873][T26475] bridge_slave_1: entered promiscuous mode [ 2512.722895][T21998] Bluetooth: hci6: command tx timeout [ 2512.926338][T26475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2512.940562][T26475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2512.970884][T13294] bridge_slave_1: left allmulticast mode [ 2513.016152][T13294] bridge_slave_1: left promiscuous mode [ 2513.024124][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 2513.038056][T13294] bridge_slave_0: left allmulticast mode [ 2513.044692][T13294] bridge_slave_0: left promiscuous mode [ 2513.065185][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.921915][T13294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2513.956480][T13294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2513.971839][T13294] bond0 (unregistering): Released all slaves [ 2514.044668][T26475] team0: Port device team_slave_0 added [ 2514.062707][T25607] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 2514.111211][T26475] team0: Port device team_slave_1 added [ 2514.263896][T26475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2514.278616][T11595] usb 2-1: USB disconnect, device number 69 [ 2514.287455][T26475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.364024][T26475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2514.392515][T26475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2514.405069][T26475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.446044][T26475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2514.654268][T26475] hsr_slave_0: entered promiscuous mode [ 2514.686105][T26475] hsr_slave_1: entered promiscuous mode [ 2514.701752][T26475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2514.718342][T26475] Cannot create hsr debugfs directory [ 2514.803426][T21998] Bluetooth: hci6: command tx timeout [ 2515.037174][T11595] IPVS: starting estimator thread 0... [ 2515.135707][T26564] IPVS: using max 18 ests per chain, 43200 per kthread [ 2515.231948][T13294] hsr_slave_0: left promiscuous mode [ 2515.238441][T13294] hsr_slave_1: left promiscuous mode [ 2515.271675][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2515.283841][T13294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2515.301295][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2515.313325][T13294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2515.343674][T13294] veth1_macvtap: left promiscuous mode [ 2515.350353][T13294] veth0_macvtap: left promiscuous mode [ 2515.357512][T13294] veth1_vlan: left promiscuous mode [ 2515.368535][T13294] veth0_vlan: left promiscuous mode [ 2515.722107][ T29] audit: type=1400 audit(1728540849.820:1821): avc: denied { ioctl } for pid=26576 comm="syz.2.5250" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2515.813096][T26579] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2516.202438][T26586] autofs: Bad value for 'fd' [ 2516.471518][T26590] 9pnet_fd: Insufficient options for proto=fd [ 2516.566920][T13294] team0 (unregistering): Port device team_slave_1 removed [ 2516.683350][T13294] team0 (unregistering): Port device team_slave_0 removed [ 2516.897637][T22245] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2516.903029][T21998] Bluetooth: hci6: command tx timeout [ 2517.066147][T22245] usb 1-1: Using ep0 maxpacket: 32 [ 2517.084885][T22245] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2517.121395][T22245] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2517.172868][T22245] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2517.225071][T22245] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2517.279830][T22245] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2517.312789][T22245] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2517.336413][T22245] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2517.356939][T22245] usb 1-1: Product: syz [ 2517.383111][T22245] usb 1-1: Manufacturer: syz [ 2517.387882][T22245] usb 1-1: SerialNumber: syz [ 2517.436388][T22245] usb 1-1: config 0 descriptor?? [ 2517.454369][T22245] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2517.484531][T22245] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2517.893557][ T8] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2518.053003][ T8] usb 3-1: device descriptor read/64, error -71 [ 2518.090497][T21998] Bluetooth: hci1: command tx timeout [ 2518.313044][ T8] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2518.623129][ T8] usb 3-1: device descriptor read/64, error -71 [ 2518.735437][ T8] usb usb3-port1: attempt power cycle [ 2519.033532][T21998] Bluetooth: hci6: command tx timeout [ 2519.166386][ T8] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2519.268145][ T8] usb 3-1: device descriptor read/8, error -71 [ 2519.552887][ T8] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2519.574613][ T8] usb 3-1: device descriptor read/8, error -71 [ 2519.613295][T11984] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2519.695481][ T8] usb usb3-port1: unable to enumerate USB device [ 2519.716608][T26475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2519.748998][T26475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2519.765062][T11984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2519.785992][T11984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2519.798476][T26475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2519.814224][T11984] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2519.835874][T26475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2519.851883][T11984] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2519.882227][T11984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.947882][T11984] usb 2-1: config 0 descriptor?? [ 2520.071612][T26475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2520.096829][T26475] 8021q: adding VLAN 0 to HW filter on device team0 [ 2520.136332][T25351] bridge0: port 1(bridge_slave_0) entered blocking state [ 2520.143495][T25351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2520.152362][T25351] bridge0: port 2(bridge_slave_1) entered blocking state [ 2520.159515][T25351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2520.348814][T26633] fuse: Unknown parameter 'rootde' [ 2520.399966][T11984] usbhid 2-1:0.0: can't add hid device: -71 [ 2520.427850][T11984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2520.464576][T11984] usb 