last executing test programs: 3m3.857124693s ago: executing program 1 (id=4485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) 3m3.148010132s ago: executing program 1 (id=4489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m50.267650723s ago: executing program 2 (id=4563): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) listen(r2, 0xfffffffc) 2m49.730455963s ago: executing program 2 (id=4566): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x2, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x3, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) 2m27.738974351s ago: executing program 1 (id=4489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m16.761098891s ago: executing program 2 (id=4566): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x2, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x3, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) 1m51.755899215s ago: executing program 1 (id=4489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m40.969205103s ago: executing program 2 (id=4566): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x2, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x3, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) 1m37.351544995s ago: executing program 0 (id=4884): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 1m37.107599334s ago: executing program 0 (id=4886): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m36.768060598s ago: executing program 0 (id=4888): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 1m35.854489277s ago: executing program 0 (id=4895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000002900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 1m10.60268999s ago: executing program 1 (id=4489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m0.395789194s ago: executing program 2 (id=4566): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x2, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x3, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) 57.674491006s ago: executing program 0 (id=4895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000002900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 35.318832527s ago: executing program 1 (id=4489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 24.132141384s ago: executing program 0 (id=4895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000002900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 17.569545145s ago: executing program 2 (id=4566): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x2, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x3, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) 4.38114645s ago: executing program 4 (id=5192): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x186a, &(0x7f0000000440), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 4.180447323s ago: executing program 4 (id=5193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) lsm_list_modules(0x0, 0xfffffffffffffffe, 0x0) 2.412041178s ago: executing program 4 (id=5194): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 1.878721934s ago: executing program 4 (id=5195): unshare(0x8000000) shmget$private(0x0, 0x4000, 0x6, &(0x7f00004bd000/0x4000)=nil) shmat(0x0, &(0x7f00000ca000/0x4000)=nil, 0x4000) unshare(0x2c020000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.68700132s ago: executing program 3 (id=5196): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 1.506368032s ago: executing program 4 (id=5197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = eventfd(0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) 1.303075135s ago: executing program 4 (id=5198): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 1.247699836s ago: executing program 3 (id=5199): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffffffff, 0x80, 0x40, 0x28c3, 0xffffffffffffffff, 0x6a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0xf}, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0xbc, 0x0) 891.574294ms ago: executing program 3 (id=5200): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) flock(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) flock(r2, 0x5) 647.793417ms ago: executing program 3 (id=5201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x80}], 0x1, 0x800) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91", 0xa1, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 332.863603ms ago: executing program 3 (id=5202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(aegis128l-generic)\x00'}}}, @tfcpad={0x8}]}, 0x144}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, [], [], 'veth0_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 0s ago: executing program 3 (id=5203): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000980)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) kernel console output (not intermixed with test programs): lready exists on: batadv_slave_1 [ 789.933733][T15715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.009915][T15715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.263536][T15715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.293838][T15715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.311031][T15715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.364541][T15715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.823306][ T29] audit: type=1400 audit(1724963382.878:814): avc: denied { append } for pid=16097 comm="syz.0.4665" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 790.847235][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.050749][T12990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.121413][T12990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.300591][T16108] tipc: Started in network mode [ 791.350811][T16108] tipc: Node identity 7f000001, cluster identity 4711 [ 791.458547][T16108] tipc: Enabled bearer , priority 10 [ 791.537542][T12970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.557223][T12970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.792950][T15872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.379637][T16119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.449743][ T5279] tipc: Node number set to 2130706433 [ 792.701264][T12974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.806699][T15872] veth0_vlan: entered promiscuous mode [ 792.940940][T12974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.970575][T15872] veth1_vlan: entered promiscuous mode [ 793.124143][T12974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.304958][T15872] veth0_macvtap: entered promiscuous mode [ 793.364203][T15872] veth1_macvtap: entered promiscuous mode [ 793.394005][T16124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.469913][T12974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.753144][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.808982][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.823711][T16128] loop0: detected capacity change from 0 to 2 [ 793.859839][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.951002][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.042423][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.123588][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.167375][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.179401][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.192696][T16130] overlayfs: workdir and upperdir must reside under the same mount [ 794.238097][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.280573][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.310712][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.318334][T16134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 794.343787][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.360389][T15872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.371792][T16134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 794.374222][T16134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 794.474386][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.503331][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.514120][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.540378][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.550969][T16134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 794.577664][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.588328][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.612085][T16134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 794.635552][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.653806][T16134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 794.670240][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.690819][T15872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.733333][T15872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.758947][T15872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.853075][T15872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.919358][T15872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.940775][T15872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.950357][T15872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.003542][ T29] audit: type=1400 audit(1724963387.068:815): avc: denied { read } for pid=16138 comm="syz.4.