last executing test programs: 3m37.094654369s ago: executing program 4 (id=526): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 3m36.225854994s ago: executing program 4 (id=543): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) close_range(r0, 0xffffffffffffffff, 0x0) 3m36.169474787s ago: executing program 4 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008802"]) 3m36.041567298s ago: executing program 4 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 3m35.936283765s ago: executing program 4 (id=549): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m35.668580393s ago: executing program 4 (id=555): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000000)) 3m35.465908206s ago: executing program 32 (id=555): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000000)) 48.165991569s ago: executing program 1 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 40.073508002s ago: executing program 1 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 31.414883208s ago: executing program 1 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 23.240681194s ago: executing program 1 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 14.250419074s ago: executing program 1 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 5.894397832s ago: executing program 1 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 4.061660244s ago: executing program 3 (id=3617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 3.928190365s ago: executing program 3 (id=3621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.55095381s ago: executing program 3 (id=3637): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 2.483890577s ago: executing program 5 (id=3638): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x9) 1.526849849s ago: executing program 3 (id=3640): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) 1.385831466s ago: executing program 0 (id=3643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x800) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, 0x8) 1.335825108s ago: executing program 0 (id=3644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) 1.243024912s ago: executing program 0 (id=3646): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.192138238s ago: executing program 0 (id=3648): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r1, &(0x7f0000000100)=""/100, 0x64) 1.056532132s ago: executing program 0 (id=3650): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x2000, 0x0) 488.016049ms ago: executing program 2 (id=3657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) 487.819399ms ago: executing program 2 (id=3658): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0xf5) r2 = io_uring_setup(0x7a4, &(0x7f00000003c0)={0x0, 0xdf09, 0x800, 0x5}) close_range(r2, 0xffffffffffffffff, 0x0) dup2(r1, r0) 426.025731ms ago: executing program 5 (id=3659): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0xd, @udp_ip4_spec={@broadcast, @multicast2, 0x4e24, 0x4e23, 0x8}, @tcp_ip4_spec={@rand_addr=0x64010100, @multicast1, 0x4e23, 0x4e20, 0x8}, 0x401, 0xfffe, 0xd4, 0x6, 0xffffffffffffffff}}}) 377.944149ms ago: executing program 2 (id=3660): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) 343.720426ms ago: executing program 5 (id=3661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 331.090267ms ago: executing program 2 (id=3662): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 279.791642ms ago: executing program 5 (id=3663): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 269.554812ms ago: executing program 2 (id=3664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000019c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x0) 198.547949ms ago: executing program 5 (id=3665): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) 178.882131ms ago: executing program 0 (id=3666): syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x2a, r0, 0x0) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) 160.636253ms ago: executing program 3 (id=3667): r0 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550d, 0x0) 115.15835ms ago: executing program 2 (id=3668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}}, 0x20}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 20.114417ms ago: executing program 5 (id=3669): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) close(r0) 0s ago: executing program 3 (id=3670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0xb5, 0x0, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x0, r2}) kernel console output (not intermixed with test programs): 1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.306406][T12790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.322264][ T82] hsr_slave_0: left promiscuous mode [ 253.329726][ T82] hsr_slave_1: left promiscuous mode [ 253.336849][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.344509][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.352042][ T5862] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 253.360627][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.369061][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.388536][ T82] veth1_macvtap: left promiscuous mode [ 253.394120][ T82] veth0_macvtap: left promiscuous mode [ 253.400266][ T82] veth1_vlan: left promiscuous mode [ 253.405959][ T82] veth0_vlan: left promiscuous mode [ 253.528470][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.549228][ T5862] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 253.575554][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.588574][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.605687][ T30] audit: type=1400 audit(1746658769.324:749): avc: denied { read } for pid=12836 comm="syz.5.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.638290][T12829] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.658850][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.880029][ T5828] usb 1-1: USB disconnect, device number 39 [ 253.880708][ T5822] Bluetooth: hci0: command tx timeout [ 254.001946][ T82] team0 (unregistering): Port device team_slave_1 removed [ 254.038651][ T82] team0 (unregistering): Port device team_slave_0 removed [ 254.362487][T12790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.372283][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.400315][T12790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.525081][T12790] hsr_slave_0: entered promiscuous mode [ 254.538449][T12790] hsr_slave_1: entered promiscuous mode [ 254.544606][T12790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.552486][T12790] Cannot create hsr debugfs directory [ 254.933437][ T30] audit: type=1400 audit(1746658770.654:750): avc: denied { read } for pid=12863 comm="syz.3.3019" name="/" dev="configfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.959789][ T30] audit: type=1400 audit(1746658770.654:751): avc: denied { open } for pid=12863 comm="syz.3.3019" path="/640/file0" dev="configfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.991979][ T30] audit: type=1400 audit(1746658770.714:752): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 255.087576][T12790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.097624][T12790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.111351][T12790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.124433][T12790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.202907][T12790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.223388][T12790] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.236475][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.243639][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.257980][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.265108][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.318213][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.325936][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.416575][T12790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.447825][T12790] veth0_vlan: entered promiscuous mode [ 255.455655][ T5865] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 255.467956][T12790] veth1_vlan: entered promiscuous mode [ 255.489755][T12790] veth0_macvtap: entered promiscuous mode [ 255.503016][T12790] veth1_macvtap: entered promiscuous mode [ 255.541912][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.552748][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.563289][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.582141][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.594677][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.610470][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.621921][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.633338][T12790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.643743][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 255.661505][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.672180][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.682929][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.693083][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 255.705525][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.707554][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 255.726606][ T5865] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 255.734693][ T5865] usb 4-1: Manufacturer: syz [ 255.737292][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.746423][ T5865] usb 4-1: config 0 descriptor?? [ 255.753284][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.764927][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.775562][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.786576][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.798711][T12790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.815827][T12790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.824921][T12790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.834063][T12790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.845078][T12790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.923996][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.936262][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.958495][ T5822] Bluetooth: hci0: command tx timeout [ 255.965510][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.981680][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.032237][ T5865] rc_core: IR keymap rc-hauppauge not found [ 256.038877][ T5865] Registered IR keymap rc-empty [ 256.052758][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.075534][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.096331][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 256.108841][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 256.123978][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.145528][ T5864] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 256.146393][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.176740][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.195881][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.215899][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.235717][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.257221][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.277139][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.295558][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.306001][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 256.313263][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 256.315711][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.326999][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.342348][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.346895][ T5865] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 256.352088][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 256.366250][ T5865] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 256.380773][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 256.396179][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 256.405321][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.422448][ T5828] usb 4-1: USB disconnect, device number 37 [ 256.434853][ T5864] usb 1-1: config 0 descriptor?? [ 256.443743][T12888] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 257.103454][ T5865] usb 1-1: USB disconnect, device number 40 [ 257.105084][ T5822] Bluetooth: hci0: Opcode 0x0c03 failed: -19 [ 257.789719][ T3525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.170984][T12939] SELinux: failed to load policy [ 259.278104][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.291321][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.304730][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.324213][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.345639][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.382403][ T3525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.510215][ T3447] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.544374][ T3525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.690614][ T3525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.861967][T12946] chnl_net:caif_netlink_parms(): no params data found [ 259.987388][ T3525] bridge_slave_1: left allmulticast mode [ 259.995680][ T3525] bridge_slave_1: left promiscuous mode [ 259.997118][T12989] Bluetooth: MGMT ver 1.23 [ 260.001414][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.017955][ T3525] bridge_slave_0: left allmulticast mode [ 260.022978][T12984] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 260.023892][ T3525] bridge_slave_0: left promiscuous mode [ 260.073181][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.451375][T13004] overlayfs: missing 'lowerdir' [ 260.993288][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.008504][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.018072][ T3525] bond0 (unregistering): Released all slaves [ 261.153693][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.190273][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.211426][T12946] bridge_slave_0: entered allmulticast mode [ 261.225804][T12946] bridge_slave_0: entered promiscuous mode [ 261.279009][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.292351][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.310744][T12946] bridge_slave_1: entered allmulticast mode [ 261.326792][T12946] bridge_slave_1: entered promiscuous mode [ 261.375927][ T5862] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 