last executing test programs: 38.482856134s ago: executing program 4 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310400000000000000001600000018000180140002006e657464657673696d300000000000000500040020000000050003"], 0x3c}}, 0x0) 38.291067009s ago: executing program 4 (id=1646): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 37.673961355s ago: executing program 4 (id=1648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x84, {0x84, 0x0, "6491b6fe452d8a7e812506ee78c86df6d592688fb64ac94cca2e3a6e2da5e4c797b424c534b53025036d14bc4018abc4660109116fa2e8a7e43fd63c2d3ce8aa40c24de545a65159333e37a997bf6ea159967108be2864151d3334cd62413e3b462192522853b49db5186234fd8a81b14aac23cce42570346ce3c6053cc10a901fcd"}}, 0x0}, 0x0) 34.913434952s ago: executing program 4 (id=1661): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25DELFWD(r0, 0x89eb, 0x0) 34.130085783s ago: executing program 4 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000008c0)={0x3, 0x200, 0x6, 0x1, 0x7, 0x6}) sendmsg$nl_route(r0, 0x0, 0x8c0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) close(r3) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r7, &(0x7f0000000000), 0x100000}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="144f212f000000000000000000000000620100803a69a3009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 31.268713558s ago: executing program 4 (id=1671): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 20.33642279s ago: executing program 0 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 18.725485976s ago: executing program 0 (id=1716): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="79408ec3004c410b00012319c6a502980fd78906f311dda17577a450cc0b218d", 0x20}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="985fd17837e723d8d8", 0x9}, {&(0x7f0000000600)="a8d85145", 0x4}], 0x2}}], 0x1, 0x0) 18.386648133s ago: executing program 0 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c020000", @ANYRES16, @ANYBLOB="0100000000000000000010000000180001801400020069703667726530000000000000000000"], 0x2c}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/167, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x7, 0x10, 0x0, 0xfffffffffffffe0c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000001c0)={r6, r7}) sendmmsg$inet(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="83", 0x1}], 0x1}}], 0x1, 0x4c819) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000007c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0x4112, 0x0) 13.482513311s ago: executing program 3 (id=1724): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x8e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x2}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "cf6af75d"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) 13.020862956s ago: executing program 3 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000010000000180001801400020069703667726530000000000000000000"], 0x2c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/167, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x7, 0x10, 0x0, 0xfffffffffffffe0c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000001c0)={r5, r6}) sendmmsg$inet(r5, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="83", 0x1}], 0x1}}], 0x1, 0x4c819) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0x4112, 0x0) 12.827877843s ago: executing program 0 (id=1727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 12.66406651s ago: executing program 0 (id=1728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="14fd00000000fcff40c71f7b7af4", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.252845681s ago: executing program 0 (id=1731): getpid() ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) fcntl$dupfd(r1, 0x0, r1) syz_emit_ethernet(0x26, &(0x7f0000000100)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=@ipv6_delrule={0x1c, 0x21, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0x7f, 0x6, 0x0, 0x0, 0x2, 0x10}}, 0x1c}}, 0x1) dup(0xffffffffffffffff) 11.73469785s ago: executing program 1 (id=1733): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 11.431516019s ago: executing program 1 (id=1734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) 11.167606762s ago: executing program 1 (id=1735): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7a5, 0x0) 10.979342439s ago: executing program 1 (id=1736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x74}}, 0x0) 6.220256266s ago: executing program 1 (id=1738): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.166031308s ago: executing program 2 (id=1739): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8926, 0x20001114) 6.096368506s ago: executing program 3 (id=1740): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x21, @broadcast, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 6.026403115s ago: executing program 1 (id=1741): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x6}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8919, &(0x7f0000002080)={{0x2, 0x4e20, @empty}, {0x306, @remote}, 0x4, {0x2, 0x4e20, @broadcast}, 'veth1_to_hsr\x00'}) 5.481737415s ago: executing program 3 (id=1742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 5.350235738s ago: executing program 3 (id=1743): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x1132ccf3, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1, "27d85592b6bfee2be57c8a209e5cfce2939c0b6b081aa505abcc55a7042fafc2", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r8, 0xffffffffffffffff}) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB]) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x3c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x7c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0xd, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x1, 0xf, 0x0, 0x6, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}}}}, 0x0) 4.562464917s ago: executing program 2 (id=1744): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000006c0)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="a90500000000fd00000100338bb335529f56ed5c7a535071b312f933e594182008b348bf13f99f647c101d25", 0x2c}], 0x1}}], 0x1, 0x0) 4.338341855s ago: executing program 3 (id=1745): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x4c}}, 0x0) 4.32448895s ago: executing program 2 (id=1746): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x400, 0x1, 0x7, 0xa00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x14, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES8=r5, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone3(&(0x7f0000000580)={0x101024200, &(0x7f0000000240), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, {0x29}, &(0x7f0000000440)=""/39, 0x27, &(0x7f0000000480)=""/158, &(0x7f0000000540)=[r1, r1, r1], 0x3}, 0x58) prlimit64(r7, 0x0, &(0x7f0000000600)={0x20000000000}, &(0x7f0000000640)) capset(0x0, &(0x7f0000000280)) r9 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='/dev/ptmx\x00', 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f00000001c0)) getpgid(r8) r10 = fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e1f, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 2.37681137s ago: executing program 2 (id=1747): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$9p(r0, &(0x7f0000000000)="fa1c4f8b", 0x4) 2.131343549s ago: executing program 2 (id=1749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000202f17020500000000000109022400010000000009040000050300000009210000040122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 0s ago: executing program 2 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @sack={0x5, 0x2}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): nterface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.980782][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.000441][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.007533][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.033610][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.264798][ T5689] bridge_slave_1: left allmulticast mode [ 439.288305][ T5689] bridge_slave_1: left promiscuous mode [ 439.535367][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.552489][ T5689] bridge_slave_0: left allmulticast mode [ 439.563229][ T5689] bridge_slave_0: left promiscuous mode [ 439.572432][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.354730][ T5689] bridge_slave_1: left allmulticast mode [ 440.363845][ T5689] bridge_slave_1: left promiscuous mode [ 440.369597][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.394878][ T5689] bridge_slave_0: left allmulticast mode [ 440.623907][ T5689] bridge_slave_0: left promiscuous mode [ 440.630175][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.685685][ T5689] bridge_slave_1: left allmulticast mode [ 440.691451][ T5689] bridge_slave_1: left promiscuous mode [ 440.712788][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.752040][ T5689] bridge_slave_0: left allmulticast mode [ 440.761825][ T5689] bridge_slave_0: left promiscuous mode [ 440.774086][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.857556][ T8222] openvswitch: netlink: Missing valid actions attribute. [ 441.883492][ T8222] openvswitch: netlink: Actions may not be safe on all matching packets [ 442.288040][ T8228] overlayfs: missing 'lowerdir' [ 442.394573][ T25] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 442.556077][ T25] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 442.574803][ T25] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 442.595682][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 442.614279][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.670248][ T25] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 443.683381][ T25] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input18 [ 443.775165][ T25] input: failed to attach handler kbd to device input18, error: -5 [ 443.794766][ T25] usb 4-1: USB disconnect, device number 11 [ 443.805918][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.827628][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.846609][ T29] audit: type=1400 audit(1727472731.207:623): avc: denied { ioctl } for pid=8239 comm="syz.3.678" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 443.896086][ T5689] bond0 (unregistering): Released all slaves [ 443.994906][ T5783] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 444.180556][ T5783] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.191354][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.199999][ T5783] usb 5-1: Product: syz [ 444.205423][ T5783] usb 5-1: Manufacturer: syz [ 444.210112][ T5783] usb 5-1: SerialNumber: syz [ 444.257240][ T5783] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 444.332783][ T5308] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 444.519775][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.559594][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.581807][ T5689] bond0 (unregistering): Released all slaves [ 444.880849][ T5783] usb 5-1: USB disconnect, device number 8 [ 444.910282][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.943129][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.970460][ T5689] bond0 (unregistering): Released all slaves [ 445.014525][ T8056] hsr_slave_0: entered promiscuous mode [ 445.021252][ T8056] hsr_slave_1: entered promiscuous mode [ 445.037902][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.054136][ T8056] Cannot create hsr debugfs directory [ 445.345404][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.351881][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.604594][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.674055][ T5308] usb 5-1: Service connection timeout for: 256 [ 445.680297][ T5308] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 445.727462][ T5308] ath9k_htc: Failed to initialize the device [ 445.769840][ T5783] usb 5-1: ath9k_htc: USB layer deinitialized [ 445.779181][ T8254] overlayfs: missing 'workdir' [ 445.991738][ T7811] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.148666][ T8264] netlink: 24062 bytes leftover after parsing attributes in process `syz.0.686'. [ 446.193460][ T8264] netlink: 188348 bytes leftover after parsing attributes in process `syz.0.686'. [ 446.359236][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.366418][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.437195][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.444508][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.515069][ T8277] bridge_slave_1: left allmulticast mode [ 446.533014][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.523372][ T8300] dlm: no locking on control device [ 449.237038][ T7851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.248135][ T7851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.257646][ T7851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.266402][ T7851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.309366][ T7851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 449.320263][ T7851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.889039][ T8301] vcan0 speed is unknown, defaulting to 1000 [ 451.424987][ T7851] Bluetooth: hci2: command tx timeout [ 451.886707][ T29] audit: type=1400 audit(1727472739.247:624): avc: denied { getopt } for pid=8327 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 452.004737][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.703'. [ 452.133940][ T8056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.192829][ T8056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.245995][ T8056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.255882][ T29] audit: type=1400 audit(1727472739.577:625): avc: denied { read } for pid=8332 comm="syz.4.705" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 452.287261][ T8333] relay: one or more items not logged [item size (56) > sub-buffer size (2)] [ 452.342313][ T29] audit: type=1400 audit(1727472739.577:626): avc: denied { open } for pid=8332 comm="syz.4.705" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 452.367497][ T8056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.530957][ T29] audit: type=1400 audit(1727472739.587:627): avc: denied { ioctl } for pid=8332 comm="syz.4.705" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 452.535381][ T5277] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 452.715346][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 452.783657][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 452.813117][ T5277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.824807][ T5277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.835075][ T5277] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.899483][ T5277] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 452.908842][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 452.917645][ T5277] usb 4-1: Product: syz [ 452.921927][ T5277] usb 4-1: Manufacturer: syz [ 452.927354][ T5277] usb 4-1: SerialNumber: syz [ 452.927401][ T5689] hsr_slave_0: left promiscuous mode [ 452.953097][ T5689] hsr_slave_1: left promiscuous mode [ 452.970077][ T5277] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input20 [ 453.020151][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.059208][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.093041][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.129838][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.146387][ T8349] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 453.233528][ T5689] hsr_slave_0: left promiscuous mode [ 453.286247][ T5689] hsr_slave_1: left promiscuous mode [ 453.322629][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.344832][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.376682][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.378171][ T9] usb 4-1: USB disconnect, device number 12 [ 453.405833][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.479691][ T9] appletouch 4-1:1.0: input: appletouch disconnected [ 453.487765][ T5689] hsr_slave_0: left promiscuous mode [ 453.501708][ T5689] hsr_slave_1: left promiscuous mode [ 453.515056][ T7851] Bluetooth: hci2: command tx timeout [ 453.545708][ T8354] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 453.560820][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.583475][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.634853][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.642357][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.966021][ T5689] veth1_macvtap: left promiscuous mode [ 453.971694][ T5689] veth0_macvtap: left promiscuous mode [ 453.977451][ T5689] veth1_vlan: left promiscuous mode [ 453.982808][ T5689] veth0_vlan: left promiscuous mode [ 453.999921][ T5689] veth1_macvtap: left promiscuous mode [ 454.005899][ T5689] veth0_macvtap: left promiscuous mode [ 454.011785][ T5689] veth1_vlan: left promiscuous mode [ 454.311829][ T5689] veth0_vlan: left promiscuous mode [ 454.431677][ T5689] veth1_macvtap: left promiscuous mode [ 454.437941][ T5689] veth0_macvtap: left promiscuous mode [ 454.495669][ T5689] veth1_vlan: left promiscuous mode [ 454.502348][ T5689] veth0_vlan: left promiscuous mode [ 455.613901][ T7851] Bluetooth: hci2: command tx timeout [ 456.851789][ T8378] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 456.932632][ T5689] infiniband syz1: set down [ 457.152864][ T8382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.718'. [ 457.664300][ T7851] Bluetooth: hci2: command tx timeout [ 457.684366][ T5689] team0 (unregistering): Port device team_slave_1 removed [ 457.743595][ T5689] team0 (unregistering): Port device team_slave_0 removed [ 459.135719][ T5689] team0 (unregistering): Port device team_slave_1 removed [ 459.216644][ T5689] team0 (unregistering): Port device team_slave_0 removed [ 459.704298][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 459.864050][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 459.883209][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.894418][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.907437][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.916747][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.925327][ T25] usb 4-1: Product: syz [ 459.930064][ T25] usb 4-1: Manufacturer: syz [ 459.935505][ T25] usb 4-1: SerialNumber: syz [ 460.379549][ T25] usb 4-1: cannot find UAC_HEADER [ 460.460495][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 460.488051][ T25] usb 4-1: USB disconnect, device number 13 [ 460.530917][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.684237][ T5689] team0 (unregistering): Port device team_slave_1 removed [ 460.742256][ T5689] team0 (unregistering): Port device team_slave_0 removed [ 461.171894][ T8404] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.467725][ T2928] smc: removing ib device syz1 [ 461.638114][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.669223][ T5277] vcan0 speed is unknown, defaulting to 1000 [ 461.803676][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.869288][ T29] audit: type=1400 audit(1727472749.207:628): avc: denied { ioctl } for pid=8414 comm="syz.0.730" path="socket:[23387]" dev="sockfs" ino=23387 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 461.894310][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.347118][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.354424][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.683579][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.704641][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.724012][ T8301] bridge_slave_0: entered allmulticast mode [ 462.764382][ T8301] bridge_slave_0: entered promiscuous mode [ 462.795775][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.802947][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.839209][ T8301] bridge_slave_1: entered allmulticast mode [ 462.877526][ T29] audit: type=1400 audit(1727472750.227:629): avc: denied { create } for pid=8426 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 462.902776][ T8301] bridge_slave_1: entered promiscuous mode [ 463.033665][ T8425] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 463.043343][ T8425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 463.103028][ T8425] batman_adv: batadv0: Adding interface: vlan1 [ 463.135936][ T8425] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.181079][ T8425] batman_adv: batadv0: Interface activated: vlan1 [ 463.181126][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 463.323055][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.591724][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.609222][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.616444][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.673478][ T8301] team0: Port device team_slave_0 added [ 463.697533][ T5280] IPVS: starting estimator thread 0... [ 463.708915][ T8301] team0: Port device team_slave_1 added [ 463.794319][ T8435] IPVS: using max 15 ests per chain, 36000 per kthread [ 463.949444][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.982717][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.008942][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.093990][ T8301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.110644][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.122402][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.148495][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.292994][ T8301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.357442][ T8056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 464.398417][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.646240][ T8301] hsr_slave_0: entered promiscuous mode [ 464.689547][ T8301] hsr_slave_1: entered promiscuous mode [ 465.654248][ T8456] xt_nfacct: accounting object `sy' does not exists [ 465.973578][ T5689] IPVS: stop unused estimator thread 0... [ 465.982056][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.248193][ T5689] IPVS: stop unused estimator thread 0... [ 466.683508][ T8056] veth0_vlan: entered promiscuous mode [ 466.696952][ T8056] veth1_vlan: entered promiscuous mode [ 466.725060][ T8056] veth0_macvtap: entered promiscuous mode [ 466.735609][ T8056] veth1_macvtap: entered promiscuous mode [ 466.874292][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.884894][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.894832][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.905478][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.915628][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.926300][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.937747][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.954046][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.964646][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.974619][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.985177][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.995197][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.006127][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.210558][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.321709][ T8056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.406075][ T8056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.581260][ T8056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.879731][ T8056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.987073][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 468.554626][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.562700][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.639111][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.657958][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.698486][ T5689] bridge_slave_1: left allmulticast mode [ 468.706053][ T5689] bridge_slave_1: left promiscuous mode [ 468.712079][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.731557][ T5689] bridge_slave_0: left allmulticast mode [ 468.749670][ T5689] bridge_slave_0: left promiscuous mode [ 468.773150][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.284202][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.311661][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.363978][ T5689] bond0 (unregistering): Released all slaves [ 471.413177][ T8502] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 471.596987][ T8301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.657144][ T8301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.765042][ T8301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.792942][ T8301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.855068][ T8519] QAT: Stopping all acceleration devices. [ 471.882062][ T5689] hsr_slave_0: left promiscuous mode [ 471.888727][ T5689] hsr_slave_1: left promiscuous mode [ 471.903664][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.924040][ T29] audit: type=1400 audit(1727472759.207:630): avc: denied { read } for pid=8513 comm="syz.0.763" name="btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 471.963925][ T29] audit: type=1400 audit(1727472759.207:631): avc: denied { open } for pid=8513 comm="syz.0.763" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 471.993605][ T29] audit: type=1400 audit(1727472759.217:632): avc: denied { ioctl } for pid=8513 comm="syz.0.763" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 472.020373][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.110614][ T5689] team0 (unregistering): Port device team_slave_1 removed [ 473.151732][ T5689] team0 (unregistering): Port device team_slave_0 removed [ 474.331038][ T8529] netlink: 'syz.4.768': attribute type 10 has an invalid length. [ 474.556463][ T29] audit: type=1400 audit(1727472761.917:633): avc: denied { write } for pid=8543 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 474.659046][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.731262][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.764140][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 474.781225][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.788441][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.822912][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.830146][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.067172][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice=7e.38 [ 476.165807][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=247 [ 476.323893][ T9] usb 4-1: Product: syz [ 476.328167][ T9] usb 4-1: Manufacturer: syz [ 476.332956][ T9] usb 4-1: SerialNumber: syz [ 476.373709][ T9] usb 4-1: config 0 descriptor?? [ 476.415826][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 476.453881][ T9] gspca_stv06xx: st6422 sensor detected [ 476.475910][ T8571] dlm: no locking on control device [ 476.723907][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 476.883309][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 477.098603][ T9] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 477.115395][ T9] usb 4-1: USB disconnect, device number 14 [ 477.176259][ T47] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 477.200173][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.223451][ T47] usb 3-1: Product: syz [ 477.235293][ T47] usb 3-1: Manufacturer: syz [ 477.249047][ T47] usb 3-1: SerialNumber: syz [ 477.270115][ T47] usb 3-1: config 0 descriptor?? [ 477.473184][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.606690][ T29] audit: type=1400 audit(1727472764.967:634): avc: denied { setopt } for pid=8580 comm="syz.4.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 477.623540][ T8301] veth0_vlan: entered promiscuous mode [ 477.634854][ T47] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 477.643699][ T47] eb 9a [ 477.650452][ T8301] veth1_vlan: entered promiscuous mode [ 477.659688][ T47] 47 80 9b f8 7a f0 [ 477.664554][ T47] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 477.788793][ T8301] veth0_macvtap: entered promiscuous mode [ 477.816562][ T8301] veth1_macvtap: entered promiscuous mode [ 477.875592][ T47] usb 3-1: USB disconnect, device number 4 [ 477.878028][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.910486][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.927036][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.955745][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.971419][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.009288][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.032122][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.086841][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.110215][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.145686][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.171680][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.214637][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.252193][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.292967][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.331398][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.362923][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.384735][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.417160][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.483673][ T8301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.531187][ T8301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.550711][ T8301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.586770][ T8301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.072379][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.104035][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.506051][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.522777][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.194681][ T8622] tmpfs: Bad value for 'mpol' [ 480.312190][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 483.702429][ T8662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 483.898712][ T5308] IPVS: starting estimator thread 0... [ 484.073931][ T8665] IPVS: using max 14 ests per chain, 33600 per kthread [ 485.133908][ T5277] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 485.804847][ T8696] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 485.817907][ T8698] netlink: 'syz.4.823': attribute type 3 has an invalid length. [ 485.825834][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 485.834071][ T5277] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 485.846238][ T5277] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 485.856933][ T8698] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.823'. [ 485.870631][ T5277] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 486.134047][ T5277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.143195][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.153599][ T5277] usb 1-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴî£â¿œî¶é™¾ê§†é’‹ê’¹áŠëŠµë®î­ì„›å©¥í–·ï¯’ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 486.174053][ T5277] usb 1-1: SerialNumber: አ[ 486.693931][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 486.761036][ T8712] : renamed from bond0 (while UP) [ 486.870728][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 486.897605][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 486.907200][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.938870][ T9] usb 3-1: Product: syz [ 486.962190][ T9] usb 3-1: Manufacturer: syz [ 486.981146][ T5277] cdc_ncm 1-1:1.0: bind() failure [ 486.988913][ T9] usb 3-1: SerialNumber: syz [ 486.990967][ T5277] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 487.001156][ T5277] cdc_ncm 1-1:1.1: bind() failure [ 487.014376][ T5277] usb 1-1: USB disconnect, device number 6 [ 487.044640][ T8714] net veth1_virt_wifi ,: renamed from virt_wifi0 [ 487.057445][ T9] usb 3-1: config 0 descriptor?? [ 487.321805][ T9] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 487.352664][ T9] 21 e0 ba fd a7 d3 b2 06 [ 487.378079][ T9] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 487.554625][ T5278] usb 3-1: USB disconnect, device number 5 [ 487.572697][ T8719] openvswitch: netlink: Actions may not be safe on all matching packets [ 487.684051][ T5277] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 487.874439][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 489.055980][ T5277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.067893][ T5277] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 489.078320][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 489.087359][ T5277] usb 5-1: SerialNumber: syz [ 489.129691][ T5277] usb 5-1: config 0 descriptor?? [ 489.402372][ T5277] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 489.795206][ T5277] usb 5-1: No valid video chain found. [ 489.999726][ T5280] usb 5-1: USB disconnect, device number 9 [ 491.718001][ T5277] IPVS: starting estimator thread 0... [ 491.834210][ T8765] IPVS: using max 14 ests per chain, 33600 per kthread [ 492.235863][ T8778] netlink: 'syz.4.852': attribute type 10 has an invalid length. [ 492.244089][ T8778] netlink: 212848 bytes leftover after parsing attributes in process `syz.4.852'. [ 492.348476][ T29] audit: type=1400 audit(1727472779.697:635): avc: denied { getopt } for pid=8779 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 492.574167][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 492.600457][ T5308] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 492.774603][ T5308] usb 1-1: Using ep0 maxpacket: 8 [ 492.875310][ T5308] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 493.008290][ T5308] usb 1-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 493.264710][ T5308] usb 1-1: config 0 has no interface number 0 [ 493.355786][ T5308] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 147, changing to 11 [ 493.407061][ T5308] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 58421, setting to 1024 [ 493.462818][ T5308] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.476251][ T5308] usb 1-1: config 0 interface 52 has no altsetting 0 [ 493.495513][ T5308] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 493.507102][ T5308] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 493.532900][ T5308] usb 1-1: Manufacturer: syz [ 493.584963][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 493.599353][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 493.619171][ T5308] usb 1-1: config 0 descriptor?? [ 494.004895][ T5308] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input23 [ 494.179553][ T5280] usb 1-1: USB disconnect, device number 7 [ 494.179702][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 494.219222][ T8804] dlm: no locking on control device [ 494.475973][ T29] audit: type=1400 audit(1727472781.837:636): avc: denied { getopt } for pid=8818 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 494.804979][ T29] audit: type=1400 audit(1727472782.047:637): avc: denied { setopt } for pid=8825 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 495.947316][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 496.983606][ T29] audit: type=1400 audit(1727472784.337:638): avc: denied { bind } for pid=8863 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 497.084020][ T25] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 497.093329][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.133656][ T25] usb 4-1: Product: syz [ 497.151982][ T25] usb 4-1: Manufacturer: syz [ 497.176390][ T25] usb 4-1: SerialNumber: syz [ 497.230950][ T25] usb 4-1: config 0 descriptor?? [ 497.496560][ T25] hso 4-1:0.0: Can't find BULK IN endpoint [ 497.514526][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 497.821632][ T25] usb 4-1: USB disconnect, device number 15 [ 498.426402][ T8888] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 498.434725][ T8888] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.896'. [ 500.669492][ T8904] syz.3.902 (8904): drop_caches: 2 [ 500.678804][ T8904] 9pnet_fd: Insufficient options for proto=fd [ 501.144246][ T8912] netlink: 732 bytes leftover after parsing attributes in process `syz.1.903'. [ 501.174448][ T8912] netlink: 732 bytes leftover after parsing attributes in process `syz.1.903'. [ 505.660346][ T8969] tmpfs: Bad value for 'mpol' [ 506.044110][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 506.088035][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 506.354536][ T8980] ªªªªªª: renamed from hsr0 (while UP) [ 506.425634][ T29] audit: type=1326 audit(1727472793.787:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffd57df39 code=0x7fc00000 [ 506.640867][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.653439][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.662446][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 506.672419][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.771602][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 506.856219][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.862746][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.869770][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.219123][ T29] audit: type=1326 audit(1727472794.507:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faffd57df39 code=0x7fc00000 [ 507.753126][ T1072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.001198][ T1072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.203906][ T5238] Bluetooth: hci3: command tx timeout [ 509.317940][ T1072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.382638][ T29] audit: type=1400 audit(1727472796.737:641): avc: denied { setopt } for pid=9026 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.477869][ T29] audit: type=1400 audit(1727472796.837:642): avc: denied { read } for pid=9029 comm="syz.0.945" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 509.821710][ T29] audit: type=1400 audit(1727472796.867:643): avc: denied { open } for pid=9029 comm="syz.0.945" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 509.974375][ T1072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.012959][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 511.294002][ T5238] Bluetooth: hci3: command tx timeout [ 513.579290][ T5238] Bluetooth: hci3: command tx timeout [ 514.025985][ T9055] netlink: 'syz.3.950': attribute type 6 has an invalid length. [ 514.033695][ T9055] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.950'. [ 514.227158][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.240211][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.274388][ T8986] bridge_slave_0: entered allmulticast mode [ 514.292574][ T8986] bridge_slave_0: entered promiscuous mode [ 514.328402][ T1072] bridge_slave_1: left allmulticast mode [ 514.336271][ T1072] bridge_slave_1: left promiscuous mode [ 514.362372][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.406488][ T29] audit: type=1400 audit(1727472801.767:644): avc: denied { ioctl } for pid=9073 comm="syz.1.954" path="socket:[27888]" dev="sockfs" ino=27888 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 514.446541][ T1072] bridge_slave_0: left allmulticast mode [ 514.497766][ T1072] bridge_slave_0: left promiscuous mode [ 514.518159][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.549701][ T9078] xt_l2tp: missing protocol rule (udp|l2tpip) [ 515.530580][ T1072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.547262][ T1072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.560453][ T1072] bond0 (unregistering): Released all slaves [ 515.578231][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.585777][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.593205][ T8986] bridge_slave_1: entered allmulticast mode [ 515.601589][ T8986] bridge_slave_1: entered promiscuous mode [ 515.665132][ T7851] Bluetooth: hci3: command tx timeout [ 515.685110][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.709001][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.991836][ T5278] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 516.073625][ T8986] team0: Port device team_slave_0 added [ 516.196518][ T5275] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 518.252310][ T8986] team0: Port device team_slave_1 added [ 519.065771][ T5278] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 519.075920][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.097126][ T5275] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 519.106850][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.146187][ T5278] usb 5-1: Product: syz [ 519.195826][ T5275] usb 4-1: Product: syz [ 519.200180][ T5278] usb 5-1: Manufacturer: syz [ 519.221505][ T5275] usb 4-1: Manufacturer: syz [ 519.242883][ T5278] usb 5-1: config 0 descriptor?? [ 519.261297][ T5275] usb 4-1: SerialNumber: syz [ 519.272994][ T5278] usb 5-1: can't set config #0, error -71 [ 519.291144][ T5275] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 519.312482][ T5280] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 519.344521][ T5278] usb 5-1: USB disconnect, device number 10 [ 519.402591][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.415570][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.531219][ T5277] usb 4-1: USB disconnect, device number 16 [ 519.561677][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.600933][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.621046][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.087994][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.437546][ T5280] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 520.476347][ T5280] ath9k_htc: Failed to initialize the device [ 520.542122][ T5277] usb 4-1: ath9k_htc: USB layer deinitialized [ 520.711251][ T9134] overlayfs: missing 'lowerdir' [ 520.849524][ T1072] hsr_slave_0: left promiscuous mode [ 520.992390][ T9139] dlm: no locking on control device [ 521.021871][ T1072] hsr_slave_1: left promiscuous mode [ 521.086607][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.104282][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.125197][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.163329][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.213679][ T1072] veth1_macvtap: left promiscuous mode [ 521.226176][ T1072] veth0_macvtap: left promiscuous mode [ 521.233713][ T1072] veth1_vlan: left promiscuous mode [ 521.246253][ T1072] veth0_vlan: left promiscuous mode [ 523.549335][ T9173] overlayfs: failed to resolve './file1': -2 [ 524.902005][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 525.031183][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 526.000867][ T9189] netlink: 68 bytes leftover after parsing attributes in process `syz.4.985'. [ 526.196821][ T9187] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 526.245985][ T9191] xt_CT: No such helper "snmp" [ 526.333401][ T8986] hsr_slave_0: entered promiscuous mode [ 526.391293][ T8986] hsr_slave_1: entered promiscuous mode [ 526.434243][ T8986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.452084][ T8986] Cannot create hsr debugfs directory [ 526.750222][ T9204] netlink: 48 bytes leftover after parsing attributes in process `syz.0.991'. [ 527.981524][ T9232] dlm: no locking on control device [ 528.059318][ T29] audit: type=1400 audit(1727472815.417:645): avc: denied { read write } for pid=9236 comm="syz.0.1000" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 528.110759][ T29] audit: type=1400 audit(1727472815.417:646): avc: denied { open } for pid=9236 comm="syz.0.1000" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 528.392305][ T9245] netlink: 'syz.4.1002': attribute type 8 has an invalid length. [ 528.674353][ T1072] IPVS: stop unused estimator thread 0... [ 531.580346][ T9269] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'. [ 531.610125][ T9269] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'. [ 532.026823][ T8986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 532.089603][ T8986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 532.135455][ T8986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 532.205038][ T8986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 532.275313][ T9279] netlink: 'syz.3.1011': attribute type 6 has an invalid length. [ 532.285364][ T9279] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1011'. [ 532.652119][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.750105][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 532.762251][ T9292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1017'. [ 532.777490][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.819253][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.826492][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.904861][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.912028][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.948082][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1018'. [ 532.977978][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1018'. [ 534.162172][ T8986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.213966][ T8986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.531484][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.569535][ T8986] veth0_vlan: entered promiscuous mode [ 535.581904][ T8986] veth1_vlan: entered promiscuous mode [ 535.679881][ T8986] veth0_macvtap: entered promiscuous mode [ 535.719580][ T8986] veth1_macvtap: entered promiscuous mode [ 535.776221][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.837754][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.873967][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.898774][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.918907][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.005993][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.080481][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.143357][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.467859][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.709074][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.780246][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.874489][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.948455][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.989454][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.000205][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.010235][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.020758][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.032336][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.153059][ T8986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.183628][ T8986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.200508][ T8986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.219700][ T8986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.541475][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.543094][ T9390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 537.595202][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.697326][ T29] audit: type=1400 audit(1727472825.057:647): avc: denied { getopt } for pid=9396 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 537.748666][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.782973][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.954946][ T29] audit: type=1400 audit(1727472825.307:648): avc: denied { getopt } for pid=9401 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 538.665986][ T9413] Bluetooth: MGMT ver 1.23 [ 538.814722][ T5308] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 538.983992][ T29] audit: type=1400 audit(1727472826.317:649): avc: denied { setopt } for pid=9419 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 539.036378][ T5308] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 539.087097][ T5308] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 539.164710][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.202523][ T9425] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1057'. [ 539.212604][ T9428] tmpfs: Bad value for 'mpol' [ 539.235733][ T5308] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 539.847890][ T5275] IPVS: starting estimator thread 0... [ 539.954028][ T9444] IPVS: using max 14 ests per chain, 33600 per kthread [ 540.010022][ T9447] overlayfs: conflicting options: metacopy=off,verity=on [ 540.465178][ T5308] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 540.606898][ T5308] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 540.616046][ T5308] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 540.678783][ T5308] usb 4-1: USB disconnect, device number 17 [ 541.933154][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1073'. [ 542.066866][ T7851] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 542.077087][ T7851] Bluetooth: hci2: Injecting HCI hardware error event [ 542.086426][ T7851] Bluetooth: hci2: hardware error 0x00 [ 543.832226][ T9512] bridge_slave_0: left allmulticast mode [ 543.838297][ T9512] bridge_slave_0: left promiscuous mode [ 543.844227][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.973966][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 543.994210][ T9512] bridge_slave_1: left allmulticast mode [ 544.014698][ T9512] bridge_slave_1: left promiscuous mode [ 544.032797][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.104762][ T9512] bond0: (slave bond_slave_0): Releasing backup interface [ 544.187248][ T9512] bond0: (slave bond_slave_1): Releasing backup interface [ 544.188170][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 544.201398][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 544.212392][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 544.222454][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 544.237012][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 19, changing to 7 [ 544.256714][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 544.272616][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.292320][ T9] usb 5-1: Product: syz [ 544.330627][ T9] usb 5-1: Manufacturer: syz [ 544.351719][ T9] usb 5-1: SerialNumber: syz [ 544.417570][ T9] usb 5-1: config 0 descriptor?? [ 544.474924][ T7851] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 544.483682][ T9] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 544.490653][ T9] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 544.579725][ T9512] team0: Port device team_slave_0 removed [ 544.655122][ T29] audit: type=1400 audit(1727472832.007:650): avc: denied { write } for pid=9532 comm="syz.3.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 544.742101][ T9] usb 5-1: USB disconnect, device number 11 [ 544.849825][ T9512] team0: Port device team_slave_1 removed [ 544.857246][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.865463][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.969212][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.191391][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.607728][ T9558] tmpfs: Bad value for 'mpol' [ 547.785074][ T9571] netlink: 'syz.1.1098': attribute type 21 has an invalid length. [ 547.793122][ T9571] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 548.850772][ T9586] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1102'. [ 548.922013][ T9587] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 548.930412][ T9587] UDF-fs: Scanning with blocksize 512 failed [ 548.939452][ T9587] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 548.947642][ T9587] UDF-fs: Scanning with blocksize 1024 failed [ 548.954821][ T9587] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 548.962444][ T9587] UDF-fs: Scanning with blocksize 2048 failed [ 548.971776][ T9587] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 548.979462][ T9587] UDF-fs: Scanning with blocksize 4096 failed [ 549.382438][ T9603] Cannot find set identified by id 4 to match [ 549.635717][ T5275] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 549.794551][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 549.812329][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.845246][ T5275] usb 1-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 549.903403][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.991497][ T5275] usb 1-1: config 0 descriptor?? [ 550.028362][ T5275] rndis_host 1-1:0.0: invalid descriptor buffer length [ 550.082323][ T5275] usb 1-1: bad CDC descriptors [ 550.090329][ T5275] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 550.237721][ T25] usb 1-1: USB disconnect, device number 8 [ 550.294328][ T29] audit: type=1400 audit(1727472837.647:651): avc: denied { connect } for pid=9619 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 550.908302][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 551.889698][ T5275] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 552.295993][ T5275] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 552.305299][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.313360][ T5275] usb 5-1: Product: syz [ 552.333922][ T5275] usb 5-1: Manufacturer: syz [ 552.338615][ T5275] usb 5-1: SerialNumber: syz [ 552.382032][ T5275] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 552.420761][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 552.855852][ T9658] kAFS: unparsable volume name [ 553.000710][ T5275] usb 5-1: USB disconnect, device number 12 [ 553.841697][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 553.848987][ T9] ath9k_htc: Failed to initialize the device [ 553.913396][ T5275] usb 5-1: ath9k_htc: USB layer deinitialized [ 553.928449][ T9667] syz.3.1134: attempt to access beyond end of device [ 553.928449][ T9667] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 553.973206][ T9667] syz.3.1134: attempt to access beyond end of device [ 553.973206][ T9667] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 554.039108][ T9667] syz.3.1134: attempt to access beyond end of device [ 554.039108][ T9667] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 554.479205][ T9667] syz.3.1134: attempt to access beyond end of device [ 554.479205][ T9667] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 554.494323][ T9667] syz.3.1134: attempt to access beyond end of device [ 554.494323][ T9667] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 554.634282][ T9667] syz.3.1134: attempt to access beyond end of device [ 554.634282][ T9667] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 554.732592][ T9667] VFS: unable to find oldfs superblock on device nbd3 [ 556.163126][ T9691] binder: BC_ATTEMPT_ACQUIRE not supported [ 556.189703][ T9691] binder: 9690:9691 ioctl c0306201 20000100 returned -22 [ 556.435432][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 556.704186][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 556.717089][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.927836][ T25] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 556.937315][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.969466][ T25] usb 1-1: Product: syz [ 557.004998][ T25] usb 1-1: Manufacturer: syz [ 557.129998][ T25] usb 1-1: SerialNumber: syz [ 557.176821][ T25] usb 1-1: config 0 descriptor?? [ 557.205073][ T25] usb 1-1: MBOX3: Invalid descriptor size=18. [ 557.441055][ T5308] usb 1-1: USB disconnect, device number 9 [ 557.857449][ T29] audit: type=1400 audit(1727472845.217:652): avc: denied { setopt } for pid=9716 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 558.853946][ T5275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 559.045755][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.065217][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 559.099663][ T5275] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 559.118550][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.140658][ T5275] usb 5-1: config 0 descriptor?? [ 559.275387][ T9749] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 559.424119][ T5783] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 559.573624][ T5275] Bluetooth: Can't get state to change to load configuration err [ 559.586867][ T5783] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 559.596142][ T5275] Bluetooth: Loading sysconfig file failed [ 559.596187][ T5275] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 559.612319][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.616774][ T5275] usb 5-1: USB disconnect, device number 13 [ 559.668791][ T5783] usb 1-1: config 0 descriptor?? [ 559.704174][ T29] audit: type=1400 audit(1727472847.047:653): avc: denied { getattr } for pid=9755 comm="syz.3.1168" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 560.994825][ T5783] [drm] vendor descriptor length:b9 data:b9 07 38 29 08 17 2f 84 c0 cb 01 [ 561.003502][ T5783] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 561.027412][ T5783] [drm:udl_init] *ERROR* Selecting channel failed [ 561.082621][ T5783] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 561.102973][ T5783] [drm] Initialized udl on minor 2 [ 561.120927][ T5783] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 561.153424][ T9771] openvswitch: netlink: Missing key (keys=40, expected=100) [ 561.162138][ T5783] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 561.175679][ T5277] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 561.201844][ T5783] usb 1-1: USB disconnect, device number 10 [ 561.225439][ T5277] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 562.643894][ T9787] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 562.651805][ T9787] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 562.692656][ T9787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.773664][ T9791] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 563.020461][ T29] audit: type=1400 audit(1727472850.377:654): avc: denied { getopt } for pid=9795 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 563.576343][ T9814] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 563.684768][ T29] audit: type=1400 audit(1727472851.037:655): avc: denied { getopt } for pid=9816 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 564.875254][ T9830] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1196'. [ 564.929820][ T9827] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 564.941798][ T5278] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 565.003404][ T9833] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1198'. [ 565.013597][ T9833] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 565.022750][ T9833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 565.833593][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.867516][ T5278] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 565.901257][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.939414][ T5278] usb 3-1: config 0 descriptor?? [ 567.181834][ T5278] ath6kl: Failed to submit usb control message: -71 [ 567.188705][ T5278] ath6kl: unable to send the bmi data to the device: -71 [ 567.195897][ T5278] ath6kl: Unable to send get target info: -71 [ 567.209094][ T5278] ath6kl: Failed to init ath6kl core: -71 [ 567.216889][ T5278] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 567.292499][ T9858] netlink: 'syz.1.1204': attribute type 3 has an invalid length. [ 567.307279][ T5278] usb 3-1: USB disconnect, device number 6 [ 567.350021][ T9858] netlink: 196520 bytes leftover after parsing attributes in process `syz.1.1204'. [ 567.363974][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 567.378987][ T29] audit: type=1400 audit(1727472854.677:656): avc: denied { write } for pid=9856 comm="syz.4.1205" path="socket:[30767]" dev="sockfs" ino=30767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 567.793112][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 568.437367][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.444202][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.505201][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 570.342745][ T29] audit: type=1400 audit(1727472857.697:657): avc: denied { bind } for pid=9908 comm="syz.4.