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 795.258902][T16143] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4680'. [ 795.861710][T12974] bridge_slave_1: left allmulticast mode [ 795.876616][T12974] bridge_slave_1: left promiscuous mode [ 795.894396][T12974] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.961619][T12974] bridge_slave_0: left allmulticast mode [ 795.974313][T12974] bridge_slave_0: left promiscuous mode [ 796.002655][T12974] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.250169][T16158] Cannot find set identified by id 0 to match [ 796.799433][ T5226] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 796.804821][ T5229] Bluetooth: hci4: command tx timeout [ 796.987201][ T5226] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.004148][ T5226] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 797.018681][ T5226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.040569][ T5226] usb 5-1: config 0 descriptor?? [ 797.123306][ T5226] usb 5-1: interface 1 not found [ 797.317906][T12974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.344231][T12974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.370122][T12974] bond0 (unregistering): Released all slaves [ 797.494352][T16153] bond0: entered promiscuous mode [ 797.502741][T16153] bond_slave_0: entered promiscuous mode [ 797.528618][T16153] bond_slave_1: entered promiscuous mode [ 797.646207][ T940] usb 5-1: USB disconnect, device number 60 [ 797.733259][T16154] bond0: (slave bond_slave_0): Releasing backup interface [ 797.783183][T16154] bond_slave_0: left promiscuous mode [ 797.910971][T16153] bond0: left promiscuous mode [ 797.915843][T16153] bond_slave_1: left promiscuous mode [ 797.984602][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.016776][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.212861][ T2542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.244395][ T2542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.870692][ T5229] Bluetooth: hci4: command tx timeout [ 799.113911][T12974] hsr_slave_0: left promiscuous mode [ 799.164342][T12974] hsr_slave_1: left promiscuous mode [ 799.199725][ T29] audit: type=1400 audit(1724963391.268:816): avc: denied { getopt } for pid=16183 comm="syz.4.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.312546][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.380703][ T5279] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 799.381814][T12974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.423170][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.434198][T12974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.547474][T12974] veth1_macvtap: left promiscuous mode [ 799.553074][T12974] veth0_macvtap: left promiscuous mode [ 799.582954][T12974] veth1_vlan: left promiscuous mode [ 799.594112][T12974] veth0_vlan: left promiscuous mode [ 799.603245][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 799.624546][ T5279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.680094][ T5279] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 799.690241][ T5279] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 799.764387][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.800346][ T5279] usb 4-1: config 0 descriptor?? [ 800.262049][ T5277] usb 4-1: USB disconnect, device number 60 [ 800.944914][ T5229] Bluetooth: hci4: command tx timeout [ 801.649958][T12974] team0 (unregistering): Port device team_slave_1 removed [ 801.793268][T12974] team0 (unregistering): Port device team_slave_0 removed [ 803.043430][ T5229] Bluetooth: hci4: command tx timeout [ 803.689129][T16133] chnl_net:caif_netlink_parms(): no params data found [ 804.330618][T16133] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.380742][T16133] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.388498][T16133] bridge_slave_0: entered allmulticast mode [ 804.411972][T16133] bridge_slave_0: entered promiscuous mode [ 804.437695][T16133] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.469394][T16133] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.544674][T16133] bridge_slave_1: entered allmulticast mode [ 804.612296][T16133] bridge_slave_1: entered promiscuous mode [ 804.970928][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4706'. [ 805.032293][T16133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.150664][T16133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.290949][T16134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.376161][T16134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 805.389784][T16134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 805.419301][T16134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 805.448317][T16134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 805.449411][T16133] team0: Port device team_slave_0 added [ 805.478717][T16134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 805.603955][T16235] [U]   [ 805.704300][T16235] [U] [ 805.707056][T16235] [U] [ 805.709772][T16235] [U] [ 805.770651][T12974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.801284][T16235] [U] [ 805.804030][T16235] [U] [ 805.806745][T16235] [U] [ 805.809463][T16235] [U] [ 805.833836][T16235] [U] [ 805.836589][T16235] [U] [ 805.839307][T16235] [U] [ 805.870359][T16235] [U] [ 805.924248][T16133] team0: Port device team_slave_1 added [ 806.007830][T16234] [U] [ 806.396549][T12974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.613946][T16133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.634027][T16133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.659984][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.679829][T16133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.856161][T12974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.933633][T16133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.998707][T16133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.084748][T16133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.471451][T12974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.588902][ T5229] Bluetooth: hci2: command tx timeout [ 808.020091][T16133] hsr_slave_0: entered promiscuous mode [ 808.044454][T16133] hsr_slave_1: entered promiscuous mode [ 808.093690][T16133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.115352][T16133] Cannot create hsr debugfs directory [ 809.011955][T12974] bridge_slave_1: left allmulticast mode [ 809.022043][T12974] bridge_slave_1: left promiscuous mode [ 809.032720][T12974] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.123165][T12974] bridge_slave_0: left allmulticast mode [ 809.131940][T12974] bridge_slave_0: left promiscuous mode [ 809.172944][T12974] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.273362][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.312980][ T46] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 809.520913][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 809.532080][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 809.570041][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.602593][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 809.633563][ T46] usb 4-1: SerialNumber: syz [ 809.666784][ T5229] Bluetooth: hci2: command tx timeout [ 809.681368][T16275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 809.937902][T16275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 810.558173][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 810.730036][T12974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.741877][T12974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.770087][T12974] bond0 (unregistering): Released all slaves [ 810.976542][ T46] cdc_ether 4-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.3-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 811.051234][ T46] usb 4-1: USB disconnect, device number 61 [ 811.063539][ T46] cdc_ether 4-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.3-1, Mobile Broadband Network Device [ 811.274250][T16229] chnl_net:caif_netlink_parms(): no params data found [ 811.750751][ T5229] Bluetooth: hci2: command tx timeout [ 811.832444][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4737'. [ 811.848142][T16306] netlink: 'syz.3.4737': attribute