last executing test programs: 5.243491302s ago: executing program 1 (id=60): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) 4.657486815s ago: executing program 4 (id=64): syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0xd8, 0xa7, 0xa0, 0x20, 0x413c, 0x81a3, 0x28ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x5, 0x0, 0x80, [{{0x9, 0x4, 0x23, 0x5, 0x0, 0x58, 0x34, 0xef, 0x8}}, {{0x9, 0x4, 0x27, 0x8, 0x0, 0xff, 0xff, 0xff, 0xe6}}]}}]}}, 0x0) 3.903465441s ago: executing program 1 (id=81): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xad, 0x8b, 0xc4, 0x40, 0x61d, 0xc140, 0xe494, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x0, 0x82, 0x18, 0x4}}]}}]}}, 0x0) 3.716390104s ago: executing program 3 (id=85): syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) 3.715733327s ago: executing program 3 (id=86): syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@broadcast, @random="50a1e94ea211", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @private, @dev={0xac, 0x14, 0x14, 0x22}, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x2, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x5, "cfa11c"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0x2}]}]}}}}}}}, 0x0) 3.635599875s ago: executing program 3 (id=87): syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000954c43400d051b01a46f0000000109022d00010000000009041200000202ff00052414000005240000000d240f0100000000f0ffffffff032402"], 0x0) 3.11413311s ago: executing program 4 (id=88): syz_usb_connect(0x2, 0xe4, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b75072501020207000905", @ANYRES16], 0x0) 2.905560695s ago: executing program 2 (id=92): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000) 2.850671379s ago: executing program 2 (id=93): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.849984064s ago: executing program 2 (id=94): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)={[{@size}]}) 2.812577022s ago: executing program 2 (id=95): syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f0001000000000904880005ffb717000905b6b70000020154090501000004007f070905020c200009027e09050f042000410f04090505"], 0x0) 2.725450494s ago: executing program 1 (id=96): setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2.689326335s ago: executing program 1 (id=97): syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)={{0x12, 0x1, 0x0, 0xa9, 0x3a, 0x5d, 0x8, 0x4c1, 0x9d, 0x1f14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0x91, 0x2f, 0x2f}}, {{0x9, 0x4, 0x11, 0x0, 0x0, 0xb9, 0xd4, 0xa1}}]}}]}}, 0x0) 2.432318052s ago: executing program 3 (id=99): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x2, 0x1, 0x0, 0xf, 0x4, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) 2.400187616s ago: executing program 3 (id=100): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) 1.763795374s ago: executing program 4 (id=101): syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x30, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @ra={0x5, 0x2, 0x453}, @pad1, @ra={0x5, 0x2, 0x18}, @ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x96}, @enc_lim={0x4, 0x1, 0x4f}, @calipso={0x7, 0x8, {0x0, 0x0, 0x9, 0x89}}]}]}}}}}, 0x0) 1.734862117s ago: executing program 4 (id=102): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.69982127s ago: executing program 4 (id=103): syz_usb_connect(0x0, 0x6de, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000de0f9d20422c06168a35010203010902cc0602060010000904"], 0x0) 1.360603985s ago: executing program 2 (id=104): syz_usb_connect(0x0, 0x1a2, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) 1.32057079s ago: executing program 1 (id=105): mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0xa1}}]}}) 1.247260955s ago: executing program 1 (id=107): syz_usb_connect(0x0, 0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b9c72040ac05008628d00102030109022c0001000000000904ba00020e0100e7090500000000000000080b955d"], 0x0) 1.195993642s ago: executing program 0 (id=108): syz_emit_ethernet(0x96, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x60, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@hopopts={0x11}, @hopopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e8296"}}}}}}, 0x0) 1.14188944s ago: executing program 0 (id=109): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x208000, 0x0) 1.118429922s ago: executing program 3 (id=110): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010800fa7010081304236036b601e2020109021b0001000000000904bf00017a9ec00009058205"], 0x0) 1.03369942s ago: executing program 0 (id=111): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'], 0x50) 962.904743ms ago: executing program 0 (id=112): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 892.17379ms ago: executing program 0 (id=113): keyctl$clear(0x7, 0x0) 760.915841ms ago: executing program 0 (id=114): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3c, 0xa1, 0x2a, 0x10, 0x102c, 0x6151, 0x44e6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xcc, 0x4e}}]}}]}}, 0x0) 379.595807ms ago: executing program 4 (id=115): syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) 0s ago: executing program 2 (id=116): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xad, 0xfc, 0xd3, 0x10, 0x1163, 0x200, 0xa67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0xff, 0xa0, 0x0, [{{0x9, 0x4, 0xc4, 0x0, 0x0, 0x53, 0x61, 0x57}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. [ 47.339679][ T29] audit: type=1400 audit(1731983514.163:88): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.342891][ T5818] cgroup: Unknown subsys name 'net' [ 47.362526][ T29] audit: type=1400 audit(1731983514.173:89): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.389826][ T29] audit: type=1400 audit(1731983514.193:90): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.553437][ T5818] cgroup: Unknown subsys name 'cpuset' [ 47.560897][ T5818] cgroup: Unknown subsys name 'rlimit' [ 47.673333][ T29] audit: type=1400 audit(1731983514.503:91): avc: denied { setattr } for pid=5818 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.703796][ T29] audit: type=1400 audit(1731983514.503:92): avc: denied { create } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.733432][ T29] audit: type=1400 audit(1731983514.503:93): avc: denied { write } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.751611][ T5820] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 47.754204][ T29] audit: type=1400 audit(1731983514.503:94): avc: denied { read } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.783393][ T29] audit: type=1400 audit(1731983514.503:95): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 47.808531][ T29] audit: type=1400 audit(1731983514.503:96): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 47.831978][ T29] audit: type=1400 audit(1731983514.533:97): avc: denied { read } for pid=5494 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.620499][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.265523][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.274589][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.282845][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.289729][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.290691][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.304062][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.306847][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.311680][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.318812][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 50.326536][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.340765][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.341548][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.349068][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 50.355929][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.362080][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.370457][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.377125][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 