last executing test programs: 5.190995056s ago: executing program 4 (id=1412): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000480140004800800020000000000080001"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.057613262s ago: executing program 4 (id=1414): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.100279123s ago: executing program 4 (id=1421): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002400), 0x47) write$UHID_CREATE2(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073c819d5e114c705d6bd0100008000000000000004000000000000000000000000000000000000010000e1ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000001a00000000000000001000397900000000000000b9"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0x8010aa01, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 3.932310645s ago: executing program 4 (id=1423): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b010203010902"], 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a92", 0x4, 0x11, 0x0, 0x0) 3.706481304s ago: executing program 2 (id=1426): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff5}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.64287259s ago: executing program 2 (id=1427): syz_io_uring_setup(0x297f, &(0x7f0000000140)={0x0, 0xb22e, 0x0, 0x3, 0x311}, &(0x7f0000000240), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0xc008aec1, &(0x7f0000000240)=ANY=[]) 3.440526465s ago: executing program 2 (id=1429): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000040)) 3.3080246s ago: executing program 2 (id=1430): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0xfc, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x3, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x1000000000000004, 0xa) 2.152631572s ago: executing program 3 (id=1440): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) chown(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mremap(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000124000/0x4000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/225, 0xe1}, {0x0}], 0x0, 0x11a}, 0x20) 2.108397939s ago: executing program 1 (id=1441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x5, {0x83, 0x9}}]}, 0x2c}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='%'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x6089, 0x4e72, 0x0, 0x0, 0x0) 2.108197907s ago: executing program 0 (id=1442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x811}, @sack={0x5, 0x2}]}}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) 2.059314987s ago: executing program 1 (id=1443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x20801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, &(0x7f00000001c0)="66b91a02000066b80028000066ba000000000f300f78772cbaf80c66b86689078666efbafc0cb8fa67efb800008ee00f017a3e260f2b9e0068f2a70f01d166b94d0300000f320fc7990500", 0x4b}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.004361039s ago: executing program 3 (id=1444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.868411694s ago: executing program 3 (id=1445): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x27f3, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="913dcf3296db5d6d52d2f3b42d66", 0xe, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) 1.807665613s ago: executing program 3 (id=1446): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="180000000000000000000bca00000000080000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) sendfile(r0, r1, 0x0, 0x8000002b) 1.141577931s ago: executing program 3 (id=1447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0xfd3649826d894863, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@local, 0xfffffffd, 0x4, 0x1, 0x0, 0x3, 0x0, 0x2fc}]}]}, 0xfc}}, 0x0) sendfile(r0, r1, 0x0, 0x10001) 1.040383878s ago: executing program 1 (id=1448): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 992.663718ms ago: executing program 1 (id=1449): syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0xebea, 0x8, 0x40}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0}) 728.37553ms ago: executing program 4 (id=1450): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private1}]}}]}, 0x50}}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 699.671071ms ago: executing program 0 (id=1451): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x200, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) unshare(0x20000400) ioctl$UI_DEV_CREATE(r2, 0x5501) 654.907ms ago: executing program 1 (id=1452): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x40002004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe000202b}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x9d32f4b220c65367}) 644.645076ms ago: executing program 4 (id=1453): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) 599.125993ms ago: executing program 3 (id=1454): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f0000000b574e69392bf85edacab3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000080)) 598.566256ms ago: executing program 1 (id=1455): setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 521.880708ms ago: executing program 0 (id=1456): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x780, 0x0, 0xc, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 300.35223ms ago: executing program 0 (id=1457): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x418, 0x2f0, 0xb, 0x148, 0x2f0, 0x148, 0x448, 0x240, 0x240, 0x448, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00'}, 0x0, 0x2c8, 0x2f0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x83, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 275.746129ms ago: executing program 0 (id=1458): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 203.511253ms ago: executing program 2 (id=1459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 64.262455ms ago: executing program 2 (id=1460): r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) fallocate(r0, 0x43, 0xde3, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x12) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 0 (id=1461): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, &(0x7f0000000140)=""/237, 0xed) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000240), 0x200000, 0x4) kernel console output (not intermixed with test programs): problems! [ 197.228965][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.249288][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.261539][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.286086][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.306458][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.332873][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.352840][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.370036][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.398929][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.451728][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.492774][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.513102][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.533289][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.570213][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.622697][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.633338][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.643953][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.654508][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.665517][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.676859][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.732009][ T8659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.743271][ T8659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.773303][ T8659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.782063][ T8659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.052617][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.129016][ T8706] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.147721][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.154916][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.247542][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.254762][ T7079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.330669][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.369372][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.447027][ T2680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.473730][ T2680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.519688][ T8706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.677014][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.837563][ T8706] veth0_vlan: entered promiscuous mode [ 198.901314][ T8706] veth1_vlan: entered promiscuous mode [ 199.005626][ T8706] veth0_macvtap: entered promiscuous mode [ 199.037977][ T8706] veth1_macvtap: entered promiscuous mode [ 199.110674][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.121851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 199.159728][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.191159][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.217141][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.243948][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.267589][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.283265][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.299085][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.309036][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.319688][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.330021][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.340853][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.352664][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.398566][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.414327][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.425454][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.438233][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.452657][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.472007][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.488619][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.500623][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.510919][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.531510][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.541451][ T936] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 199.543582][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.563432][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.574670][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.592288][ T8706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.610471][ T8706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.619340][ T8706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.632872][ T8706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.706432][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.720285][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.724089][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.743652][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.744633][ T936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.772827][ T936] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.807220][ T2680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.826382][ T2680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.835130][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.862808][ T936] usb 2-1: config 0 descriptor?? [ 200.300043][ T936] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 200.338754][ T936] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 200.378652][ T936] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 200.498662][ T2680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.666942][ T2680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.793830][ T2680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.923792][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.938696][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.949837][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.958894][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.974105][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.986076][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.052766][ T2680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.409228][ T2680] bridge_slave_1: left allmulticast mode [ 201.415483][ T2680] bridge_slave_1: left promiscuous mode [ 201.424125][ T2680] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.449917][ T2680] bridge_slave_0: left allmulticast mode [ 201.458165][ T2680] bridge_slave_0: left promiscuous mode [ 201.470142][ T2680] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.473297][ T5280] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 201.503376][ T6616] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.641679][ T5280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.674103][ T6616] usb 5-1: Using ep0 maxpacket: 8 [ 201.674730][ T5280] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.684457][ T6616] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 201.695911][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.704401][ T6616] usb 5-1: config 179 has no interface number 0 [ 201.716764][ T6616] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 201.729030][ T5280] usb 1-1: config 0 descriptor?? [ 201.749116][ T6616] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 201.756704][ T5280] pwc: Askey VC010 type 2 USB webcam detected. [ 201.777928][ T6616] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.800742][ T6616] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 201.822521][ T6616] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 201.854276][ T6616] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 201.872549][ T6616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.902021][ T9028] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 202.171143][ T5280] pwc: recv_control_msg error -32 req 02 val 2b00 [ 202.189153][ T5280] pwc: recv_control_msg error -32 req 02 val 2700 [ 202.368541][ T51] usb 2-1: USB disconnect, device number 23 [ 202.416960][ T5280] pwc: recv_control_msg error -71 req 04 val 1000 [ 202.427122][ T2680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.453807][ T5280] pwc: recv_control_msg error -71 req 04 val 1300 [ 202.461100][ T5280] pwc: recv_control_msg error -71 req 04 val 1400 [ 202.479132][ T5280] pwc: recv_control_msg error -71 req 02 val 2000 [ 202.501961][ T2680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.511998][ T5280] pwc: recv_control_msg error -71 req 02 val 2100 [ 202.527138][ T2680] bond0 (unregistering): Released all slaves [ 202.552004][ T5280] pwc: recv_control_msg error -71 req 04 val 1500 [ 202.560445][ T9020] chnl_net:caif_netlink_parms(): no params data found [ 202.591852][ T5280] pwc: recv_control_msg error -71 req 02 val 2500 [ 202.615584][ T5280] pwc: recv_control_msg error -71 req 02 val 2400 [ 202.632326][ T5280] pwc: recv_control_msg error -71 req 02 val 2600 [ 202.657405][ T6616] usb 5-1: USB disconnect, device number 17 [ 202.663504][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 202.663554][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 202.668728][ T5280] pwc: recv_control_msg error -71 req 02 val 2900 [ 202.749204][ T5280] pwc: recv_control_msg error -71 req 02 val 2800 [ 202.767175][ T5280] pwc: recv_control_msg error -71 req 04 val 1100 [ 202.775857][ T5280] pwc: recv_control_msg error -71 req 04 