2-1: USB disconnect, device number 70 [ 2520.649137][T26475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2520.985039][T26653] autofs: Unknown parameter '0x0000000000000000' [ 2521.166508][T26662] 9pnet_fd: Insufficient options for proto=fd [ 2522.127404][T26475] veth0_vlan: entered promiscuous mode [ 2522.222105][T26475] veth1_vlan: entered promiscuous mode [ 2522.318462][T26475] veth0_macvtap: entered promiscuous mode [ 2522.347182][T26475] veth1_macvtap: entered promiscuous mode [ 2522.402187][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2522.426368][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.447315][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2522.457943][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.467923][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2522.478992][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.488958][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2522.499450][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.509920][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2522.520983][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.550167][T26475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2522.565389][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2522.576188][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.586287][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2522.597575][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.607753][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2522.787168][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2522.963591][T26607] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 2522.992958][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2523.075099][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2523.296561][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2523.348067][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2523.360840][ T5281] usb 1-1: USB disconnect, device number 66 [ 2523.371716][ T5281] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2523.407979][ T29] audit: type=1800 audit(1728540857.490:1822): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5273" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2523.459730][T26475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2523.498398][T26475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2523.509631][T26475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2523.543839][T26475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.553195][T26475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.591251][T26475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.617307][T26475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.779913][T16543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.822036][T16543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.853489][ T937] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 2523.882367][T12848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.896587][T12848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.943675][ T5281] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2524.015057][ T937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2524.034053][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2524.063366][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2524.084131][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2524.098696][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2524.123199][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2524.130056][ T937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2524.144584][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2524.156809][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2524.182852][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2524.192812][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2524.224962][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2524.230480][ T5281] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2524.240927][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2524.283170][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.290167][ T937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2524.299122][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2524.314698][ T5281] usb 1-1: config 0 descriptor?? [ 2524.321231][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2524.349193][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2524.389797][ T937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2524.424822][ T937] usb 4-1: string descriptor 0 read error: -22 [ 2524.431349][ T937] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2524.440789][T26720] autofs: Unknown parameter '0x0000000000000000' [ 2524.456802][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2524.528123][ T937] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2524.740512][ T5281] usbhid 1-1:0.0: can't add hid device: -71 [ 2524.747283][ T5281] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2524.748187][ T937] usb 4-1: USB disconnect, device number 72 [ 2524.793649][ T5281] usb 1-1: USB disconnect, device number 67 [ 2525.224016][T21990] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2525.375609][T26737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5280'. [ 2525.384224][T21990] usb 2-1: device descriptor read/64, error -71 [ 2525.432371][ T29] audit: type=1400 audit(1728540859.530:1823): avc: denied { write } for pid=26734 comm="syz.4.5280" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2525.791614][T21990] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2525.922925][T21990] usb 2-1: device descriptor read/64, error -71 [ 2526.033300][T21990] usb usb2-port1: attempt power cycle [ 2526.453076][T21990] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2526.474166][T21990] usb 2-1: device descriptor read/8, error -71 [ 2526.713469][T21990] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2526.744119][T21990] usb 2-1: device descriptor read/8, error -71 [ 2526.903332][T21990] usb usb2-port1: unable to enumerate USB device [ 2528.912886][T11984] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2529.106996][ T5281] IPVS: starting estimator thread 0... [ 