50.383118][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.389861][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.397093][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.406474][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 50.410927][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 50.418749][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.424795][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.434143][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 50.446594][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.458677][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 50.465938][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 50.474098][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 50.474738][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.713018][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 50.761959][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 50.809639][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 50.826901][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 50.855748][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.863603][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.871419][ T5828] bridge_slave_0: entered allmulticast mode [ 50.877812][ T5828] bridge_slave_0: entered promiscuous mode [ 50.886058][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.893352][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.900629][ T5828] bridge_slave_1: entered allmulticast mode [ 50.906952][ T5828] bridge_slave_1: entered promiscuous mode [ 50.980927][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.990039][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 51.009033][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.020826][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.027905][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.035259][ T5829] bridge_slave_0: entered allmulticast mode [ 51.041705][ T5829] bridge_slave_0: entered promiscuous mode [ 51.062831][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.069914][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.077070][ T5829] bridge_slave_1: entered allmulticast mode [ 51.083782][ T5829] bridge_slave_1: entered promiscuous mode [ 51.124852][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.131961][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.139002][ T5837] bridge_slave_0: entered allmulticast mode [ 51.145706][ T5837] bridge_slave_0: entered promiscuous mode [ 51.153828][ T5828] team0: Port device team_slave_0 added [ 51.176396][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.183638][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.190955][ T5838] bridge_slave_0: entered allmulticast mode [ 51.197260][ T5838] bridge_slave_0: entered promiscuous mode [ 51.203865][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.211474][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.218687][ T5837] bridge_slave_1: entered allmulticast mode [ 51.225390][ T5837] bridge_slave_1: entered promiscuous mode [ 51.232859][ T5828] team0: Port device team_slave_1 added [ 51.250054][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.260880][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.269985][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.277437][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.284627][ T5838] bridge_slave_1: entered allmulticast mode [ 51.291929][ T5838] bridge_slave_1: entered promiscuous mode [ 51.332010][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.338957][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.365364][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.378932][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.388148][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.395970][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.403148][ T5832] bridge_slave_0: entered allmulticast mode [ 51.409499][ T5832] bridge_slave_0: entered promiscuous mode [ 51.416908][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.423976][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.431371][ T5832] bridge_slave_1: entered allmulticast mode [ 51.437699][ T5832] bridge_slave_1: entered promiscuous mode [ 51.454625][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.464591][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.471710][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.497728][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.521969][ T5829] team0: Port device team_slave_0 added [ 51.529104][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.550586][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.562350][ T5837] team0: Port device team_slave_0 added [ 51.568988][ T5829] team0: Port device team_slave_1 added [ 51.580063][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.596481][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.606562][ T5837] team0: Port device team_slave_1 added [ 51.627901][ T5838] team0: Port device team_slave_0 added [ 51.643625][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.650820][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.677079][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.694124][ T5838] team0: Port device team_slave_1 added [ 51.710477][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.717421][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.745717][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.757014][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.764336][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.790599][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.818383][ T5828] hsr_slave_0: entered promiscuous mode [ 51.824393][ T5828] hsr_slave_1: entered promiscuous mode [ 51.833677][ T5832] team0: Port device team_slave_0 added [ 51.840597][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.847525][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.873644][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.898444][ T5832] team0: Port device team_slave_1 added [ 51.910922][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.917857][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.943839][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.956212][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.963208][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.989230][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.016314][ T5829] hsr_slave_0: entered promiscuous mode [ 52.024301][ T5829] hsr_slave_1: entered promiscuous mode [ 52.030055][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.038028][ T5829] Cannot create hsr debugfs directory [ 52.075261][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.082359][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.108542][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.123601][ T5837] hsr_slave_0: entered promiscuous mode [ 52.129489][ T5837] hsr_slave_1: entered promiscuous mode [ 52.135584][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.145265][ T5837] Cannot create hsr debugfs directory [ 52.162118][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.169084][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.195771][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.237196][ T5838] hsr_slave_0: entered promiscuous mode [ 52.243480][ T5838] hsr_slave_1: entered promiscuous mode [ 52.249303][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.257202][ T5838] Cannot create hsr debugfs directory [ 52.338178][ T5832] hsr_slave_0: entered promiscuous mode [ 52.345005][ T5832] hsr_slave_1: entered promiscuous mode [ 52.353287][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.361089][ T5832] Cannot create hsr debugfs directory [ 52.478211][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.488540][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.499887][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.507182][ T5842] Bluetooth: hci2: command tx timeout [ 52.510854][ T5842] Bluetooth: hci3: command tx timeout [ 52.512974][ T5839] Bluetooth: hci1: command tx timeout [ 52.518146][ T5847] Bluetooth: hci0: command tx timeout [ 