261.406491][T12946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.422256][T12946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.456564][ T3525] hsr_slave_0: left promiscuous mode [ 261.462231][ T3525] hsr_slave_1: left promiscuous mode [ 261.468414][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.477128][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.484725][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.492251][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.509554][ T3525] veth1_macvtap: left promiscuous mode [ 261.515072][ T3525] veth0_macvtap: left promiscuous mode [ 261.520724][ T3525] veth1_vlan: left promiscuous mode [ 261.526416][ T3525] veth0_vlan: left promiscuous mode [ 261.545575][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 261.556677][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.585487][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.595266][ T5862] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 261.619506][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.642486][ T5862] usb 1-1: config 0 descriptor?? [ 261.911560][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 261.944606][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 262.059398][ T5862] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 262.078371][ T5862] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 262.103081][ T5862] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 262.118689][ T5862] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 262.118689][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 262.125771][ T5862] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 262.126344][ T5862] appleir 0003:05AC:8241.0032: No inputs registered, leaving [ 262.179952][ T5862] appleir 0003:05AC:8241.0032: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 262.397588][ T5828] usb 1-1: USB disconnect, device number 41 [ 262.446365][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 262.476831][T13063] loop5: detected capacity change from 0 to 4671 [ 262.507421][T13063] loop5: detected capacity change from 4671 to 7655 [ 262.629720][T12946] team0: Port device team_slave_0 added [ 262.655341][T12946] team0: Port device team_slave_1 added [ 262.726348][T12946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.733321][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.805783][T12946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.820189][T12946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.835197][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.875486][T12946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.987962][T12946] hsr_slave_0: entered promiscuous mode [ 262.994651][T12946] hsr_slave_1: entered promiscuous mode [ 263.029005][T12946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.045705][T12946] Cannot create hsr debugfs directory [ 263.620124][T12946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.649405][T12946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.663289][T12946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.677696][T12946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.762235][T13110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.830748][T12946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.870522][T12946] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.903475][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.910669][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.939122][ T30] audit: type=1400 audit(1746658779.664:753): avc: denied { bind } for pid=13117 comm="syz.5.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.963278][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.970448][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.257580][T12946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.301255][T13138] veth0: entered promiscuous mode [ 264.312131][T12946] veth0_vlan: entered promiscuous mode [ 264.324859][T13138] veth0: left promiscuous mode [ 264.351163][T12946] veth1_vlan: entered promiscuous mode [ 264.360687][T13140] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3136'. [ 264.392780][T12946] veth0_macvtap: entered promiscuous mode [ 264.410125][T12946] veth1_macvtap: entered promiscuous mode [ 264.433773][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.445130][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.455919][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.466568][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.476475][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.487092][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.498333][T12946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.515819][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 264.523793][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.525852][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.562298][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.573143][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.587421][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.598271][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.611724][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.623034][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.638260][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.691526][T12946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.721896][T12946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.753525][T12946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.764765][T12946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.773825][T12946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.885729][T13154] syz.0.3142 (13154) used greatest stack depth: 20472 bytes left [ 264.914827][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.936165][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.995037][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.005994][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.381658][ T82] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.402218][T13180] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.445028][ T82] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.508617][T13187] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3155'. [ 265.815888][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 265.988051][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.999371][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.013391][ T10] usb 4-1: config 0 descriptor?? [ 266.025595][ T10] cp210x 4-1:0.0: cp210x converter detected [ 266.366790][ T5862] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 266.398967][ T3447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.438556][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 266.548971][ T5862] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 266.558288][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.566511][ T5862] usb 1-1: Product: syz [ 266.570723][ T5862] usb 1-1: Manufacturer: syz [ 266.575875][ T5862] usb 1-1: SerialNumber: syz [ 266.582649][ T5862] usb 1-1: config 0 descriptor?? [ 266.591191][ T5862] ch341 1-1:0.0: ch341-uart converter detected [ 266.659858][ T10] usb 4-1: cp210x converter now attached to ttyUSB1 [ 266.868461][ T10] usb 4-1: USB disconnect, device number 38 [ 266.876752][ T10] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 266.885542][ T10] cp210x 4-1:0.0: device disconnected [ 267.395745][ T5822] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.395756][ T5826] Bluetooth: hci0: command 0x1003 tx timeout [ 267.403789][ T5862] usb 1-1: failed to send control message: -71 [ 267.425351][ T5862] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 267.441356][ T5862] usb 1-1: USB disconnect, device number 42 [ 267.448244][ T5862] ch341 1-1:0.0: device disconnected [ 267.698964][ T3447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.999127][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.002493][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3172'. [ 268.031902][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.041728][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.056110][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.071272][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.072250][ T3447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.252532][ T3447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.388935][ T5862] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 268.397366][ T30] audit: type=1400 audit(1746658784.104:754): avc: denied { write } for pid=13244 comm="syz.3.3179" name="file0" dev="tmpfs" ino=3451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.514985][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3181'. [ 268.524230][T13227] chnl_net:caif_netlink_parms(): no params data found [ 268.590200][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 268.603818][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.618101][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.628378][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 268.635063][ T5862] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 268.657754][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.682223][ T5862] usb 3-1: config 0 descriptor?? [ 268.724186][ T3447] bridge_slave_1: left allmulticast mode [ 268.732042][ T3447] bridge_slave_1: left promiscuous mode [ 268.738266][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.747367][ T3447] bridge_slave_0: left allmulticast mode [ 268.753010][ T3447] bridge_slave_0: left promiscuous mode [ 268.759796][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.905608][ T5892] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 269.001109][T13275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13275 comm=syz.5.3190 [ 269.079006][ T5892] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 269.094194][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.110102][ T5862] hid (null): global environment stack underflow [ 269.110610][ T5892] usb 1-1: config 0 descriptor?? [ 269.138763][ T5892] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 269.161487][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.172832][T13279] input: syz1 as /devices/virtual/input/input59 [ 269.183651][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.194089][ T3447] bond0 (unregistering): Released all slaves [ 269.224972][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.232539][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.250588][T13227] bridge_slave_0: entered allmulticast mode [ 269.258656][T13227] bridge_slave_0: entered promiscuous mode [ 269.284418][T13271] wireguard: wg1: Could not create IPv4 socket [ 269.291386][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.306547][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.320572][ T5865] usb 3-1: USB disconnect, device number 39 [ 269.343899][T13227] bridge_slave_1: entered allmulticast mode [ 269.354849][T13227] bridge_slave_1: entered promiscuous mode [ 269.479233][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.541776][ T5892] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 269.552596][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.622142][ T5864] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 269.640718][ T5864] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 269.663937][ T3447] hsr_slave_0: left promiscuous mode [ 269.670268][ T3447] hsr_slave_1: left promiscuous mode [ 269.677925][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.685385][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.694284][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.701789][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.723591][ T3447] veth1_macvtap: left promiscuous mode [ 269.729290][ T3447] veth0_macvtap: left promiscuous mode [ 269.734909][ T3447] veth1_vlan: left promiscuous mode [ 269.740379][ T3447] veth0_vlan: left promiscuous mode [ 269.895635][ T24] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 269.961254][ T5892] gspca_cpia1: usb_control_msg 02, error -71 [ 269.985535][ T5892] gspca_cpia1: usb_control_msg 05, error -71 [ 269.991565][ T5892] cpia1 1-1:0.0: unexpected systemstate: 00 [ 270.013418][ T5892] usb 1-1: USB disconnect, device number 43 [ 270.076968][ T24] usb 4-1: config 0 has no interfaces? [ 270.087313][ T24] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 270.099667][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.107892][ T24] usb 4-1: Product: syz [ 270.112336][ T24] usb 4-1: Manufacturer: syz [ 270.117228][ T5822] Bluetooth: hci0: command tx timeout [ 270.133173][ T24] usb 4-1: SerialNumber: syz [ 270.152089][ T24] usb 4-1: config 0 descriptor?? [ 270.390247][ T5892] usb 4-1: USB disconnect, device number 39 [ 270.468475][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 270.527299][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 270.910157][T13227] team0: Port device team_slave_0 added [ 270.924805][T13227] team0: Port device team_slave_1 added [ 271.000887][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.008679][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.040963][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.056739][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.070063][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.116952][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.223747][T13227] hsr_slave_0: entered promiscuous mode [ 271.239250][T13227] hsr_slave_1: entered promiscuous mode [ 271.255211][T13227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.272585][T13227] Cannot create hsr debugfs directory [ 271.323391][T13336] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 271.340201][T13336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.352027][T13336] overlayfs: failed to get uuid (654/file1, err=-13); falling back to uuid=null. [ 271.421388][ T30] audit: type=1400 audit(1746658787.144:755): avc: denied { accept } for pid=13337 comm="syz.5.