type 4 has an invalid length. [ 811.971648][T12974] hsr_slave_0: left promiscuous mode [ 812.021145][T12974] hsr_slave_1: left promiscuous mode [ 812.051582][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.061182][T12974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.098298][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.141144][T12974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.301873][T12974] veth1_macvtap: left promiscuous mode [ 812.351619][T12974] veth0_macvtap: left promiscuous mode [ 812.359873][T12974] veth1_vlan: left promiscuous mode [ 812.386445][T12974] veth0_vlan: left promiscuous mode [ 813.378214][T16333] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4750'. [ 813.833765][ T5229] Bluetooth: hci2: command tx timeout [ 814.267207][T12974] team0 (unregistering): Port device team_slave_1 removed [ 814.363931][T12974] team0 (unregistering): Port device team_slave_0 removed [ 815.912448][T16229] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.940668][T16229] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.981743][T16229] bridge_slave_0: entered allmulticast mode [ 816.030277][T16229] bridge_slave_0: entered promiscuous mode [ 816.057936][T16229] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.123798][T16229] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.152805][T16229] bridge_slave_1: entered allmulticast mode [ 816.232164][T16229] bridge_slave_1: entered promiscuous mode [ 816.491021][T16229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.570655][T16229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.881349][T16229] team0: Port device team_slave_0 added [ 816.936387][T16229] team0: Port device team_slave_1 added [ 817.084102][T16229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.101022][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.126984][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.206783][T16229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.261321][T16229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.284044][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.309972][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.342775][T16229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.439619][T16133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 817.652416][T16133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 817.742409][T16229] hsr_slave_0: entered promiscuous mode [ 817.767902][T16229] hsr_slave_1: entered promiscuous mode [ 817.780334][ T5226] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 817.792854][T16229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.821377][T16229] Cannot create hsr debugfs directory [ 817.861009][T16133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 817.894203][T16133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 817.975448][ T5226] usb 5-1: Using ep0 maxpacket: 8 [ 817.982952][ T5226] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 818.018427][ T5226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.074641][ T5226] usb 5-1: config 0 descriptor?? [ 819.258690][ T5226] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 819.271307][T16133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.301988][ T5226] asix 5-1:0.0: probe with driver asix failed with error -71 [ 819.361019][ T5226] usb 5-1: USB disconnect, device number 61 [ 819.486048][T16133] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.609397][ T5226] kernel write not supported for file /snd/pcmC0D0p (pid: 5226 comm: kworker/0:3) [ 819.781577][T12986] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.788813][T12986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.862610][T12986] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.869869][T12986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.232452][T16416] sock: sock_set_timeout: `syz.0.4784' (pid 16416) tries to set negative timeout [ 821.170242][ T29] audit: type=1400 audit(1724963413.238:817): avc: denied { create } for pid=16433 comm="syz.0.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 821.189740][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.232564][T16229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 821.283818][T16229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 821.313525][ T29] audit: type=1400 audit(1724963413.378:818): avc: denied { bind } for pid=16433 comm="syz.0.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 821.388106][T16229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 821.474575][T16229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 821.658180][T16133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.684074][T16441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4794'. [ 822.624877][T16133] veth0_vlan: entered promiscuous mode [ 822.750961][T16133] veth1_vlan: entered promiscuous mode [ 823.058107][T16229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.249913][T16133] veth0_macvtap: entered promiscuous mode [ 823.410169][T16133] veth1_macvtap: entered promiscuous mode [ 823.548258][T16229] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.614774][T12986] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.621979][T12986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.775461][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.782660][T11976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.902822][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.961268][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.042552][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.084435][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.110607][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.121222][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.147112][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.161199][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.224508][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.266740][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.303741][T16133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.374746][T16472] bond_slave_0: entered promiscuous mode [ 824.380503][T16472] bond_slave_1: entered promiscuous mode [ 824.572759][T16472] bond_slave_0: left promiscuous mode [ 824.585643][T16472] bond_slave_1: left promiscuous mode [ 825.303729][T16472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.369848][T16472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.392474][T16472] bond0 (unregistering): Released all slaves [ 825.546742][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.640247][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.657724][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.704984][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.721989][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.739874][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.780624][T16133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.826899][T16133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.891841][T16133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.018372][T16133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.080049][T16133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.132486][T16133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.142654][T16133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.265795][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.273652][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.584623][T12990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.594718][T12990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.646452][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 827.794178][T16229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.800806][T16522] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4827'. [ 827.884299][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 827.904123][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 827.966610][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 827.997349][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.030019][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 828.041031][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 828.099746][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4828'. [ 828.151827][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.172222][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 828.181896][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 828.209952][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.247733][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 828.248019][T16229] veth0_vlan: entered promiscuous mode [ 828.276420][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 