val 1200 [ 202.787297][ T5280] pwc: Registered as video71. [ 202.805242][ T5280] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 202.884795][ T5280] usb 1-1: USB disconnect, device number 19 [ 203.114181][ T5232] Bluetooth: hci2: command tx timeout [ 203.562600][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.592351][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.611426][ T9020] bridge_slave_0: entered allmulticast mode [ 203.620500][ T9020] bridge_slave_0: entered promiscuous mode [ 203.627405][ T6616] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 203.774253][ T2680] hsr_slave_0: left promiscuous mode [ 203.780295][ T2680] hsr_slave_1: left promiscuous mode [ 203.803289][ T6616] usb 1-1: Using ep0 maxpacket: 32 [ 203.815430][ T6616] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 203.843323][ T6616] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 203.856456][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.862195][ T6616] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 203.881400][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.883517][ T6616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.928450][ T6616] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.934635][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.953274][ T6616] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.967146][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.976597][ T6616] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 203.997381][ T6616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.027720][ T6616] usb 1-1: config 0 descriptor?? [ 204.099771][ T2680] veth1_macvtap: left promiscuous mode [ 204.124687][ T2680] veth0_macvtap: left promiscuous mode [ 204.130346][ T2680] veth1_vlan: left promiscuous mode [ 204.152408][ T2680] veth0_vlan: left promiscuous mode [ 204.240097][ T6616] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 204.300017][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.318355][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.330642][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.340131][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.347798][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.358308][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.453497][ T6616] usb 1-1: USB disconnect, device number 20 [ 204.477248][ T6616] usblp0: removed [ 205.188655][ T2680] team0 (unregistering): Port device team_slave_1 removed [ 205.197266][ T5238] Bluetooth: hci2: command tx timeout [ 205.304314][ T2680] team0 (unregistering): Port device team_slave_0 removed [ 205.493333][ T51] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 205.714917][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.734962][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.758755][ T51] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.770242][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.790069][ T51] usb 3-1: config 0 descriptor?? [ 205.929094][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.936533][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.950406][ T9020] bridge_slave_1: entered allmulticast mode [ 205.959228][ T9020] bridge_slave_1: entered promiscuous mode [ 206.018543][ T9113] netlink: 65536 bytes leftover after parsing attributes in process `syz.0.1079'. [ 206.147338][ T9020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.179326][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 206.218125][ T9020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.393424][ T5296] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 206.405591][ T9020] team0: Port device team_slave_0 added [ 206.417416][ T9020] team0: Port device team_slave_1 added [ 206.445703][ T51] usb 3-1: language id specifier not provided by device, defaulting to English [ 206.474151][ T5238] Bluetooth: hci1: command tx timeout [ 206.590394][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.607702][ T5296] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 206.620505][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.628694][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.643205][ T5296] usb 5-1: Product: syz [ 206.659395][ T5296] usb 5-1: Manufacturer: syz [ 206.664996][ T5296] usb 5-1: SerialNumber: syz [ 206.670881][ T9020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.684988][ T5296] usb 5-1: config 0 descriptor?? [ 206.696039][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.703073][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.737785][ T9020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.835570][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 206.907023][ T9020] hsr_slave_0: entered promiscuous mode [ 206.924115][ T9020] hsr_slave_1: entered promiscuous mode [ 207.063009][ T2680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.077537][ T51] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71 [ 207.099838][ T51] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 207.123336][ T51] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71 [ 207.144377][ T51] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 207.151987][ T51] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 207.166532][ T51] usb 3-1: USB disconnect, device number 11 [ 207.282214][ T5238] Bluetooth: hci2: command tx timeout [ 207.285984][ T2680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.414113][ T2680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.493415][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.500657][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.511047][ T9091] bridge_slave_0: entered allmulticast mode [ 207.518869][ T9091] bridge_slave_0: entered promiscuous mode [ 207.565627][ T2680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.919976][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.928820][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.939601][ T9091] bridge_slave_1: entered allmulticast mode [ 207.946835][ T9091] bridge_slave_1: entered promiscuous mode [ 208.125324][ T5296] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 208.144611][ T5296] usb 5-1: USB disconnect, device number 18 [ 208.339160][ T5296] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 208.448964][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.489148][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.547214][ T5296] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 208.553839][ T5238] Bluetooth: hci1: command tx timeout [ 208.962425][ T9091] team0: Port device team_slave_0 added [ 209.007170][ T9091] team0: Port device team_slave_1 added [ 209.121487][ T2680] bridge_slave_1: left allmulticast mode [ 209.152953][ T2680] bridge_slave_1: left promiscuous mode [ 209.164804][ T2680] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.185136][ T2680] bridge_slave_0: left allmulticast mode [ 209.190947][ T2680] bridge_slave_0: left promiscuous mode [ 209.203326][ T2680] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.353884][ T5238] Bluetooth: hci2: command tx timeout [ 209.618465][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.642191][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.663278][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.677492][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.690344][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.698604][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.975889][ T9188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1096'. [ 209.985951][ T2680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.998392][ T2680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.008997][ T2680] bond0 (unregistering): Released all slaves [ 210.020148][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.027262][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.068129][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.088076][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.103756][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.137035][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.159593][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 210.159610][ T29] audit: type=1326 audit(1728940332.028:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.0.1097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b9177dff9 code=0x0 [ 210.342523][ T9091] hsr_slave_0: entered promiscuous mode [ 210.351076][ T9091] hsr_slave_1: entered promiscuous mode [ 210.360450][ T9091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.368849][ T9091] Cannot create hsr debugfs directory [ 210.490290][ T9020] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.523930][ T9020] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.552934][ T2680] hsr_slave_0: left promiscuous mode [ 210.567831][ T2680] hsr_slave_1: left promiscuous mode [ 210.580115][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.591806][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.608669][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.620531][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.634893][ T5232] Bluetooth: hci1: command tx timeout [ 210.671993][ T2680] veth1_macvtap: left promiscuous mode [ 210.682592][ T2680] veth0_macvtap: left promiscuous mode [ 210.692239][ T2680] veth1_vlan: left promiscuous mode [ 210.706577][ T2680] veth0_vlan: left promiscuous mode [ 210.869746][ T2680] pim6reg (unregistering): left allmulticast mode [ 211.137019][ T29] audit: type=1326 audit(1728940333.008:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e6b7dff9 code=0x7fc00000 [ 211.382439][ T2680] team0 (unregistering): Port device team_slave_1 removed [ 211.427886][ T2680] team0 (unregistering): Port device team_slave_0 removed [ 211.757108][ T5232] Bluetooth: hci4: command tx timeout [ 211.858683][ T9020] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.930432][ T9020] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.149234][ T9184] chnl_net:caif_netlink_parms(): no params data found [ 212.457306][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.473766][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.481079][ T9184] bridge_slave_0: entered allmulticast mode [ 212.523031][ T9184] bridge_slave_0: entered promiscuous mode [ 212.642704][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.653372][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.663333][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.671902][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.679593][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.687053][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.713972][ T5232] Bluetooth: hci1: command tx timeout [ 212.782818][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.814997][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.822321][ T9184] bridge_slave_1: entered allmulticast mode [ 212.867558][ T9184] bridge_slave_1: entered promiscuous mode [ 212.980546][ T9184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.008379][ T9184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.123117][ T9184] team0: Port device team_slave_0 added [ 213.146449][ T9184] team0: Port device team_slave_1 added [ 213.281472][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.290732][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.298176][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.298408][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.336525][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.340858][ T9184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.357275][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.365767][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.373574][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.381835][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.389364][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.416288][ T9184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.538482][ T2680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.555636][ T9020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.598094][ T9091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.611565][ T9091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.696827][ T2680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.713861][ T9091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.744194][ T9091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.765425][ T9184] hsr_slave_0: entered promiscuous mode [ 213.772038][ T9184] hsr_slave_1: entered promiscuous mode [ 213.778729][ T9184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.786511][ T9184] Cannot create hsr debugfs directory [ 213.797939][ T9020] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.805044][ T9235] chnl_net:caif_netlink_parms(): no params data found [ 213.834743][ T5238] Bluetooth: hci4: command tx timeout [ 213.842180][ T2680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.941982][ T2680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.091234][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.098446][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.254955][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.262112][ T7076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.325735][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.332856][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.347857][ T9235] bridge_slave_0: entered allmulticast mode [ 214.360244][ T9235] bridge_slave_0: entered promiscuous mode [ 214.463759][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.470913][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.492913][ T9235] bridge_slave_1: entered allmulticast mode [ 214.500471][ T9235] bridge_slave_1: entered promiscuous mode [ 214.557052][ T9235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.641160][ T9184] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.668225][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 214.712891][ T9235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.781022][ T9184] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.793443][ T5238] Bluetooth: hci0: command tx timeout [ 214.825804][ T9235] team0: Port device team_slave_0 added [ 214.883085][ T2680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.917038][ T9184] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.933117][ T9235] team0: Port device team_slave_1 added [ 215.001420][ T2680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.039004][ T9184] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.082867][ T2680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.099263][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.106773][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.133060][ T9235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.146029][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.152990][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.183580][ T9235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.249274][ T2680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.288761][ T9235] hsr_slave_0: entered promiscuous mode [ 215.295488][ T9235] hsr_slave_1: entered promiscuous mode [ 215.301549][ T9235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.309299][ T9235] Cannot create hsr debugfs directory [ 215.315803][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.322895][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.332327][ T9246] bridge_slave_0: entered allmulticast mode [ 