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.509068][T13343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3220'. [ 271.545644][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 271.722118][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 271.731885][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 271.745471][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.753491][ T24] usb 4-1: Product: syz [ 271.775619][ T24] usb 4-1: Manufacturer: syz [ 271.780270][ T24] usb 4-1: SerialNumber: syz [ 271.855166][T13227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.868761][T13227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.885747][T13227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.977991][T13227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.995913][T13355] netlink: 'syz.2.3225': attribute type 29 has an invalid length. [ 272.034405][T13356] netlink: 'syz.2.3225': attribute type 29 has an invalid length. [ 272.056773][T13355] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3225'. [ 272.137273][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.168119][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.189080][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.196281][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.206477][ T5822] Bluetooth: hci0: command tx timeout [ 272.216981][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input60 [ 272.262905][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.270084][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.285578][ T5865] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 272.446498][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 272.453241][ T5865] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 272.470159][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.484680][ T5865] pvrusb2: Hardware description: Terratec Grabster AV400 [ 272.494718][ T5865] pvrusb2: ********** [ 272.500534][ T5865] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 272.513241][ T5865] pvrusb2: Important functionality might not be entirely working. [ 272.524580][ T5865] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 272.533553][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.536475][ T5865] pvrusb2: ********** [ 272.587238][T13227] veth0_vlan: entered promiscuous mode [ 272.605289][T13227] veth1_vlan: entered promiscuous mode [ 272.649117][T13227] veth0_macvtap: entered promiscuous mode [ 272.661855][T13227] veth1_macvtap: entered promiscuous mode [ 272.681644][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.699990][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.712291][ T2334] pvrusb2: Invalid write control endpoint [ 272.727914][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.742522][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.752548][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.763582][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.774769][T13227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.793456][ T2334] pvrusb2: Invalid write control endpoint [ 272.812395][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.815177][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 272.836764][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 272.843712][ T5171] bcm5974 4-1:1.0: could not read from device [ 272.846166][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 272.853686][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.862534][ T2334] pvrusb2: Device being rendered inoperable [ 272.881272][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 272.890185][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 272.890849][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.912625][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.919618][ T2334] pvrusb2: Attached sub-driver cx25840 [ 272.929586][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.932395][T13358] pvrusb2: Attempted to execute control transfer when device not ok [ 272.942722][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.954686][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 272.965217][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.974944][ T9] usb 1-1: USB disconnect, device number 44 [ 272.982084][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.988257][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 272.999873][T13227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.020403][ T5171] bcm5974 4-1:1.0: could not read from device [ 273.031749][ T24] usb 4-1: USB disconnect, device number 40 [ 273.046742][T13382] syzkaller1: entered promiscuous mode [ 273.052251][T13382] syzkaller1: entered allmulticast mode [ 273.084769][T13227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.104799][T13227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.113635][T13227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.122710][T13227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.198671][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.214727][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.251343][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.259818][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.681602][T13399] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.694242][T13399] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 273.793000][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 274.069558][ T24] kernel write not supported for file /1448/attr/exec (pid: 24 comm: kworker/1:0) [ 274.621128][ T1162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.633697][ T1162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.011943][T13430] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 276.204958][ T1162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.244912][ T5862] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 276.318210][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.326978][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.328914][ T1162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.338371][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.356267][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.368941][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.386087][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.406299][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 276.420426][ T5862] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 276.436152][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.454365][ T5862] usb 3-1: Product: syz [ 276.464458][ T5862] usb 3-1: Manufacturer: syz [ 276.472593][T13450] tracefs: Invalid uid '0x00000000ffffffff' [ 276.474645][ T5862] usb 3-1: SerialNumber: syz [ 276.479676][ T30] audit: type=1400 audit(1746658792.194:756): avc: denied { remount } for pid=13449 comm="syz.0.3262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 276.496601][ T5862] usb 3-1: config 0 descriptor?? [ 276.515601][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 276.522127][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 276.534306][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.547894][ T5862] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 276.555577][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 276.566979][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 276.579111][ T5862] usb 3-1: Detected FT-X [ 276.622480][ T9] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 276.645551][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.669175][ T9] usb 4-1: Product: syz [ 276.683989][ T9] usb 4-1: Manufacturer: syz [ 276.694449][ T9] usb 4-1: SerialNumber: syz [ 276.706281][ T9] usb 4-1: config 0 descriptor?? [ 276.714529][T13432] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 276.726905][ T1162] bridge_slave_1: left allmulticast mode [ 276.732596][ T1162] bridge_slave_1: left promiscuous mode [ 276.744214][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.767712][ T5862] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 276.779693][ T1162] bridge_slave_0: left allmulticast mode [ 276.785395][ T1162] bridge_slave_0: left promiscuous mode [ 276.797579][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.951921][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 276.976352][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 277.200813][ T5862] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 277.291969][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.303004][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.313671][ T1162] bond0 (unregistering): Released all slaves [ 277.355650][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 277.373710][T13443] chnl_net:caif_netlink_parms(): no params data found [ 277.449578][ T5863] usb 3-1: USB disconnect, device number 40 [ 277.456673][ C0] powermate: config urb returned -71 [ 277.462137][ C0] powermate: config urb returned -71 [ 277.467593][ C0] powermate: config urb returned -71 [ 277.480020][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 277.489157][ T5862] usb 4-1: USB disconnect, device number 41 [ 277.498851][ T5863] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 277.514833][ T5863] ftdi_sio 3-1:0.0: device disconnected [ 277.540642][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.552555][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.564287][T13443] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.570491][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.574758][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.585691][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.596211][T13443] bridge_slave_0: entered allmulticast mode [ 277.600771][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.610271][T13443] bridge_slave_0: entered promiscuous mode [ 277.616512][ T9] usb 1-1: config 0 descriptor?? [ 277.649812][T13443] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.657198][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.664370][T13443] bridge_slave_1: entered allmulticast mode [ 277.672130][T13443] bridge_slave_1: entered promiscuous mode [ 277.707721][ T1162] hsr_slave_0: left promiscuous mode [ 277.713608][ T1162] hsr_slave_1: left promiscuous mode [ 277.720131][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.728476][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.738119][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.745785][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.761595][ T1162] veth1_macvtap: left promiscuous mode [ 277.767579][ T1162] veth0_macvtap: left promiscuous mode [ 277.773132][ T1162] veth1_vlan: left promiscuous mode [ 277.778447][ T1162] veth0_vlan: left promiscuous mode [ 278.040610][ T9] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 278.089542][ T9] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 278.306988][ T9] usb 1-1: USB disconnect, device number 45 [ 278.374685][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 278.395532][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 278.421724][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 278.439791][ T5826] Bluetooth: hci0: command tx timeout [ 278.548833][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 278.571590][ T24] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 278.594471][ T24] usb 6-1: config 0 has no interface number 0 [ 278.624330][ T24] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 278.648078][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.664825][ T24] usb 6-1: Product: syz [ 278.679741][ T24] usb 6-1: Manufacturer: syz [ 278.689964][ T24] usb 6-1: SerialNumber: syz [ 278.715711][ T24] usb 6-1: config 0 descriptor?? [ 278.963973][ T24] kaweth 6-1:0.235: Firmware present in device. [ 278.971388][ T30] audit: type=1400 audit(1746658794.684:757): avc: denied { create } for pid=13511 comm="syz.0.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 278.992041][ T30] audit: type=1400 audit(1746658794.704:758): avc: denied { read } for pid=13511 comm="syz.0.3288" path="socket:[51903]" dev="sockfs" ino=51903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 279.109544][T13516] Bluetooth: MGMT ver 1.23 [ 279.142571][ T24] kaweth 6-1:0.235: Statistics collection: 0 [ 279.148731][ T24] kaweth 6-1:0.235: Multicast filter limit: 0 [ 279.154809][ T24] kaweth 6-1:0.235: MTU: 0 [ 279.166802][ T24] kaweth 6-1:0.235: Read MAC address 00:00:00:00:00:00 [ 279.282789][T13443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.308338][T13443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.407521][T13443] team0: Port device team_slave_0 added [ 279.423016][T13443] team0: Port device team_slave_1 added [ 279.480786][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 279.489979][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 279.521706][T13443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.540435][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.567117][T13443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.583977][T13443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.591501][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.625717][ T48] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 279.646840][T13443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.671982][ T30] audit: type=1400 audit(1746658795.394:759): avc: denied { rename } for pid=13530 comm="syz.0.3297" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.740445][T13443] hsr_slave_0: entered promiscuous mode [ 279.753621][ T24] kaweth 6-1:0.235: Error setting receive filter [ 279.763883][T13443] hsr_slave_1: entered promiscuous mode [ 279.770893][T13443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.771031][ T24] kaweth 6-1:0.235: probe with driver kaweth failed with error -5 [ 279.778622][T13443] Cannot create hsr debugfs directory [ 279.799670][ T24] usb 6-1: USB disconnect, device number 34 [ 279.852679][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.894897][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.909380][ T48] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 279.920956][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.937957][ T48] usb 3-1: config 0 descriptor?? [ 280.245272][T13550] Bluetooth: MGMT ver 1.23 [ 280.375957][ T5862] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 280.398306][T13443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.418838][T13443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.442803][T13443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.454433][T13443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.515590][ T5826] Bluetooth: hci0: command tx timeout [ 280.538167][ T5862] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 280.550472][ T48] usb 3-1: string descriptor 0 read error: -22 [ 280.557934][T13443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.567709][ T5862] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 280.592933][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.609738][T13443] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.618636][ T5862] usb 4-1: Product: syz [ 280.622809][ T5862] usb 4-1: Manufacturer: syz [ 280.629840][ T5862] usb 4-1: SerialNumber: syz [ 280.640223][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.647392][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.648655][ T5862] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 280.668096][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.675308][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.685637][ T5864] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 280.780120][ T48] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input62 [ 280.853630][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.872347][ T48] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input63 [ 280.886804][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.919314][ T5864] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 280.934594][ T48] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input64 [ 280.947311][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.959784][ T5864] usb 1-1: config 0 descriptor?? [ 280.982256][ T48] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input65 [ 280.991346][T13443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.029324][ T48] uclogic 0003:256C:006D.0036: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 281.054183][T13443] veth0_vlan: entered promiscuous mode [ 281.056682][ T48] usb 3-1: USB disconnect, device number 41 [ 281.078702][T13443] veth1_vlan: entered promiscuous mode [ 281.105402][T13443] veth0_macvtap: entered promiscuous mode [ 281.123694][T13443] veth1_macvtap: entered promiscuous mode [ 281.145230][T13443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.157009][T13443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.167961][T13443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.182757][T13443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.193592][T13443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.204857][T13443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.222724][T13443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.240356][T13443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.252028][T13443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.262480][T13443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.275206][ T5862] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 281.287463][T13443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.302360][ T5862] usb 4-1: USB disconnect, device number 42 [ 281.308438][T13443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.323162][T13443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.333343][T13443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.344341][T13443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.355743][T13443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.366897][T13443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.376274][T13443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.384977][T13443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.394407][T13443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.400302][ T5864] playstation 0003:054C:0DF2.0037: unknown main item tag 0x0 [ 281.412000][ T5864] playstation 0003:054C:0DF2.0037: unknown main item tag 0x0 [ 281.429391][ T5864] playstation 0003:054C:0DF2.0037: item fetching failed at offset 2/5 [ 281.439251][ T5864] playstation 0003:054C:0DF2.0037: Parse failed [ 281.449422][ T5864] playstation 0003:054C:0DF2.0037: probe with driver playstation failed with error -22 [ 281.491392][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.509086][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.556764][ T5892] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 281.567151][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.577617][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.625165][ T5863] usb 1-1: USB disconnect, device number 46 [ 281.717574][ T5892] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.727980][ T5892] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.738991][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.751225][ T5892] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 281.763429][ T5892] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 281.774920][T13586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3320'. [ 281.776162][ T5892] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.793825][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.796969][T13586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3320'. [ 281.806303][ T5892] usb 6-1: Product: syz [ 281.815018][ T5892] usb 6-1: Manufacturer: syz [ 281.833273][ T5892] cdc_wdm 6-1:1.0: skipping garbage [ 281.838980][ T5892] cdc_wdm 6-1:1.0: skipping garbage [ 281.854234][ T5892] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 281.860544][ T5892] cdc_wdm 6-1:1.0: Unknown control protocol [ 281.888638][T13589] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3321'. [ 281.953624][T13594] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 282.245572][ T5892] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 282.398705][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.415522][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.425293][ T5892] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 282.441934][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.452894][ T5892] usb 3-1: config 0 descriptor?? [ 282.796094][ T5863] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 282.868401][ T5892] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 282.875714][ T5892] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 282.883108][T13618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.889994][ T5892] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 282.899676][ T5892] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 282.906731][ T5892] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 282.913611][ T5892] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 282.921350][ T5892] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 282.930332][ T5892] arvo 0003:1E7D:30D4.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 282.948010][ T5863] usb 1-1: config 2 has an invalid interface number: 86 but max is 0 [ 282.956184][ T5863] usb 1-1: config 2 has no interface number 0 [ 282.962949][ T5863] usb 1-1: config 2 interface 86 has no altsetting 0 [ 282.986530][ T5863] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=bb.2e [ 283.005990][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.014033][ T5863] usb 1-1: Product: syz [ 283.018462][ T5863] usb 1-1: Manufacturer: syz [ 283.023060][ T5863] usb 1-1: SerialNumber: syz [ 283.131886][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.251306][ T5863] mvusb_mdio 1-1:2.86: probe with driver mvusb_mdio failed with error -5 [ 283.261966][ T5863] usb 1-1: USB disconnect, device number 47 [ 283.289483][ T5892] usb 3-1: USB disconnect, device number 42 [ 284.312172][ T5864] usb 6-1: USB disconnect, device number 35 [ 284.757289][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.900547][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.973993][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.987764][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.998312][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.022068][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.032106][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.043303][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.080161][T13656] Invalid source name [ 285.269047][ T82] bridge_slave_1: left allmulticast mode [ 285.274785][ T82] bridge_slave_1: left promiscuous mode [ 285.278593][T13670] Bluetooth: MGMT ver 1.23 [ 285.280649][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.294804][ T82] bridge_slave_0: left allmulticast mode [ 285.304774][ T82] bridge_slave_0: left promiscuous mode [ 285.310618][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.376368][T13675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.428632][ T5863] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 285.580639][ T30] audit: type=1326 audit(1746658801.304:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13639 comm="syz.0.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a078e969 code=0x7fc00000 [ 285.605754][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 285.638453][ T5863] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.667941][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 285.689203][ T5863] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 285.704836][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.731241][ T5863] usb 4-1: config 0 descriptor?? [ 285.782711][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.795275][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.808720][ T82] bond0 (unregistering): Released all slaves [ 286.042199][T13691] syzkaller1: entered promiscuous mode [ 286.050791][T13691] syzkaller1: entered allmulticast mode [ 286.061931][T13651] chnl_net:caif_netlink_parms(): no params data found [ 286.137511][T13705] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 286.137511][T13705] The task syz.0.3368 (13705) triggered the difference, watch for misbehavior. [ 286.163031][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.175780][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.191761][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 286.201798][ T5863] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.219422][ T5863] usb 4-1: USB disconnect, device number 43 [ 286.251373][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.258750][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.270815][T13651] bridge_slave_0: entered allmulticast mode [ 286.279832][T13651] bridge_slave_0: entered promiscuous mode [ 286.292208][ T82] hsr_slave_0: left promiscuous mode [ 286.299805][ T82] hsr_slave_1: left promiscuous mode [ 286.305741][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.313183][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.320630][ T5865] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 286.330302][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.338440][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.354256][ T82] veth1_macvtap: left promiscuous mode [ 286.360486][ T82] veth0_macvtap: left promiscuous mode [ 286.366377][ T82] veth1_vlan: left promiscuous mode [ 286.371761][ T82] veth0_vlan: left promiscuous mode [ 286.511343][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 286.525247][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 286.547617][ T5862] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 286.555604][ T5865] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 286.577462][ T5865] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 286.586267][ T5865] usb 6-1: config 4 has no interface number 0 [ 286.617471][ T5865] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 286.632329][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.642126][ T5865] usb 6-1: Product: syz [ 286.646659][ T5865] usb 6-1: Manufacturer: syz [ 286.651266][ T5865] usb 6-1: SerialNumber: syz [ 286.741123][ T5862] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 286.751993][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.764127][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.778053][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 286.789133][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.802211][ T5862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.811343][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.822009][ T5862] usb 3-1: config 0 descriptor?? [ 286.862005][ T82] team0 (unregistering): Port device team_slave_1 removed [ 286.871202][ T5865] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 286.880527][ T5865] usb 6-1: No valid video chain found. [ 286.893953][ T5865] usb 6-1: USB disconnect, device number 36 [ 286.933859][ T82] team0 (unregistering): Port device team_slave_0 removed [ 286.985890][ T5863] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 287.076088][ T5822] Bluetooth: hci0: command tx timeout [ 287.166234][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 287.177315][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.190759][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.201474][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.214478][ T5863] usb 4-1: New USB device found, idVendor=0400, idProduct=07da, bcdDevice= 0.00 [ 287.223833][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.244766][ T5862] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 287.257818][ T5863] usb 4-1: config 0 descriptor?? [ 287.270071][ T5862] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 287.290914][ T5862] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 287.580634][ T5862] usb 3-1: USB disconnect, device number 43 [ 287.670809][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.678144][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.685411][T13651] bridge_slave_1: entered allmulticast mode [ 287.700784][ T5863] hid-generic 0003:0400:07DA.003A: unknown main item tag 0x0 [ 287.715182][T13651] bridge_slave_1: entered promiscuous mode [ 287.724558][ T5863] hid-generic 0003:0400:07DA.003A: unbalanced collection at end of report description [ 287.738571][ T5863] hid-generic 0003:0400:07DA.003A: probe with driver hid-generic failed with error -22 [ 287.786513][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.804661][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.904236][ T5862] usb 4-1: USB disconnect, device number 44 [ 287.928635][T13651] team0: Port device team_slave_0 added [ 287.952708][T13651] team0: Port device team_slave_1 added [ 288.026522][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.048702][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.077008][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.089462][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.100754][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.133032][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.143645][ T5826] Bluetooth: hci1: command 0x0405 tx timeout [ 288.211582][T13651] hsr_slave_0: entered promiscuous mode [ 288.213386][T13749] cgroup: Unknown subsys name 'cpuset' [ 288.218343][T13651] hsr_slave_1: entered promiscuous mode [ 