52.530755][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.576256][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.584772][ T5847] Bluetooth: hci4: command tx timeout [ 52.586014][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.609175][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.626997][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.664415][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.674151][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.683955][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.703146][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.724571][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.756738][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.775807][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.789476][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.804629][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.815578][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.835185][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.842345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.871324][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.878369][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.909911][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.925586][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.961419][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.969582][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.981188][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.035082][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.044285][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 53.044297][ T29] audit: type=1400 audit(1731983519.873:111): avc: denied { sys_module } for pid=5829 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.075823][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.084689][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.116270][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.123419][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.142763][ T3911] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.149840][ T3911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.164187][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.184793][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.204576][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.217630][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.224729][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.239119][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.246195][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.263976][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.271067][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.291530][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.302365][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.309461][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.372813][ T5829] veth0_vlan: entered promiscuous mode [ 53.390097][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.413630][ T5829] veth1_vlan: entered promiscuous mode [ 53.444091][ T3911] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.451192][ T3911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.490942][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.498033][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.531929][ T5829] veth0_macvtap: entered promiscuous mode [ 53.546651][ T5829] veth1_macvtap: entered promiscuous mode [ 53.588901][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.629030][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.663988][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.692234][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.703108][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.730637][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.750468][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.759168][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.826053][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.845891][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.916700][ T5837] veth0_vlan: entered promiscuous mode [ 53.936545][ T5828] veth0_vlan: entered promiscuous mode [ 53.961173][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.967282][ T5837] veth1_vlan: entered promiscuous mode [ 53.969089][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.992566][ T5832] veth0_vlan: entered promiscuous mode [ 54.002737][ T5828] veth1_vlan: entered promiscuous mode [ 54.029329][ T5832] veth1_vlan: entered promiscuous mode [ 54.047421][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.056414][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.076034][ T29] audit: type=1400 audit(1731983520.903:112): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.A75rjC/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 54.086189][ T5837] veth0_macvtap: entered promiscuous mode [ 54.106620][ T29] audit: type=1400 audit(1731983520.903:113): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.123639][ T5838] veth0_vlan: entered promiscuous mode [ 54.129336][ T29] audit: type=1400 audit(1731983520.903:114): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.A75rjC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.160695][ T29] audit: type=1400 audit(1731983520.903:115): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.167098][ T5838] veth1_vlan: entered promiscuous mode [ 54.195346][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.196340][ T29] audit: type=1400 audit(1731983520.903:116): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.A75rjC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.248627][ T5832] veth0_macvtap: entered promiscuous mode [ 54.264430][ T5828] veth0_macvtap: entered promiscuous mode [ 54.275810][ T29] audit: type=1400 audit(1731983520.913:117): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.A75rjC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 54.292478][ T5832] veth1_macvtap: entered promiscuous mode [ 54.319473][ T29] audit: type=1400 audit(1731983520.913:118): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.344702][ T5828] veth1_macvtap: entered promiscuous mode [ 54.352186][ T29] audit: type=1400 audit(1731983520.943:119): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 54.362051][ T5837] veth1_macvtap: entered promiscuous mode [ 54.399211][ T29] audit: type=1400 audit(1731983520.943:120): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.445391][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.458031][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.469798][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.481751][ T5838] veth0_macvtap: entered promiscuous mode [ 54.490089][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.501147][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.511129][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.521978][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.535844][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.550060][ T5838] veth1_macvtap: entered promiscuous mode [ 54.558259][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.569239][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.580012][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.589342][ T5847] Bluetooth: hci3: command tx timeout [ 54.589672][ T5842] Bluetooth: hci1: command tx timeout [ 54.595025][ T5847] Bluetooth: hci0: command tx timeout [ 54.600461][ T5839] Bluetooth: hci2: command tx timeout [ 54.606000][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.622565][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.632938][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.643914][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.654978][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.667040][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.676187][ T5842] Bluetooth: hci4: command tx timeout [ 54.679305][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.681781][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 