215.339840][ T9246] bridge_slave_0: entered promiscuous mode [ 215.348081][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.355744][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.362968][ T9246] bridge_slave_1: entered allmulticast mode [ 215.383913][ T9246] bridge_slave_1: entered promiscuous mode [ 215.431031][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.433629][ T5238] Bluetooth: hci3: command tx timeout [ 215.444397][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.569908][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.592637][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.627265][ T9246] team0: Port device team_slave_0 added [ 215.644451][ T9246] team0: Port device team_slave_1 added [ 215.768188][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.783195][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.820996][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.888553][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.914645][ T5238] Bluetooth: hci4: command tx timeout [ 215.918042][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.928131][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.955318][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.981926][ T9184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.000165][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.007350][ T7070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.016886][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.024051][ T7070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.038560][ T2680] bridge_slave_1: left allmulticast mode [ 216.044434][ T2680] bridge_slave_1: left promiscuous mode [ 216.050136][ T2680] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.064702][ T2680] bridge_slave_0: left allmulticast mode [ 216.070515][ T2680] bridge_slave_0: left promiscuous mode [ 216.076983][ T2680] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.088815][ T2680] bridge_slave_1: left allmulticast mode [ 216.094668][ T2680] bridge_slave_1: left promiscuous mode [ 216.100305][ T2680] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.109874][ T2680] bridge_slave_0: left allmulticast mode [ 216.115785][ T2680] bridge_slave_0: left promiscuous mode [ 216.121487][ T2680] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.874212][ T5238] Bluetooth: hci0: command tx timeout [ 216.908617][ T2680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.919583][ T2680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.931108][ T2680] bond0 (unregistering): Released all slaves [ 217.056957][ T2680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.069646][ T2680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.080354][ T2680] bond0 (unregistering): Released all slaves [ 217.200599][ T2680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.214292][ T2680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.227743][ T2680] bond0 (unregistering): Released all slaves [ 217.300839][ T9246] hsr_slave_0: entered promiscuous mode [ 217.326228][ T9246] hsr_slave_1: entered promiscuous mode [ 217.346612][ T9246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.371036][ T9246] Cannot create hsr debugfs directory [ 217.393477][ T9184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.421158][ T9184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.513714][ T5238] Bluetooth: hci3: command tx timeout [ 217.624715][ T9184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.972658][ T9020] veth0_vlan: entered promiscuous mode [ 217.994707][ T5238] Bluetooth: hci4: command tx timeout [ 218.149653][ T9020] veth1_vlan: entered promiscuous mode [ 218.245987][ T9091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.391968][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.482109][ T9020] veth0_macvtap: entered promiscuous mode [ 218.576277][ T9020] veth1_macvtap: entered promiscuous mode [ 218.598740][ T9184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.703114][ T2680] hsr_slave_0: left promiscuous mode [ 218.739079][ T2680] hsr_slave_1: left promiscuous mode [ 218.759509][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.768098][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.779573][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.787810][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.800079][ T2680] hsr_slave_0: left promiscuous mode [ 218.809820][ T2680] hsr_slave_1: left promiscuous mode [ 218.816045][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.823666][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.833287][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.840735][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.852208][ T2680] hsr_slave_0: left promiscuous mode [ 218.864066][ T2680] hsr_slave_1: left promiscuous mode [ 218.869905][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.878255][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.889069][ T2680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.896641][ T2680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.939130][ T2680] veth1_macvtap: left promiscuous mode [ 218.944819][ T2680] veth0_macvtap: left promiscuous mode [ 218.950759][ T2680] veth1_vlan: left promiscuous mode [ 218.953865][ T5238] Bluetooth: hci0: command tx timeout [ 218.956928][ T2680] veth0_vlan: left promiscuous mode [ 218.971472][ T2680] veth1_macvtap: left promiscuous mode [ 218.977060][ T2680] veth0_macvtap: left promiscuous mode [ 218.982592][ T2680] veth1_vlan: left promiscuous mode [ 218.987939][ T2680] veth0_vlan: left promiscuous mode [ 218.995659][ T2680] veth1_macvtap: left promiscuous mode [ 219.001146][ T2680] veth0_macvtap: left promiscuous mode [ 219.008070][ T2680] veth1_vlan: left promiscuous mode [ 219.014297][ T2680] veth0_vlan: left promiscuous mode [ 219.593639][ T5238] Bluetooth: hci3: command tx timeout [ 219.635335][ T2680] team0 (unregistering): Port device team_slave_1 removed [ 219.682277][ T2680] team0 (unregistering): Port device team_slave_0 removed [ 220.463936][ T2680] team0 (unregistering): Port device team_slave_1 removed [ 220.508744][ T2680] team0 (unregistering): Port device team_slave_0 removed [ 221.033617][ T5238] Bluetooth: hci0: command tx timeout [ 221.302318][ T2680] team0 (unregistering): Port device team_slave_1 removed [ 221.348706][ T2680] team0 (unregistering): Port device team_slave_0 removed [ 221.673672][ T5238] Bluetooth: hci3: command tx timeout [ 221.894012][ T9020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.925262][ T9020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.957715][ T9020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.985979][ T9020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.010165][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.085479][ T9020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.105159][ T9020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.115498][ T9020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.128769][ T9020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.152204][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.197143][ T9184] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.280940][ T9020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.290279][ T9020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.300320][ T9020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.309474][ T9020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.350133][ T9091] veth0_vlan: entered promiscuous mode [ 222.427932][ T9091] veth1_vlan: entered promiscuous mode [ 222.446495][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.453674][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.515955][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.523084][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.689818][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.723373][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.773021][ T9091] veth0_macvtap: entered promiscuous mode [ 222.798425][ T9091] veth1_macvtap: entered promiscuous mode [ 222.841981][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.859111][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.875781][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.893502][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.906172][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.934454][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.952304][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.993240][ T9246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.065231][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.065465][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.084051][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.102552][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.113319][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.127045][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.139185][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.150863][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.164849][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.172216][ T9246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.185307][ T9246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.197215][ T9246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.256431][ T9091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.271162][ T9091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.280908][ T9091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.293200][ T9091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.342261][ T9235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.408919][ T9184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.439966][ T9235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.481181][ T9235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.559468][ T9235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.721866][ T9184] veth0_vlan: entered promiscuous mode [ 223.772550][ T9184] veth1_vlan: entered promiscuous mode [ 223.819754][ T7079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.849996][ T7079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.912932][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'. [ 223.945415][ T9184] veth0_macvtap: entered promiscuous mode [ 223.967453][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.990223][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.005994][ T9184] veth1_macvtap: entered promiscuous mode [ 224.079273][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.135959][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.146746][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.158545][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.181204][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.203901][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.223247][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.233106][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.256983][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.268816][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.300991][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.317060][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.327132][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.337789][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.347806][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.361988][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.377357][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.388047][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.399509][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.424707][ T9184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.434466][ T9184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.444390][ T9184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.453454][ T9184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.475660][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.494528][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.514142][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.521227][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.543964][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 224.590990][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.598147][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.638638][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.711951][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.719117][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.737919][ T25] usb 2-1: config 0 has no interfaces? [ 224.760524][ T25] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 224.781361][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.810814][ T25] usb 2-1: Product: syz [ 224.818836][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.823385][ T25] usb 2-1: Manufacturer: syz [ 224.825969][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.831184][ T25] usb 2-1: SerialNumber: syz [ 224.848253][ T25] usb 2-1: config 0 descriptor?? [ 225.020919][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.046691][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.127338][ T9235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.148095][ T51] usb 2-1: USB disconnect, device number 24 [ 225.185237][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.193116][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.258525][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.316376][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.490866][ T9235] veth0_vlan: entered promiscuous mode [ 225.552530][ T9246] veth0_vlan: entered promiscuous mode [ 225.595830][ T9235] veth1_vlan: entered promiscuous mode [ 225.628066][ T9246] veth1_vlan: entered promiscuous mode [ 225.709623][ T9246] veth0_macvtap: entered promiscuous mode [ 225.757241][ T9246] veth1_macvtap: entered promiscuous mode [ 225.857085][ T9235] veth0_macvtap: entered promiscuous mode [ 225.876870][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.888515][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.928690][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.939563][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.950729][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.966483][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.976903][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.993045][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.016412][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.028332][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.042139][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.056325][ T5296] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 226.060266][ T9458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1121'. [ 226.077227][ T9458] netlink: 'syz.2.1121': attribute type 7 has an invalid length. [ 226.086458][ T9458] netlink: 'syz.2.1121': attribute type 8 has an invalid length. [ 226.094810][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 226.126671][ T9458] erspan0: entered promiscuous mode [ 226.152587][ T9458] batadv_slave_1: entered promiscuous mode [ 226.160135][ T9458] gretap0: entered promiscuous mode [ 226.192378][ T9235] veth1_macvtap: entered promiscuous mode [ 226.207874][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.218447][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.229016][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.241692][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.251746][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.259440][ T5296] usb 2-1: Using ep0 maxpacket: 16 [ 226.262581][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.277766][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.288703][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.298653][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.301788][ T5296] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 226.309209][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.309237][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.341994][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.343248][ T5296] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.353502][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.382260][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.394148][ T5296] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.408147][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.418997][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.456027][ T5296] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.465674][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.475703][ T5296] usb 2-1: Product: syz [ 226.478200][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.479874][ T5296] usb 2-1: Manufacturer: syz [ 226.495002][ T5296] usb 2-1: SerialNumber: syz [ 226.497750][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.512860][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.531159][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.541777][ T6616] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.542362][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.562954][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.574061][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.586447][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.607017][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.618177][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.630901][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.642693][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.669679][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.680655][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.690836][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.703539][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.721540][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.729549][ T6616] usb 4-1: Using ep0 maxpacket: 8 [ 226.732984][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.749660][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.750163][ T6616] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.760251][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.781476][ T6616] usb 4-1: config 0 has no interface number 0 [ 226.782102][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.806490][ T6616] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 226.821354][ T6616] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 226.833794][ T6616] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 226.843803][ T6616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.856528][ T9246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.870983][ T9246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.871846][ T6616] usb 4-1: config 0 descriptor?? [ 226.885454][ T9246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.894614][ T9246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.896012][ T9461] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 226.934279][ T5296] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 226.956473][ T9469] netlink: 'syz.2.1126': attribute type 4 has an invalid length. [ 226.968296][ T6616] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 226.998102][ T9469] netlink: 'syz.2.1126': attribute type 4 has an invalid length. [ 227.041734][ T9235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.059291][ T9235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.068484][ T9235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.077617][ T9235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.196484][ T5281] usb 4-1: USB disconnect, device number 12 [ 227.202494][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 227.226615][ T5281] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 227.229309][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.244737][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.357568][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.391152][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.401243][ T7076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.418318][ T7076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.481702][ T7079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.499538][ T7079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.762172][ T5296] usb 2-1: failed to read current rate; disabling the check [ 227.803478][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 228.153409][ T5296] usb 2-1: USB disconnect, device number 25 [ 228.644301][ T9509] all: renamed from lo (while UP) [ 229.217547][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 229.245568][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1150'. [ 229.273826][ T5296] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.456048][ T5296] usb 3-1: Using ep0 maxpacket: 32 [ 229.483996][ T5296] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.502716][ T5296] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.543396][ T5296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.564891][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.586925][ T5296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.644896][ T5296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.678324][ T5296] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.735964][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.793851][ T5296] usb 3-1: config 0 descriptor?? [ 230.133601][ T5296] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 230.223246][ T5296] usb 3-1: USB disconnect, device number 12 [ 230.293710][ T5296] usblp0: removed [ 230.337155][ T29] audit: type=1326 audit(1728940352.208:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.1.1154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39a277dff9 code=0x0 [ 230.649661][ T5296] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.813366][ T5296] usb 3-1: Using ep0 maxpacket: 32 [ 230.822540][ T5296] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 230.857288][ T5296] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 230.894917][ T5296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 230.936339][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.993285][ T5296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.023289][ T5296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.078168][ T5296] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.117388][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.147518][ T5296] usb 3-1: config 0 descriptor?? [ 231.361802][ T5296] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 231.509781][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 231.673661][ T6616] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 231.797496][ T29] audit: type=1326 audit(1728940353.678:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.1172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6e617dff9 code=0x0 [ 231.843259][ T6616] usb 5-1: Using ep0 maxpacket: 32 [ 231.859482][ T6616] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 231.873927][ T6616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.893448][ T6616] usb 5-1: Product: syz [ 231.898572][ T6616] usb 5-1: Manufacturer: syz [ 231.904009][ T6616] usb 5-1: SerialNumber: syz [ 231.912142][ T6616] usb 5-1: config 0 descriptor?? [ 231.931611][ T6616] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 231.944173][ T6616] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 231.976576][ T5296] usb 3-1: USB disconnect, device number 13 [ 231.994451][ T5296] usblp0: removed [ 232.149729][ T6616] radio-raremono 5-1:0.0: this is not Thanko's Raremono. [ 232.188636][ T6616] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 232.204659][ T6616] usb 5-1: USB disconnect, device number 19 [ 232.607896][ T5296] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.786064][ T5296] usb 4-1: Using ep0 maxpacket: 32 [ 232.794893][ T5296] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 232.803095][ T5296] usb 4-1: config 0 has no interface number 0 [ 232.830915][ T5296] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 232.872754][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.892565][ T5296] usb 4-1: Product: syz [ 232.896938][ T5296] usb 4-1: Manufacturer: syz [ 232.901567][ T5296] usb 4-1: SerialNumber: syz [ 232.913005][ T5296] usb 4-1: config 0 descriptor?? [ 232.923060][ T5296] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 233.439178][ T6616] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 233.459055][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 233.644993][ T6616] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 233.653618][ T6616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 233.700462][ T6616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 233.721906][ T6616] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.743997][ T6616] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.754331][ T6616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.765139][ T6616] usb 5-1: config 0 descriptor?? [ 233.771634][ T9640] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.873354][ T5281] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 234.023269][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 234.036337][ T5281] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.051689][ T5281] usb 2-1: config 0 has no interface number 0 [ 234.061699][ T5281] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 234.076382][ T5284] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 234.082476][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.092889][ T5281] usb 2-1: Product: syz [ 234.097945][ T5281] usb 2-1: Manufacturer: syz [ 234.102684][ T5281] usb 2-1: SerialNumber: syz [ 234.112450][ T5281] usb 2-1: config 0 descriptor?? [ 234.121867][ T5281] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 234.208239][ T6616] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 234.225332][ T6616] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 234.247432][ T6616] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 234.264955][ T5284] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 234.285824][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.297923][ T5284] usb 3-1: Product: syz [ 234.302133][ T5284] usb 3-1: Manufacturer: syz [ 234.307350][ T5284] usb 3-1: SerialNumber: syz [ 234.328593][ T5284] usb 3-1: config 0 descriptor?? [ 234.340619][ T5284] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 234.349662][ T5284] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 234.360890][ T5284] usb-storage 3-1:0.0: USB Mass Storage device detected [ 234.366301][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 234.376379][ T5296] gspca_topro: reg_r err -71 [ 234.380997][ T5296] gspca_topro: Sensor soi763a [ 234.389328][ T5284] usb-storage 3-1:0.0: device ignored [ 234.432278][ T5296] usb 4-1: USB disconnect, device number 13 [ 234.496552][ T5284] usb 5-1: USB disconnect, device number 20 [ 234.523328][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 234.548006][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 234.557342][ T25] usb 3-1: USB disconnect, device number 14 [ 234.562526][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.598714][ T8] usb 1-1: Product: syz [ 234.609079][ T8] usb 1-1: Manufacturer: syz [ 234.622246][ T8] usb 1-1: SerialNumber: syz [ 234.631356][ T8] usb 1-1: config 0 descriptor?? [ 234.642535][ T8] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 235.535583][ T5281] gspca_spca1528: reg_w err -71 [ 235.542214][ T5281] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 235.557270][ T5281] usb 2-1: USB disconnect, device number 26 [ 235.703426][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 235.863351][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 235.874050][ T8] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 235.877635][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.900374][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.911735][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.940821][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.953493][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.973045][ T25] usb 4-1: config 0 descriptor?? [ 236.078300][ T8] usb 1-1: USB disconnect, device number 21 [ 236.102742][ T8] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 236.121142][ T8] ssu100 1-1:0.0: device disconnected [ 236.377002][ T9701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.393804][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input23 [ 236.725031][ T25] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 236.759414][ T25] usb 4-1: USB disconnect, device number 14 [ 236.874895][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1217'. [ 237.071958][ T29] audit: type=1326 audit(1728940358.948:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.134571][ T29] audit: type=1326 audit(1728940358.978:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.203395][ T29] audit: type=1326 audit(1728940358.978:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.235232][ T29] audit: type=1326 audit(1728940358.978:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.258355][ T29] audit: type=1326 audit(1728940358.978:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.302183][ T29] audit: type=1326 audit(1728940358.978:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.387309][ T29] audit: type=1326 audit(1728940358.978:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.430530][ T29] audit: type=1326 audit(1728940358.978:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.472397][ T29] audit: type=1326 audit(1728940358.978:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.497497][ T29] audit: type=1326 audit(1728940358.978:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e617dff9 code=0x7ffc0000 [ 237.568643][ T9739] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 237.577600][ T9739] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1227'. [ 238.225055][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 238.603261][ T5296] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 238.863300][ T5296] usb 4-1: Using ep0 maxpacket: 16 [ 238.898090][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.911125][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.926137][ T5296] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 238.935345][ T5296] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 238.943806][ T5296] usb 4-1: Product: syz [ 238.948033][ T5296] usb 4-1: Manufacturer: syz [ 238.955134][ T5296] usb 4-1: config 0 descriptor?? [ 239.001153][ T9784] hsr0: VLAN not yet supported [ 239.179177][ T7076] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.416566][ T5296] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0xd [ 239.426044][ T5296] kovaplus 