288.229189][T13651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.237332][T13651] Cannot create hsr debugfs directory [ 288.663075][T13651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.686167][T13651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.687438][ T5865] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 288.704555][T13651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.714963][T13651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.721994][ T5862] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 288.830208][T13651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.868940][T13651] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.888885][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 288.894145][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 288.903606][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.903747][ T5865] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.910771][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.927475][ T5862] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 288.938786][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.940444][ T5862] usb 1-1: config 0 has an invalid interface number: 98 but max is 1 [ 288.945939][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.953974][ T5865] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 288.979035][ T5862] usb 1-1: config 0 has no interface number 0 [ 288.985386][ T5862] usb 1-1: config 0 has no interface number 1 [ 288.992495][ T5865] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 289.015230][ T5862] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 289.027781][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.044349][ T5865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.055740][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.063759][ T5865] usb 4-1: Product: syz [ 289.068128][ T5862] usb 1-1: Product: syz [ 289.072299][ T5862] usb 1-1: Manufacturer: syz [ 289.078492][ T5865] usb 4-1: Manufacturer: syz [ 289.083147][ T5865] usb 4-1: SerialNumber: syz [ 289.087888][ T5862] usb 1-1: SerialNumber: syz [ 289.109084][ T5862] usb 1-1: config 0 descriptor?? [ 289.139464][ T5863] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 289.165582][ T5826] Bluetooth: hci0: command tx timeout [ 289.181637][T13651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.220914][T13651] veth0_vlan: entered promiscuous mode [ 289.231474][T13651] veth1_vlan: entered promiscuous mode [ 289.236283][ T5862] viperboard 1-1:0.61: version 0.00 found at bus 001 address 048 [ 289.263631][T13651] veth0_macvtap: entered promiscuous mode [ 289.273477][T13651] veth1_macvtap: entered promiscuous mode [ 289.274469][ T5862] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 289.294272][ T5862] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 289.301360][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.316286][ T5862] viperboard 1-1:0.98: version 0.00 found at bus 001 address 048 [ 289.326855][T13758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.334091][T13758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.341411][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.352440][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.363848][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.363897][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.363921][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.381880][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.395653][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.408323][ T5862] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 289.426451][T13651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.442753][ T5862] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 289.447601][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.460042][ T5863] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 289.478095][ T5862] usb 1-1: USB disconnect, device number 48 [ 289.481160][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.491164][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.496570][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.504102][ T5863] usb 6-1: config 0 descriptor?? [ 289.522394][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.532674][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.545412][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.558607][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.576119][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.587938][T13651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.598746][T13651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.607794][T13651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.619909][T13651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.628846][T13651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.734794][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3400'. [ 289.746665][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.754499][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.763653][T13785] netlink: 'syz.2.3400': attribute type 7 has an invalid length. [ 289.773921][T13785] netlink: 'syz.2.3400': attribute type 8 has an invalid length. [ 289.781920][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 289.795064][T13785] gretap0: entered promiscuous mode [ 289.801629][T13785] gretap0: left promiscuous mode [ 289.812589][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.821058][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.930948][ T5863] hid-led 0003:0FC5:B080.003B: unknown main item tag 0x0 [ 290.129405][ T5863] hid-led 0003:0FC5:B080.003B: probe with driver hid-led failed with error -71 [ 290.143013][ T5863] usb 6-1: USB disconnect, device number 37 [ 290.180985][ T5865] cdc_ncm 4-1:1.0: bind() failure [ 290.189951][ T5865] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 290.199660][ T5865] cdc_ncm 4-1:1.1: bind() failure [ 290.208257][ T5865] usb 4-1: USB disconnect, device number 45 [ 290.537021][ T1134] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.663022][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3405'. [ 290.759034][ T30] audit: type=1400 audit(1746658806.474:761): avc: denied { create } for pid=13802 comm="syz.5.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 290.960690][ T30] audit: type=1400 audit(1746658806.684:762): avc: denied { watch watch_reads } for pid=13813 comm="syz.2.3413" path="/717/file0" dev="tmpfs" ino=3684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.440985][ T1134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.556050][ T5863] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 291.715664][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 291.722391][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.733443][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.743647][ T5863] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 291.752732][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.762243][ T5863] usb 6-1: config 0 descriptor?? [ 292.578298][ T5863] letsketch 0003:6161:4D15.003C: Device info: 豧 [ 292.761564][ T1134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.806653][ T5863] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 292.814627][ T5863] letsketch 0003:6161:4D15.003C: probe with driver letsketch failed with error -71 [ 292.826845][ T5863] usb 6-1: USB disconnect, device number 38 [ 292.839809][ T1134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.906302][ T1134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.970534][ T1134] bridge_slave_1: left allmulticast mode [ 292.976740][ T1134] bridge_slave_1: left promiscuous mode [ 292.982376][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.990668][ T1134] bridge_slave_0: left allmulticast mode [ 292.997110][ T1134] bridge_slave_0: left promiscuous mode [ 293.002755][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.091050][ T30] audit: type=1400 audit(1746658808.814:763): avc: denied { setopt } for pid=13841 comm="syz.3.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 293.172022][ T30] audit: type=1400 audit(1746658808.894:764): avc: denied { create } for pid=13845 comm="syz.2.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.235657][ T30] audit: type=1400 audit(1746658808.924:765): avc: denied { connect } for pid=13845 comm="syz.2.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.285837][ T30] audit: type=1400 audit(1746658808.924:766): avc: denied { setopt } for pid=13845 comm="syz.2.3425" lport=37821 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.365760][ T30] audit: type=1400 audit(1746658808.944:767): avc: denied { listen } for pid=13845 comm="syz.2.3425" lport=37821 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.427766][ T30] audit: type=1400 audit(1746658808.944:768): avc: denied { accept } for pid=13845 comm="syz.2.3425" lport=37821 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.561578][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.573811][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.583494][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.601388][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.611305][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.819350][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.832684][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.846577][ T1134] bond0 (unregistering): Released all slaves [ 293.864622][T13870] syz_tun: entered promiscuous mode [ 293.874388][T13870] syz_tun: left promiscuous mode [ 293.934149][T13875] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3437'. [ 294.073696][ T5864] Process accounting resumed [ 294.129473][T13890] random: crng reseeded on system resumption [ 294.406403][ T30] audit: type=1400 audit(1746658810.124:769): avc: denied { unmount } for pid=13905 comm="syz.2.3451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 294.440525][T13906] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.460479][ T1134] hsr_slave_0: left promiscuous mode [ 294.472700][ T1134] hsr_slave_1: left promiscuous mode [ 294.494666][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.505549][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.524436][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.547231][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.592332][ T1134] veth1_macvtap: left promiscuous mode [ 294.613887][ T30] audit: type=1400 audit(1746658810.334:770): avc: denied { create } for pid=13918 comm="syz.3.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.615904][ T1134] veth0_macvtap: left promiscuous mode [ 294.643065][ T1134] veth1_vlan: left promiscuous mode [ 294.655720][ T1134] veth0_vlan: left promiscuous mode [ 294.691279][T13922] sctp: [Deprecated]: syz.3.3456 (pid 13922) Use of int in maxseg socket option. [ 294.691279][T13922] Use struct sctp_assoc_value instead [ 294.802306][T13926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.460331][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 295.517239][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 295.555581][ T48] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 295.649862][ T5822] Bluetooth: hci0: command tx timeout [ 295.705645][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 295.717045][ T48] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 295.727496][ T48] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.739124][ T48] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.748992][ T48] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 295.762715][ T48] usb 6-1: config 7 interface 0 has no altsetting 0 [ 295.769431][ T48] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 295.782058][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.003917][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 296.003933][ T30] audit: type=1400 audit(1746658811.724:773): avc: denied { name_bind } for pid=13949 comm="syz.3.3467" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 296.101234][ T30] audit: type=1400 audit(1746658811.814:774): avc: denied { read } for pid=13951 comm="syz.3.3468" path="socket:[54982]" dev="sockfs" ino=54982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.233021][T13863] chnl_net:caif_netlink_parms(): no params data found [ 296.264144][ T48] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.003D/input/input67 [ 296.392339][T13863] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.392532][ T48] kye 0003:0458:5010.003D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 296.413127][T13863] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.423049][T13863] bridge_slave_0: entered allmulticast mode [ 296.434849][T13863] bridge_slave_0: entered promiscuous mode [ 296.443147][T13863] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.450696][T13863] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.458274][T13863] bridge_slave_1: entered allmulticast mode [ 296.465975][T13863] bridge_slave_1: entered promiscuous mode [ 296.523657][ T5865] usb 6-1: USB disconnect, device number 39 [ 296.528258][T13863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.558258][T13863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.588784][ T30] audit: type=1400 audit(1746658812.314:775): avc: denied { write } for pid=13966 comm="syz.0.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 296.610261][ T5862] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 296.634935][T13863] team0: Port device team_slave_0 added [ 296.657607][T13863] team0: Port device team_slave_1 added [ 296.741544][T13863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.748904][T13863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.781750][T13863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.796919][T13863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.801409][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 296.803940][T13863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.821507][T13971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3474'. [ 296.835171][T13863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.912869][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.921454][ T5862] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 296.932227][ T5862] usb 4-1: can't read configurations, error -71 [ 296.941782][T13863] hsr_slave_0: entered promiscuous mode [ 296.959949][T13863] hsr_slave_1: entered promiscuous mode [ 296.966665][T13863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.974275][T13863] Cannot create hsr debugfs directory [ 297.216029][T13986] syzkaller1: entered promiscuous mode [ 297.223624][T13986] syzkaller1: entered allmulticast mode [ 297.274994][T13992] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.284811][T13992] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.293123][T13992] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.300647][T13992] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.308685][T13992] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.316189][T13992] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.365168][ T30] audit: type=1400 audit(1746658813.084:776): avc: denied { bind } for pid=13993 comm="syz.2.