2529.204910][T11984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.216227][T11984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.272805][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.285246][T26793] IPVS: using max 15 ests per chain, 36000 per kthread [ 2529.334272][T11984] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2529.372712][T21998] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2529.412403][T11984] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2529.422612][T11984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.434880][T11984] usb 2-1: config 0 descriptor?? [ 2529.672938][ T937] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2529.826009][ T937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2529.838310][ T937] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2529.849654][ T937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2529.859133][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.890870][T26794] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2529.917309][ T937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2530.090182][T11984] usbhid 2-1:0.0: can't add hid device: -71 [ 2530.119355][T11984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2530.150667][T11984] usb 2-1: USB disconnect, device number 75 [ 2530.745766][T26808] tipc: Started in network mode [ 2530.785419][T26808] tipc: Node identity b84, cluster identity 4711 [ 2531.073549][T26808] tipc: Node number set to 2948 [ 2531.423136][T21998] Bluetooth: hci1: command 0x0406 tx timeout [ 2532.382915][ T937] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2532.507091][ T29] audit: type=1326 audit(1728540866.610:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26823 comm="syz.1.5304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0e9b7dff9 code=0x0 [ 2532.565080][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 2532.572720][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2532.600683][ T937] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2532.634242][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.719390][ T937] usb 1-1: config 0 descriptor?? [ 2532.722889][T22245] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2532.749544][ T937] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input47 [ 2532.802998][T18619] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2532.812919][T18619] Bluetooth: hci2: Injecting HCI hardware error event [ 2532.826179][T21998] Bluetooth: hci2: hardware error 0x00 [ 2532.963309][T22245] usb 4-1: Using ep0 maxpacket: 32 [ 2533.025122][T22245] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2533.187360][ T4659] bcm5974 1-1:0.0: could not read from device [ 2533.211391][T22245] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2533.274841][ T4659] bcm5974 1-1:0.0: could not read from device [ 2533.284808][ T4659] bcm5974 1-1:0.0: could not read from device [ 2533.342729][T22245] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2533.354776][ T937] usb 1-1: USB disconnect, device number 68 [ 2533.392543][T22245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.403594][T26828] bcm5974 1-1:0.0: could not read from device [ 2533.414085][T21969] usb 3-1: USB disconnect, device number 82 [ 2533.438973][T22245] usb 4-1: Product: syz [ 2533.487276][ T4659] bcm5974 1-1:0.0: could not read from device [ 2533.548609][T22245] usb 4-1: Manufacturer: syz [ 2533.571709][T22245] usb 4-1: SerialNumber: syz [ 2533.827828][T26834] sctp: [Deprecated]: syz.3.5307 (pid 26834) Use of int in max_burst socket option deprecated. [ 2533.827828][T26834] Use struct sctp_assoc_value instead [ 2534.883023][T21998] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2535.183065][T25607] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2535.248437][ T937] usb 4-1: USB disconnect, device number 73 [ 2535.365297][T25607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2535.396855][T25607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2535.420718][T25607] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2535.434613][T25607] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2535.447708][T25607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.486890][T25607] usb 3-1: config 0 descriptor?? [ 2536.231257][T25607] usbhid 3-1:0.0: can't add hid device: -71 [ 2537.205184][T25607] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2537.592534][T25607] usb 3-1: USB disconnect, device number 83 [ 2537.848360][T21969] libceph: connect (1)[c::]:6789 error -101 [ 2537.863068][T21969] libceph: mon0 (1)[c::]:6789 connect error [ 2537.957287][T26873] ceph: No mds server is up or the cluster is laggy [ 2538.321899][ T29] audit: type=1400 audit(1728540872.420:1825): avc: denied { wake_alarm } for pid=26883 comm="syz.2.5320" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2538.377772][T26884] misc userio: Invalid payload size [ 2538.397348][T26884] misc userio: No port type given on /dev/userio [ 2538.509085][T26889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5321'. [ 2539.218765][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2539.492867][T11984] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2539.643022][T11984] usb 4-1: Using ep0 maxpacket: 32 [ 2540.063051][T11984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2540.083254][T11984] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2540.128433][T11984] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2540.160422][T11984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.202274][T11984] usb 4-1: Product: syz [ 2540.222946][ T29] audit: type=1400 audit(1728540874.300:1826): avc: denied { write } for pid=26901 comm="syz.4.5326" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2540.420265][T11984] usb 4-1: Manufacturer: syz [ 2540.440954][T11984] usb 4-1: SerialNumber: syz [ 2541.660896][T26896] sctp: [Deprecated]: syz.3.5322 (pid 26896) Use of int in max_burst socket option deprecated. [ 2541.660896][T26896] Use struct sctp_assoc_value instead [ 2541.922963][T21998] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2542.072991][T11984] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2542.234614][T11984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2542.295531][T11984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.397055][T11984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2542.424092][ T5281] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2542.432111][T11984] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2542.441902][T11984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.503599][T11984] usb 5-1: config 0 descriptor?? [ 2542.738687][ T5281] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2542.756963][ T5281] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2542.766926][ T5281] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2542.777189][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.821253][T26918] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2542.872104][ T5281] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2542.962695][T21990] usb 4-1: USB disconnect, device number 74 [ 2543.139316][T26925] netlink: 'syz.3.5333': attribute type 39 has an invalid length. [ 2543.251461][T11984] usbhid 5-1:0.0: can't add hid device: -71 [ 2543.258103][T11984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2543.276318][T11984] usb 5-1: USB disconnect, device number 57 [ 2544.464531][T21998] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 2545.071414][T26943] tmpfs: Bad value for 'size' [ 2545.263027][T11984] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2545.422872][T11984] usb 5-1: Using ep0 maxpacket: 16 [ 2545.447261][T11984] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 2545.466555][T11984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2545.482914][T11984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2546.038418][T11984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 2546.051400][T11984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 2546.074727][T11984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2546.187414][T11984] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2546.222622][T11984] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2546.240694][T21969] usb 2-1: USB disconnect, device number 76 [ 2546.270030][T11984] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2546.294862][T11984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2546.323174][T11984] usb 5-1: SerialNumber: syz [ 2546.365221][T11984] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2546.681389][T18619] Bluetooth: hci5: command 0x0406 tx timeout [ 2546.702964][T25606] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2547.596187][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5350'. [ 2547.605539][T25606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2547.605582][T25606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2547.605616][T25606] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2547.605663][T25606] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2547.605696][T25606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2547.626339][T25606] usb 2-1: config 0 descriptor?? [ 2547.725807][T11984] usb 5-1: USB disconnect, device number 58 [ 2547.804374][T26982] fuse: Bad value for 'fd' [ 2547.815875][ T29] audit: type=1400 audit(1728540881.920:1827): avc: denied { getopt } for pid=26972 comm="syz.3.5350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2547.938731][T26987] tmpfs: Bad value for 'mpol' [ 2548.023338][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2548.349224][T25606] usbhid 2-1:0.0: can't add hid device: -71 [ 2548.551878][T25606] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2548.565305][T25606] usb 2-1: USB disconnect, device number 77 [ 2548.592926][T21998] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2548.601458][T21998] Bluetooth: hci1: Injecting HCI hardware error event [ 2548.610499][T21998] Bluetooth: hci1: hardware error 0x00 [ 2548.737111][T26991] bridge0: port 3(syz_tun) entered blocking state [ 2548.743649][T26991] bridge0: port 3(syz_tun) entered disabled state [ 2548.750186][T26991] syz_tun: entered allmulticast mode [ 2548.756249][T26991] syz_tun: entered promiscuous mode [ 2548.761679][T26991] bridge0: port 3(syz_tun) entered blocking state [ 2548.768145][T26991] bridge0: port 3(syz_tun) entered forwarding state [ 2549.383768][T18619] Bluetooth: hci5: unexpected event for opcode 0x0c47 [ 2550.722225][ T4612] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2550.733345][T21998] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2550.751932][T21998] Bluetooth: hci5: SCO packet for unknown connection handle 1039 [ 2550.753659][ T29] audit: type=1400 audit(1728540884.850:1828): avc: denied { map } for pid=27028 comm="syz.1.5369" path="socket:[139328]" dev="sockfs" ino=139328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2550.815943][ T29] audit: type=1400 audit(1728540884.850:1829): avc: denied { read } for pid=27028 comm="syz.1.5369" path="socket:[139328]" dev="sockfs" ino=139328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2551.782878][T25606] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2551.934569][T25606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2551.946235][T25606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2551.995054][T25606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2552.038032][T25606] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2552.047650][T25606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2552.086633][T25606] usb 4-1: config 0 descriptor?? [ 2552.112876][ T937] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2552.248044][T21998] Bluetooth: hci7: command 0x0406 tx timeout [ 2552.268649][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 2552.304901][ T937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2552.343880][T21969] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2552.354816][ T937] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2552.590339][ T937] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2552.623658][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.782994][T21969] usb 1-1: Using ep0 maxpacket: 8 [ 2552.819701][T21969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2553.353381][ T937] usb 5-1: Product: syz [ 2553.357592][ T937] usb 5-1: Manufacturer: syz [ 2553.362207][ T937] usb 5-1: SerialNumber: syz [ 2553.362793][T21969] usb 1-1: config 0 has no interfaces? [ 2553.401313][T21969] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2553.402913][T25606] usbhid 4-1:0.0: can't add hid device: -71 [ 2553.417247][T25606] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2553.428274][T25606] usb 