0003:1E7D:2D50.0016: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 239.592220][ T7076] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.750731][ T7076] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.936199][ T7076] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.011488][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.028775][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.040573][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.056901][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.068681][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.076810][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.407688][ T7076] bridge_slave_1: left allmulticast mode [ 240.435539][ T7076] bridge_slave_1: left promiscuous mode [ 240.439191][ T5296] kovaplus 0003:1E7D:2D50.0016: couldn't init struct kovaplus_device [ 240.441283][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.449820][ T5296] kovaplus 0003:1E7D:2D50.0016: couldn't install mouse [ 240.506074][ T5296] kovaplus 0003:1E7D:2D50.0016: probe with driver kovaplus failed with error -71 [ 240.558327][ T5296] usb 4-1: USB disconnect, device number 15 [ 240.568095][ T7076] bridge_slave_0: left allmulticast mode [ 240.594560][ T7076] bridge_slave_0: left promiscuous mode [ 240.610930][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.636344][ T7076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.678958][ T7076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.731476][ T7076] bond0 (unregistering): Released all slaves [ 242.153691][ T5296] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 242.161558][ T5238] Bluetooth: hci3: command tx timeout [ 242.320457][ T5296] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 242.345547][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.381695][ T5296] usb 4-1: Product: syz [ 242.402228][ T5296] usb 4-1: Manufacturer: syz [ 242.422343][ T5296] usb 4-1: SerialNumber: syz [ 242.456300][ T5296] usb 4-1: config 0 descriptor?? [ 242.551128][ T9799] chnl_net:caif_netlink_parms(): no params data found [ 242.825595][ T7076] hsr_slave_0: left promiscuous mode [ 242.837037][ T7076] hsr_slave_1: left promiscuous mode [ 242.869863][ T9897] netlink: 'syz.0.1278': attribute type 9 has an invalid length. [ 242.882202][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.888120][ T9897] netlink: 134636 bytes leftover after parsing attributes in process `syz.0.1278'. [ 242.903531][ T5296] usb 4-1: Firmware: major: 78, minor: 144, hardware type: ATUSB (2) [ 242.911261][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.976360][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.009145][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.118283][ T5296] usb 4-1: failed to fetch extended address, random address set [ 243.141643][ T7076] veth1_macvtap: left promiscuous mode [ 243.171580][ T7076] veth0_macvtap: left promiscuous mode [ 243.192834][ T7076] veth1_vlan: left promiscuous mode [ 243.211066][ T7076] veth0_vlan: left promiscuous mode [ 244.039447][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 244.087769][ T7076] team0 (unregistering): Port device team_slave_0 removed [ 244.242791][ T5238] Bluetooth: hci3: command tx timeout [ 244.682976][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'. [ 244.699108][ T5296] usb 4-1: USB disconnect, device number 16 [ 244.713365][ T8] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 244.731107][ T9922] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 244.902351][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.942169][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.965894][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.973016][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.003344][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 245.009326][ T9799] bridge_slave_0: entered allmulticast mode [ 245.021463][ T9799] bridge_slave_0: entered promiscuous mode [ 245.050253][ T8] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 245.061098][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.086771][ T9934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.099895][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.108368][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.109947][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 245.119646][ T9799] bridge_slave_1: entered allmulticast mode [ 245.124779][ T8] hub 3-1:1.0: probe with driver hub failed with error -5 [ 245.134467][ T9799] bridge_slave_1: entered promiscuous mode [ 245.135575][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 245.145998][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 245.165653][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 245.171627][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 245.211244][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 245.239813][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 245.415267][ T9799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.436643][ T9799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.617213][ T9799] team0: Port device team_slave_0 added [ 245.636026][ T9799] team0: Port device team_slave_1 added [ 245.736276][ T9934] usb 3-1: reset full-speed USB device number 15 using dummy_hcd [ 245.770345][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.788668][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.827282][ T9799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.852664][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.863617][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.916516][ T9934] usb 3-1: device firmware changed [ 245.922514][ T9799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.946916][ T8] usb 3-1: USB disconnect, device number 15 [ 245.963351][ T9934] cdc_wdm 3-1:1.0: Error autopm - -16 [ 246.023310][ T5283] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 246.052369][ T9799] hsr_slave_0: entered promiscuous mode [ 246.074547][ T9799] hsr_slave_1: entered promiscuous mode [ 246.086661][ T9799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.103382][ T9799] Cannot create hsr debugfs directory [ 246.103444][ T8] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 246.204506][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 246.218954][ T5283] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 246.236777][ T5283] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.257775][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.272673][ T5283] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.287499][ T5283] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.307349][ T8] usb 3-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 246.323600][ T5238] Bluetooth: hci3: command tx timeout [ 246.332217][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.350669][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.363831][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.372879][ T8] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.405300][ T5283] usbtmc 4-1:16.0: bulk endpoints not found [ 246.420263][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.445536][ T9956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.454506][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 246.460458][ T8] hub 3-1:1.0: probe with driver hub failed with error -5 [ 246.473324][ T51] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 246.482855][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 246.488891][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 246.501392][ T8] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 246.640734][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 246.640752][ T29] audit: type=1326 audit(1728940368.518:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5787b7dff9 code=0x0 [ 246.654712][ T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.701976][ T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.727993][ T51] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.753110][ T51] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.779098][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.808914][ T51] hub 1-1:1.0: bad descriptor, ignoring hub [ 246.832976][ T51] hub 1-1:1.0: probe with driver hub failed with error -5 [ 246.854165][ T51] cdc_wdm 1-1:1.0: skipping garbage [ 246.859513][ T51] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 246.895112][ T5283] usb 3-1: USB disconnect, device number 16 [ 247.104569][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.118665][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.144889][ T9799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.155976][ T9799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.165325][ T9799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.180841][ T9799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.249815][ T5281] usb 1-1: USB disconnect, device number 22 [ 247.281425][ T9799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.316516][ T9799] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.331802][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.339001][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.379650][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.386826][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.488221][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.586426][ T9799] veth0_vlan: entered promiscuous mode [ 247.604229][ T5284] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 247.618963][ T9799] veth1_vlan: entered promiscuous mode [ 247.706107][ T9799] veth0_macvtap: entered promiscuous mode [ 247.726176][ T9799] veth1_macvtap: entered promiscuous mode [ 247.748208][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.769883][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.788330][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.801659][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.801858][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 247.820529][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.831592][ T5284] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 247.853490][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.863405][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.863435][ T5284] usb 1-1: Product: syz [ 247.863452][ T5284] usb 1-1: Manufacturer: syz [ 247.881885][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.888044][ T5284] usb 1-1: SerialNumber: syz [ 247.896929][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.908198][ T5284] usb 1-1: config 0 descriptor?? [ 247.925171][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.946651][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.975600][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.986601][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.999828][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.045257][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.066443][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.085397][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.097504][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.107665][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.118536][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.138625][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.152538][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.173310][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.190653][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.200913][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.213560][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.232577][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.261214][ T9799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.283914][ T9799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.292655][ T9799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.323289][ T9799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.394118][ T5238] Bluetooth: hci3: command tx timeout [ 248.450180][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.483675][ T5284] rc_core: IR keymap rc-hauppauge not found [ 248.490520][ T5284] Registered IR keymap rc-empty [ 248.496930][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.536377][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.580897][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.592922][ T5284] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 248.609463][ T5284] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 248.627774][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.654396][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.675061][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.713844][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.727883][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.745958][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.786448][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.807814][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.821096][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.830898][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.841553][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.851503][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 248.856486][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.866677][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.872270][ T25] usb 4-1: USB disconnect, device number 17 [ 248.896109][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.944947][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.975119][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 248.976501][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.003759][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 249.025147][ T5284] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 249.061140][ T5284] mceusb 1-1:0.0: Registered Ћ with mce emulator interface version 1 [ 249.078287][ T5284] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 249.101209][ T5284] usb 1-1: USB disconnect, device number 23 [ 249.205297][ T2680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.233447][ T2680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.468764][ T11] bridge_slave_1: left allmulticast mode [ 249.508464][ T11] bridge_slave_1: left promiscuous mode [ 249.536457][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.548717][T10054] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1310'. [ 249.606874][T10054] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1310'. [ 249.624702][ T11] bridge_slave_0: left allmulticast mode [ 249.650176][ T11] bridge_slave_0: left promiscuous mode [ 249.679399][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.211773][ T11] erspan0 (unregistering): left promiscuous mode [ 250.272649][ T11] gretap0 (unregistering): left promiscuous mode [ 250.814341][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.834973][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.865400][ T11] bond0 (unregistering): Released all slaves [ 250.953718][ T5238] Bluetooth: hci4: command tx timeout [ 251.488202][T10038] chnl_net:caif_netlink_parms(): no params data found [ 251.737984][T10158] dummy0: entered promiscuous mode [ 251.793825][T10158] dummy0: left promiscuous mode [ 251.897269][ T11] batadv_slave_1: left promiscuous mode [ 251.943061][ T11] hsr_slave_0: left promiscuous mode [ 252.053229][ T11] hsr_slave_1: left promiscuous mode [ 