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.385209][ T30] audit: type=1400 audit(1746658813.104:777): avc: denied { write } for pid=13993 comm="syz.2.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.444852][ T30] audit: type=1400 audit(1746658813.164:778): avc: denied { getopt } for pid=13997 comm="syz.0.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.465010][T13998] sctp: [Deprecated]: syz.0.3487 (pid 13998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.465010][T13998] Use struct sctp_sack_info instead [ 297.649578][T13863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.668055][T13863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.677998][T13863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.691418][T13863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.715833][ T5822] Bluetooth: hci0: command tx timeout [ 297.859509][T13863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.890394][T13863] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.913780][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.920920][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.932765][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.939952][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.958367][ T30] audit: type=1400 audit(1746658813.684:779): avc: denied { sendto } for pid=5863 comm="kworker/0:5" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 298.010994][T14019] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3495'. [ 298.022152][T14019] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3495'. [ 298.032249][T14019] netlink: 'syz.5.3495': attribute type 6 has an invalid length. [ 298.042969][T14019] netlink: 'syz.5.3495': attribute type 5 has an invalid length. [ 298.052138][T14019] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3495'. [ 298.164540][T13863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.195632][ T5862] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 298.233703][T13863] veth0_vlan: entered promiscuous mode [ 298.252823][T13863] veth1_vlan: entered promiscuous mode [ 298.293243][T13863] veth0_macvtap: entered promiscuous mode [ 298.302588][T13863] veth1_macvtap: entered promiscuous mode [ 298.320783][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.332107][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.342393][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.356425][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 298.363254][ T5862] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.363719][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.384952][ T5862] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.391415][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.396327][ T5862] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 298.416675][ T5862] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 298.432778][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.434988][ T5862] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.457390][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 298.460706][T13863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.473146][ T5862] usb 4-1: SerialNumber: syz [ 298.481215][T14030] netlink: 'syz.5.3498': attribute type 10 has an invalid length. [ 298.484509][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.502672][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.506708][T14004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.513685][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.524343][ T5862] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 298.531178][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.544235][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3498'. [ 298.549174][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.562759][ T5862] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 298.567365][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.585125][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.598808][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.609627][T13863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.618176][T14030] syz_tun: entered promiscuous mode [ 298.638486][T14030] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 298.653771][T13863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.674516][T13863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.684326][T13863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.709663][T13863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.759444][ T5862] usb 4-1: USB disconnect, device number 48 [ 298.842214][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.855784][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.889405][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.899367][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.027380][ T30] audit: type=1400 audit(1746658814.754:780): avc: denied { getopt } for pid=14042 comm="syz.0.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.625680][ T5864] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 299.796539][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 299.802912][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 299.825489][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 299.855510][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.864583][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.887619][ T5864] usb 4-1: config 0 descriptor?? [ 299.893313][T14057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.906872][ T5864] hub 4-1:0.0: USB hub found [ 300.126600][ T5864] hub 4-1:0.0: 1 port detected [ 300.228518][ T30] audit: type=1400 audit(1746658815.954:781): avc: denied { mount } for pid=14073 comm="syz.0.3518" name="/" dev="hugetlbfs" ino=57749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 300.240569][T14074] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 300.269661][T14074] overlayfs: maximum fs stacking depth exceeded [ 300.308764][ T30] audit: type=1400 audit(1746658816.034:782): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 300.332189][ T5864] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 300.340487][ T1205] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 300.358787][ T5864] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 300.367786][ T985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.387321][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 300.393478][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 300.426457][ T5864] usb 4-1: USB disconnect, device number 49 [ 300.507075][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.519104][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.530894][ T1205] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 300.539977][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.549979][ T1205] usb 6-1: config 0 descriptor?? [ 300.963094][ T1205] cp2112 0003:10C4:EA90.003E: unknown main item tag 0x0 [ 300.971645][ T1205] cp2112 0003:10C4:EA90.003E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 301.163776][ T1205] cp2112 0003:10C4:EA90.003E: Part Number: 0x46 Device Version: 0xDB [ 301.364786][ T1205] cp2112 0003:10C4:EA90.003E: error requesting SMBus config [ 301.374958][ T1205] cp2112 0003:10C4:EA90.003E: probe with driver cp2112 failed with error -71 [ 301.386038][ T1205] usb 6-1: USB disconnect, device number 40 [ 301.742789][ T985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.802825][ T985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.848692][ T985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.936270][ T985] bridge_slave_1: left allmulticast mode [ 301.941924][ T985] bridge_slave_1: left promiscuous mode [ 301.947677][ T985] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.956460][ T985] bridge_slave_0: left allmulticast mode [ 301.962103][ T985] bridge_slave_0: left promiscuous mode [ 301.968335][ T985] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.416741][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.428775][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.440123][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.449505][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.469611][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.818211][ T985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.830227][ T985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.840849][ T985] bond0 (unregistering): Released all slaves [ 302.988585][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3536'. [ 303.200253][T14099] chnl_net:caif_netlink_parms(): no params data found [ 303.280143][ T985] hsr_slave_0: left promiscuous mode [ 303.288089][ T985] hsr_slave_1: left promiscuous mode [ 303.293842][ T985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.301836][ T985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.309600][ T985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.317388][ T985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.325760][ T5865] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 303.346403][ T971] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 303.354875][ T985] veth1_macvtap: left promiscuous mode [ 303.363648][ T985] veth0_macvtap: left promiscuous mode [ 303.372072][ T985] veth1_vlan: left promiscuous mode [ 303.380574][ T985] veth0_vlan: left promiscuous mode [ 303.490882][ T5865] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 303.499264][ T5865] usb 1-1: config 0 has no interface number 0 [ 303.505680][ T5865] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 303.521384][ T5865] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 303.530631][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.538849][ T5865] usb 1-1: Product: syz [ 303.543147][ T5865] usb 1-1: Manufacturer: syz [ 303.548154][ T5865] usb 1-1: SerialNumber: syz [ 303.555045][ T5865] usb 1-1: config 0 descriptor?? [ 303.557926][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 303.571008][ T971] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 303.579550][ T971] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 303.593884][ T971] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 303.604416][ T971] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 303.614886][ T971] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.623490][ T30] audit: type=1326 audit(1746658819.344:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.5.3543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26b178e969 code=0x0 [ 303.629419][ T971] usb 3-1: config 0 has no interface number 0 [ 303.659267][ T971] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 303.671716][ T971] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 303.684801][ T971] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.704191][ T971] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.720753][ T971] usb 3-1: config 0 interface 125 has no altsetting 0 [ 303.728131][ T971] usb 3-1: config 0 interface 125 has no altsetting 2 [ 303.736959][ T971] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 303.750313][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.759323][ T971] usb 3-1: Product: syz [ 303.763546][ T971] usb 3-1: Manufacturer: syz [ 303.771439][ T971] usb 3-1: SerialNumber: syz [ 303.781875][ T971] usb 3-1: config 0 descriptor?? [ 303.791653][ T971] usb 3-1: selecting invalid altsetting 2 [ 303.971108][ T985] team0 (unregistering): Port device team_slave_1 removed [ 303.982940][ T5865] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 304.004150][ T5865] usb 1-1: USB disconnect, device number 49 [ 304.033780][ T985] team0 (unregistering): Port device team_slave_0 removed [ 304.447708][T14099] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.454829][T14099] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.497341][T14099] bridge_slave_0: entered allmulticast mode [ 304.505628][T14145] netlink: 'syz.5.3544': attribute type 1 has an invalid length. [ 304.515861][ T5822] Bluetooth: hci0: command tx timeout [ 304.536804][T14099] bridge_slave_0: entered promiscuous mode [ 304.544643][T14099] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.551851][T14099] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.560040][T14099] bridge_slave_1: entered allmulticast mode [ 304.569248][T14099] bridge_slave_1: entered promiscuous mode [ 304.611167][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.639685][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.672095][ C1] usb 3-1: async_complete: urb error -71 [ 304.677864][ C1] usb 3-1: async_complete: urb error -71 [ 304.687141][ T971] get_1284_register: usb error -71 [ 304.692370][ T971] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 304.711047][T14099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.712918][ T971] usb 3-1: USB disconnect, device number 44 [ 304.757908][T14099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.852203][T14099] team0: Port device team_slave_0 added [ 304.889840][T14099] team0: Port device team_slave_1 added [ 305.019823][T14099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.036301][ T30] audit: type=1400 audit(1746658820.754:784): avc: denied { execmod } for pid=14160 comm="syz.0.3553" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 305.063979][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.113994][ T30] audit: type=1400 audit(1746658820.784:785): avc: denied { execute } for pid=14160 comm="syz.0.3553" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 305.141955][T14099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.154327][T14099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.164986][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.195123][T14099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.237767][T14174] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 