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 570.487300][ T9911] netlink: 'syz.4.1227': attribute type 4 has an invalid length. [ 570.495314][ T9911] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1227'. [ 570.623233][ T29] audit: type=1400 audit(1727472857.967:658): avc: denied { ioctl } for pid=9913 comm="syz.4.1229" path="socket:[30302]" dev="sockfs" ino=30302 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 570.672014][ T9917] netlink: 'syz.4.1230': attribute type 2 has an invalid length. [ 570.679989][ T9917] netlink: 'syz.4.1230': attribute type 11 has an invalid length. [ 570.688237][ T9917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1230'. [ 571.501007][ T9933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1237'. [ 571.515038][ T9933] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 573.278282][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 573.453958][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 573.676669][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 573.684484][ T9] usb 1-1: can't read configurations, error -71 [ 575.255607][ T29] audit: type=1400 audit(1727472862.607:659): avc: denied { setopt } for pid=9971 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 575.353565][ T9982] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1257'. [ 575.358724][ T29] audit: type=1400 audit(1727472862.707:660): avc: denied { bind } for pid=9975 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 575.413808][ T29] audit: type=1400 audit(1727472862.707:661): avc: denied { node_bind } for pid=9975 comm="syz.1.1255" saddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 575.573120][ T29] audit: type=1400 audit(1727472862.927:662): avc: denied { write } for pid=9987 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 575.624715][ T9992] netlink: 'syz.1.1260': attribute type 4 has an invalid length. [ 576.843874][T10009] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 577.283933][T10014] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1271'. [ 578.337016][T10029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 578.495322][T10032] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 578.613383][T10032] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1276'. [ 579.380385][T10043] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 579.422878][T10043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1280'. [ 579.710340][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1283'. [ 580.242635][T10056] dlm: no locking on control device [ 581.162484][ T29] audit: type=1400 audit(1727472868.517:663): avc: denied { name_bind } for pid=10076 comm="syz.1.1294" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 581.505672][ T29] audit: type=1400 audit(1727472868.867:664): avc: denied { read } for pid=10084 comm="syz.1.1298" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 581.659493][ T29] audit: type=1400 audit(1727472868.867:665): avc: denied { open } for pid=10084 comm="syz.1.1298" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 581.838416][ T29] audit: type=1400 audit(1727472868.897:666): avc: denied { ioctl } for pid=10084 comm="syz.1.1298" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 584.409378][T10152] tmpfs: Bad value for 'mpol' [ 584.474385][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 584.583142][T10158] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1327'. [ 584.703863][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 584.717387][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 584.763316][ T9] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 584.772728][ T9] usb 5-1: config 0 has no interface number 0 [ 584.803944][ T9] usb 5-1: config 0 interface 182 has no altsetting 0 [ 584.813943][ T9] usb 5-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 584.823679][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.832311][ T9] usb 5-1: Product: syz [ 584.837290][ T9] usb 5-1: Manufacturer: syz [ 584.841968][ T9] usb 5-1: SerialNumber: syz [ 584.872872][ T9] usb 5-1: config 0 descriptor?? [ 584.882135][ T9] usb-storage 5-1:0.182: USB Mass Storage device detected [ 584.883845][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 584.891399][T10169] 9pnet: Unknown protocol version 9 [ 584.912641][ T9] usb-storage 5-1:0.182: Quirks match for vid 07cf pid 1001: a [ 584.915974][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 584.997099][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.012156][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.051201][ T25] usb 4-1: Product: syz [ 585.055747][ T25] usb 4-1: Manufacturer: syz [ 585.060416][ T25] usb 4-1: SerialNumber: syz [ 585.088423][ T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 585.127195][ T9] usb 5-1: USB disconnect, device number 14 [ 585.407805][ T9] usb 4-1: USB disconnect, device number 18 [ 585.573841][T10189] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 585.913915][ T29] audit: type=1400 audit(1727472873.267:667): avc: denied { map } for pid=10194 comm="syz.0.1341" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 586.196225][T10199] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1344'. [ 586.264396][T10203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1346'. [ 586.439416][T10208] netlink: 'syz.1.1348': attribute type 32 has an invalid length. [ 586.473983][ T29] audit: type=1400 audit(1727472873.827:668): avc: denied { getopt } for pid=10209 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 586.503564][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 586.558408][T10208] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 587.370093][T10220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 587.931461][T10237] binder: 10232:10237 ioctl c0046209 100000000000000 returned -22 [ 587.960011][T10238] netlink: 'syz.4.1360': attribute type 21 has an invalid length. [ 589.404888][T10269] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 589.655807][T10276] dlm: no locking on control device [ 590.304146][ T29] audit: type=1400 audit(1727472877.597:669): avc: denied { getopt } for pid=10278 comm="syz.3.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 590.388400][T10282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.588187][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 590.784214][ T7851] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 590.798750][ T7851] Bluetooth: hci3: Injecting HCI hardware error event [ 590.808111][ T5238] Bluetooth: hci3: hardware error 0x00 [ 591.209917][T10296] xt_l2tp: missing protocol rule (udp|l2tpip) [ 591.254778][ T29] audit: type=1400 audit(1727472878.607:670): avc: denied { read } for pid=10297 comm="syz.3.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 591.712820][T10308] SET target dimension over the limit! [ 592.023904][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 592.185892][ T25] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 592.223887][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.290899][ T25] usb 3-1: config 0 descriptor?? [ 592.310376][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 592.511853][ T25] gp8psk: usb in 128 operation failed. [ 592.613832][ T25] gp8psk: usb in 137 operation failed. [ 592.619393][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.640462][ T25] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 592.649822][ T25] usb 3-1: media controller created [ 592.676021][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.971248][T10338] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1397'. [ 593.026716][ T5238] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 593.301862][ T25] gp8psk_fe: Frontend attached [ 593.307886][ T25] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 593.319166][ T25] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 593.365771][ T25] gp8psk: usb in 138 operation failed. [ 593.371315][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 593.382531][ T25] gp8psk: found Genpix USB device pID = 203 (hex) [ 593.397075][ T25] usb 3-1: USB disconnect, device number 7 [ 593.501474][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 593.642435][ T29] audit: type=1400 audit(1727472880.997:671): avc: denied { setopt } for pid=10347 comm="syz.0.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 594.114237][ T5278] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 594.314860][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 594.328960][ T5278] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 594.338483][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.401126][ T5278] usb 4-1: Product: syz [ 594.457931][ T5278] usb 4-1: Manufacturer: syz [ 594.462767][ T5278] usb 4-1: SerialNumber: syz [ 594.693981][ T5783] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 594.868998][ T5783] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 594.889046][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.931561][ T5278] usb 4-1: config 0 descriptor?? [ 594.948287][ T5783] usb 3-1: Product: syz [ 594.958128][ T5783] usb 3-1: Manufacturer: syz [ 594.972482][ T5783] usb 3-1: SerialNumber: syz [ 594.999584][ T5783] usb 3-1: config 0 descriptor?? [ 595.029976][ T5783] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 595.196905][ T5278] usb 4-1: Invalid number of CPorts: 0 [ 595.212747][ T5278] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 595.402818][ T25] usb 4-1: USB disconnect, device number 19 [ 595.480684][ T5308] usb 3-1: USB disconnect, device number 8 [ 598.044152][T10402] dlm: no locking on control device [ 599.496674][ T5279] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 599.653908][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 599.665653][ T5279] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 599.674713][ T5279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 599.697563][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.723822][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 599.758351][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 599.782984][ T5279] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 599.817537][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.865719][ T5279] usb 2-1: config 0 descriptor?? [ 599.880162][ T5279] hub 2-1:0.0: USB hub found [ 600.090015][ T5279] hub 2-1:0.0: 7 ports detected [ 600.107490][ T5279] hub 2-1:0.0: insufficient power available to use all downstream ports [ 600.296166][ T5279] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 600.308320][ T5279] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 600.348789][ T5279] usbhid 2-1:0.0: can't add hid device: -71 [ 600.359135][ T5279] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 600.422205][ T5279] usb 2-1: USB disconnect, device number 3 [ 602.055049][T10451] netlink: 'syz.4.1439': attribute type 2 has an invalid length. [ 603.454674][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'. [ 603.565803][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'. [ 604.138420][ T5279] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 604.487781][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 604.495933][ T5279] usb 2-1: config 0 has an invalid interface number: 26 but max is 0 [ 604.504212][ T5279] usb 2-1: config 0 has no interface number 0 [ 604.513519][ T5279] usb 2-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c [ 604.523512][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.538672][ T5279] usb 2-1: Product: syz [ 604.564105][ T5279] usb 2-1: Manufacturer: syz [ 604.568981][ T5279] usb 2-1: SerialNumber: syz [ 605.015981][ T5279] usb 2-1: config 0 descriptor?? [ 605.177740][ T5279] gspca_main: spca508-2.14.0 probing 0130:0130 [ 605.574050][ T5279] gspca_spca508: reg_read err -71 [ 605.592597][ T5279] gspca_spca508: reg_read err -71 [ 605.619935][ T5279] gspca_spca508: reg_read err -71 [ 605.640207][ T5279] gspca_spca508: reg_read err -71 [ 605.667105][ T5279] gspca_spca508: reg write: error -71 [ 605.699765][ T5279] spca508 2-1:0.26: probe with driver spca508 failed with error -71 [ 605.759838][ T5279] usb 2-1: USB disconnect, device number 4 [ 606.231380][ T7851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.241617][ T7851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.250328][ T7851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.259553][ T7851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.330301][ T7851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.354098][ T7851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 607.512398][T10499] chnl_net:caif_netlink_parms(): no params data found [ 607.685108][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 607.730293][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 607.750322][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 607.773552][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 607.781382][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 607.790291][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 607.853003][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'. [ 608.005827][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.012933][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.090704][T10499] bridge_slave_0: entered allmulticast mode [ 608.111827][T10499] bridge_slave_0: entered promiscuous mode [ 608.197708][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.224141][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.262051][T10499] bridge_slave_1: entered allmulticast mode [ 608.277180][T10499] bridge_slave_1: entered promiscuous mode [ 608.384065][ T5238] Bluetooth: hci0: command tx timeout [ 608.408139][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.483838][ T5279] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 608.505830][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.638165][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 608.653370][T10499] team0: Port device team_slave_0 added [ 608.688914][ T5279] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 608.728772][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.751118][T10499] team0: Port device team_slave_1 added [ 608.767320][T10550] netlink: 'syz.4.1475': attribute type 2 has an invalid length. [ 608.788273][ T5279] usb 2-1: config 0 descriptor?? [ 608.817922][T10550] netlink: 'syz.4.1475': attribute type 1 has an invalid length. [ 608.865447][ T5279] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 608.874274][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 608.903453][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.912211][T10550] netlink: 'syz.4.1475': attribute type 1 has an invalid length. [ 608.940573][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.081849][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.176151][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.183162][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.209031][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.262001][ T5279] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 609.298141][ T5279] sq905c 2-1:0.0: Reading version command failed [ 609.323369][ T5279] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 609.379058][ T5279] usb 2-1: USB disconnect, device number 5 [ 609.418954][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.632564][T10499] hsr_slave_0: entered promiscuous mode [ 609.662752][T10499] hsr_slave_1: entered promiscuous mode [ 609.707612][T10499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.737821][T10499] Cannot create hsr debugfs directory [ 609.824286][ T5238] Bluetooth: hci4: command tx timeout [ 609.955616][T10531] chnl_net:caif_netlink_parms(): no params data found [ 610.080302][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 610.101966][T10568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 610.123849][ T5275] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 610.299037][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.318484][ T5275] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 610.341380][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.352410][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.378112][T10531] bridge_slave_0: entered allmulticast mode [ 610.384680][ T5275] usb 5-1: Product: syz [ 610.388873][ T5275] usb 5-1: Manufacturer: syz [ 610.393605][ T5275] usb 5-1: SerialNumber: syz [ 610.419404][T10531] bridge_slave_0: entered promiscuous mode [ 610.464614][ T5238] Bluetooth: hci0: command tx timeout [ 610.470938][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.494796][ T5275] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 610.528963][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.554013][ T5279] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 610.599042][T10531] bridge_slave_1: entered allmulticast mode [ 610.643492][T10531] bridge_slave_1: entered promiscuous mode [ 610.909856][T10499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.962491][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1485'. [ 610.987759][ T5275] usb 5-1: USB disconnect, device number 15 [ 611.049649][T10579] netlink: 'syz.1.1486': attribute type 2 has an invalid length. [ 611.165723][T10499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.224878][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.243546][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.372351][T10499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.541129][T10531] team0: Port device team_slave_0 added [ 611.587348][ T5279] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 611.640046][ T5279] ath9k_htc: Failed to initialize the device [ 612.346545][ T5275] usb 5-1: ath9k_htc: USB layer deinitialized [ 612.363760][ T5238] Bluetooth: hci4: command tx timeout [ 612.450988][ T29] audit: type=1400 audit(1727472899.807:672): avc: denied { nlmsg_write } for pid=10591 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 612.499292][T10499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.549939][T10531] team0: Port device team_slave_1 added [ 612.614265][ T5238] Bluetooth: hci0: command tx timeout [ 613.185105][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.192282][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.218511][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.250304][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.257688][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.284073][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.420389][T10531] hsr_slave_0: entered promiscuous mode [ 613.434601][T10531] hsr_slave_1: entered promiscuous mode [ 613.449999][T10531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.459408][T10531] Cannot create hsr debugfs directory [ 614.781175][ T5238] Bluetooth: hci4: command tx timeout [ 614.786959][ T7851] Bluetooth: hci0: command tx timeout [ 615.009196][T10499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.040926][T10499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.153901][ T29] audit: type=1400 audit(1727472902.497:673): avc: denied { setopt } for pid=10628 comm="syz.4.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 615.193530][T10531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.300838][T10631] netlink: 'syz.1.1505': attribute type 21 has an invalid length. [ 615.564114][T10499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.591735][T10499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 617.376987][ T7851] Bluetooth: hci4: command tx timeout [ 617.677189][T10531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.264507][T10531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.542783][T10531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.680838][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.798846][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.910991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.918179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.991503][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.998667][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.337956][T10531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 619.378386][T10667] "syz.1.1518" (10667) uses obsolete ecb(arc4) skcipher [ 619.416873][T10531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 619.472252][T10499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.524780][T10673] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.550729][T10673] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.593048][T10673] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.621375][T10673] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.658294][T10531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 619.690544][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 619.755270][T10531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 620.902368][T10531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.047054][T10531] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.106627][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.114307][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.254806][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.262027][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.357282][T10694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1525'. [ 621.462019][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.911089][T10499] veth0_vlan: entered promiscuous mode [ 621.981112][T10499] veth1_vlan: entered promiscuous mode [ 622.223518][T10499] veth0_macvtap: entered promiscuous mode [ 622.283167][T10499] veth1_macvtap: entered promiscuous mode [ 622.406758][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.443439][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.490652][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.545784][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.608288][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.652274][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.700420][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.742003][T10715] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 622.757415][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.808718][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.816181][T10715] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1532'. [ 622.872854][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.923843][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.944279][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.976343][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.016869][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.039914][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.050110][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.070232][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.165515][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.277680][T10531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.405827][T10499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.459676][T10499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.534755][T10499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.570254][T10499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.394354][ T1104] bond0 (unregistering): Released all slaves [ 626.801133][T10531] veth0_vlan: entered promiscuous mode [ 626.907043][T10531] veth1_vlan: entered promiscuous mode [ 627.199413][ T1104] hsr_slave_0: left promiscuous mode [ 627.215277][ T1104] hsr_slave_1: left promiscuous mode [ 627.233620][ T1104] veth1_macvtap: left promiscuous mode [ 627.246945][ T1104] veth0_macvtap: left promiscuous mode [ 627.252795][ T1104] veth1_vlan: left promiscuous mode [ 627.287580][ T1104] veth0_vlan: left promiscuous mode [ 627.361299][ T29] audit: type=1400 audit(1727472914.717:674): avc: denied { map } for pid=10757 comm="syz.4.1544" path="socket:[34238]" dev="sockfs" ino=34238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 629.674281][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.681076][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.091267][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.138270][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.236570][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.248259][T10531] veth0_macvtap: entered promiscuous mode [ 630.272477][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.319847][T10531] veth1_macvtap: entered promiscuous mode [ 630.387306][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.424302][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.435519][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.457452][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.473514][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.502207][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.527157][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.544149][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.692212][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.743728][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.794959][T10531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.841123][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.858406][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.879088][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.991714][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.001799][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.012409][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.022513][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.209774][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.219971][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.230792][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.249327][T10531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.576601][T10531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.604166][T10531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.623208][T10531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.654178][T10531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.760145][T10800] xt_socket: unknown flags 0x4 [ 633.338337][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.390533][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.580851][ T1104] IPVS: stop unused estimator thread 0... [ 633.647130][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.673958][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.955828][ T1104] bridge_slave_0: left allmulticast mode [ 633.964617][ T1104] bridge_slave_0: left promiscuous mode [ 633.970426][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.083969][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 634.243879][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 634.251275][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.263788][ T47] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 634.291617][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.319344][ T47] usb 2-1: config 0 descriptor?? [ 634.857255][ T47] nintendo 0003:057E:201E.0002: item fetching failed at offset 5/8 [ 634.905015][ T47] nintendo 0003:057E:201E.0002: HID parse failed [ 634.967337][ T47] nintendo 0003:057E:201E.0002: probe - fail = -22 [ 634.997092][ T47] nintendo 0003:057E:201E.0002: probe with driver nintendo failed with error -22 [ 635.060116][ T47] usb 2-1: USB disconnect, device number 6 [ 635.953427][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.983045][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.009874][ T1104] bond0 (unregistering): Released all slaves [ 636.367635][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1583'. [ 637.787838][ T29] audit: type=1400 audit(1727472925.147:675): avc: denied { remount } for pid=10879 comm="syz.4.1590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 637.788128][T10881] tmpfs: Cannot change global quota limit on remount [ 638.143922][ T29] audit: type=1400 audit(1727472925.437:676): avc: denied { write } for pid=10889 comm="syz.1.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 639.297706][T10905] syz.1.1600 uses obsolete (PF_INET,SOCK_PACKET) [ 639.408680][ T1104] hsr_slave_0: left promiscuous mode [ 639.464125][ T1104] hsr_slave_1: left promiscuous mode [ 639.488999][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.509322][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.557375][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.575241][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.601883][ T1104] batman_adv: batadv0: Interface deactivated: vlan1 [ 639.623061][ T1104] batman_adv: batadv0: Removing interface: vlan1 [ 639.700618][ T1104] veth1_macvtap: left promiscuous mode [ 639.720934][ T1104] veth0_macvtap: left promiscuous mode [ 639.737195][ T1104] veth1_vlan: left promiscuous mode [ 639.773643][ T1104] veth0_vlan: left promiscuous mode [ 641.856298][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 641.920423][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 642.949967][ T29] audit: type=1400 audit(1727472930.307:677): avc: denied { bind } for pid=10938 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 643.549802][ T29] audit: type=1400 audit(1727472930.907:678): avc: denied { bind } for pid=10963 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 643.746071][T10970] Bluetooth: MGMT ver 1.23 [ 643.818873][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 643.900493][ T1104] IPVS: stop unused estimator thread 0... [ 643.956776][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1632'. [ 644.193998][ T29] audit: type=1400 audit(1727472931.537:679): avc: denied { setopt } for pid=10985 comm="syz.2.