4-1: USB disconnect, device number 75 [ 2553.462145][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 2553.473293][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 2553.479344][T21969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.492288][T21969] usb 1-1: config 0 descriptor?? [ 2553.493266][T18619] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2553.513297][T18619] Bluetooth: hci5: Injecting HCI hardware error event [ 2553.526099][T18619] Bluetooth: hci5: hardware error 0x00 [ 2553.595309][T27054] ceph: No mds server is up or the cluster is laggy [ 2553.793189][ T29] audit: type=1400 audit(1728540887.900:1830): avc: denied { execute } for pid=27061 comm="syz.3.5379" path="/dev/audio" dev="devtmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 2553.912240][T27062] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 2554.830731][T21998] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 2554.890382][T25606] usb 5-1: USB disconnect, device number 59 [ 2555.092943][T21990] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2555.123798][T25606] usb 1-1: USB disconnect, device number 69 [ 2555.248166][T21990] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2555.347876][T21990] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2555.452382][T27084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5385'. [ 2555.481500][T21990] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2555.559650][T21990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.651158][T27078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2555.669789][T21990] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2555.763366][T18619] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2558.383159][T21969] usb 4-1: USB disconnect, device number 76 [ 2558.455655][ T937] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2558.658315][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 2558.700650][ T937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2558.713720][ T937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2558.722714][ T937] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2558.731977][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.753906][ T937] usb 2-1: config 0 descriptor?? [ 2558.884230][T27140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5399'. [ 2559.112706][T27134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5395'. [ 2560.302944][ T937] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2560.464663][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2560.482646][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2560.507658][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2560.559676][ T937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2560.616699][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2560.665434][ T937] usb 4-1: config 0 descriptor?? [ 2560.983876][T27176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5411'. [ 2561.115757][T27183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5415'. [ 2561.146700][T11984] usb 2-1: USB disconnect, device number 78 [ 2561.295983][ T937] usbhid 4-1:0.0: can't add hid device: -71 [ 2561.309253][ T937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2561.338158][ T937] usb 4-1: USB disconnect, device number 77 [ 2562.085432][T27204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5422'. [ 2562.125094][T27206] libceph: resolve '0.' (ret=-3): failed [ 2563.552877][T21990] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2563.642882][T11984] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2563.702868][T21990] usb 2-1: Using ep0 maxpacket: 16 [ 2563.711021][T21990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2563.733377][T21990] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2563.749253][T21990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.772358][T21990] usb 2-1: config 0 descriptor?? [ 2563.791595][T21990] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 2563.802877][T11984] usb 5-1: Using ep0 maxpacket: 8 [ 2563.812890][T11984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2563.828091][T11984] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2563.838749][T11984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.851292][T11984] usb 5-1: config 0 descriptor?? [ 2563.868358][T11984] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 2564.129096][ T4659] bcm5974 2-1:0.0: could not read from device [ 2564.157616][T21990] usb 2-1: USB disconnect, device number 79 [ 2564.164936][T27219] bcm5974 2-1:0.0: could not read from device [ 2565.103927][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5435'. [ 2565.113335][T27247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5435'. [ 2565.173921][T27249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5436'. [ 2565.369211][T27256] libceph: resolve '0.' (ret=-3): failed [ 2566.121793][T27261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5441'. [ 2566.307900][T27267] nbd: nbd2 already in use [ 2567.280489][T21990] usb 5-1: USB disconnect, device number 60 [ 2567.453150][T18619] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2567.798554][T21990] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2567.951880][T27288] fuse: Bad value for 'fd' [ 2567.958569][ T29] audit: type=1326 audit(1728540902.050:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27269 comm="syz.0.5445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67bf7dff9 code=0x0 [ 2568.543815][T27302] libceph: resolve '0.' (ret=-3): failed [ 2568.549138][T21990] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2568.560779][T21990] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2568.571274][T21990] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2568.580443][T21990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.622100][T27282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2568.634882][T21990] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2568.835160][T11984] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2569.133070][T11984] usb 3-1: Using ep0 maxpacket: 16 [ 2569.151753][T11984] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2569.911156][T11984] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2569.930734][T11984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.964203][T11984] usb 