305.244334][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.268813][T14174] vhci_hcd vhci_hcd.0: Device attached [ 305.283124][T14099] hsr_slave_0: entered promiscuous mode [ 305.297500][T14099] hsr_slave_1: entered promiscuous mode [ 305.303680][T14099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.312886][T14099] Cannot create hsr debugfs directory [ 305.468966][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 305.505618][ T971] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 305.525665][ T5862] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 305.618798][ T30] audit: type=1326 audit(1746658821.344:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.2.3565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f341258e969 code=0x0 [ 305.681032][ T5862] usb 6-1: config 0 has no interfaces? [ 305.689805][ T5862] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 305.700858][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.714033][ T5862] usb 6-1: config 0 descriptor?? [ 305.781252][T14099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.790331][T14099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.800090][T14099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.808899][T14099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.861697][T14099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.878402][T14099] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.890143][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.897295][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.912118][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.919270][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.959028][ T1205] usb 6-1: USB disconnect, device number 41 [ 305.965914][ T48] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 305.968167][T14175] vhci_hcd: connection closed [ 305.974279][ T36] vhci_hcd: stop threads [ 305.993495][ T36] vhci_hcd: release socket [ 305.999998][ T36] vhci_hcd: disconnect device [ 306.016855][ T971] vhci_hcd: vhci_device speed not set [ 306.092985][T14099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.125339][T14099] veth0_vlan: entered promiscuous mode [ 306.132574][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.146526][T14099] veth1_vlan: entered promiscuous mode [ 306.154009][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.168480][ T48] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.180444][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.193787][ T48] usb 4-1: SerialNumber: syz [ 306.202610][T14099] veth0_macvtap: entered promiscuous mode [ 306.213626][T14099] veth1_macvtap: entered promiscuous mode [ 306.227681][T14099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.238883][T14099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.248750][T14099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.259246][T14099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.269139][T14099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.279660][T14099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.291464][T14099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.310889][T14099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.321788][T14099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.332224][T14099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.344800][T14099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.354713][T14099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.369229][T14099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.379086][T14099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.391226][T14099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.404475][T14099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.424657][T14099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.441742][ T48] usb 4-1: 0:2 : does not exist [ 306.447664][T14099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.460099][T14099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.481127][ T48] usb 4-1: USB disconnect, device number 50 [ 306.487183][T14099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.605983][ T5822] Bluetooth: hci0: command tx timeout [ 306.641381][ T30] audit: type=1400 audit(1746658822.364:787): avc: denied { connect } for pid=14218 comm="syz.5.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 306.662040][ T30] audit: type=1400 audit(1746658822.384:788): avc: denied { ioctl } for pid=14218 comm="syz.5.3573" path="socket:[57182]" dev="sockfs" ino=57182 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 306.689516][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.700823][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.742834][T14224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.781387][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.800210][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.046125][ T971] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 307.275550][ T971] usb 6-1: Using ep0 maxpacket: 16 [ 307.286842][ T971] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 307.295532][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 307.305709][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.323146][ T971] usb 6-1: config 0 descriptor?? [ 307.334489][ T971] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 307.585634][ T48] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 307.595070][ T30] audit: type=1400 audit(1746658823.314:789): avc: denied { accept } for pid=14265 comm="syz.2.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.747556][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.771854][ T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.786928][ T48] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.798198][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.816200][ T48] usb 1-1: SerialNumber: syz [ 308.033788][ T48] usb 1-1: 0:2 : does not exist [ 308.059826][ T48] usb 1-1: USB disconnect, device number 50 [ 308.096122][ T30] audit: type=1326 audit(1746658823.824:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14289 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe38e969 code=0x7ffc0000 [ 308.124315][ T30] audit: type=1326 audit(1746658823.824:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14289 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe38e969 code=0x7ffc0000 [ 308.157614][ T30] audit: type=1326 audit(1746658823.854:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14289 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feafe38e969 code=0x7ffc0000 [ 308.392634][ T1205] usb 6-1: USB disconnect, device number 42 [ 308.545607][ T5865] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 308.705920][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 308.716794][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 308.736842][ T5865] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 308.750193][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.760542][ T5865] usb 4-1: Product: syz [ 308.765138][ T5865] usb 4-1: Manufacturer: syz [ 308.773338][ T5865] usb 4-1: SerialNumber: syz [ 308.785370][ T5865] usb 4-1: config 0 descriptor?? [ 308.861563][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.195534][ T5865] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 309.800251][ T5865] usb 4-1: USB disconnect, device number 51 [ 310.205538][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.260868][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.327083][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.394111][ T36] bridge_slave_1: left allmulticast mode [ 310.399845][ T36] bridge_slave_1: left promiscuous mode [ 310.406948][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.415330][ T36] bridge_slave_0: left allmulticast mode [ 310.421290][ T36] bridge_slave_0: left promiscuous mode [ 310.427144][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.758468][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 310.758488][ T30] audit: type=1400 audit(1746658826.464:804): avc: denied { shutdown } for pid=14321 comm="syz.2.3619" laddr=::ac14:14aa lport=59681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.869964][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.889029][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.899442][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.899714][ T5862] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 310.931921][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.953373][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.021380][T14337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14337 comm=syz.0.3624 [ 311.107473][ T5862] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 311.117154][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.147578][ T5862] usb 4-1: config 0 descriptor?? [ 311.266782][ T30] audit: type=1400 audit(1746658826.984:805): avc: denied { bind } for pid=14345 comm="syz.0.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 311.348635][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.366005][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.373590][ T5862] ath6kl: Failed to submit usb control message: -71 [ 311.386846][ T36] bond0 (unregistering): Released all slaves [ 311.390338][ T5862] ath6kl: unable to send the bmi data to the device: -71 [ 311.462004][ T5862] ath6kl: Unable to send get target info: -71 [ 311.470845][ T5862] ath6kl: Failed to init ath6kl core: -71 [ 311.501927][ T5862] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 311.547967][ T5862] usb 4-1: USB disconnect, device number 52 [ 311.573803][ T30] audit: type=1400 audit(1746658827.294:806): avc: denied { mounton } for pid=14351 comm="syz.0.3630" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 311.596540][T14353] overlay: filesystem on ./bus is read-only [ 311.912957][ T36] hsr_slave_0: left promiscuous mode [ 311.924859][ T36] hsr_slave_1: left promiscuous mode [ 311.932557][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.940141][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.967267][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.974725][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.001113][ T36] veth1_macvtap: left promiscuous mode [ 312.006739][ T36] veth0_macvtap: left promiscuous mode [ 312.012355][ T36] veth1_vlan: left promiscuous mode [ 312.021659][ T36] veth0_vlan: left promiscuous mode [ 312.024849][T14370] Bluetooth: hci5: Frame reassembly failed (-84) [ 312.035583][ T5864] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 312.036985][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 312.105171][T14372] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3637'. [ 312.196990][ T5864] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 312.205563][ T5864] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 312.215549][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 312.225266][ T5864] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 312.250355][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 312.263349][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 312.273151][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 312.295677][ T5864] usb 1-1: string descriptor 0 read error: -22 [ 312.302065][ T5864] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 312.311343][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.325823][ T5864] usb 1-1: config 0 descriptor?? [ 312.335095][ T5864] hub 1-1:0.0: bad descriptor, ignoring hub [ 312.341312][ T5864] hub 1-1:0.0: probe with driver hub failed with error -5 [ 312.354181][ T5864] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input69 [ 312.497127][ T36] team0 (unregistering): Port device team_slave_1 removed [ 312.535406][ T36] team0 (unregistering): Port device team_slave_0 removed [ 312.564321][ T5862] usb 1-1: USB disconnect, device number 51 [ 312.906823][T14368] netlink: 'syz.3.3637': attribute type 29 has an invalid length. [ 312.936738][T14332] chnl_net:caif_netlink_parms(): no params data found [ 312.995642][ T5826] Bluetooth: hci0: command tx timeout [ 313.071138][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.082617][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.092699][T14332] bridge_slave_0: entered allmulticast mode [ 313.101444][T14332] bridge_slave_0: entered promiscuous mode [ 313.112919][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.148754][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.170661][T14332] bridge_slave_1: entered allmulticast mode [ 313.181471][T14332] bridge_slave_1: entered promiscuous mode [ 313.249425][T14332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.261814][T14332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.275697][ T5864] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 313.348093][T14332] team0: Port device team_slave_0 added [ 313.372567][T14332] team0: Port device team_slave_1 added [ 313.421381][T14332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.432255][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.462768][T14332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.476039][ T5864] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.491338][ T5864] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.500975][T14402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3651'. [ 313.511482][ T5864] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.521979][T14332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.528982][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.554970][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.567030][T14332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.578529][T14380] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 313.587728][ T5864] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.645968][T14332] hsr_slave_0: entered promiscuous mode [ 313.652314][T14332] hsr_slave_1: entered promiscuous mode [ 313.658775][T14332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.667708][T14332] Cannot create hsr debugfs directory [ 313.810405][ T5862] usb 4-1: USB disconnect, device number 53 [ 313.818257][ T30] audit: type=1400 audit(1746658829.534:807): avc: denied { map } for pid=14379 comm="syz.3.3640" path="/dev/midi3" dev="devtmpfs" ino=3381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.035573][ T5826] Bluetooth: hci5: command 0xfc11 tx timeout [ 314.042188][ T5822] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 