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 645.442484][T11015] netlink: 134716 bytes leftover after parsing attributes in process `syz.4.1646'. [ 645.473089][T11015] openvswitch: netlink: Message has 5 unknown bytes. [ 645.572947][T11019] netlink: 'syz.2.1644': attribute type 6 has an invalid length. [ 646.080467][T11022] overlayfs: failed to resolve './file0': -2 [ 646.156929][T11019] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1644'. [ 646.443987][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 646.603893][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 646.622110][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.637804][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.669091][ T25] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 646.713804][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.732920][ T25] usb 5-1: config 0 descriptor?? [ 646.734831][T11036] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 647.612497][ T25] samsung 0003:0419:0001.0003: report_id 0 is invalid [ 647.712179][ T25] samsung 0003:0419:0001.0003: item 0 0 1 8 parsing failed [ 647.736021][ T25] samsung 0003:0419:0001.0003: parse failed [ 647.742057][ T25] samsung 0003:0419:0001.0003: probe with driver samsung failed with error -22 [ 647.820187][ T25] usb 5-1: USB disconnect, device number 16 [ 648.254887][T11053] openvswitch: netlink: Actions may not be safe on all matching packets [ 648.383991][ T5277] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 648.566100][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 648.604488][ T5277] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 648.657114][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.668927][T11058] overlayfs: failed to resolve './file1': -2 [ 649.389502][ T29] audit: type=1400 audit(1727472936.747:680): avc: denied { ioctl } for pid=11064 comm="syz.4.1661" path="socket:[36062]" dev="sockfs" ino=36062 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 649.507167][ T5277] usb 4-1: config 0 descriptor?? [ 650.734334][T11078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 651.696604][T11042] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 651.706207][ T5277] usbhid 4-1:0.0: can't add hid device: -71 [ 651.712591][ T5277] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 651.724184][ T5277] usb 4-1: USB disconnect, device number 20 [ 652.238406][T11042] usb 3-1: Using ep0 maxpacket: 16 [ 652.248047][T11042] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 652.281510][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1667'. [ 652.290816][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 652.372116][T11042] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 652.380701][T11042] usb 3-1: Product: syz [ 652.385019][T11042] usb 3-1: Manufacturer: syz [ 652.389674][T11042] usb 3-1: SerialNumber: syz [ 652.397473][T11042] usb 3-1: config 0 descriptor?? [ 652.681703][ T5280] usb 3-1: USB disconnect, device number 9 [ 652.706748][ T5238] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 652.717867][ T5238] Bluetooth: hci0: Injecting HCI hardware error event [ 652.732740][ T7851] Bluetooth: hci0: hardware error 0x00 [ 654.769396][T11109] netlink: 'syz.2.1675': attribute type 4 has an invalid length. [ 654.787766][ T7851] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 654.823850][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 655.073936][ T5279] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 655.140047][T11116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 655.233815][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 655.241969][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.263435][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.284077][ T5279] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 655.311772][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.365117][ T5279] usb 4-1: config 0 descriptor?? [ 655.857347][ T5279] ft260 0003:0403:6030.0004: item fetching failed at offset 0/2 [ 655.875341][ T5279] ft260 0003:0403:6030.0004: failed to parse HID [ 655.886323][ T5279] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -22 [ 656.048267][ T5275] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 656.123824][ T5280] usb 4-1: USB disconnect, device number 21 [ 656.234091][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 656.255333][ T5275] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 656.270274][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.294826][ T5275] usb 3-1: config 0 descriptor?? [ 656.368163][ T5275] as10x_usb: device has been detected [ 656.381999][ T5275] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 656.430158][ T5275] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 656.481275][ T5275] as10x_usb: error during firmware upload part1 [ 656.488249][ T5275] Registered device nBox DVB-T Dongle [ 656.603040][ T5275] usb 3-1: USB disconnect, device number 10 [ 656.629253][ T5275] Unregistered device nBox DVB-T Dongle [ 656.634049][ T5275] as10x_usb: device has been disconnected [ 656.660105][T11095] syz.4.1671: vmalloc error: size 3485696, failed to allocated page array size 6808, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 656.692175][T11095] CPU: 0 UID: 0 PID: 11095 Comm: syz.4.1671 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 656.702691][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 656.712813][T11095] Call Trace: [ 656.716132][T11095] [ 656.719100][T11095] dump_stack_lvl+0x16c/0x1f0 [ 656.723860][T11095] warn_alloc+0x24d/0x3a0 [ 656.728270][T11095] ? __pfx_warn_alloc+0x10/0x10 [ 656.733210][T11095] ? __get_vm_area_node+0x190/0x2d0 [ 656.738502][T11095] ? __get_vm_area_node+0x1bc/0x2d0 [ 656.743797][T11095] __vmalloc_node_range_noprof+0x1116/0x15b0 [ 656.749870][T11095] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 656.756107][T11095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 656.762528][T11095] ? __get_vm_area_node+0x190/0x2d0 [ 656.767799][T11095] ? __get_vm_area_node+0x1bc/0x2d0 [ 656.773530][T11095] __vmalloc_node_range_noprof+0xd92/0x15b0 [ 656.779593][T11095] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 656.785822][T11095] ? __mutex_trylock_common+0xea/0x250 [ 656.791376][T11095] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 656.797612][T11095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 656.804023][T11095] ? rcu_is_watching+0x12/0xc0 [ 656.808942][T11095] ? rcu_is_watching+0x12/0xc0 [ 656.813774][T11095] ? trace_kmalloc+0x2d/0xe0 [ 656.818430][T11095] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 656.824225][T11095] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 656.830438][T11095] __kvmalloc_node_noprof+0x14f/0x1a0 [ 656.835956][T11095] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 656.842173][T11095] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 656.848234][T11095] vivid_update_format_cap+0x127b/0x2530 [ 656.854073][T11095] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 656.860119][T11095] ? v4l2_match_dv_timings+0x1df/0x1010 [ 656.865747][T11095] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 656.871550][T11095] vidioc_s_dv_timings+0xa5/0xc0 [ 656.876566][T11095] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 656.881913][T11095] __video_do_ioctl+0xaf0/0xf00 [ 656.886845][T11095] ? __pfx___video_do_ioctl+0x10/0x10 [ 656.892305][T11095] video_usercopy+0x4ce/0x1600 [ 656.897144][T11095] ? __pfx___video_do_ioctl+0x10/0x10 [ 656.902596][T11095] ? __pfx_video_usercopy+0x10/0x10 [ 656.907898][T11095] v4l2_ioctl+0x1ba/0x250 [ 656.912298][T11095] ? __pfx_v4l2_ioctl+0x10/0x10 [ 656.917222][T11095] __x64_sys_ioctl+0x18f/0x220 [ 656.922048][T11095] do_syscall_64+0xcd/0x250 [ 656.926621][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.932608][T11095] RIP: 0033:0x7f3f3537df39 [ 656.937087][T11095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.956846][T11095] RSP: 002b:00007f3f36130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.965317][T11095] RAX: ffffffffffffffda RBX: 00007f3f35535f80 RCX: 00007f3f3537df39 [ 656.973354][T11095] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 656.981376][T11095] RBP: 00007f3f353f0216 R08: 0000000000000000 R09: 0000000000000000 [ 656.989403][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.997429][T11095] R13: 0000000000000000 R14: 00007f3f35535f80 R15: 00007ffd5e6122a8 [ 657.005655][T11095] [ 657.021391][T11095] Mem-Info: [ 657.024714][T11095] active_anon:5324 inactive_anon:0 isolated_anon:0 [ 657.024714][T11095] active_file:11553 inactive_file:38708 isolated_file:0 [ 657.024714][T11095] unevictable:768 dirty:324 writeback:0 [ 657.024714][T11095] slab_reclaimable:6399 slab_unreclaimable:99157 [ 657.024714][T11095] mapped:22710 shmem:1387 pagetables:756 [ 657.024714][T11095] sec_pagetables:0 bounce:0 [ 657.024714][T11095] kernel_misc_reclaimable:0 [ 657.024714][T11095] free:1297451 free_pcp:2361 free_cma:0 [ 657.167357][T11095] Node 0 active_anon:27708kB inactive_anon:0kB active_file:46212kB inactive_file:154856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97068kB dirty:1308kB writeback:0kB shmem:10120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10080kB pagetables:3092kB sec_pagetables:0kB all_unreclaimable? no [ 657.293505][T11095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 657.324075][T11095] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.351485][T11095] lowmem_reserve[]: 0 2461 2461 0 0 [ 657.357262][T11095] Node 0 DMA32 free:1236124kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28936kB inactive_anon:0kB active_file:46212kB inactive_file:154540kB unevictable:1536kB writepending:1344kB present:3129332kB managed:2549136kB mlocked:0kB bounce:0kB free_pcp:9860kB local_pcp:5592kB free_cma:0kB [ 657.807831][ T7851] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 657.824477][ T7851] Bluetooth: hci4: Injecting HCI hardware error event [ 657.835504][ T7851] Bluetooth: hci4: hardware error 0x00 [ 657.930638][T11095] lowmem_reserve[]: 0 0 0 0 0 [ 657.940778][T11095] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.984523][T11095] lowmem_reserve[]: 0 0 0 0 0 [ 657.989372][T11095] Node 1 Normal free:3929904kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 658.021643][T11095] lowmem_reserve[]: 0 0 0 0 0 [ 658.027000][T11095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 658.043887][T11095] Node 0 DMA32: 4*4kB (M) 18*8kB (UME) 156*16kB (UME) 396*32kB (UME) 367*64kB (UME) 97*128kB (ME) 30*256kB (UME) 5*512kB (UME) 7*1024kB (UME) 5*2048kB (UME) 284*4096kB (M) = 1242144kB [ 658.072242][T11095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 658.091350][T11095] Node 1 Normal: 176*4kB (UME) 42*8kB (UME) 34*16kB (UME) 188*32kB (UME) 96*64kB (UME) 27*128kB (UE) 16*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 951*4096kB (M) = 3929904kB [ 658.351371][T11095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 658.382155][T11095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 658.410052][T11095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 658.420000][T11095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 658.430148][T11095] 54419 total pagecache pages [ 658.435040][T11095] 0 pages in swap cache [ 658.439327][T11095] Free swap = 124684kB [ 658.443974][T11095] Total swap = 124996kB [ 658.448296][T11095] 2097051 pages RAM [ 658.452207][T11095] 0 pages HighMem/MovableOnly [ 658.457458][T11095] 428045 pages reserved [ 658.461737][T11095] 0 pages cma reserved [ 658.685461][ T47] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 659.046009][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.072918][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 659.102865][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.128100][T11153] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 659.224438][ T47] usb 4-1: config 0 descriptor?? [ 659.484439][ T47] usb 4-1: USB disconnect, device number 22 [ 659.789952][T11168] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1698'. [ 659.799595][T11168] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 659.900811][ T29] audit: type=1400 audit(1727472947.247:681): avc: denied { setopt } for pid=11169 comm="syz.0.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 659.993776][ T5277] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 660.063904][ T7851] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 660.206942][ T5277] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 660.220712][ T5277] usb 3-1: config 0 has no interface number 0 [ 660.318313][ T5277] usb 3-1: New USB device found, idVendor=1164, idProduct=2edc, bcdDevice=62.de [ 660.357289][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.402085][ T5277] usb 3-1: Product: syz [ 660.423956][ T5277] usb 3-1: Manufacturer: syz [ 660.437831][ T5277] usb 3-1: SerialNumber: syz [ 660.484487][ T5277] usb 3-1: config 0 descriptor?? [ 661.397821][ T5277] dvb-usb: found a 'Yuan PD378S' in warm state. [ 661.470815][ T5277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 661.484909][T11183] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 661.492703][T11183] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.1704'. [ 661.534139][ T5277] dvbdev: DVB: registering new adapter (Yuan PD378S) [ 661.540943][ T5277] usb 3-1: media controller created [ 661.547213][T11183] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 661.655345][ T5277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.727416][T11183] netlink: 'syz.1.1704': attribute type 2 has an invalid length. [ 661.736021][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 661.804025][T11188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 661.958903][ T5277] DVB: Unable to find symbol dib7000p_attach() [ 661.976066][ T5277] dvb-usb: no frontend was attached by 'Yuan PD378S' [ 662.177156][ T5277] rc_core: IR keymap rc-dib0700-rc5 not found [ 662.186570][ T5277] Registered IR keymap rc-empty [ 662.199642][ T5277] dvb-usb: could not initialize remote control. [ 662.209384][ T5277] dvb-usb: Yuan PD378S successfully initialized and connected. [ 662.234296][ T5277] usb 3-1: USB disconnect, device number 11 [ 662.347678][ T5277] dvb-usb: Yuan PD378S successfully deinitialized and disconnected. [ 663.103858][T11042] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 663.294008][T11042] usb 4-1: Using ep0 maxpacket: 16 [ 663.315322][T11042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.384159][T11042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.423731][T11042] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.510850][T11042] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 663.526617][T11042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.576222][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.598171][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.609948][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.620891][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.631985][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 663.639512][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.735136][T11042] usb 4-1: config 0 descriptor?? [ 