3-1: config 0 descriptor?? [ 2569.980374][T11984] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input49 [ 2569.998730][T27317] netlink: 'syz.1.5460': attribute type 39 has an invalid length. [ 2570.328156][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5459'. [ 2570.420564][ T4659] bcm5974 3-1:0.0: could not read from device [ 2570.503934][T27301] bcm5974 3-1:0.0: could not read from device [ 2570.618626][ T4659] bcm5974 3-1:0.0: could not read from device [ 2570.661756][T11984] usb 3-1: USB disconnect, device number 84 [ 2570.687386][T26404] bcm5974 3-1:0.0: could not read from device [ 2570.734978][ T4659] bcm5974 3-1:0.0: could not read from device [ 2571.321783][T22245] usb 5-1: USB disconnect, device number 61 [ 2571.461344][T27336] nbd: nbd0 already in use [ 2573.485375][T27362] libceph: resolve '0.' (ret=-3): failed [ 2573.786892][T18619] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2574.054920][ T29] audit: type=1326 audit(1728540908.160:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27367 comm="syz.1.5476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0e9b7dff9 code=0x0 [ 2574.091817][ T937] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2575.280169][ T937] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2575.312846][ T937] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2575.329029][ T937] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2575.338190][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.367728][T27366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2575.379442][ T937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2577.102930][ T937] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2577.263001][ T937] usb 3-1: device descriptor read/64, error -71 [ 2577.513469][ T937] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2577.653088][ T937] usb 3-1: device descriptor read/64, error -71 [ 2577.680007][T27407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5491'. [ 2577.763277][ T937] usb usb3-port1: attempt power cycle [ 2578.036298][T22245] usb 5-1: USB disconnect, device number 62 [ 2578.074394][T21990] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2578.115852][ T937] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2578.144529][ T937] usb 3-1: device descriptor read/8, error -71 [ 2578.195545][T18619] Bluetooth: hci6: Malformed LE Event: 0x0b [ 2578.272875][T21990] usb 2-1: Using ep0 maxpacket: 8 [ 2578.281690][T21990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2578.296205][T21990] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2578.309749][T21990] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2578.319132][T21990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.341416][T21990] usb 2-1: config 0 descriptor?? [ 2578.383392][ T937] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2578.521742][T21990] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 2578.532427][ T937] usb 3-1: device descriptor read/8, error -71 [ 2579.393183][ T937] usb usb3-port1: unable to enumerate USB device [ 2579.589878][T27426] netlink: 'syz.4.5498': attribute type 39 has an invalid length. [ 2580.747130][T27446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5504'. [ 2580.892602][ T937] usb 2-1: USB disconnect, device number 80 [ 2582.672912][T22245] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2582.842921][T22245] usb 2-1: Using ep0 maxpacket: 32 [ 2582.853751][T22245] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2582.869293][T22245] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2582.882285][T22245] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2582.898168][T22245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2582.976510][T22245] usb 2-1: Product: syz [ 2582.980876][T22245] usb 2-1: Manufacturer: syz [ 2582.985722][T22245] usb 2-1: SerialNumber: syz [ 2583.112993][ T5281] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2583.225287][T27462] sctp: [Deprecated]: syz.1.5510 (pid 27462) Use of int in max_burst socket option deprecated. [ 2583.225287][T27462] Use struct sctp_assoc_value instead [ 2583.282957][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 2583.294054][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2583.308265][T22245] usb 2-1: USB disconnect, device number 81 [ 2583.330146][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2583.346973][ T5281] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2583.356327][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.369556][ T5281] usb 3-1: config 0 descriptor?? [ 2583.378877][ T5281] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 2583.937211][T27492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5523'. [ 2583.947010][T27492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5523'. [ 2584.010811][T27495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5523'. [ 2584.028399][T27495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5523'. [ 2584.132907][T22245] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2584.305005][T22245] usb 5-1: Using ep0 maxpacket: 16 [ 2584.318167][T22245] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2584.336932][T22245] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2584.350558][T22245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.377541][T22245] usb 5-1: config 0 descriptor?? [ 2584.423962][T22245] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input50 [ 2584.710865][ T4659] bcm5974 5-1:0.0: could not read from device [ 2584.744679][ T4659] bcm5974 5-1:0.0: could not read from device [ 2584.762101][T22245] usb 5-1: USB disconnect, device number 63 [ 2584.768853][T27490] bcm5974 5-1:0.0: could not read from device [ 2584.789486][ T4659] bcm5974 5-1:0.0: could not read from device [ 2585.363556][T21969] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2585.463701][ T29] audit: type=1400 audit(1728540919.560:1833): avc: denied { write } for pid=27509 comm="syz.3.5529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2585.534364][T21969] usb 1-1: Using ep0 maxpacket: 16 [ 2585.541674][T21969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2585.552802][T21969] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2585.571304][T21969] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 