252.123357][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.154051][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.172626][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.190431][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.238466][ T11] veth1_macvtap: left promiscuous mode [ 252.263457][ T11] veth0_macvtap: left promiscuous mode [ 252.269113][ T11] veth1_vlan: left promiscuous mode [ 252.291777][ T11] veth0_vlan: left promiscuous mode [ 253.052109][ T5238] Bluetooth: hci4: command tx timeout [ 253.064527][T10202] input: syz1 as /devices/virtual/input/input25 [ 253.208200][ T11] team0 (unregistering): Port device team_slave_1 removed [ 253.294783][ T11] team0 (unregistering): Port device team_slave_0 removed [ 254.009571][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.018458][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.029623][T10038] bridge_slave_0: entered allmulticast mode [ 254.039596][T10038] bridge_slave_0: entered promiscuous mode [ 254.079006][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.096598][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.119844][T10038] bridge_slave_1: entered allmulticast mode [ 254.133649][ T5283] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 254.135087][T10038] bridge_slave_1: entered promiscuous mode [ 254.245919][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.267914][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.325139][ T5283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.348281][ T5283] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.359425][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.368279][T10038] team0: Port device team_slave_0 added [ 254.376097][ T5283] usb 2-1: Product: syz [ 254.381646][ T5283] usb 2-1: Manufacturer: syz [ 254.390345][T10038] team0: Port device team_slave_1 added [ 254.403248][ T5283] usb 2-1: SerialNumber: syz [ 254.484725][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.502106][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.541945][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.611479][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.630107][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.709369][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.944657][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.949052][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.967306][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.977089][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.985597][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.995392][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.003009][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.005721][T10038] hsr_slave_0: entered promiscuous mode [ 255.057656][ T5283] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 255.067451][ T5283] cdc_ncm 2-1:1.0: bind() failure [ 255.076147][ T5283] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 255.093562][T10038] hsr_slave_1: entered promiscuous mode [ 255.096636][ T5283] cdc_ncm 2-1:1.1: bind() failure [ 255.114187][ T5232] Bluetooth: hci4: command tx timeout [ 255.130873][T10038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.148470][T10038] Cannot create hsr debugfs directory [ 255.248405][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.462724][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.589901][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.843581][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849926][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.305589][ T11] bridge_slave_1: left allmulticast mode [ 256.321602][ T11] bridge_slave_1: left promiscuous mode [ 256.352074][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.388620][ T11] bridge_slave_0: left allmulticast mode [ 256.417763][ T11] bridge_slave_0: left promiscuous mode [ 256.439342][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.914688][ T5296] usb 2-1: USB disconnect, device number 27 [ 256.923342][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 257.034238][ T5232] Bluetooth: hci2: command tx timeout [ 257.095886][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 257.107978][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.124444][ T25] usb 5-1: config 0 descriptor?? [ 257.140078][ T25] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 257.198365][ T5232] Bluetooth: hci4: command tx timeout [ 257.286714][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.304286][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.318596][ T11] bond0 (unregistering): Released all slaves [ 257.332945][T10237] chnl_net:caif_netlink_parms(): no params data found [ 258.393102][ T25] usb 5-1: USB disconnect, device number 21 [ 259.116500][ T5232] Bluetooth: hci2: command tx timeout [ 259.214784][ T6616] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 259.394837][ T6616] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 259.405127][ T6616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.423800][ T6616] usb 5-1: config 0 descriptor?? [ 259.849605][ T11] hsr_slave_0: left promiscuous mode [ 259.860168][ T11] hsr_slave_1: left promiscuous mode [ 259.876217][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.890107][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.908111][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.923077][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.953270][ T5283] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 259.972252][ T11] veth1_macvtap: left promiscuous mode [ 259.987990][ T11] veth0_macvtap: left promiscuous mode [ 259.994133][ T11] veth1_vlan: left promiscuous mode [ 259.999444][ T11] veth0_vlan: left promiscuous mode [ 260.131346][ T5283] usb 2-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 260.165436][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.184400][ T5283] usb 2-1: Product: syz [ 260.188630][ T5283] usb 2-1: Manufacturer: syz [ 260.203431][ T5283] usb 2-1: SerialNumber: syz [ 260.216898][ T5283] usb 2-1: config 0 descriptor?? [ 260.456730][ T6616] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 260.494210][ T6616] usb 5-1: USB disconnect, device number 22 [ 260.903920][ T11] team0 (unregistering): Port device team_slave_1 removed [ 260.964568][ T11] team0 (unregistering): Port device team_slave_0 removed [ 261.061717][ T5296] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 261.193618][ T5232] Bluetooth: hci2: command tx timeout [ 261.221123][ T5296] usb 1-1: Using ep0 maxpacket: 8 [ 261.233081][ T5296] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 261.246221][ T5296] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 261.255472][ T5296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.263808][ T5296] usb 1-1: Product: syz [ 261.268007][ T5296] usb 1-1: Manufacturer: syz [ 261.272670][ T5296] usb 1-1: SerialNumber: syz [ 261.280041][ T5296] usb 1-1: config 0 descriptor?? [ 261.288535][ T5296] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 261.573558][ T5284] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 261.761645][ T5284] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.801188][ T5284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.814945][T10237] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.815450][ T5283] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -71 [ 261.822073][T10237] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.848228][ T5283] usb 2-1: USB disconnect, device number 28 [ 261.849974][ T5284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.884239][T10237] bridge_slave_0: entered allmulticast mode [ 261.899625][ T5284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.904784][T10237] bridge_slave_0: entered promiscuous mode [ 261.920550][ T5284] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.942925][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.945380][T10237] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.952901][ T5284] usb 5-1: Product: syz [ 261.977038][T10237] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.985435][ T5284] usb 5-1: Manufacturer: syz [ 261.988081][T10237] bridge_slave_1: entered allmulticast mode [ 262.001825][T10237] bridge_slave_1: entered promiscuous mode [ 262.029659][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 262.045815][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 262.072010][ T5284] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 262.089626][ T5284] cdc_wdm 5-1:1.0: Unknown control protocol [ 262.094137][T10237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.114376][T10237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.205518][T10038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.252053][T10038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.297959][T10237] team0: Port device team_slave_0 added [ 262.316347][T10237] team0: Port device team_slave_1 added [ 262.322850][T10038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.342651][T10038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.455578][T10237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.462560][T10237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.522268][T10237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.534935][ T5296] gspca_zc3xx: reg_w_i err -71 [ 262.587968][T10237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.614875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 262.665151][T10237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.713180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 262.723410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 262.773727][T10237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.793113][ C1] wdm_int_callback: 53 callbacks suppressed [ 262.793140][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.805628][ C1] wdm_int_callback: 53 callbacks suppressed [ 262.805641][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.817960][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.824547][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.830858][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.837481][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.844124][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.850748][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.857055][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.863666][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.870053][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.876672][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.884243][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.890830][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.897437][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.904026][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.910261][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.916839][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.923072][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 262.929645][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 262.939881][ T5284] usb 5-1: USB disconnect, device number 23 [ 262.945833][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 263.051005][T10237] hsr_slave_0: entered promiscuous mode [ 263.063488][T10237] hsr_slave_1: entered promiscuous mode [ 263.143717][ T5296] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 263.150034][ T5296] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 263.161998][ T5296] usb 1-1: USB disconnect, device number 24 [ 263.275516][ T5232] Bluetooth: hci2: command tx timeout [ 263.284694][T10341] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1385'. [ 263.296415][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 263.482586][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 263.513086][ T25] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 263.533042][T10038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.542091][ T25] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 263.551765][ T25] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 263.592419][ T25] usb 2-1: config 250 has no interface number 0 [ 263.612996][T10038] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.622397][ T25] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 263.662109][ T25] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 263.688455][ T25] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.735875][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.741212][ T25] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 263.742988][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.768267][ T25] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 263.826808][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.833988][ T7070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.849673][ T25] usb 2-1: config 250 interface 228 has no altsetting 0 [ 263.865326][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 263.887599][ T25] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 263.906189][ T25] usb 2-1: Product: syz [ 263.914958][ T25] usb 2-1: SerialNumber: syz [ 263.917442][T10038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.930470][T10038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.978531][ T25] hub 2-1:250.228: bad descriptor, ignoring hub [ 263.990653][ T25] hub 2-1:250.228: probe with driver hub failed with error -5 [ 264.076702][T10038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.172537][ T25] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 264.238660][T10038] veth0_vlan: entered promiscuous mode [ 264.292492][T10038] veth1_vlan: entered promiscuous mode [ 264.424038][T10038] veth0_macvtap: entered promiscuous mode [ 264.494832][T10038] veth1_macvtap: entered promiscuous mode [ 264.495330][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 264.513057][T10237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.545906][T10237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.569883][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.589647][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.600871][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.621920][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.653522][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.672732][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.683630][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 264.699061][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.705107][ T25] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 264.722608][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.732470][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.732500][ T25] usb 1-1: Product: syz [ 264.732516][ T25] usb 1-1: Manufacturer: syz [ 264.732532][ T25] usb 1-1: SerialNumber: syz [ 264.744121][ T25] usb 1-1: config 0 descriptor?? [ 264.770983][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.792697][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.813048][T10038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.826362][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.837087][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.867260][T10337] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 