664.752157][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.842216][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.851159][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.860791][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.869412][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.903776][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.947597][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.967311][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.983936][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 664.991772][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 665.000661][T11042] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 665.011631][T11042] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 665.022236][T11042] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 665.093811][T11042] microsoft 0003:045E:07DA.0005: no inputs found [ 665.100242][T11042] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 665.173890][T11042] usb 4-1: USB disconnect, device number 23 [ 665.391482][ T29] audit: type=1400 audit(1727472952.597:682): avc: denied { module_request } for pid=11206 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 665.847313][T11206] chnl_net:caif_netlink_parms(): no params data found [ 666.872512][ T7851] Bluetooth: hci3: command tx timeout [ 668.943987][ T5238] Bluetooth: hci3: command tx timeout [ 670.323696][ C0] sched: DL replenish lagged too much [ 670.438309][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.473857][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.523333][T11206] bridge_slave_0: entered allmulticast mode [ 670.559892][T11206] bridge_slave_0: entered promiscuous mode [ 671.114264][ T5238] Bluetooth: hci3: command tx timeout [ 673.184039][ T5238] Bluetooth: hci3: command tx timeout [ 673.914067][ T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 674.086154][ T47] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 674.103760][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.123168][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.133729][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 674.157127][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 674.173612][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.192891][ T47] usb 3-1: config 0 descriptor?? [ 674.696305][ T47] wacom 0003:056A:0331.0006: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 674.921086][ T47] usb 3-1: USB disconnect, device number 12 [ 677.724197][ T29] audit: type=1400 audit(1727472965.087:683): avc: denied { write } for pid=11285 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.433048][T11284] Falling back ldisc for ptm0. [ 681.954967][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 682.062028][ T7851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 682.077945][ T7851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 682.088445][ T7851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 682.104778][ T7851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 682.114236][ T7851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 682.127510][ T7851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 682.164231][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 682.187518][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.209148][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.229373][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 682.244168][ T47] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 682.253481][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.291033][ T47] usb 3-1: config 0 descriptor?? [ 682.769110][ T47] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 682.788166][ T47] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 682.801610][ T47] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 682.815293][ T47] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 682.822333][ T47] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 682.834245][ T47] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 682.848625][ T47] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 682.893977][ T47] waltop 0003:172F:0502.0007: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 683.037931][ T47] usb 3-1: USB disconnect, device number 13 [ 685.513394][ T5238] Bluetooth: hci1: command tx timeout [ 687.607177][ T7851] Bluetooth: hci1: command tx timeout [ 707.414224][ T7851] Bluetooth: hci1: command tx timeout [ 717.102557][ T5238] Bluetooth: hci1: command tx timeout [ 763.202779][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.219007][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.880086][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.896943][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.603619][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 837.610722][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l [ 837.619027][ C1] rcu: (detected by 1, t=10503 jiffies, g=54477, q=1598190 ncpus=2) [ 837.627237][ C1] task:kthreadd state:R running task stack:25680 pid:2 tgid:2 ppid:0 flags:0x00004000 [ 837.640619][ C1] Call Trace: [ 837.643943][ C1] [ 837.646922][ C1] __schedule+0xed6/0x5920 [ 837.651416][ C1] ? mark_lock+0xb5/0xc60 [ 837.655826][ C1] ? arch_stack_walk+0x74/0x100 [ 837.660834][ C1] ? unwind_next_frame+0x38a/0x20c0 [ 837.666116][ C1] ? __pfx___schedule+0x10/0x10 [ 837.671036][ C1] ? hlock_class+0x4e/0x130 [ 837.675602][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 837.681822][ C1] ? arch_stack_walk+0x95/0x100 [ 837.686828][ C1] ? mark_held_locks+0x9f/0xe0 [ 837.691677][ C1] preempt_schedule_irq+0x51/0x90 [ 837.696765][ C1] irqentry_exit+0x36/0x90 [ 837.701248][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 837.707299][ C1] RIP: 0010:lock_release+0x3e5/0x6f0 [ 837.712662][ C1] Code: 7e 83 f8 01 0f 85 fd 01 00 00 9c 58 f6 c4 02 0f 85 e8 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 837.732336][ C1] RSP: 0018:ffffc90000077730 EFLAGS: 00000206 [ 837.738467][ C1] RAX: dffffc0000000000 RBX: 1ffff9200000eee8 RCX: ffffc90000077780 [ 837.746496][ C1] RDX: 1ffff1100385b51a RSI: ffffffff8b6ccf40 RDI: ffffffff8bd196e0 [ 837.754529][ C1] RBP: c4ba6d2bc52afeaa R08: 0000000000000000 R09: fffffbfff20be2b1 [ 837.762575][ C1] R10: ffffffff905f158f R11: 0000000000000050 R12: 0000000000000001 [ 837.770597][ C1] R13: 0000000000000002 R14: ffff88801c2da8d8 R15: ffff88801c2d9e00 [ 837.778648][ C1] ? page_ext_put+0x3e/0xd0 [ 837.783231][ C1] ? __pfx_lock_release+0x10/0x10 [ 837.788331][ C1] ? kernel_clone+0xfd/0x960 [ 837.792988][ C1] ? kernel_thread+0xc0/0x100 [ 837.797728][ C1] ? kthreadd+0x4ef/0x7d0 [ 837.802220][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 837.807245][ C1] page_ext_put+0x43/0xd0 [ 837.811642][ C1] __reset_page_owner+0x28d/0x400 [ 837.816750][ C1] free_unref_page+0x5f4/0xdc0 [ 837.821580][ C1] __put_partials+0x14c/0x170 [ 837.826339][ C1] qlist_free_all+0x4e/0x120 [ 837.831003][ C1] kasan_quarantine_reduce+0x192/0x1e0 [ 837.836541][ C1] __kasan_slab_alloc+0x69/0x90 [ 837.841449][ C1] kmem_cache_alloc_noprof+0x121/0x2f0 [ 837.846972][ C1] ? copy_signal+0x50/0x830 [ 837.851539][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 837.856814][ C1] copy_signal+0x50/0x830 [ 837.861209][ C1] copy_process+0x275c/0x8dc0 [ 837.865946][ C1] ? __lock_acquire+0x163e/0x3ce0 [ 837.871068][ C1] ? __pfx_copy_process+0x10/0x10 [ 837.876155][ C1] ? __pfx_mark_lock+0x10/0x10 [ 837.880991][ C1] ? find_held_lock+0x2d/0x110 [ 837.885911][ C1] ? finish_task_switch.isra.0+0x212/0xcc0 [ 837.891791][ C1] ? __pfx_lock_release+0x10/0x10 [ 837.896885][ C1] ? find_held_lock+0x2d/0x110 [ 837.901727][ C1] ? __schedule+0xe6f/0x5920 [ 837.906410][ C1] kernel_clone+0xfd/0x960 [ 837.910891][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 837.915999][ C1] ? __pfx_kthread+0x10/0x10 [ 837.920649][ C1] kernel_thread+0xc0/0x100 [ 837.925215][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 837.930401][ C1] ? __pfx_kthread+0x10/0x10 [ 837.935062][ C1] kthreadd+0x4ef/0x7d0 [ 837.939296][ C1] ? __pfx_kthreadd+0x10/0x10 [ 837.944037][ C1] ret_from_fork+0x45/0x80 [ 837.948526][ C1] ? __pfx_kthreadd+0x10/0x10 [ 837.953268][ C1] ret_from_fork_asm+0x1a/0x30 [ 837.958120][ C1] [ 837.961191][ C1] rcu: rcu_preempt kthread starved for 10530 jiffies! g54477 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 837.972442][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 837.982453][ C1] rcu: RCU grace-period kthread stack dump: [ 837.988381][ C1] task:rcu_preempt state:R running task stack:27392 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 838.000248][ C1] Call Trace: [ 838.003566][ C1] [ 838.006547][ C1] __schedule+0xed6/0x5920 [ 838.011037][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 838.016326][ C1] ? __pfx___schedule+0x10/0x10 [ 838.021252][ C1] ? schedule+0x298/0x350 [ 838.025651][ C1] ? __pfx_lock_release+0x10/0x10 [ 838.030743][ C1] ? __pfx___mod_timer+0x10/0x10 [ 838.035754][ C1] ? lock_acquire+0x1b1/0x560 [ 838.040501][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 838.046053][ C1] schedule+0xe7/0x350 [ 838.050199][ C1] schedule_timeout+0x136/0x2a0 [ 838.055116][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 838.060557][ C1] ? __pfx_process_timeout+0x10/0x10 [ 838.065914][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 838.071798][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 838.077322][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 838.082171][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 838.087539][ C1] ? rcu_gp_init+0xc82/0x1630 [ 838.092297][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 838.097583][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 838.103495][ C1] rcu_gp_kthread+0x271/0x380 [ 838.108257][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 838.113538][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 838.118795][ C1] ? __kthread_parkme+0x148/0x220 [ 838.123881][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 838.129158][ C1] kthread+0x2c1/0x3a0 [ 838.133295][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.138577][ C1] ? __pfx_kthread+0x10/0x10 [ 838.143236][ C1] ret_from_fork+0x45/0x80 [ 838.147729][ C1] ? __pfx_kthread+0x10/0x10 [ 838.152385][ C1] ret_from_fork_asm+0x1a/0x30 [ 838.157249][ C1] [ 838.160311][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 838.166692][ C1] Sending NMI from CPU 1 to CPUs 0: [ 838.171944][ C0] NMI backtrace for cpu 0 [ 838.171962][ C0] CPU: 0 UID: 0 PID: 5280 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 838.171993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 838.172011][ C0] Workqueue: events nsim_dev_trap_report_work [ 838.172051][ C0] RIP: 0010:write_comp_data+0x24/0x90 [ 838.172091][ C0] Code: 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 6f e9 76 7e 65 8b 05 70 e9 76 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 85 c0 [ 838.172116][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00000202 [ 838.172137][ C0] RAX: 0000000080000102 RBX: 0000000000000002 RCX: ffffffff893cf3d2 [ 838.172155][ C0] RDX: ffff88802fda3c00 RSI: 0000000000000001 RDI: 0000000000000005 [ 838.172172][ C0] RBP: ffffffff8ca25040 R08: 0000000000000005 R09: 0000000000000001 [ 838.172195][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 838.172211][ C0] R13: 0000000000000005 R14: 0000000000000004 R15: dffffc0000000000 [ 838.172228][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 838.172254][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.172272][ C0] CR2: 000000110c2b0a5f CR3: 000000000df7c000 CR4: 00000000003506f0 [ 838.172289][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.172305][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 838.172322][ C0] Call Trace: [ 838.172330][ C0] [ 838.172339][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 838.172381][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 838.172420][ C0] ? nmi_handle+0x1a9/0x5c0 [ 838.172446][ C0] ? write_comp_data+0x24/0x90 [ 838.172482][ C0] ? default_do_nmi+0x6a/0x160 [ 838.172519][ C0] ? exc_nmi+0x170/0x1e0 [ 838.172553][ C0] ? end_repeat_nmi+0xf/0x53 [ 838.172584][ C0] ? nf_hook_slow+0xd2/0x200 [ 838.172621][ C0] ? write_comp_data+0x24/0x90 [ 838.172657][ C0] ? write_comp_data+0x24/0x90 [ 838.172694][ C0] ? write_comp_data+0x24/0x90 [ 838.172729][ C0] [ 838.172737][ C0] [ 838.172744][ C0] __sanitizer_cov_trace_switch+0x54/0x90 [ 838.172786][ C0] nf_hook_slow+0xd2/0x200 [ 838.172823][ C0] nf_hook.constprop.0+0x42e/0x750 [ 838.172860][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 838.172899][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 838.172937][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 838.172975][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 838.173018][ C0] ip_local_deliver+0x169/0x1f0 [ 838.173055][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 838.173093][ C0] ip_rcv+0x2c3/0x5d0 [ 838.173128][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 838.173163][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 838.173202][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 838.173234][ C0] ? process_backlog+0x3f1/0x15f0 [ 838.173264][ C0] ? __pfx_lock_release+0x10/0x10 [ 838.173307][ C0] ? mark_held_locks+0x9f/0xe0 [ 838.173346][ C0] ? process_backlog+0x3f1/0x15f0 [ 838.173375][ C0] __netif_receive_skb+0x1d/0x160 [ 838.173406][ C0] process_backlog+0x443/0x15f0 [ 838.173440][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 838.173474][ C0] net_rx_action+0xa92/0x1010 [ 838.173506][ C0] ? tmigr_handle_remote+0x153/0xdd0 [ 838.173552][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 838.173586][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 838.173628][ C0] ? run_timer_base+0x119/0x190 [ 838.173671][ C0] ? run_timer_base+0x11e/0x190 [ 838.173704][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 838.173742][ C0] handle_softirqs+0x213/0x8f0 [ 838.173772][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 838.173800][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 838.173828][ C0] ? nsim_dev_trap_report_work+0x870/0xc80 [ 838.173865][ C0] do_softirq+0xb2/0xf0 [ 838.173891][ C0] [ 838.173898][ C0] [ 838.173907][ C0] __local_bh_enable_ip+0x100/0x120 [ 838.173935][ C0] nsim_dev_trap_report_work+0x870/0xc80 [ 838.173978][ C0] process_one_work+0x9c5/0x1ba0 [ 838.174025][ C0] ? __pfx_defense_work_handler+0x10/0x10 [ 838.174067][ C0] ? __pfx_process_one_work+0x10/0x10 [ 838.174113][ C0] ? assign_work+0x1a0/0x250 [ 838.174150][ C0] worker_thread+0x6c8/0xf00 [ 838.174201][ C0] ? __kthread_parkme+0x148/0x220 [ 838.174233][ C0] ? __pfx_worker_thread+0x10/0x10 [ 838.174273][ C0] kthread+0x2c1/0x3a0 [ 838.174300][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.174339][ C0] ? __pfx_kthread+0x10/0x10 [ 838.174369][ C0] ret_from_fork+0x45/0x80 [ 838.174408][ C0] ? __pfx_kthread+0x10/0x10 [ 838.174438][ C0] ret_from_fork_asm+0x1a/0x30 [ 838.174484][ C0]