314.114294][T14332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.139779][T14332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.185038][T14332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.203697][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3661'. [ 314.257666][T14332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.409249][T14332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.472254][T14332] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.558393][T14332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.569126][T14332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.620686][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.627854][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.636909][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.644033][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.812298][T14332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.863494][T14332] veth0_vlan: entered promiscuous mode [ 314.881379][T14332] veth1_vlan: entered promiscuous mode [ 314.913936][T14332] veth0_macvtap: entered promiscuous mode [ 314.929930][T14332] veth1_macvtap: entered promiscuous mode [ 314.947172][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.957788][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.970442][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.981028][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.990886][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.001414][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.013858][T14332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.032176][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.042809][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.052656][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.063174][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.078163][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.088747][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.098613][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.109138][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.125048][T14332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.140632][T14332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.149519][T14332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.158263][T14332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.465387][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 419.472487][ C1] rcu: 0-...!: (1 GPs behind) idle=18fc/1/0x4000000000000000 softirq=75440/75449 fqs=15 [ 419.483178][ C1] rcu: (detected by 1, t=10505 jiffies, g=58261, q=1844 ncpus=2) [ 419.490980][ C1] Sending NMI from CPU 1 to CPUs 0: [ 419.491006][ C0] NMI backtrace for cpu 0 [ 419.491017][ C0] CPU: 0 UID: 0 PID: 14433 Comm: syz.0.3666 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 419.491033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 419.491041][ C0] RIP: 0010:lock_release+0x9c/0x2f0 [ 419.491067][ C0] Code: b6 ec 0a 00 00 85 f6 0f 85 ff 00 00 00 48 81 3b 00 bb aa 93 0f 84 f2 00 00 00 9c 41 5d fa 48 c7 c7 e4 20 cd 8d e8 54 d1 d4 09 <65> ff 05 15 42 0c 12 8b 0d 3b 28 ed 0e c7 44 24 08 01 00 00 00 c7 [ 419.491080][ C0] RSP: 0018:ffffc90000007cc0 EFLAGS: 00000096 [ 419.491091][ C0] RAX: 0000000000000000 RBX: ffffffff9ad96198 RCX: 1ffff1100f1efae9 [ 419.491100][ C0] RDX: 0000000000000000 RSI: ffffffff8dcd20e4 RDI: ffffffff8bf482a0 [ 419.491108][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff52000000f92 [ 419.491116][ C0] R10: 0000000000000002 R11: ffffffff9ad96180 R12: ffffffff84d663fc [ 419.491124][ C0] R13: 0000000000000006 R14: ffff88807c37a440 R15: 1ffff92000000fa8 [ 419.491133][ C0] FS: 00007f35a15826c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 419.491146][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.491155][ C0] CR2: 00007f35a09b7bac CR3: 00000000798b6000 CR4: 00000000003526f0 [ 419.491163][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.491170][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 419.491178][ C0] Call Trace: [ 419.491184][ C0] [ 419.491192][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 419.491209][ C0] debug_object_activate+0x2ec/0x4c0 [ 419.491230][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 419.491250][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 419.491264][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.491278][ C0] enqueue_hrtimer+0x23/0x3b0 [ 419.491291][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 419.491307][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 419.491319][ C0] ? read_tsc+0x9/0x20 [ 419.491339][ C0] hrtimer_interrupt+0x397/0x8e0 [ 419.491357][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 419.491373][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 419.491388][ C0] [ 419.491392][ C0] [ 419.491397][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.491412][ C0] RIP: 0010:copy_page_range+0xf72/0x5fe0 [ 419.491429][ C0] Code: 24 60 00 00 00 00 e8 ad 09 b3 ff 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 0f 85 01 45 00 00 49 8b 06 31 ff 48 89 c3 48 89 44 24 28 <48> 83 e3 9f 48 89 de e8 f2 04 b3 ff 48 85 db 0f 84 c4 0a 00 00 e8 [ 419.491441][ C0] RSP: 0018:ffffc900043f7770 EFLAGS: 00000246 [ 419.491451][ C0] RAX: 800000007543e007 RBX: 800000007543e007 RCX: ffffc9000539a000 [ 419.491460][ C0] RDX: 0000000000080000 RSI: ffffffff82082943 RDI: 0000000000000000 [ 419.491468][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 00000000000000ff [ 419.491476][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000008 [ 419.491484][ C0] R13: dffffc0000000000 R14: ffff888054ccdec0 R15: 00007f359fdfd000 [ 419.491496][ C0] ? copy_page_range+0xf53/0x5fe0 [ 419.491524][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 419.491542][ C0] ? __pfx___might_resched+0x10/0x10 [ 419.491558][ C0] ? __pfx_mas_store+0x10/0x10 [ 419.491574][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 419.491587][ C0] ? copy_process+0x85dd/0x91a0 [ 419.491603][ C0] ? down_write+0x14d/0x200 [ 419.491620][ C0] ? up_write+0x1b2/0x520 [ 419.491633][ C0] copy_process+0x862b/0x91a0 [ 419.491655][ C0] ? __pfx_copy_process+0x10/0x10 [ 419.491669][ C0] ? find_held_lock+0x2b/0x80 [ 419.491682][ C0] ? find_held_lock+0x2b/0x80 [ 419.491705][ C0] ? do_pte_missing+0x569/0x3fb0 [ 419.491728][ C0] kernel_clone+0xfc/0x960 [ 419.491744][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 419.491764][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 419.491781][ C0] __do_sys_clone+0xce/0x120 [ 419.491797][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 419.491820][ C0] ? do_user_addr_fault+0x843/0x1370 [ 419.491837][ C0] do_syscall_64+0xcd/0x260 [ 419.491853][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.491865][ C0] RIP: 0033:0x7f35a078e969 [ 419.491876][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.491887][ C0] RSP: 002b:00007f35a1581fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 419.491899][ C0] RAX: ffffffffffffffda RBX: 00007f35a09b5fa0 RCX: 00007f35a078e969 [ 419.491907][ C0] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 419.491914][ C0] RBP: 00007f35a0810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 419.491921][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.491929][ C0] R13: 0000000000000001 R14: 00007f35a09b5fa0 R15: 00007ffe4b9ee898 [ 419.491942][ C0] [ 419.492001][ C1] rcu: rcu_preempt kthread starved for 10430 jiffies! g58261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 419.974452][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 419.984412][ C1] rcu: RCU grace-period kthread stack dump: [ 419.990287][ C1] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 420.003772][ C1] Call Trace: [ 420.007043][ C1] [ 420.009971][ C1] __schedule+0x116f/0x5de0 [ 420.014476][ C1] ? find_held_lock+0x2b/0x80 [ 420.019151][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 420.024093][ C1] ? __pfx___schedule+0x10/0x10 [ 420.028946][ C1] ? find_held_lock+0x2b/0x80 [ 420.033622][ C1] ? schedule+0x2d7/0x3a0 [ 420.037953][ C1] schedule+0xe7/0x3a0 [ 420.042018][ C1] schedule_timeout+0x123/0x290 [ 420.046861][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 420.052249][ C1] ? __pfx_process_timeout+0x10/0x10 [ 420.057540][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 420.063341][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 420.068802][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 420.073571][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 420.078860][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 420.083714][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 420.089519][ C1] rcu_gp_kthread+0x270/0x380 [ 420.094198][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.099396][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.104155][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.109352][ C1] ? __kthread_parkme+0x19e/0x250 [ 420.114379][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.119579][ C1] kthread+0x3c2/0x780 [ 420.123641][ C1] ? __pfx_kthread+0x10/0x10 [ 420.128227][ C1] ? __pfx_kthread+0x10/0x10 [ 420.132808][ C1] ? __pfx_kthread+0x10/0x10 [ 420.137389][ C1] ? __pfx_kthread+0x10/0x10 [ 420.141969][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.146728][ C1] ? __pfx_kthread+0x10/0x10 [ 420.151310][ C1] ret_from_fork+0x45/0x80 [ 420.155718][ C1] ? __pfx_kthread+0x10/0x10 [ 420.160303][ C1] ret_from_fork_asm+0x1a/0x30 [ 420.165081][ C1] [ 420.168107][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 420.174425][ C1] CPU: 1 UID: 0 PID: 14434 Comm: syz.2.3668 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 420.186476][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 420.196524][ C1] RIP: 0010:smp_call_function_many_cond+0x4aa/0x1290 [ 420.203197][ C1] Code: 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 5d 17 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 ff 83 e0 01 41 [ 420.222801][ C1] RSP: 0018:ffffc9000338f5a8 EFLAGS: 00000246 [ 420.228861][ C1] RAX: 0000000000000000 RBX: ffff8880b8441720 RCX: ffffc9000d731000 [ 420.236828][ C1] RDX: 0000000000080000 RSI: ffffffff81af1b93 RDI: 0000000000000005 [ 420.244794][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 420.252756][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882e5 [ 420.260721][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b040 [ 420.268683][ C1] FS: 00007f34133a26c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 420.277607][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.284188][ C1] CR2: 00007f67100fa6b0 CR3: 000000001d6a9000 CR4: 00000000003526f0 [ 420.292157][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.300119][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 420.308083][ C1] Call Trace: [ 420.311356][ C1] [ 420.314290][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 420.319313][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 420.324421][ C1] text_poke_bp_batch+0x657/0x760 [ 420.329446][ C1] ? __SCT__tp_func_contention_end+0x1/0x8 [ 420.335252][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 420.340805][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.345563][ C1] ? trace_contention_end+0xdd/0x130 [ 420.350850][ C1] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 420.356829][ C1] text_poke_bp+0xa2/0xd0 [ 420.361153][ C1] ? __pfx_text_poke_bp+0x10/0x10 [ 420.366172][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 420.371197][ C1] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 420.377175][ C1] __static_call_transform+0x33a/0x720 [ 420.382631][ C1] ? __pfx___static_call_transform+0x10/0x10 [ 420.388605][ C1] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 420.394585][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.400825][ C1] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 420.406801][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.413041][ C1] arch_static_call_transform+0xb6/0xc0 [ 420.418598][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.424870][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.431122][ C1] __static_call_update+0xef/0x670 [ 420.436236][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.442475][ C1] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 420.448453][ C1] ? __pfx___static_call_update+0x10/0x10 [ 420.454172][ C1] ? trace_kmalloc+0x2b/0xd0 [ 420.458759][ C1] ? __kmalloc_noprof+0x242/0x510 [ 420.463787][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.470027][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.476269][ C1] tracepoint_add_func+0xa88/0xea0 [ 420.481375][ C1] ? alloc_file_pseudo+0x1b3/0x230 [ 420.486488][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.492733][ C1] tracepoint_probe_register_prio_may_exist+0xb9/0x100 [ 420.499584][ C1] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 420.507033][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 420.513277][ C1] ? __anon_inode_getfile+0x18b/0x370 [ 420.518656][ C1] bpf_probe_register+0x189/0x200 [ 420.523679][ C1] bpf_raw_tp_link_attach+0x2cc/0x600 [ 420.529049][ C1] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 420.534936][ C1] ? find_held_lock+0x2b/0x80 [ 420.539616][ C1] ? __fget_files+0x204/0x3c0 [ 420.544303][ C1] ? fput+0x70/0xf0 [ 420.548104][ C1] ? __bpf_prog_get+0xa0/0x290 [ 420.552869][ C1] __sys_bpf+0x3b4/0x4d80 [ 420.557198][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 420.561963][ C1] ? lock_vma_under_rcu+0x47d/0x970 [ 420.567162][ C1] ? lock_vma_under_rcu+0x47d/0x970 [ 420.572362][ C1] ? do_futex+0x122/0x350 [ 420.576690][ C1] ? __pfx_do_futex+0x10/0x10 [ 420.581378][ C1] ? xfd_validate_state+0x5d/0x180 [ 420.586487][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.591250][ C1] __x64_sys_bpf+0x78/0xc0 [ 420.595663][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.600862][ C1] do_syscall_64+0xcd/0x260 [ 420.605364][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.611252][ C1] RIP: 0033:0x7f341258e969 [ 420.615661][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.635262][ C1] RSP: 002b:00007f34133a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.643669][ C1] RAX: ffffffffffffffda RBX: 00007f34127b5fa0 RCX: 00007f341258e969 [ 420.651631][ C1] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000011 [ 420.659596][ C1] RBP: 00007f3412610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 420.667560][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.675521][ C1] R13: 0000000000000000 R14: 00007f34127b5fa0 R15: 00007fff769bf398 [ 420.683496][ C1]