828.339326][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.404273][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 828.484512][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 828.527397][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.550162][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 828.562066][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 828.653516][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.681993][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 828.714506][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 828.741291][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.750913][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 828.803275][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 828.834799][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 828.853673][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 828.882814][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 828.910123][ T9] usb 4-1: Product: syz [ 828.914413][ T9] usb 4-1: Manufacturer: syz [ 828.924533][ T9] usb 4-1: SerialNumber: syz [ 828.927058][T12974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.970434][ T9] usb 4-1: config 0 descriptor?? [ 828.982099][T16229] veth1_vlan: entered promiscuous mode [ 829.023496][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 829.283811][T12974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.379949][ T46] usb 4-1: USB disconnect, device number 62 [ 829.410795][ T46] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 829.649267][T12974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.827162][T16229] veth0_macvtap: entered promiscuous mode [ 829.880483][T16229] veth1_macvtap: entered promiscuous mode [ 829.990969][T12974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.074519][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.168739][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.178884][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.262328][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.292667][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.346608][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.383960][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.420140][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.492247][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.530092][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.560017][T16134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 830.584810][T16134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 830.601142][T16134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 830.619238][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.636555][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.673041][T16134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 830.703846][T16229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.724525][T16134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 830.740056][T16134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 830.826747][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.852675][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.865025][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.889001][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.899204][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.922514][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.932417][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.958753][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.970004][T16229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.991788][T16229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.011450][T16229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.146702][T16229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.191816][T16229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.206528][T16229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.264032][T16229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.089805][T12974] bridge_slave_1: left allmulticast mode [ 832.133743][T12974] bridge_slave_1: left promiscuous mode [ 832.143714][T12974] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.182013][T12974] bridge_slave_0: left allmulticast mode [ 832.219989][T12974] bridge_slave_0: left promiscuous mode [ 832.239944][T12974] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.879159][T16134] Bluetooth: hci4: command tx timeout [ 833.479651][T12974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.502426][T12974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.528520][T12974] bond0 (unregistering): Released all slaves [ 833.763024][T11976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.813022][T11976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.369712][T16574] ALSA: seq fatal error: cannot create timer (-19) [ 834.601783][T12964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.624129][T12964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.947031][T16134] Bluetooth: hci4: command tx timeout [ 835.201875][T12974] hsr_slave_0: left promiscuous mode [ 835.320514][T12974] hsr_slave_1: left promiscuous mode [ 835.331215][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.360534][T12974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.403073][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.461848][T12974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.614140][T12974] veth1_macvtap: left promiscuous mode [ 835.641438][T12974] veth0_macvtap: left promiscuous mode [ 835.671968][T12974] veth1_vlan: left promiscuous mode [ 835.689559][T12974] veth0_vlan: left promiscuous mode [ 837.026026][ T5229] Bluetooth: hci4: command tx timeout [ 837.371661][T12974] team0 (unregistering): Port device team_slave_1 removed [ 837.499680][T12974] team0 (unregistering): Port device team_slave_0 removed [ 837.513856][T16134] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 837.929356][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b2bb000: rx timeout, send abort [ 838.440323][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b2bb000: abort rx timeout. Force session deactivation [ 838.804384][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'. [ 838.920464][T16541] chnl_net:caif_netlink_parms(): no params data found [ 839.109719][T16134] Bluetooth: hci4: command tx timeout [ 839.238311][T16134] block nbd0: Receive control failed (result -107) [ 839.279675][ T29] audit: type=1400 audit(1724963431.348:819): avc: denied { write } for pid=16608 comm="syz.3.4862" path="socket:[52950]" dev="sockfs" ino=52950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 839.382474][T16609] nbd0: detected capacity change from 0 to 15960 [ 839.441682][T16607] block nbd0: shutting down sockets [ 839.599142][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.608043][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.626718][T16541] bridge_slave_0: entered allmulticast mode [ 839.634630][T16541] bridge_slave_0: entered promiscuous mode [ 839.658581][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.669439][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.694531][T16541] bridge_slave_1: entered allmulticast mode [ 839.702443][T16541] bridge_slave_1: entered promiscuous mode [ 839.907568][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.954156][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.451933][T16541] team0: Port device team_slave_0 added [ 840.634121][T12974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.728230][T16541] team0: Port device team_slave_1 added [ 840.876001][T16633] loop0: detected capacity change from 0 to 6 [ 840.917167][T16633] Dev loop0: unable to read RDB block 6 [ 840.922777][T16633] loop0: AHDI p2 [ 840.974790][T16633] loop0: partition table partially beyond EOD, truncated [ 841.248026][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 841.263473][T12974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.297348][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 841.318454][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 841.360945][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 841.391050][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 841.409360][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 841.513693][T16644] sctp: [Deprecated]: syz.0.4874 (pid 16644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 841.513693][T16644] Use struct sctp_sack_info instead [ 