54.694265][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.706909][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.721956][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.730765][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.739514][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.749036][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.768715][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.779456][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.792116][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.803112][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.815505][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.826831][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.837886][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.851234][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 54.862780][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.862824][ T5834] usb 3-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=e6.7e [ 54.873846][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.887787][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.892509][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.908142][ T5834] usb 3-1: Product: syz [ 54.912416][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.916416][ T5834] usb 3-1: Manufacturer: syz [ 54.925979][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.933996][ T5834] usb 3-1: SerialNumber: syz [ 54.941389][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.948373][ T5834] usb 3-1: config 0 descriptor?? [ 54.961156][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.970654][ T5834] usb 3-1: bad CDC descriptors [ 54.971804][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.001782][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.026167][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.037092][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.047789][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.058498][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.068710][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.079177][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.090162][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.098158][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.110687][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.120729][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.131253][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.141797][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.154019][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.164206][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.174767][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.184726][ T2149] usb 3-1: USB disconnect, device number 2 [ 55.185494][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.217000][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.226148][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.234906][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.243764][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.281748][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.292247][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.302212][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.310959][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.336999][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.349710][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.351595][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.361807][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.409442][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.414865][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.425975][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.434420][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.507233][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.521086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.529801][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.538959][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.540312][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.560252][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.620612][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.628462][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.070504][ T965] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.091145][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 56.200507][ T2149] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 56.231555][ T965] usb 5-1: Using ep0 maxpacket: 8 [ 56.272025][ T5840] usb 3-1: config index 0 descriptor too short (expected 244, got 18) [ 56.285719][ T965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.287297][ T5840] usb 3-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 56.306331][ T5840] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 56.314487][ T5840] usb 3-1: Product: syz [ 56.318657][ T5840] usb 3-1: Manufacturer: syz [ 56.323362][ T5840] usb 3-1: SerialNumber: syz [ 56.332604][ T5840] usb 3-1: config 0 descriptor?? [ 56.336507][ T965] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=63.1d [ 56.339821][ T5840] ldusb 3-1:0.0: Interrupt in endpoint not found [ 56.354736][ T965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.364707][ T965] usb 5-1: Product: syz [ 56.368887][ T965] usb 5-1: Manufacturer: syz [ 56.376292][ T965] usb 5-1: SerialNumber: syz [ 56.381762][ T2149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.385373][ T965] usb 5-1: config 0 descriptor?? [ 56.403781][ T2149] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 56.413427][ T5881] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 56.429427][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.437601][ T2149] usb 4-1: Product: syz [ 56.441821][ T2149] usb 4-1: Manufacturer: syz [ 56.446437][ T2149] usb 4-1: SerialNumber: syz [ 56.461735][ T2149] usb 4-1: config 0 descriptor?? [ 56.472864][ T2149] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 56.582395][ T5955] usb 3-1: USB disconnect, device number 3 [ 56.610999][ T5834] usb 5-1: USB disconnect, device number 2 [ 56.631984][ T5881] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 56.640009][ T5881] usb 2-1: config 0 has no interface number 0 [ 56.647033][ T5881] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 56.659012][ T5881] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 56.669983][ T5842] Bluetooth: hci2: command tx timeout [ 56.670007][ T5835] Bluetooth: hci0: command tx timeout [ 56.675572][ T5847] Bluetooth: hci3: command tx timeout [ 56.681108][ T5839] Bluetooth: hci1: command tx timeout [ 56.728857][ T5882] usb 4-1: USB disconnect, device number 2 [ 56.736520][ T5881] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 56.745946][ T5839] Bluetooth: hci4: command tx timeout [ 56.752803][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 56.761196][ T5881] usb 2-1: Product: syz [ 56.765375][ T5881] usb 2-1: SerialNumber: syz [ 56.774011][ T5881] usb 2-1: config 0 descriptor?? [ 56.782008][ T5881] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 56.789651][ T5881] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 56.840573][ T2149] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 56.987381][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 56.995103][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.003036][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.010692][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.017834][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.025050][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.032284][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.039379][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.046322][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 57.055586][ T5882] usb 2-1: USB disconnect, device number 2 [ 57.064017][ T2149] usb 1-1: config 102 has an invalid interface number: 25 but max is 0 [ 57.073371][ T2149] usb 1-1: config 102 has no interface number 0 [ 57.079752][ T5882] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 57.088287][ T2149] usb 1-1: config 102 interface 25 has no altsetting 0 [ 57.098082][ T2149] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 57.119637][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.128805][ T2149] usb 1-1: Product: syz [ 57.134488][ T2149] usb 1-1: Manufacturer: syz [ 57.140678][ T2149] usb 1-1: SerialNumber: syz [ 57.385476][ T2149] usb 1-1: no audio or video endpoints found [ 57.428218][ T2149] usb 1-1: USB disconnect, device number 2 [ 57.550328][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 57.627297][ T5993] futex_wake_op: syz.4.35 tries to shift op by -1; fix this program [ 57.722620][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 57.732812][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 57.733119][ T6001] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 57.748549][ T6001] PKCS7: Only support pkcs7_signedData type [ 57.765856][ T9] usb 4-1: config 0 interface 0 has no altsetting 1 [ 57.806339][ T9] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 57.836253][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.861259][ T9] usb 4-1: SerialNumber: syz [ 57.875841][ T9] usb 4-1: config 0 descriptor?? [ 57.909486][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 57.921045][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 57.971467][ T9] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 58.101388][ T5883] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 58.130020][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.151614][ T5883] usb 2-1: config 0 has no interface number 0 [ 58.174195][ T5883] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 58.200867][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.209804][ T965] usb 4-1: USB disconnect, device number 3 [ 58.227436][ T5883] usb 2-1: Product: syz [ 58.235539][ T5883] usb 2-1: Manufacturer: syz [ 58.242170][ T5883] usb 2-1: SerialNumber: syz [ 58.257859][ T5883] usb 2-1: config 0 descriptor?? [ 58.273490][ T5883] em28xx 2-1:0.230: audio device (2013:0251): interface 230, class 1 [ 58.470383][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.493729][ T965] usb 2-1: USB disconnect, device number 3 [ 58.502895][ T5910] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.551115][ T5883] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 58.650285][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 58.656416][ T9] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 58.665474][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 58.670792][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.682258][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.691441][ T9] usb 1-1: config 1 has no interface number 0 [ 58.697559][ T9] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.708850][ T5910] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 58.719241][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 58.724378][ T9] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.734513][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.745498][ T5839] Bluetooth: hci0: command tx timeout [ 58.755271][ T5835] Bluetooth: hci3: command tx timeout [ 58.755293][ T5847] Bluetooth: hci2: command tx timeout [ 58.762457][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 58.777910][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 58.778144][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.799793][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 58.810869][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.819176][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.828296][ T5847] Bluetooth: hci4: command tx timeout [ 58.834251][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 50274, setting to 1024 [ 58.846157][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.854200][ T9] usb 1-1: Product: syz [ 58.858346][ T9] usb 1-1: Manufacturer: syz [ 58.862995][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.875898][ T5910] usb 5-1: Product: syz [ 58.880047][ T5910] usb 5-1: Manufacturer: syz [ 58.884676][ T9] usb 1-1: SerialNumber: syz [ 58.889642][ T5910] usb 5-1: SerialNumber: syz [ 58.896577][ T9] cdc_wdm 1-1:1.128: skipping garbage [ 58.902270][ T5883] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 58.914783][ T9] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 58.923545][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.931612][ T9] cdc_wdm 1-1:1.128: Unknown control protocol [ 58.953910][ T5883] usb 3-1: config 0 descriptor?? [ 58.961737][ T6039] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 58.973651][ T5883] metro_usb 3-1:0.0: Metrologic USB to Serial converter detected [ 58.984106][ T5883] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 59.026241][ T2149] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 59.119312][ T5955] usb 1-1: USB disconnect, device number 3 [ 59.149508][ T5910] usb 5-1: 0:2 : does not exist [ 59.176527][ T5910] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 59.190133][ T5910] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 59.202892][ T5910] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 59.205637][ T5882] usb 3-1: USB disconnect, device number 4 [ 59.215733][ T5910] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 59.219959][ T5882] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 59.238442][ T2149] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 59.251139][ T2149] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 59.262088][ T5882] metro_usb 3-1:0.0: device disconnected [ 59.267993][ T5910] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 59.269928][ T2149] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 59.286660][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.298502][ T5910] usb 5-1: USB disconnect, device number 3 [ 59.430395][ T5881] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 59.481530][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 59.508517][ T2149] usb 4-1: string descriptor 0 read error: -71 [ 59.515564][ T2149] hub 4-1:32.0: USB hub found [ 59.521915][ T2149] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 59.562933][ T2149] usb 4-1: USB disconnect, device number 4 [ 59.594489][ T5881] usb 2-1: not running at top speed; connect to a high speed hub [ 59.603618][ T5881] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 59.612873][ T5881] usb 2-1: config 95 has no interface number 0 [ 59.631397][ T5881] usb 2-1: config 95 interface 1 has no altsetting 0 [ 59.639898][ T5881] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 59.649030][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.657714][ T5881] usb 2-1: Product: syz [ 59.661930][ T5881] usb 2-1: Manufacturer: syz [ 59.667148][ T5881] usb 2-1: SerialNumber: syz [ 59.952115][ T5881] usb 2-1: USB disconnect, device number 4 [ 60.036921][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 60.036937][ T29] audit: type=1400 audit(1731983526.863:141): avc: denied { read append } for pid=6067 comm="syz.0.70" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 60.040638][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.047205][ T29] audit: type=1400 audit(1731983526.863:142): avc: denied { ioctl open } for pid=6067 comm="syz.0.70" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 60.162368][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 60.181820][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.250847][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 60.269615][ T5910] usb 5-1: config 6 has an invalid interface number: 35 but max is 1 [ 60.288463][ T5910] usb 5-1: config 6 has an invalid interface number: 39 but max is 1 [ 60.303830][ T5910] usb 5-1: config 6 has no interface number 0 [ 60.310557][ T5910] usb 5-1: config 6 has no interface number 1 [ 60.316828][ T5910] usb 5-1: config 6 interface 35 has no altsetting 0 [ 60.345446][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 60.357354][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.372741][ T5910] usb 5-1: config 6 interface 39 has no altsetting 0 [ 60.380170][ T9] usb 3-1: config 0 has no interface number 0 [ 60.388365][ T9] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.412052][ T5910] usb 