264.893202][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.920165][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.937209][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.947978][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.958670][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.977514][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.987573][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.998194][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.014813][T10038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.022891][T10237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.039994][T10237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.066261][T10038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.084199][T10038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.093008][T10038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.130182][T10038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.210801][ T25] airspy 1-1:0.0: Board ID: 00 [ 265.230493][ T25] airspy 1-1:0.0: Firmware version: [ 265.314475][T10337] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 265.339297][ T8] usb 2-1: USB disconnect, device number 29 [ 265.365603][ T8] usblp0: removed [ 265.417793][T10237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.429405][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.450256][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.477123][T10237] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.496646][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.503846][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.526796][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.534030][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.606826][ T7070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.624148][ T7070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.750212][T10237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.872608][T10237] veth0_vlan: entered promiscuous mode [ 265.901659][T10237] veth1_vlan: entered promiscuous mode [ 265.971092][T10237] veth0_macvtap: entered promiscuous mode [ 265.990378][T10237] veth1_macvtap: entered promiscuous mode [ 266.036470][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.074759][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.090777][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.121880][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.158442][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.181783][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.202178][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.223319][ T25] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 266.263944][ T25] airspy 1-1:0.0: Registered as swradio16 [ 266.275939][ T25] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 266.309555][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.341804][ T25] usb 1-1: USB disconnect, device number 25 [ 266.354525][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.380790][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.422256][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.498844][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.524066][T10237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.550356][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.562848][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.636547][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.670408][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.680910][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.692069][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.706898][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.730137][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.753421][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.776874][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.797233][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.818348][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.869692][T10237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.922406][T10237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.952235][T10237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.972469][T10237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.005732][T10237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.300670][ T2680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.311221][ T7070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.327632][ T7070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.346589][ T2680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.582877][ T29] audit: type=1326 audit(1728940389.458:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.4.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff46657dff9 code=0x0 [ 267.631967][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 267.776436][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 267.844446][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.854691][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.871194][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.880588][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.889173][ T8] usb 1-1: SerialNumber: syz [ 267.923297][ T6616] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 268.076651][ T6616] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.089022][ T6616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 268.102177][ T6616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.121043][ T8] usb 1-1: 0:2 : does not exist [ 268.131139][ T6616] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.149254][ T8] usb 1-1: USB disconnect, device number 26 [ 268.166319][ T6616] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.176642][ T6616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.209434][ T6616] usb 2-1: config 0 descriptor?? [ 268.223348][ T51] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 268.232686][T10494] debugfs: Directory 'netdev:nicvf0' with parent 'phy55' already present! [ 268.241356][T10480] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 268.270265][ T9347] udevd[9347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.391803][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 268.405262][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.428583][ T51] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 268.437929][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.452139][ T51] usb 4-1: Product: syz [ 268.476427][ T51] usb 4-1: Manufacturer: syz [ 268.481087][ T51] usb 4-1: SerialNumber: syz [ 268.496560][ T51] usb 4-1: config 0 descriptor?? [ 268.512946][ T51] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 268.545561][ T51] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 268.595397][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1422'. [ 268.665820][ T6616] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 268.684036][ T6616] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 268.703674][ T6616] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 268.928432][ T5284] usb 2-1: USB disconnect, device number 30 [ 269.023899][ T5296] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.135612][ T51] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 269.215303][ T5296] usb 5-1: config 0 has no interfaces? [ 269.224958][ T5296] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 269.236371][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.245336][ T5296] usb 5-1: Product: syz [ 269.250365][ T5296] usb 5-1: Manufacturer: syz [ 269.265517][ T5296] usb 5-1: SerialNumber: syz [ 269.279654][ T5296] usb 5-1: config 0 descriptor?? [ 269.523238][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 269.704844][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.707784][T10537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.722895][ T8] usb 3-1: config 0 has no interfaces? [ 269.729081][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.746660][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.766171][ T8] usb 3-1: config 0 descriptor?? [ 269.767860][ T51] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 269.809149][ T51] em28xx 4-1:0.0: board has no eeprom [ 269.883333][ T51] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 269.891559][ T51] em28xx 4-1:0.0: dvb set to bulk mode. [ 269.897604][ T5296] em28xx 4-1:0.0: Binding DVB extension [ 269.908164][ T51] usb 4-1: USB disconnect, device number 18 [ 269.935747][ T51] em28xx 4-1:0.0: Disconnecting em28xx [ 269.996272][ T5296] em28xx 4-1:0.0: Registering input extension [ 270.004045][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.020070][ T51] em28xx 4-1:0.0: Closing input extension [ 270.027844][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.079188][ T51] em28xx 4-1:0.0: Freeing device [ 270.763811][ T5279] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 270.925092][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.937927][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.964224][ T5279] usb 1-1: New USB device found, idVendor=046d, idProduct=c134, bcdDevice= 0.00 [ 270.998127][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.030389][ T5279] usb 1-1: config 0 descriptor?? [ 271.279045][ T6616] usb 1-1: USB disconnect, device number 27 [ 271.704905][ T6616] usb 5-1: USB disconnect, device number 24 [ 271.882139][T10577] input: syz0 as /devices/virtual/input/input27 [ 271.990186][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 272.309005][ T5284] usb 3-1: USB disconnect, device number 17 [ 272.353645][ T51] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 272.514905][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 272.536253][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 272.561287][T10596] [ 272.563650][T10596] ===================================================== [ 272.570575][T10596] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 272.578015][T10596] 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 Not tainted [ 272.585104][T10596] ----------------------------------------------------- [ 272.592015][T10596] syz.2.1460/10596 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 272.599730][T10596] ffff888026a2e408 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 272.608470][T10596] [ 272.608470][T10596] and this task is already holding: [ 272.615847][T10596] ffff88802e4a0028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 272.625619][T10596] which would create a new lock dependency: [ 272.631498][T10596] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 272.639591][T10596] [ 272.639591][T10596] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 272.649029][T10596] (&dev->event_lock#2){..-.}-{2:2} [ 272.649058][T10596] [ 272.649058][T10596] ... which became SOFTIRQ-irq-safe at: [ 272.661938][T10596] lock_acquire+0x1ed/0x550 [ 272.666528][T10596] _raw_spin_lock_irqsave+0xd5/0x120 [ 272.671902][T10596] input_inject_event+0xc5/0x340 [ 272.676922][T10596] led_trigger_event+0x138/0x210 [ 272.681942][T10596] kbd_bh+0x1b5/0x290 [ 272.686007][T10596] tasklet_action_common+0x321/0x4d0 [ 272.691383][T10596] handle_softirqs+0x2c5/0x980 [ 272.696230][T10596] run_ksoftirqd+0xca/0x130 [ 272.700814][T10596] smpboot_thread_fn+0x544/0xa30 [ 272.705831][T10596] kthread+0x2f0/0x390 [ 272.709976][T10596] ret_from_fork+0x4b/0x80 [ 272.714487][T10596] ret_from_fork_asm+0x1a/0x30 [ 272.719334][T10596] [ 272.719334][T10596] to a SOFTIRQ-irq-unsafe lock: [ 272.726334][T10596] (tasklist_lock){.+.+}-{2:2} [ 272.726360][T10596] [ 272.726360][T10596] ... which became SOFTIRQ-irq-unsafe at: [ 272.738962][T10596] ... [ 272.738969][T10596] lock_acquire+0x1ed/0x550 [ 272.746118][T10596] _raw_read_lock+0x36/0x50 [ 272.750699][T10596] __do_wait+0x12d/0x850 [ 272.755013][T10596] do_wait+0x1e9/0x560 [ 272.759156][T10596] kernel_wait+0xe9/0x240 [ 272.763558][T10596] call_usermodehelper_exec_work+0xbd/0x230 [ 272.769529][T10596] process_scheduled_works+0xa63/0x1850 [ 272.775255][T10596] worker_thread+0x870/0xd30 [ 272.779921][T10596] kthread+0x2f0/0x390 [ 272.784063][T10596] ret_from_fork+0x4b/0x80 [ 272.788560][T10596] ret_from_fork_asm+0x1a/0x30 [ 272.793399][T10596] [ 272.793399][T10596] other info that might help us debug this: [ 272.793399][T10596] [ 272.803612][T10596] Chain exists of: [ 272.803612][T10596] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 272.803612][T10596] [ 272.817177][T10596] Possible interrupt unsafe locking scenario: [ 272.817177][T10596] [ 272.825479][T10596] CPU0 CPU1 [ 272.830825][T10596] ---- ---- [ 272.836170][T10596] lock(tasklist_lock); [ 272.840402][T10596] local_irq_disable(); [ 272.847141][T10596] lock(&dev->event_lock#2); [ 272.854331][T10596] lock(&client->buffer_lock); [ 272.861691][T10596] [ 272.865129][T10596] lock(&dev->event_lock#2); [ 272.869973][T10596] [ 272.869973][T10596] *** DEADLOCK *** [ 272.869973][T10596] [ 272.878099][T10596] 7 locks held by syz.2.1460/10596: [ 272.883280][T10596] #0: ffff888146762110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 272.892415][T10596] #1: ffff888141bf2230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 272.902505][T10596] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 272.912156][T10596] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 272.921725][T10596] #4: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x6f/0x300 [ 272.930857][T10596] #5: ffff88802e4a0028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 272.941029][T10596] #6: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 272.950074][T10596] [ 272.950074][T10596] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 272.960465][T10596] -> (&dev->event_lock#2){..-.}-{2:2} { [ 272.966110][T10596] IN-SOFTIRQ-W at: [ 272.970164][T10596] lock_acquire+0x1ed/0x550 [ 272.976485][T10596] _raw_spin_lock_irqsave+0xd5/0x120 [ 272.983587][T10596] input_inject_event+0xc5/0x340 [ 272.990341][T10596] led_trigger_event+0x138/0x210 [ 272.997092][T10596] kbd_bh+0x1b5/0x290 [ 273.002886][T10596] tasklet_action_common+0x321/0x4d0 [ 273.009988][T10596] handle_softirqs+0x2c5/0x980 [ 273.016566][T10596] run_ksoftirqd+0xca/0x130 [ 273.022897][T10596] smpboot_thread_fn+0x544/0xa30 [ 273.029662][T10596] kthread+0x2f0/0x390 [ 273.035554][T10596] ret_from_fork+0x4b/0x80 [ 273.041791][T10596] ret_from_fork_asm+0x1a/0x30 [ 273.048371][T10596] INITIAL USE at: [ 273.052340][T10596] lock_acquire+0x1ed/0x550 [ 273.058577][T10596] _raw_spin_lock_irqsave+0xd5/0x120 [ 273.065600][T10596] input_inject_event+0xc5/0x340 [ 273.072261][T10596] kbd_led_trigger_activate+0xb8/0x100 [ 273.079467][T10596] led_trigger_set+0x582/0x9c0 [ 273.085973][T10596] led_trigger_set_default+0x229/0x260 [ 273.093169][T10596] led_classdev_register_ext+0x6e6/0x8a0 [ 273.100540][T10596] input_leds_connect+0x489/0x630 [ 273.107302][T10596] input_register_device+0xd3b/0x1110 [ 273.114406][T10596] atkbd_connect+0x752/0xa00 [ 273.120723][T10596] serio_driver_probe+0x7f/0xa0 [ 273.127304][T10596] really_probe+0x2b8/0xad0 [ 273.133536][T10596] __driver_probe_device+0x1a2/0x390 [ 273.140547][T10596] driver_probe_device+0x50/0x430 [ 273.147294][T10596] __driver_attach+0x45f/0x710 [ 273.153778][T10596] bus_for_each_dev+0x239/0x2b0 [ 273.160357][T10596] serio_handle_event+0x1c7/0x920 [ 273.167105][T10596] process_scheduled_works+0xa63/0x1850 [ 273.174381][T10596] worker_thread+0x870/0xd30 [ 273.180699][T10596] kthread+0x2f0/0x390 [ 273.186489][T10596] ret_from_fork+0x4b/0x80 [ 273.192636][T10596] ret_from_fork_asm+0x1a/0x30 [ 273.199130][T10596] } [ 273.201705][T10596] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 273.210821][T10596] -> (&client->buffer_lock){....