841.603137][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.617026][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.642921][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.764377][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.911220][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.935102][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.992306][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.187438][T12974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.658862][T12974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.792671][T16541] hsr_slave_0: entered promiscuous mode [ 842.852848][T16541] hsr_slave_1: entered promiscuous mode [ 842.921955][T16541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 842.939266][T16541] Cannot create hsr debugfs directory [ 843.508161][ T5229] Bluetooth: hci2: command tx timeout [ 844.363442][T12974] bridge_slave_1: left allmulticast mode [ 844.370664][T12974] bridge_slave_1: left promiscuous mode [ 844.383496][T12974] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.408712][T12974] bridge_slave_0: left allmulticast mode [ 844.414506][T12974] bridge_slave_0: left promiscuous mode [ 844.432648][T12974] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.611657][ T5229] Bluetooth: hci2: command tx timeout [ 845.833770][T16134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.890312][T16134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.912891][T16134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 845.974079][T16134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 846.009064][T16134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 846.028881][T16134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 846.519095][ T9898] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 846.679641][T12974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.694233][T12974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.723934][T12974] bond0 (unregistering): Released all slaves [ 846.726393][ T9898] usb 5-1: Using ep0 maxpacket: 8 [ 846.764493][ T9898] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 846.803696][ T9898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 846.865813][ T9898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 846.951646][ T9898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 846.974291][ T9898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.009315][ T9898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 847.019115][ T9898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.271932][ T9898] usb 5-1: usb_control_msg returned -32 [ 847.294777][ T9898] usbtmc 5-1:16.0: can't read capabilities [ 847.359978][T16635] chnl_net:caif_netlink_parms(): no params data found [ 847.669188][ T5229] Bluetooth: hci2: command tx timeout [ 847.831738][T12974] hsr_slave_0: left promiscuous mode [ 847.854205][T12974] hsr_slave_1: left promiscuous mode [ 847.883668][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.904492][T12974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.913471][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.933404][T12974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.993653][T12974] veth1_macvtap: left promiscuous mode [ 848.014636][T12974] veth0_macvtap: left promiscuous mode [ 848.043694][T12974] veth1_vlan: left promiscuous mode [ 848.068176][T12974] veth0_vlan: left promiscuous mode [ 848.163697][ T5229] Bluetooth: hci0: command tx timeout [ 849.181862][ T9] usb 5-1: USB disconnect, device number 62 [ 849.765180][ T5229] Bluetooth: hci2: command tx timeout [ 850.106979][T12974] team0 (unregistering): Port device team_slave_1 removed [ 850.226418][ T5229] Bluetooth: hci0: command tx timeout [ 850.241781][T12974] team0 (unregistering): Port device team_slave_0 removed [ 852.101071][T16635] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.170468][T16635] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.225848][T16635] bridge_slave_0: entered allmulticast mode [ 852.264832][T16635] bridge_slave_0: entered promiscuous mode [ 852.323454][ T5229] Bluetooth: hci0: command tx timeout [ 852.467906][T16635] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.487586][T16635] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.494974][T16635] bridge_slave_1: entered allmulticast mode [ 852.502252][T16635] bridge_slave_1: entered promiscuous mode [ 852.731256][ T9898] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 852.754496][T16541] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 852.778617][T16541] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 852.884152][T16635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.913975][T16541] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 852.924626][T16541] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 852.944763][ T9898] usb 5-1: Using ep0 maxpacket: 8 [ 852.954168][ T9898] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 852.983569][T16635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.985228][ T9898] usb 5-1: config 179 has no interface number 0 [ 853.011185][ T9898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 853.022560][ T9898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 853.046339][ T9898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 853.057860][ T9898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 853.080229][ T9898] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 853.134334][ T9898] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 853.165934][ T9898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.224542][T16726] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 853.291459][T16635] team0: Port device team_slave_0 added [ 853.380953][T16635] team0: Port device team_slave_1 added [ 853.581906][T16696] chnl_net:caif_netlink_parms(): no params data found [ 853.743875][T16635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.808246][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.820415][ T5279] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input48 [ 853.892291][T16635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.976644][ T5226] usb 5-1: USB disconnect, device number 63 [ 853.976717][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 853.990845][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 854.042660][ T5226] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 854.144262][T16635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.151325][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.230941][T16635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.384786][ T5229] Bluetooth: hci0: command tx timeout [ 854.653834][T12990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.781150][T16635] hsr_slave_0: entered promiscuous mode [ 854.842440][T16635] hsr_slave_1: entered promiscuous mode [ 854.866738][T16635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 854.874361][T16635] Cannot create hsr debugfs directory [ 855.018045][T16696] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.060694][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.072792][T16696] bridge_slave_0: entered allmulticast mode [ 855.081036][T16696] bridge_slave_0: entered promiscuous mode [ 855.213926][T12990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.403467][T16696] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.452576][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.459934][T16696] bridge_slave_1: entered allmulticast mode [ 855.485165][T16696] bridge_slave_1: entered promiscuous mode [ 855.718432][T12990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.102005][T16759] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 856.262665][T12990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.318916][T16696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.334225][T16696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.709959][T16696] team0: Port device team_slave_0 added [ 856.739693][T16696] team0: Port device team_slave_1 added [ 857.132383][T16696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.162710][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.188677][ C0] vkms_vblank_simulate: vblank timer overrun [ 857.252420][T16696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.347632][T16696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.354641][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.425418][T16696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.497051][ T29] audit: type=1400 audit(1724963449.558:820): avc: denied { nlmsg_write } for pid=16777 comm="syz.4.4928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 857.558915][T16541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.119945][T16696] hsr_slave_0: entered promiscuous mode [ 858.151772][T16696] hsr_slave_1: entered promiscuous mode [ 858.182989][T16696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.243229][T16696] Cannot create hsr debugfs directory [ 