5-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=28.ad [ 60.429228][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.452426][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 60.475207][ T5910] usb 5-1: Product: syz [ 60.479494][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 60.501332][ T5910] usb 5-1: Manufacturer: syz [ 60.506288][ T6088] dccp_invalid_packet: invalid packet type [ 60.520277][ T5910] usb 5-1: SerialNumber: syz [ 60.525572][ T9] usb 3-1: Product: syz [ 60.534972][ T9] usb 3-1: SerialNumber: syz [ 60.551730][ T9] usb 3-1: config 0 descriptor?? [ 60.561278][ T9] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 60.720533][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 60.768256][ T5910] usb 5-1: USB disconnect, device number 4 [ 60.780571][ T2149] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 60.782238][ T965] usb 3-1: USB disconnect, device number 5 [ 60.881504][ T5883] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 60.889798][ T5883] usb 2-1: config 0 has no interface number 0 [ 60.898540][ T5883] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=e4.94 [ 60.908553][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.916856][ T5883] usb 2-1: Product: syz [ 60.921147][ T5883] usb 2-1: Manufacturer: syz [ 60.925738][ T5883] usb 2-1: SerialNumber: syz [ 60.931666][ T5883] usb 2-1: config 0 descriptor?? [ 60.938323][ T5883] quatech2 2-1:0.154: Quatech 2nd gen USB to Serial Driver converter detected [ 60.952624][ T2149] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 60.961017][ T2149] usb 1-1: config 5 has no interface number 0 [ 60.967209][ T2149] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 60.979001][ T2149] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 72, setting to 64 [ 60.990535][ T2149] usb 1-1: config 5 interface 123 has no altsetting 0 [ 60.999990][ T2149] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 61.009090][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.017263][ T2149] usb 1-1: Product: syz [ 61.020329][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 61.021460][ T2149] usb 1-1: Manufacturer: syz [ 61.033715][ T2149] usb 1-1: SerialNumber: syz [ 61.040354][ T6092] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 61.144067][ T5883] usb 2-1: qt2_attach - failed to power on unit: -71 [ 61.155475][ T5883] quatech2 2-1:0.154: probe with driver quatech2 failed with error -71 [ 61.166166][ T5883] usb 2-1: USB disconnect, device number 5 [ 61.182117][ T9] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 61.191302][ T9] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 61.199221][ T9] usb 4-1: config 0 has no interface number 0 [ 61.206296][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 61.215538][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.225013][ T9] usb 4-1: config 0 descriptor?? [ 61.231667][ T9] usb 4-1: bad CDC descriptors [ 61.265268][ T2149] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 61.281538][ T2149] usb 1-1: USB disconnect, device number 4 [ 61.449559][ T5882] usb 4-1: USB disconnect, device number 5 [ 61.575907][ T6121] tmpfs: Bad value for 'size' [ 61.580910][ T5883] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 61.734851][ T5883] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 61.744164][ T5883] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 61.752740][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.762897][ T5883] usb 5-1: config 0 has no interface number 0 [ 61.769059][ T5883] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 61.778934][ T5883] usb 5-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.791003][ T5883] usb 5-1: config 0 interface 106 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 61.802263][ T5883] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 61.816836][ T5883] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 61.826149][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.836350][ T5883] usb 5-1: config 0 descriptor?? [ 61.856530][ T5883] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 61.866141][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 61.992850][ T2149] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 62.031588][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 62.042876][ T9] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 62.058246][ T9] usb 3-1: config 0 has no interface number 0 [ 62.080298][ T9] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 62.099644][ T35] usb 5-1: Failed to submit usb control message: -71 [ 62.099874][ T5883] usb 5-1: USB disconnect, device number 5 [ 62.106849][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 62.107531][ T35] usb 5-1: unable to send the bmi data to the device: -71 [ 62.113426][ T9] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 62.127831][ T35] usb 5-1: unable to get target info from device [ 62.139872][ T9] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 62.149681][ T35] usb 5-1: could not get target info (-71) [ 62.155296][ T9] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.160941][ T2149] usb 2-1: Using ep0 maxpacket: 8 [ 62.176401][ T35] usb 5-1: could not probe fw (-71) [ 62.181193][ T2149] usb 2-1: config 0 has an invalid interface number: 112 but max is 1 [ 62.181765][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 62.191779][ T2149] usb 2-1: config 0 has an invalid interface number: 17 but max is 1 [ 62.199941][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.207370][ T2149] usb 2-1: config 0 has no interface number 0 [ 62.222363][ T2149] usb 2-1: config 0 has no interface number 1 [ 62.228327][ T9] usb 3-1: config 0 descriptor?? [ 62.237349][ T2149] usb 2-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14 [ 62.250399][ T2149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.258362][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.265789][ T2149] usb 2-1: Product: syz [ 62.269953][ T2149] usb 2-1: Manufacturer: syz [ 62.274973][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 62.280718][ T2149] usb 2-1: SerialNumber: syz [ 62.291673][ T5882] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 62.300951][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 62.309686][ T2149] usb 2-1: config 0 descriptor?? [ 62.320770][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.334009][ T5882] usb 1-1: Product: syz [ 62.338370][ T5882] usb 1-1: Manufacturer: syz [ 62.343899][ T5882] usb 1-1: SerialNumber: syz [ 62.349903][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.377116][ T5882] usb 1-1: config 0 descriptor?? [ 62.460320][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 62.466762][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 62.476227][ T5840] usb 4-1: config 0 interface 0 has no altsetting 1 [ 62.484720][ T5840] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 62.494310][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.496358][ T5883] usb 3-1: USB disconnect, device number 6 [ 62.502663][ T5840] usb 4-1: Product: syz [ 62.514567][ T5840] usb 4-1: Manufacturer: syz [ 62.519206][ T5840] usb 4-1: SerialNumber: syz [ 62.525785][ T5840] usb 4-1: config 0 descriptor?? [ 62.560745][ T9] usb 2-1: USB disconnect, device number 6 [ 62.595952][ T965] usb 1-1: USB disconnect, device number 5 [ 62.756432][ T5881] usb 4-1: USB disconnect, device number 6 [ 62.980395][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.103021][ T29] audit: type=1400 audit(1731983529.933:143): avc: denied { mounton } for pid=6145 comm="syz.1.105" path="/13" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.130291][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 63.148909][ T9] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 63.169723][ T9] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 63.190605][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1606, bcdDevice=35.8a [ 63.206645][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.214756][ T9] usb 5-1: Product: syz [ 63.218984][ T9] usb 5-1: Manufacturer: syz [ 63.224859][ T9] usb 5-1: SerialNumber: syz [ 63.241672][ T6152] dccp_invalid_packet: P.Data Offset(0) too small [ 63.247961][ T9] f81232 5-1:6.0: f81534a converter detected [ 63.320666][ T5881] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 63.430387][ T2149] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 63.454038][ T9] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 63.471672][ T9] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 63.487781][ T9] usb 5-1: USB disconnect, device number 6 [ 63.488337][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.496481][ T9] f81232 5-1:6.0: device disconnected [ 63.528232][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.544796][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.550385][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.560071][ T5881] usb 3-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 63.580431][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.588446][ T5881] usb 3-1: Product: syz [ 63.592903][ T5881] usb 3-1: Manufacturer: syz [ 63.597503][ T5881] usb 3-1: SerialNumber: syz [ 63.621969][ T5881] usb 3-1: config 0 descriptor?? [ 63.627690][ T2149] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 63.636142][ T2149] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.646983][ T2149] usb 2-1: config 0 has no interface number 0 [ 63.653161][ T2149] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.664095][ T2149] usb 2-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.682484][ T2149] usb 2-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 63.691621][ T2149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.699649][ T2149] usb 2-1: Product: syz [ 63.704174][ T2149] usb 2-1: Manufacturer: syz [ 63.708788][ T2149] usb 2-1: SerialNumber: syz [ 63.710368][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 63.721526][ T2149] usb 2-1: config 0 descriptor?? [ 63.727781][ T5883] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 63.738197][ T5883] usb 4-1: config 0 has no interface number 0 [ 63.746318][ T5883] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.762435][ T5883] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 63.771840][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 63.779993][ T5883] usb 4-1: Product: syz [ 63.784882][ T5883] usb 4-1: Manufacturer: syz [ 63.794534][ T5883] usb 4-1: SerialNumber: syz [ 63.815924][ T5883] usb 4-1: config 0 descriptor?? [ 63.823443][ T5883] em28xx 4-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 63.833441][ T5883] em28xx 4-1:0.191: Video interface 191 found: isoc [ 63.848938][ T5881] usb 3-1: USB disconnect, device number 7 [ 63.863704][ T965] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 63.944465][ T2149] usb 2-1: Found UVC 0.00 device syz (05ac:8600) [ 63.951099][ T2149] usb 2-1: No valid video chain found. [ 63.958084][ T2149] usb 2-1: USB disconnect, device number 7 [ 64.020440][ T965] usb 1-1: Using ep0 maxpacket: 16 [ 64.047060][ T965] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 64.069541][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.088333][ T965] usb 1-1: config 0 descriptor?? [ 64.095614][ T965] gspca_main: etoms-2.14.0 probing 102c:6151 [ 64.102766][ T5883] em28xx 4-1:0.191: unknown em28xx chip ID (0) [ 64.164188][ T5883] em28xx 4-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 64.174146][ T5883] em28xx 4-1:0.191: board has no eeprom [ 64.232113][ T5883] em28xx 4-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 64.239980][ T5883] em28xx 4-1:0.191: analog set to isoc mode. [ 64.246899][ T5880] em28xx 4-1:0.191: Registering V4L2 extension [ 64.273644][ T5883] usb 4-1: USB disconnect, device number 7 [ 64.280197][ T5883] em28xx 4-1:0.191: Disconnecting em28xx [ 64.292290][ T5881] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 64.342566][ T5880] em28xx 4-1:0.191: Config register raw data: 0xffffffed [ 64.353507][ T965] usb 1-1: USB disconnect, device number 6 [ 64.368781][ T5880] em28xx 4-1:0.191: AC97 chip type couldn't be determined [ 64.380112][ T5880] em28xx 4-1:0.191: No AC97 audio processor [ 64.410450][ T5880] usb 4-1: Decoder not found [ 64.432715][ T5880] em28xx 4-1:0.191: failed to create media graph [ 64.439096][ T5880] em28xx 4-1:0.191: V4L2 device video103 deregistered [ 64.466648][ T5880] em28xx 4-1:0.191: Remote control support is not available for this card. [ 64.466680][ T6175] ================================================================== [ 64.476863][ T5883] em28xx 4-1:0.191: Closing input extension [ 64.483310][ T6175] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 64.483336][ T6175] Read of size 8 at addr ffff88807ccc8738 by task v4l_id/6175 [ 64.483349][ T6175] [ 64.483355][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: v4l_id Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 64.483373][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 64.483383][ T6175] Call Trace: [ 64.483389][ T6175] [ 64.483397][ T6175] dump_stack_lvl+0x116/0x1f0 [ 64.537258][ T6175] print_report+0xc3/0x620 [ 64.541655][ T6175] ? __virt_addr_valid+0x5e/0x590 [ 64.546663][ T6175] ? __phys_addr+0xc6/0x150 [ 64.551144][ T6175] kasan_report+0xd9/0x110 [ 64.555597][ T6175] ? v4l2_fh_init+0x27d/0x2c0 [ 64.560287][ T6175] ? v4l2_fh_init+0x27d/0x2c0 [ 64.564968][ T6175] v4l2_fh_init+0x27d/0x2c0 [ 64.569448][ T6175] v4l2_fh_open+0x83/0xc0 [ 64.573765][ T6175] em28xx_v4l2_open+0x250/0x7e0 [ 64.578603][ T6175] v4l2_open+0x222/0x490 [ 64.582849][ T6175] ? __pfx_v4l2_open+0x10/0x10 [ 64.587591][ T6175] chrdev_open+0x237/0x6a0 [ 64.591982][ T6175] ? __pfx_chrdev_open+0x10/0x10 [ 64.596896][ T6175] ? security_file_open+0x62a/0x9d0 [ 64.602068][ T6175] do_dentry_open+0x6ca/0x1530 [ 64.606807][ T6175] ? __pfx_chrdev_open+0x10/0x10 [ 64.611718][ T6175] ? inode_permission+0xdd/0x5f0 [ 64.616634][ T6175] vfs_open+0x82/0x3f0 [ 64.620680][ T6175] ? may_open+0x1f2/0x400 [ 64.624983][ T6175] path_openat+0x1e6a/0x2d60 [ 64.629556][ T6175] ? __pfx_path_openat+0x10/0x10 [ 64.634466][ T6175] ? __pfx___lock_acquire+0x10/0x10 [ 64.639638][ T6175] do_filp_open+0x20c/0x470 [ 64.644116][ T6175] ? __pfx_do_filp_open+0x10/0x10 [ 64.649124][ T6175] ? find_held_lock+0x2d/0x110 [ 64.653868][ T6175] ? alloc_fd+0x41f/0x760 [ 64.658182][ T6175] do_sys_openat2+0x17a/0x1e0 [ 64.662842][ T6175] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.668018][ T6175] ? do_user_addr_fault+0xe50/0x13f0 [ 64.673285][ T6175] ? __pfx_lock_release+0x10/0x10 [ 64.678314][ T6175] ? trace_lock_acquire+0x14a/0x1d0 [ 64.683497][ T6175] __x64_sys_openat+0x175/0x210 [ 64.688341][ T6175] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.693703][ T6175] ? do_user_addr_fault+0x83d/0x13f0 [ 64.698973][ T6175] do_syscall_64+0xcd/0x250 [ 64.700299][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 64.703459][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.703486][ T6175] RIP: 0033:0x7f0c72b169a4 [ 64.721184][ T6175] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 64.740794][ T6175] RSP: 002b:00007ffd7e7ed000 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.749198][ T6175] RAX: ffffffffffffffda RBX: 00007ffd7e7ed218 RCX: 00007f0c72b169a4 [ 64.757148][ T6175] RDX: 0000000000000000 RSI: 00007ffd7e7eef1e RDI: 00000000ffffff9c [ 64.765093][ T6175] RBP: 00007ffd7e7eef1e R08: 0000000000000000 R09: 0000000000000000 [ 64.773040][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.780994][ T6175] R13: 00007ffd7e7ed230 R14: 000055c8fd21f670 R15: 00007f0c7308ca80 [ 64.789047][ T6175] [ 64.792064][ T6175] [ 64.794371][ T6175] Allocated by task 5880: [ 64.798667][ T6175] kasan_save_stack+0x33/0x60 [ 64.803324][ T6175] kasan_save_track+0x14/0x30 [ 64.807973][ T6175] __kasan_kmalloc+0xaa/0xb0 [ 64.812534][ T6175] em28xx_v4l2_init+0x114/0x4050 [ 64.817454][ T6175] em28xx_init_extension+0x137/0x200 [ 64.822713][ T6175] request_module_async+0x61/0x70 [ 64.827712][ T6175] process_one_work+0x9c5/0x1ba0 [ 64.832630][ T6175] worker_thread+0x6c8/0xf00 [ 64.837219][ T6175] kthread+0x2c1/0x3a0 [ 64.841274][ T6175] ret_from_fork+0x45/0x80 [ 64.845663][ T6175] ret_from_fork_asm+0x1a/0x30 [ 64.850403][ T6175] [ 64.852702][ T6175] Freed by task 5880: [ 64.856650][ T6175] kasan_save_stack+0x33/0x60 [ 64.860280][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 