}-{2:2} { [ 273.216562][T10596] INITIAL USE at: [ 273.220463][T10596] lock_acquire+0x1ed/0x550 [ 273.226545][T10596] _raw_spin_lock+0x2e/0x40 [ 273.232614][T10596] evdev_pass_values+0xf2/0xad0 [ 273.239024][T10596] evdev_events+0x1c2/0x300 [ 273.245077][T10596] input_pass_values+0x286/0x860 [ 273.251569][T10596] input_event_dispose+0x30f/0x600 [ 273.258239][T10596] input_handle_event+0xa71/0xbe0 [ 273.264815][T10596] input_inject_event+0x22f/0x340 [ 273.271406][T10596] evdev_write+0x5fd/0x790 [ 273.277385][T10596] vfs_write+0x29c/0xc90 [ 273.283184][T10596] ksys_write+0x183/0x2b0 [ 273.289071][T10596] do_syscall_64+0xf3/0x230 [ 273.295127][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.302581][T10596] } [ 273.305069][T10596] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 273.313217][T10596] ... acquired at: [ 273.317003][T10596] lock_acquire+0x1ed/0x550 [ 273.321671][T10596] _raw_spin_lock+0x2e/0x40 [ 273.326348][T10596] evdev_pass_values+0xf2/0xad0 [ 273.331362][T10596] evdev_events+0x1c2/0x300 [ 273.336028][T10596] input_pass_values+0x286/0x860 [ 273.341135][T10596] input_event_dispose+0x30f/0x600 [ 273.346410][T10596] input_handle_event+0xa71/0xbe0 [ 273.351598][T10596] input_inject_event+0x22f/0x340 [ 273.356787][T10596] evdev_write+0x5fd/0x790 [ 273.361362][T10596] vfs_write+0x29c/0xc90 [ 273.365767][T10596] ksys_write+0x183/0x2b0 [ 273.370253][T10596] do_syscall_64+0xf3/0x230 [ 273.374916][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.380993][T10596] [ 273.383313][T10596] [ 273.383313][T10596] the dependencies between the lock to be acquired [ 273.383327][T10596] and SOFTIRQ-irq-unsafe lock: [ 273.396826][T10596] -> (tasklist_lock){.+.+}-{2:2} { [ 273.402125][T10596] HARDIRQ-ON-R at: [ 273.406268][T10596] lock_acquire+0x1ed/0x550 [ 273.412771][T10596] _raw_read_lock+0x36/0x50 [ 273.419266][T10596] __do_wait+0x12d/0x850 [ 273.425495][T10596] do_wait+0x1e9/0x560 [ 273.431551][T10596] kernel_wait+0xe9/0x240 [ 273.437880][T10596] call_usermodehelper_exec_work+0xbd/0x230 [ 273.445778][T10596] process_scheduled_works+0xa63/0x1850 [ 273.453344][T10596] worker_thread+0x870/0xd30 [ 273.459934][T10596] kthread+0x2f0/0x390 [ 273.465990][T10596] ret_from_fork+0x4b/0x80 [ 273.472399][T10596] ret_from_fork_asm+0x1a/0x30 [ 273.479156][T10596] SOFTIRQ-ON-R at: [ 273.483305][T10596] lock_acquire+0x1ed/0x550 [ 273.489798][T10596] _raw_read_lock+0x36/0x50 [ 273.496290][T10596] __do_wait+0x12d/0x850 [ 273.502517][T10596] do_wait+0x1e9/0x560 [ 273.508570][T10596] kernel_wait+0xe9/0x240 [ 273.514886][T10596] call_usermodehelper_exec_work+0xbd/0x230 [ 273.522768][T10596] process_scheduled_works+0xa63/0x1850 [ 273.530307][T10596] worker_thread+0x870/0xd30 [ 273.536891][T10596] kthread+0x2f0/0x390 [ 273.542954][T10596] ret_from_fork+0x4b/0x80 [ 273.549366][T10596] ret_from_fork_asm+0x1a/0x30 [ 273.556121][T10596] INITIAL USE at: [ 273.560180][T10596] lock_acquire+0x1ed/0x550 [ 273.566585][T10596] _raw_write_lock_irq+0xd3/0x120 [ 273.573514][T10596] copy_process+0x2267/0x3d50 [ 273.580088][T10596] kernel_clone+0x226/0x8f0 [ 273.586489][T10596] user_mode_thread+0x132/0x1a0 [ 273.593240][T10596] rest_init+0x23/0x300 [ 273.599294][T10596] start_kernel+0x47f/0x500 [ 273.605695][T10596] x86_64_start_reservations+0x2a/0x30 [ 273.613052][T10596] x86_64_start_kernel+0x9f/0xa0 [ 273.619887][T10596] common_startup_64+0x13e/0x147 [ 273.626723][T10596] INITIAL READ USE at: [ 273.631214][T10596] lock_acquire+0x1ed/0x550 [ 273.638056][T10596] _raw_read_lock+0x36/0x50 [ 273.644894][T10596] __do_wait+0x12d/0x850 [ 273.651467][T10596] do_wait+0x1e9/0x560 [ 273.657865][T10596] kernel_wait+0xe9/0x240 [ 273.664525][T10596] call_usermodehelper_exec_work+0xbd/0x230 [ 273.672752][T10596] process_scheduled_works+0xa63/0x1850 [ 273.680640][T10596] worker_thread+0x870/0xd30 [ 273.687566][T10596] kthread+0x2f0/0x390 [ 273.693965][T10596] ret_from_fork+0x4b/0x80 [ 273.700719][T10596] ret_from_fork_asm+0x1a/0x30 [ 273.707819][T10596] } [ 273.710474][T10596] ... key at: [] tasklist_lock+0x18/0x40 [ 273.718356][T10596] ... acquired at: [ 273.722316][T10596] lock_acquire+0x1ed/0x550 [ 273.726986][T10596] _raw_read_lock+0x36/0x50 [ 273.731652][T10596] send_sigurg+0x144/0x430 [ 273.736233][T10596] sk_send_sigurg+0x6e/0x2f0 [ 273.740987][T10596] queue_oob+0x4e3/0x680 [ 273.745394][T10596] unix_stream_sendmsg+0xd24/0xf80 [ 273.750669][T10596] __sock_sendmsg+0x221/0x270 [ 273.755511][T10596] ____sys_sendmsg+0x52a/0x7e0 [ 273.760435][T10596] __sys_sendmmsg+0x3ab/0x730 [ 273.765271][T10596] __x64_sys_sendmmsg+0xa0/0xb0 [ 273.770281][T10596] do_syscall_64+0xf3/0x230 [ 273.774943][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.781001][T10596] [ 273.783309][T10596] -> (&f_owner->lock){....}-{2:2} { [ 273.788606][T10596] INITIAL USE at: [ 273.792572][T10596] lock_acquire+0x1ed/0x550 [ 273.798803][T10596] _raw_write_lock_irq+0xd3/0x120 [ 273.805556][T10596] __f_setown+0x6b/0x380 [ 273.811525][T10596] generic_setlease+0xc74/0x1550 [ 273.818184][T10596] fcntl_setlease+0x404/0x540 [ 273.824584][T10596] do_fcntl+0x69d/0x1a60 [ 273.830554][T10596] __se_sys_fcntl+0xd2/0x1e0 [ 273.836870][T10596] do_syscall_64+0xf3/0x230 [ 273.843099][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.850727][T10596] INITIAL READ USE at: [ 273.855131][T10596] lock_acquire+0x1ed/0x550 [ 273.861797][T10596] _raw_read_lock_irqsave+0xdd/0x130 [ 273.869243][T10596] send_sigurg+0x58/0x430 [ 273.875735][T10596] sk_send_sigurg+0x6e/0x2f0 [ 273.882483][T10596] queue_oob+0x4e3/0x680 [ 273.888888][T10596] unix_stream_sendmsg+0xd24/0xf80 [ 273.896161][T10596] __sock_sendmsg+0x221/0x270 [ 273.902999][T10596] ____sys_sendmsg+0x52a/0x7e0 [ 273.909922][T10596] __sys_sendmmsg+0x3ab/0x730 [ 273.916755][T10596] __x64_sys_sendmmsg+0xa0/0xb0 [ 273.923765][T10596] do_syscall_64+0xf3/0x230 [ 273.930427][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.938483][T10596] } [ 273.941060][T10596] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 273.949987][T10596] ... acquired at: [ 273.953864][T10596] lock_acquire+0x1ed/0x550 [ 273.958537][T10596] _raw_read_lock_irqsave+0xdd/0x130 [ 273.963990][T10596] send_sigio+0x37/0x390 [ 273.968399][T10596] kill_fasync+0x256/0x4f0 [ 273.972978][T10596] lease_break_callback+0x26/0x30 [ 273.978166][T10596] __break_lease+0x6d5/0x1820 [ 273.983002][T10596] do_dentry_open+0x8d4/0x1460 [ 273.987927][T10596] vfs_open+0x3e/0x330 [ 273.992158][T10596] path_openat+0x2c84/0x3590 [ 273.996912][T10596] do_filp_open+0x235/0x490 [ 274.001581][T10596] do_sys_openat2+0x13e/0x1d0 [ 274.006420][T10596] __x64_sys_openat+0x247/0x2a0 [ 274.011432][T10596] do_syscall_64+0xf3/0x230 [ 274.016118][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.022177][T10596] [ 274.024490][T10596] -> (&new->fa_lock){....}-{2:2} { [ 274.029610][T10596] INITIAL USE at: [ 274.033490][T10596] lock_acquire+0x1ed/0x550 [ 274.039569][T10596] _raw_write_lock_irq+0xd3/0x120 [ 274.046187][T10596] fasync_remove_entry+0xff/0x1d0 [ 274.052783][T10596] lease_modify+0x1bd/0x3a0 [ 274.058841][T10596] locks_remove_file+0x577/0x10c0 [ 274.065422][T10596] __fput+0x1a6/0x880 [ 274.070958][T10596] task_work_run+0x24f/0x310 [ 274.077111][T10596] syscall_exit_to_user_mode+0x168/0x370 [ 274.084302][T10596] do_syscall_64+0x100/0x230 [ 274.090451][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.097900][T10596] INITIAL READ USE at: [ 274.102216][T10596] lock_acquire+0x1ed/0x550 [ 274.108711][T10596] _raw_read_lock_irqsave+0xdd/0x130 [ 274.115986][T10596] kill_fasync+0x199/0x4f0 [ 274.122391][T10596] lease_break_callback+0x26/0x30 [ 274.129402][T10596] __break_lease+0x6d5/0x1820 [ 274.136064][T10596] do_dentry_open+0x8d4/0x1460 [ 274.142816][T10596] vfs_open+0x3e/0x330 [ 274.148876][T10596] path_openat+0x2c84/0x3590 [ 274.155460][T10596] do_filp_open+0x235/0x490 [ 274.161960][T10596] do_sys_openat2+0x13e/0x1d0 [ 274.168624][T10596] __x64_sys_openat+0x247/0x2a0 [ 274.175464][T10596] do_syscall_64+0xf3/0x230 [ 274.181955][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.189837][T10596] } [ 274.192320][T10596] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 274.200982][T10596] ... acquired at: [ 274.204769][T10596] lock_acquire+0x1ed/0x550 [ 274.209438][T10596] _raw_read_lock_irqsave+0xdd/0x130 [ 274.214892][T10596] kill_fasync+0x199/0x4f0 [ 274.219473][T10596] evdev_pass_values+0x58a/0xad0 [ 274.224573][T10596] evdev_events+0x1c2/0x300 [ 274.229299][T10596] input_pass_values+0x286/0x860 [ 274.234429][T10596] input_event_dispose+0x30f/0x600 [ 274.239713][T10596] input_handle_event+0xa71/0xbe0 [ 274.244911][T10596] input_inject_event+0x22f/0x340 [ 274.250103][T10596] evdev_write+0x5fd/0x790 [ 274.254685][T10596] vfs_write+0x29c/0xc90 [ 274.259091][T10596] ksys_write+0x183/0x2b0 [ 274.263582][T10596] do_syscall_64+0xf3/0x230 [ 274.268250][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.274312][T10596] [ 274.276620][T10596] [ 274.276620][T10596] stack backtrace: [ 274.282507][T10596] CPU: 1 UID: 0 PID: 10596 Comm: syz.2.1460 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 274.293261][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.303310][T10596] Call Trace: [ 274.306577][T10596] [ 274.309498][T10596] dump_stack_lvl+0x241/0x360 [ 274.314169][T10596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.319356][T10596] ? __pfx__printk+0x10/0x10 [ 274.323940][T10596] ? print_shortest_lock_dependencies+0xf2/0x160 [ 274.330259][T10596] validate_chain+0x4ebd/0x5920 [ 274.335104][T10596] ? __pfx_validate_chain+0x10/0x10 [ 274.340294][T10596] ? rcu_is_watching+0x15/0xb0 [ 274.345047][T10596] ? __pfx_validate_chain+0x10/0x10 [ 274.350243][T10596] ? register_lock_class+0x102/0x980 [ 274.355528][T10596] ? __pfx_register_lock_class+0x10/0x10 [ 274.361156][T10596] ? mark_lock+0x9a/0x360 [ 274.365473][T10596] __lock_acquire+0x1384/0x2050 [ 274.370322][T10596] lock_acquire+0x1ed/0x550 [ 274.374820][T10596] ? kill_fasync+0x199/0x4f0 [ 274.379403][T10596] ? __pfx_lock_acquire+0x10/0x10 [ 274.384428][T10596] ? __pfx_lock_acquire+0x10/0x10 [ 274.389446][T10596] _raw_read_lock_irqsave+0xdd/0x130 [ 274.394727][T10596] ? kill_fasync+0x199/0x4f0 [ 274.399314][T10596] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 274.405199][T10596] ? do_raw_spin_lock+0x14f/0x370 [ 274.410220][T10596] kill_fasync+0x199/0x4f0 [ 274.414631][T10596] ? kill_fasync+0x54/0x4f0 [ 274.419125][T10596] evdev_pass_values+0x58a/0xad0 [ 274.424051][T10596] ? evdev_pass_values+0x5c1/0xad0 [ 274.429151][T10596] evdev_events+0x1c2/0x300 [ 274.433642][T10596] ? evdev_events+0x6f/0x300 [ 274.438219][T10596] input_pass_values+0x286/0x860 [ 274.443152][T10596] ? input_pass_values+0x8f/0x860 [ 274.448170][T10596] input_event_dispose+0x30f/0x600 [ 274.453280][T10596] input_handle_event+0xa71/0xbe0 [ 274.458308][T10596] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 274.463763][T10596] ? __pfx_input_handle_event+0x10/0x10 [ 274.469302][T10596] input_inject_event+0x22f/0x340 [ 274.474314][T10596] ? input_inject_event+0xd6/0x340 [ 274.479417][T10596] evdev_write+0x5fd/0x790 [ 274.483825][T10596] ? __pfx_evdev_write+0x10/0x10 [ 274.488749][T10596] ? bpf_lsm_file_permission+0x9/0x10 [ 274.494111][T10596] ? security_file_permission+0x74/0x280 [ 274.499734][T10596] ? rw_verify_area+0x1c3/0x6f0 [ 274.504578][T10596] ? __pfx_evdev_write+0x10/0x10 [ 274.509501][T10596] vfs_write+0x29c/0xc90 [ 274.513730][T10596] ? kmem_cache_free+0x1a2/0x420 [ 274.518659][T10596] ? __pfx_vfs_write+0x10/0x10 [ 274.523411][T10596] ? __fget_files+0x29/0x470 [ 274.527990][T10596] ? __fget_files+0x3f3/0x470 [ 274.532652][T10596] ? __fget_files+0x29/0x470 [ 274.537235][T10596] ? fdget_pos+0x19a/0x320 [ 274.541641][T10596] ksys_write+0x183/0x2b0 [ 274.545961][T10596] ? __pfx_ksys_write+0x10/0x10 [ 274.550798][T10596] ? do_syscall_64+0x100/0x230 [ 274.555555][T10596] ? do_syscall_64+0xb6/0x230 [ 274.560247][T10596] do_syscall_64+0xf3/0x230 [ 274.564739][T10596] ? clear_bhb_loop+0x35/0x90 [ 274.569406][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.575305][T10596] RIP: 0033:0x7efd6a97dff9 [ 274.579712][T10596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.599309][T10596] RSP: 002b:00007efd6b75c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.607712][T10596] RAX: ffffffffffffffda RBX: 00007efd6ab35f80 RCX: 00007efd6a97dff9 [ 274.615673][T10596] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000004 [ 274.623631][T10596] RBP: 00007efd6a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 274.631588][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.639544][T10596] R13: 0000000000000000 R14: 00007efd6ab35f80 R15: 00007efd6ac5fa28 [ 274.647507][T10596] [ 274.659035][ T51] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.672036][ T51] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.681479][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.696608][ T51] usb 4-1: config 0 descriptor?? [ 274.703378][T10585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.793325][ T5279] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 274.870102][ T7070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.930164][ T7070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.943854][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 274.954823][ T5279] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 274.966864][ T5279] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.979358][ T5279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.996012][ T7070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.008596][ T5279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.019069][ T5279] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.037310][ T5279] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.046949][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.070486][ T7070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.125401][ T51] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 275.152651][ T51] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 275.177981][ T7070] bridge_slave_1: left allmulticast mode [ 275.185768][ T51] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 275.204368][ T7070] bridge_slave_1: left promiscuous mode [ 275.210082][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.232795][ T7070] bridge_slave_0: left allmulticast mode [ 275.240674][ T7070] bridge_slave_0: left promiscuous mode [ 275.246971][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.271305][ T5279] usb 2-1: GET_CAPABILITIES returned 0 [ 275.283654][ T5279] usbtmc 2-1:16.0: can't read capabilities [ 275.460864][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.485870][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.516974][ T7070] bond0 (unregistering): Released all slaves [ 275.578647][ T5279] usb 2-1: USB disconnect, device number 31 [ 275.785610][ T7070] hsr_slave_0: left promiscuous mode [ 275.805541][ T7070] hsr_slave_1: left promiscuous mode [ 275.811448][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.835625][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.855856][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.863390][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.887015][ T7070] veth1_macvtap: left promiscuous mode [ 275.892575][ T7070] veth0_macvtap: left promiscuous mode [ 275.909086][ T7070] veth1_vlan: left promiscuous mode [ 275.915487][ T7070] veth0_vlan: left promiscuous mode [ 276.120174][ T7070] team0 (unregistering): Port device team_slave_1 removed [ 276.160921][ T7070] team0 (unregistering): Port device team_slave_0 removed [ 277.224700][ T5280] usb 4-1: USB disconnect, device number 19