858.434918][T16541] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.453519][T12990] bridge_slave_1: left allmulticast mode [ 858.492131][T12990] bridge_slave_1: left promiscuous mode [ 858.524510][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.543335][T12990] bridge_slave_0: left allmulticast mode [ 858.559098][T12990] bridge_slave_0: left promiscuous mode [ 858.571676][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.763041][T12990] bond0 (unregistering): left allmulticast mode [ 859.771592][T12990] bond_slave_0: left allmulticast mode [ 859.778612][T12990] bond_slave_1: left allmulticast mode [ 859.784114][T12990] bond0 (unregistering): left promiscuous mode [ 859.792571][T12990] bond_slave_0: left promiscuous mode [ 859.803172][T12990] bond_slave_1: left promiscuous mode [ 859.861714][T12990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.873391][T12990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.892094][T12990] bond0 (unregistering): Released all slaves [ 860.142453][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.149696][T12966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.420485][T12970] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.427726][T12970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.961546][T16635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 861.124447][T16635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 861.169338][T12990] hsr_slave_0: left promiscuous mode [ 861.177767][T12990] hsr_slave_1: left promiscuous mode [ 861.183723][T12990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.197834][T12990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.209779][T12990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.220945][T12990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.263303][T12990] veth1_macvtap: left promiscuous mode [ 861.281993][T12990] veth0_macvtap: left promiscuous mode [ 861.293213][T12990] veth1_vlan: left promiscuous mode [ 861.304640][T12990] veth0_vlan: left promiscuous mode [ 861.367967][ T5285] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 861.564474][ T5285] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 861.580180][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 861.582993][T12990] pimreg1 (unregistering): left allmulticast mode [ 861.599097][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 861.599142][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 861.599181][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 861.599243][ T5285] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.599277][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.603223][ T5285] usb 5-1: config 0 descriptor?? [ 861.704419][T16816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 862.161812][ T5285] plantronics 0003:047F:FFFF.0063: unknown main item tag 0xd [ 862.211937][ T5285] plantronics 0003:047F:FFFF.0063: No inputs registered, leaving [ 862.243029][ T5285] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 862.582443][ T5285] usb 5-1: USB disconnect, device number 64 [ 862.654005][ T5279] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 862.930141][ T5279] usb 4-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=5d.5a [ 862.963784][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.987150][ T5279] usb 4-1: Product: syz [ 862.991371][ T5279] usb 4-1: Manufacturer: syz [ 862.998582][ T5279] usb 4-1: SerialNumber: syz [ 863.018474][ T5279] usb 4-1: config 0 descriptor?? [ 863.027793][T12990] team0 (unregistering): Port device team_slave_1 removed [ 863.150797][T12990] team0 (unregistering): Port device team_slave_0 removed [ 864.144871][ T5279] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 864.159781][ T5279] asix 4-1:0.0: probe with driver asix failed with error -71 [ 864.172249][ T5279] usb 4-1: USB disconnect, device number 63 [ 864.449189][T16635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 864.663930][T16635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 864.710907][T16541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.400930][T16838] syz.3.4953[16838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 865.401124][T16838] syz.3.4953[16838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 865.643108][T16541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.731200][T16696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.817859][T16696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.931057][T16696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.971650][T16696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 866.010708][T16541] veth0_vlan: entered promiscuous mode [ 866.064429][T16635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.121645][T16541] veth1_vlan: entered promiscuous mode [ 866.312000][T16635] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.353774][T12970] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.361028][T12970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.487360][T12970] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.494567][T12970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.661236][T16541] veth0_macvtap: entered promiscuous mode [ 866.711784][T16541] veth1_macvtap: entered promiscuous mode [ 866.851646][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.888992][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.922612][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.943355][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.005145][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.021100][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.040629][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.059630][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.081317][T16541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.160737][ T29] audit: type=1326 audit(1724963459.228:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16862 comm="syz.4.4964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb63f579ef9 code=0x0 [ 867.162695][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.232059][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.242818][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.262693][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.273859][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.308639][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.337502][T16541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.439046][T16541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.462009][T16541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.471043][T16541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.491835][T16541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.770212][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.090386][T16696] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.162166][T12970] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.169429][T12970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.289757][T12974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.294919][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4967'. [ 868.317727][T12964] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.317879][T12964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.351499][T12974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.648736][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.718651][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.773957][T16696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.791997][T16635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.142161][T16635] veth0_vlan: entered promiscuous mode [ 869.332378][T16635] veth1_vlan: entered promiscuous mode [ 869.738495][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.768010][ T5279] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 869.977954][ T9898] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 869.999232][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 870.035609][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 870.049817][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 870.052230][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.088607][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 870.154225][T16635] veth0_macvtap: entered promiscuous mode [ 870.183742][ T5279] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 870.214195][T16696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.222663][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.249080][ T9898] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 870.261081][ T9898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.284394][ T9898] usb 4-1: config 0 descriptor?? [ 870.298260][ T5279] usb 