64.861294][ T6175] kasan_save_track+0x14/0x30 [ 64.867655][ T9] usb 3-1: config 13 has an invalid interface number: 196 but max is 0 [ 64.871024][ T6175] kasan_save_free_info+0x3b/0x60 [ 64.871052][ T6175] __kasan_slab_free+0x51/0x70 [ 64.871070][ T6175] kfree+0x14f/0x4b0 [ 64.871085][ T6175] em28xx_v4l2_init+0x22a4/0x4050 [ 64.881329][ T9] usb 3-1: config 13 has no interface number 0 [ 64.884293][ T6175] em28xx_init_extension+0x137/0x200 [ 64.892363][ T9] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice= a.67 [ 64.892884][ T6175] request_module_async+0x61/0x70 [ 64.897883][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.903997][ T6175] process_one_work+0x9c5/0x1ba0 [ 64.904016][ T6175] worker_thread+0x6c8/0xf00 [ 64.904031][ T6175] kthread+0x2c1/0x3a0 [ 64.904048][ T6175] ret_from_fork+0x45/0x80 [ 64.904063][ T6175] ret_from_fork_asm+0x1a/0x30 [ 64.904086][ T6175] [ 64.904090][ T6175] The buggy address belongs to the object at ffff88807ccc8000 [ 64.904090][ T6175] which belongs to the cache kmalloc-8k of size 8192 [ 64.904104][ T6175] The buggy address is located 1848 bytes inside of [ 64.904104][ T6175] freed 8192-byte region [ffff88807ccc8000, ffff88807ccca000) [ 64.904120][ T6175] [ 64.904124][ T6175] The buggy address belongs to the physical page: [ 64.904131][ T6175] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ccc8 [ 64.911006][ T9] usb 3-1: Product: syz [ 64.918363][ T6175] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 64.924324][ T9] usb 3-1: Manufacturer: syz [ 64.931303][ T6175] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 64.931320][ T6175] page_type: f5(slab) [ 64.931335][ T6175] raw: 00fff00000000040 ffff88801b042280 0000000000000000 0000000000000001 [ 64.931350][ T6175] raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 64.931365][ T6175] head: 00fff00000000040 ffff88801b042280 0000000000000000 0000000000000001 [ 64.931380][ T6175] head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 64.936780][ T9] usb 3-1: SerialNumber: syz [ 64.940855][ T6175] head: 00fff00000000003 ffffea0001f33201 ffffffffffffffff 0000000000000000 [ 64.940871][ T6175] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 64.940880][ T6175] page dumped because: kasan: bad access detected [ 64.940888][ T6175] page_owner tracks the page as allocated [ 64.940893][ T6175] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5494, tgid 5494 (dhcpcd), ts 27446268170, free_ts 27433400545 [ 65.119808][ T6175] post_alloc_hook+0x2d1/0x350 [ 65.124571][ T6175] get_page_from_freelist+0xfce/0x2f80 [ 65.130010][ T6175] __alloc_pages_noprof+0x223/0x25a0 [ 65.135275][ T6175] alloc_pages_mpol_noprof+0x2c9/0x610 [ 65.140731][ T6175] new_slab+0x2c9/0x410 [ 65.144876][ T6175] ___slab_alloc+0xdac/0x1880 [ 65.149531][ T6175] __slab_alloc.constprop.0+0x56/0xb0 [ 65.154899][ T6175] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 65.161324][ T6175] kmalloc_reserve+0xef/0x2c0 [ 65.161747][ T9] cypress_m8 3-1:13.196: DeLorme Earthmate USB converter detected [ 65.165990][ T6175] __alloc_skb+0x164/0x380 [ 65.177925][ T9] earthmate ttyUSB0: required endpoint is missing [ 65.178154][ T6175] netlink_dump+0x2c1/0xcc0 [ 65.189050][ T6175] netlink_recvmsg+0xa0d/0xf30 [ 65.193824][ T6175] sock_recvmsg+0x1f6/0x250 [ 65.197119][ T9] usb 3-1: USB disconnect, device number 8 [ 65.198324][ T6175] ____sys_recvmsg+0x219/0x6b0 [ 65.208862][ T6175] ___sys_recvmsg+0x115/0x1a0 [ 65.213099][ T9] cypress_m8 3-1:13.196: device disconnected [ 65.213522][ T6175] __sys_recvmsg+0x16b/0x220 [ 65.224056][ T6175] page last free pid 5608 tgid 5608 stack trace: [ 65.230372][ T6175] free_unref_page+0x661/0x1080 [ 65.235223][ T6175] __put_partials+0x14c/0x170 [ 65.239893][ T6175] qlist_free_all+0x4e/0x120 [ 65.244457][ T6175] kasan_quarantine_reduce+0x192/0x1e0 [ 65.249894][ T6175] __kasan_slab_alloc+0x69/0x90 [ 65.254748][ T6175] kmem_cache_alloc_noprof+0x121/0x2f0 [ 65.260182][ T6175] getname_flags.part.0+0x4c/0x550 [ 65.265270][ T6175] getname+0x8d/0xe0 [ 65.269136][ T6175] do_sys_openat2+0x104/0x1e0 [ 65.273789][ T6175] __x64_sys_openat+0x175/0x210 [ 65.278622][ T6175] do_syscall_64+0xcd/0x250 [ 65.283127][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.289021][ T6175] [ 65.291342][ T6175] Memory state around the buggy address: [ 65.296961][ T6175] ffff88807ccc8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.305024][ T6175] ffff88807ccc8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.313077][ T6175] >ffff88807ccc8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.321106][ T6175] ^ [ 65.326966][ T6175] ffff88807ccc8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.335004][ T6175] ffff88807ccc8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.343038][ T6175] ================================================================== [ 65.357583][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.370909][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 65.372892][ T6175] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.372903][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: v4l_id Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 65.372922][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 65.372931][ T6175] Call Trace: [ 65.372936][ T6175] [ 65.372942][ T6175] dump_stack_lvl+0x3d/0x1f0 [ 65.372968][ T6175] panic+0x71d/0x800 [ 65.372990][ T6175] ? __pfx_panic+0x10/0x10 [ 65.373010][ T6175] ? irqentry_exit+0x3b/0x90 [ 65.373031][ T6175] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.373051][ T6175] ? preempt_schedule_thunk+0x1a/0x30 [ 65.373067][ T6175] ? preempt_schedule_common+0x44/0xc0 [ 65.373086][ T6175] ? check_panic_on_warn+0x1f/0xb0 [ 65.373108][ T6175] check_panic_on_warn+0xab/0xb0 [ 65.373130][ T6175] end_report+0x117/0x180 [ 65.373149][ T6175] kasan_report+0xe9/0x110 [ 65.373167][ T6175] ? v4l2_fh_init+0x27d/0x2c0 [ 65.373183][ T6175] ? v4l2_fh_init+0x27d/0x2c0 [ 65.373198][ T6175] v4l2_fh_init+0x27d/0x2c0 [ 65.373212][ T6175] v4l2_fh_open+0x83/0xc0 [ 65.373226][ T6175] em28xx_v4l2_open+0x250/0x7e0 [ 65.373244][ T6175] v4l2_open+0x222/0x490 [ 65.373265][ T6175] ? __pfx_v4l2_open+0x10/0x10 [ 65.373285][ T6175] chrdev_open+0x237/0x6a0 [ 65.373301][ T6175] ? __pfx_chrdev_open+0x10/0x10 [ 65.373318][ T6175] ? security_file_open+0x62a/0x9d0 [ 65.373335][ T6175] do_dentry_open+0x6ca/0x1530 [ 65.373350][ T6175] ? __pfx_chrdev_open+0x10/0x10 [ 65.373366][ T6175] ? inode_permission+0xdd/0x5f0 [ 65.373385][ T6175] vfs_open+0x82/0x3f0 [ 65.373403][ T6175] ? may_open+0x1f2/0x400 [ 65.373422][ T6175] path_openat+0x1e6a/0x2d60 [ 65.373441][ T6175] ? __pfx_path_openat+0x10/0x10 [ 65.373455][ T6175] ? __pfx___lock_acquire+0x10/0x10 [ 65.373472][ T6175] do_filp_open+0x20c/0x470 [ 65.373487][ T6175] ? __pfx_do_filp_open+0x10/0x10 [ 65.373501][ T6175] ? find_held_lock+0x2d/0x110 [ 65.373525][ T6175] ? alloc_fd+0x41f/0x760 [ 65.373541][ T6175] do_sys_openat2+0x17a/0x1e0 [ 65.373560][ T6175] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.373584][ T6175] ? do_user_addr_fault+0xe50/0x13f0 [ 65.373598][ T6175] ? __pfx_lock_release+0x10/0x10 [ 65.373612][ T6175] ? trace_lock_acquire+0x14a/0x1d0 [ 65.373632][ T6175] __x64_sys_openat+0x175/0x210 [ 65.373650][ T6175] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.373670][ T6175] ? do_user_addr_fault+0x83d/0x13f0 [ 65.373686][ T6175] do_syscall_64+0xcd/0x250 [ 65.373707][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.373728][ T6175] RIP: 0033:0x7f0c72b169a4 [ 65.373740][ T6175] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 65.373755][ T6175] RSP: 002b:00007ffd7e7ed000 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.373770][ T6175] RAX: ffffffffffffffda RBX: 00007ffd7e7ed218 RCX: 00007f0c72b169a4 [ 65.373781][ T6175] RDX: 0000000000000000 RSI: 00007ffd7e7eef1e RDI: 00000000ffffff9c [ 65.373791][ T6175] RBP: 00007ffd7e7eef1e R08: 0000000000000000 R09: 0000000000000000 [ 65.373800][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.373810][ T6175] R13: 00007ffd7e7ed230 R14: 000055c8fd21f670 R15: 00007f0c7308ca80 [ 65.373824][ T6175] [ 65.382543][ T6175] Kernel Offset: disabled