2585.601435][T21969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.627193][T21969] usb 1-1: config 0 descriptor?? [ 2585.864167][T25606] usb 3-1: USB disconnect, device number 89 [ 2586.530482][T27529] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.5530' sets config #0 [ 2586.552874][T27529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2587.124649][T27529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2587.452874][T21990] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2587.607176][T27541] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5538'. [ 2587.643960][T21990] usb 2-1: Using ep0 maxpacket: 32 [ 2587.741572][T27536] input: syz0 as /devices/virtual/input/input51 [ 2587.782356][T21990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2587.822440][T21990] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2587.864818][T21990] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2587.988843][T21990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.022834][T21990] usb 2-1: Product: syz [ 2588.038773][T21990] usb 2-1: Manufacturer: syz [ 2588.060056][T21990] usb 2-1: SerialNumber: syz [ 2588.242856][T22245] usb 1-1: USB disconnect, device number 70 [ 2588.316373][T27530] sctp: [Deprecated]: syz.1.5534 (pid 27530) Use of int in max_burst socket option deprecated. [ 2588.316373][T27530] Use struct sctp_assoc_value instead [ 2589.610707][ T29] audit: type=1326 audit(1728540923.710:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.5544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67bf7dff9 code=0x0 [ 2589.783841][ T8] usb 2-1: USB disconnect, device number 82 [ 2590.192869][ T8] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2590.353185][T25606] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2590.362900][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 2590.375551][ T8] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 2590.391702][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2590.469740][ T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2590.493030][ T8] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2590.506900][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2590.523963][ T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2590.535049][T25606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2590.546991][ T8] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2590.555989][T25606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2590.572687][ T8] usb 2-1: Product: syz [ 2590.577267][ T8] usb 2-1: Manufacturer: syz [ 2590.586854][T25606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2590.600937][ T8] usb 2-1: SerialNumber: syz [ 2590.625644][ T8] usb 2-1: config 0 descriptor?? [ 2590.644621][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.650508][T25606] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2590.698209][ T8] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2590.764687][ T8] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2590.773368][T25606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.808830][T25606] usb 3-1: config 0 descriptor?? [ 2591.266763][T25606] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 2591.318038][T25606] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 2591.633586][ T29] audit: type=1326 audit(1728540925.730:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27575 comm="syz.3.5548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2737dff9 code=0x0 [ 2591.656548][ C1] vkms_vblank_simulate: vblank timer overrun [ 2592.077820][T27580] nbd: nbd0 already in use [ 2592.776001][T27594] [ 2592.778334][T27594] ====================================================== [ 2592.785342][T27594] WARNING: possible circular locking dependency detected [ 2592.792370][T27594] 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 Not tainted [ 2592.799481][T27594] ------------------------------------------------------ [ 2592.806500][T27594] syz.3.5555/27594 is trying to acquire lock: [ 2592.812566][T27594] ffff888022ea4258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x6d/0x3b0 [ 2592.824081][T27594] [ 2592.824081][T27594] but task is already holding lock: [ 2592.831436][T27594] ffff88805da59d28 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 2592.840545][T27594] [ 2592.840545][T27594] which lock already depends on the new lock. [ 2592.840545][T27594] [ 2592.850934][T27594] [ 2592.850934][T27594] the existing dependency chain (in reverse order) is: [ 2592.859933][T27594] [ 2592.859933][T27594] -> #2 (&d->lock#2){+.+.}-{3:3}: [ 2592.867158][T27594] __mutex_lock+0x175/0x9c0 [ 2592.872200][T27594] rfcomm_dev_ioctl+0x1115/0x1ca0 [ 2592.877744][T27594] rfcomm_sock_ioctl+0xb4/0xe0 [ 2592.883027][T27594] sock_do_ioctl+0x116/0x280 [ 2592.888137][T27594] sock_ioctl+0x228/0x6c0 [ 2592.892983][T27594] __x64_sys_ioctl+0x18f/0x220 [ 2592.898266][T27594] do_syscall_64+0xcd/0x250 [ 2592.903289][T27594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2592.909701][T27594] [ 2592.909701][T27594] -> #1 (rfcomm_dev_lock){+.+.}-{3:3}: [ 2592.917344][T27594] __mutex_lock+0x175/0x9c0 [ 2592.922367][T27594] rfcomm_dev_get+0x6e/0x2b0 [ 2592.927474][T27594] rfcomm_dev_ioctl+0x378/0x1ca0 [ 2592.932932][T27594] rfcomm_sock_ioctl+0xb4/0xe0 [ 2592.938212][T27594] sock_do_ioctl+0x116/0x280 [ 2592.943318][T27594] sock_ioctl+0x228/0x6c0 [ 2592.948164][T27594] __x64_sys_ioctl+0x18f/0x220 [ 2592.953448][T27594] do_syscall_64+0xcd/0x250 [ 2592.958470][T27594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2592.964886][T27594] [ 2592.964886][T27594] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 2592.974269][T27594] __lock_acquire+0x250b/0x3ce0 [ 2592.979635][T27594] lock_acquire.part.0+0x11b/0x380 [ 2592.985265][T27594] lock_sock_nested+0x3a/0xf0 [ 2592.990464][T27594] rfcomm_sk_state_change+0x6d/0x3b0 [ 2592.996266][T27594] __rfcomm_dlc_close+0x28c/0x700 [ 2593.001814][T27594] rfcomm_dlc_close+0x1eb/0x240 [ 2593.007188][T27594] __rfcomm_sock_close+0xa7/0x230 [ 2593.012729][T27594] rfcomm_sock_shutdown+0xd5/0x230 [ 2593.018359][T27594] rfcomm_sock_release+0x5d/0x140 [ 2593.023900][T27594] __sock_release+0xb0/0x270 [ 2593.029002][T27594] sock_close+0x1c/0x30 [ 2593.033672][T27594] __fput+0x3f6/0xb60 [ 2593.038174][T27594] task_work_run+0x14e/0x250 [ 2593.043277][T27594] get_signal+0x1ca/0x2770 [ 2593.048212][T27594] arch_do_signal_or_restart+0x90/0x7e0 [ 2593.054280][T27594] syscall_exit_to_user_mode+0x150/0x2a0 [ 2593.060431][T27594] do_syscall_64+0xda/0x250 [ 2593.065453][T27594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2593.071868][T27594] [ 2593.071868][T27594] other info that might help us debug this: [ 2593.071868][T27594] [ 2593.082091][T27594] Chain exists of: [ 2593.082091][T27594] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_dev_lock --> &d->lock#2 [ 2593.082091][T27594] [ 2593.096444][T27594] Possible unsafe locking scenario: [ 2593.096444][T27594] [ 2593.103887][T27594] CPU0 CPU1 [ 2593.109242][T27594] ---- ---- [ 2593.114599][T27594] lock(&d->lock#2); [ 2593.118589][T27594] lock(rfcomm_dev_lock); [ 2593.125519][T27594] lock(&d->lock#2); [ 2593.132023][T27594] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 2593.138173][T27594] [ 2593.138173][T27594] *** DEADLOCK *** [ 2593.138173][T27594] [ 2593.146305][T27594] 3 locks held by syz.3.5555/27594: [ 2593.151490][T27594] #0: ffff888057505608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 2593.162031][T27594] #1: ffffffff90173448 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x33/0x240 [ 2593.171443][T27594] #2: ffff88805da59d28 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 2593.180953][T27594] [ 2593.180953][T27594] stack backtrace: [ 2593.186830][T27594] CPU: 0 UID: 0 PID: 27594 Comm: syz.3.5555 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 2593.197585][T27594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2593.207649][T27594] Call Trace: [ 2593.210922][T27594] [ 2593.213847][T27594] dump_stack_lvl+0x116/0x1f0 [ 2593.218531][T27594] print_circular_bug+0x41c/0x610 [ 2593.223564][T27594] check_noncircular+0x31a/0x400 [ 2593.228512][T27594] ? __pfx_check_noncircular+0x10/0x10 [ 2593.233980][T27594] ? lockdep_lock+0xc6/0x200 [ 2593.238570][T27594] ? __pfx_lockdep_lock+0x10/0x10 [ 2593.243606][T27594] __lock_acquire+0x250b/0x3ce0 [ 2593.248454][T27594] ? __pfx___lock_acquire+0x10/0x10 [ 2593.253643][T27594] ? __mutex_trylock_common+0xea/0x250 [ 2593.259105][T27594] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2593.264992][T27594] ? __rfcomm_dlc_close+0x235/0x700 [ 2593.270196][T27594] lock_acquire.part.0+0x11b/0x380 [ 2593.275303][T27594] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 2593.280759][T27594] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2593.286390][T27594] ? rcu_is_watching+0x12/0xc0 [ 2593.291156][T27594] ? trace_lock_acquire+0x14a/0x1d0 [ 2593.296362][T27594] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 2593.301821][T27594] ? lock_acquire+0x2f/0xb0 [ 2593.306319][T27594] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 2593.311776][T27594] lock_sock_nested+0x3a/0xf0 [ 2593.316458][T27594] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 2593.321913][T27594] rfcomm_sk_state_change+0x6d/0x3b0 [ 2593.327198][T27594] __rfcomm_dlc_close+0x28c/0x700 [ 2593.332230][T27594] rfcomm_dlc_close+0x1eb/0x240 [ 2593.337085][T27594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2593.342986][T27594] __rfcomm_sock_close+0xa7/0x230 [ 2593.348006][T27594] rfcomm_sock_shutdown+0xd5/0x230 [ 2593.353115][T27594] rfcomm_sock_release+0x5d/0x140 [ 2593.358135][T27594] __sock_release+0xb0/0x270 [ 2593.362720][T27594] ? __pfx_sock_close+0x10/0x10 [ 2593.367568][T27594] sock_close+0x1c/0x30 [ 2593.371723][T27594] __fput+0x3f6/0xb60 [ 2593.375708][T27594] task_work_run+0x14e/0x250 [ 2593.380296][T27594] ? __pfx_task_work_run+0x10/0x10 [ 2593.385411][T27594] get_signal+0x1ca/0x2770 [ 2593.389832][T27594] ? __pfx_task_work_add+0x10/0x10 [ 2593.394941][T27594] ? __pfx_get_signal+0x10/0x10 [ 2593.399791][T27594] arch_do_signal_or_restart+0x90/0x7e0 [ 2593.405340][T27594] ? __pfx___sys_connect+0x10/0x10 [ 2593.410453][T27594] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2593.416619][T27594] ? rcu_is_watching+0x12/0xc0 [ 2593.421385][T27594] syscall_exit_to_user_mode+0x150/0x2a0 [ 2593.427021][T27594] do_syscall_64+0xda/0x250 [ 2593.431527][T27594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2593.437417][T27594] RIP: 0033:0x7f8d2737dff9 [ 2593.441840][T27594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2593.461441][T27594] RSP: 002b:00007f8d2812c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2593.469851][T27594] RAX: fffffffffffffffc RBX: 00007f8d27535f80 RCX: 00007f8d2737dff9 [ 2593.477815][T27594] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000005 [ 2593.485785][T27594] RBP: 00007f8d273f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2593.493751][T27594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2593.501713][T27594] R13: 0000000000000000 R14: 00007f8d27535f80 R15: 00007ffc0b1af568 [ 2593.509685][T27594] [ 2593.611837][T25606] plantronics 0003:047F:FFFF.0021: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2593.661423][T25606] usb 3-1: USB disconnect, device number 90 [ 2593.982827][T25606] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 2594.133972][T25606] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2594.142207][T25606] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2594.153626][T25606] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2594.164842][T25606] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2594.175909][T25606] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2594.190977][T25606] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2594.200103][T25606] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2594.209215][T25606] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2594.217981][T25606] usb 3-1: Product: syz [ 2594.222150][T25606] usb 3-1: Manufacturer: syz [ 2594.226814][T25606] usb 3-1: SerialNumber: syz [ 2594.232569][T25606] usb 3-1: config 0 descriptor?? [ 2594.238036][T27582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2594.248307][T25606] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2594.258247][T25606] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2594.622629][T25606] usb 3-1: USB disconnect, device number 91 [ 2594.632705][T25606] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 2596.004567][T27571] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 2596.021074][T21969] usb 2-1: USB disconnect, device number 83 [ 2596.032045][T21969] ldusb 2-1:0.0: LD USB Device #0 now disconnected