5-1: config 0 descriptor?? [ 870.360120][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.423241][T16635] veth1_macvtap: entered promiscuous mode [ 870.500829][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.723214][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.732696][ T9898] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 870.879799][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.912025][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.923193][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.946466][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.957847][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.998600][ T5279] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 871.030297][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.030532][ T5279] plantronics 0003:047F:FFFF.0064: No inputs registered, leaving [ 871.045503][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.064262][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.079595][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.098211][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.105872][ T5279] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 871.133067][T16635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.372795][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.451896][ T9898] usb 4-1: USB disconnect, device number 64 [ 871.473906][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.506520][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.532079][ T9] usb 5-1: USB disconnect, device number 65 [ 871.543769][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.543794][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.543815][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.543834][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.543853][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.611755][T16635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.707151][T16134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 871.747276][T16134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 871.778842][T16134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 871.791965][T16635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.792012][T16635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.792052][T16635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.792091][T16635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.794978][T16696] veth0_vlan: entered promiscuous mode [ 871.812242][T16134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 871.877073][T16696] veth1_vlan: entered promiscuous mode [ 871.882834][T16134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 871.898109][T16134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 872.024204][ T35] bridge_slave_1: left allmulticast mode [ 872.052259][ T35] bridge_slave_1: left promiscuous mode [ 872.062545][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.091380][ T35] bridge_slave_0: left allmulticast mode [ 872.109889][ T35] bridge_slave_0: left promiscuous mode [ 872.140111][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.400495][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.430397][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.447905][ T35] bond0 (unregistering): Released all slaves [ 874.025472][T16696] veth0_macvtap: entered promiscuous mode [ 874.054414][T16696] veth1_macvtap: entered promiscuous mode [ 874.065946][T16134] Bluetooth: hci4: command tx timeout [ 874.539717][ T35] hsr_slave_0: left promiscuous mode [ 874.567617][ T35] hsr_slave_1: left promiscuous mode [ 874.581304][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.601036][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.610537][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.623930][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.680226][T16927] Bluetooth: MGMT ver 1.23 [ 874.694096][ T35] veth1_macvtap: left promiscuous mode [ 874.721324][ T35] veth0_macvtap: left promiscuous mode [ 874.734099][ T35] veth1_vlan: left promiscuous mode [ 874.760213][ T35] veth0_vlan: left promiscuous mode [ 876.042097][ T35] team0 (unregistering): Port device team_slave_1 removed [ 876.124238][ T35] team0 (unregistering): Port device team_slave_0 removed [ 876.151850][T16134] Bluetooth: hci4: command tx timeout [ 877.219765][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.283881][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.311794][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.330630][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.353387][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.387280][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.408834][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.419320][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.450775][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.472731][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.487037][T16696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.511056][T12990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.519308][T12990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.602840][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.633698][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.658352][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.669819][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.697538][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.724560][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.740786][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.760165][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.790894][T16696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.847016][T16942] netlink: 'syz.4.4989': attribute type 5 has an invalid length. [ 878.002145][T16696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.022372][T16696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.084070][T16696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.113832][T16696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.228002][T16134] Bluetooth: hci4: command tx timeout [ 878.362562][T16951] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4993'. [ 878.502046][T12995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.518653][T12995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.644300][T16956] netlink: 'syz.3.4995': attribute type 19 has an invalid length. [ 878.950479][T16894] chnl_net:caif_netlink_parms(): no params data found [ 879.298457][ T29] audit: type=1400 audit(1724963471.368:822): avc: denied { read } for pid=16963 comm="syz.4.4999" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 879.320018][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.362934][ T29] audit: type=1400 audit(1724963471.368:823): avc: denied { open } for pid=16963 comm="syz.4.4999" path="/523/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 879.407470][ T29] audit: type=1400 audit(1724963471.368:824): avc: denied { search } for pid=16963 comm="syz.4.4999" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 879.454582][ T29] audit: type=1400 audit(1724963471.368:825): avc: denied { remount } for pid=16963 comm="syz.4.4999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 879.814350][T16968] overlay: filesystem on ./file0 is read-only [ 879.924506][T11976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.243533][T11976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.307801][T16134] Bluetooth: hci4: command tx timeout [ 880.337755][T12990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.358900][T12990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.402289][T11976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.529939][T11976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.634765][T16894] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.654260][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.665252][T16894] bridge_slave_0: entered allmulticast mode [ 880.673133][T16894] bridge_slave_0: entered promiscuous mode [ 880.720348][T16894] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.751900][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.778002][T16894] bridge_slave_1: entered allmulticast mode [ 880.786017][T16894] bridge_slave_1: entered promiscuous mode [ 880.843531][T12995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.935433][T12995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.152518][T16894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.251959][T16894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.858109][T16894] team0: Port device team_slave_0 added [ 881.992477][ T29] audit: type=1400 audit(1724963474.048:826): avc: denied { write } for pid=5285 comm="kworker/0:5" path="socket:[57536]" dev="sockfs" ino=57536 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 882.233722][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.254564][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.278566][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.292569][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.310784][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 882.321946][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.445375][T16894] team0: Port device team_slave_1 added [ 882.858813][T11976] bridge_slave_1: left allmulticast mode [ 882.876666][T11976] bridge_slave_1: left promiscuous mode [ 882.882569][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.931693][T11976] bridge_slave_0: left allmulticast mode [ 882.984704][T11976] bridge_slave_0: left promiscuous mode [ 882.990530][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.271235][T16134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 884.309692][T16134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.340644][T16134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.357569][T16134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.368394][T16134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 884.382553][T16134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 884.390338][T16134] Bluetooth: hci0: command tx timeout [ 884.522580][ T29] audit: type=1400 audit(1724963476.588:827): avc: denied { ioctl } for pid=17027 comm="syz.3.5020" path="socket:[57628]" dev="sockfs" ino=57628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 884.823779][T17032] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5022'. [ 884.837635][T17032] netlink: 'syz.4.5022': attribute type 1 has an invalid length. [ 885.067175][T11976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.093724][T11976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.143698][T11976] bond0 (unregistering): Released all slaves [ 885.164257][T16894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.192332][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.244407][T16894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.276993][T16894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.284097][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.310105][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.344254][T16894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.648795][T16894] hsr_slave_0: entered promiscuous mode [ 885.661899][T16894] hsr_slave_1: entered promiscuous mode [ 885.724856][ T9898] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 885.960615][ T9898] usb 5-1: Using ep0 maxpacket: 8 [ 885.971651][ T9898] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 885.980164][ T9898] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 886.033240][ T9898] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.080612][ T9898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 886.080646][T11976] hsr_slave_0: left promiscuous mode [ 886.094134][ T9898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.118878][T11976] hsr_slave_1: left promiscuous mode [ 886.129993][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.140691][T11976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.155549][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.162971][T11976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.171386][ T9898] usbtmc 5-1:16.0: bulk endpoints not found [ 886.252571][T11976] veth1_macvtap: left promiscuous mode [ 886.263512][T11976] veth0_macvtap: left promiscuous mode [ 886.274417][T11976] veth1_vlan: left promiscuous mode [ 886.280021][T11976] veth0_vlan: left promiscuous mode [ 886.470282][ T5229] Bluetooth: hci0: command tx timeout [ 886.480936][T16134] Bluetooth: hci2: command tx timeout [ 886.608997][ T9898] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 886.833425][ T9898] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 886.871720][ T9898] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 886.880545][ T9898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 886.900818][ T9898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 886.928506][ T9898] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 886.943716][ T9898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.954307][ T9898] usb 4-1: Product: И [ 886.958527][ T9898] usb 4-1: Manufacturer: à “ [ 886.973470][ T9898] usb 4-1: config 0 descriptor?? [ 886.982872][T17050] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 886.991749][ T9898] hub 4-1:0.0: bad descriptor, ignoring hub [ 886.997861][ T9898] hub 4-1:0.0: probe with driver hub failed with error -5 [ 887.020275][ T9898] input: à “ И as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input50 [ 887.140921][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 887.358726][T16554] usb 4-1: USB disconnect, device number 65 [ 887.707484][T11976] team0 (unregistering): Port device team_slave_1 removed [ 887.798453][T11976] team0 (unregistering): Port device team_slave_0 removed [ 888.464157][ T5277] usb 5-1: USB disconnect, device number 66 [ 888.547855][T16134] Bluetooth: hci2: command tx timeout [ 888.553347][T16134] Bluetooth: hci0: command tx timeout [ 889.296663][ T5277] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 889.536687][ T5277] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 889.561503][ T5277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.612490][ T5277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 889.639332][ T5277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.681280][ T5277] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 889.717645][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 889.770545][ T5277] usb 4-1: Product: syz [ 889.790007][ T5277] usb 4-1: Manufacturer: syz [ 889.833801][ T5277] cdc_wdm 4-1:1.0: skipping garbage [ 889.860101][ T5277] cdc_wdm 4-1:1.0: skipping garbage [ 889.919343][ T5277] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 889.941496][ T5277] cdc_wdm 4-1:1.0: Unknown control protocol [ 890.299324][ T9898] usb 4-1: USB disconnect, device number 66 [ 890.397974][T17021] chnl_net:caif_netlink_parms(): no params data found [ 890.630300][T16134] Bluetooth: hci0: command tx timeout [ 890.639120][T16134] Bluetooth: hci2: command tx timeout [ 890.720078][T11976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.926547][T11976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.967548][T17090] netlink: 'syz.4.5043': attribute type 4 has an invalid length. [ 891.084240][T16992] chnl_net:caif_netlink_parms(): no params data found [ 891.149433][T11976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.211431][T17021] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.223595][T17021] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.238443][T17021] bridge_slave_0: entered allmulticast mode [ 891.246968][T17021] bridge_slave_0: entered promiscuous mode [ 891.344229][T11976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.378678][T17021] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.389310][T17021] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.404968][T17021] bridge_slave_1: entered allmulticast mode [ 891.412188][T17021] bridge_slave_1: entered promiscuous mode [ 891.610845][T17021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.676738][T17021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.824747][T16894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 891.848045][T16894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 891.874272][T17021] team0: Port device team_slave_0 added [ 891.938965][T16894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 891.959512][T17021] team0: Port device team_slave_1 added [ 891.983081][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.993819][T16992] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.034503][T16992] bridge_slave_0: entered allmulticast mode [ 892.055747][T16992] bridge_slave_0: entered promiscuous mode [ 892.123765][T16894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 892.209112][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.224852][T16992] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.232223][T16992] bridge_slave_1: entered allmulticast mode [ 892.251260][T16992] bridge_slave_1: entered promiscuous mode [ 892.463735][T11976] bridge_slave_1: left allmulticast mode [ 892.482595][T11976] bridge_slave_1: left promiscuous mode [ 892.489540][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.519690][T11976] bridge_slave_0: left allmulticast mode [ 892.531417][T11976] bridge_slave_0: left promiscuous mode [ 892.541049][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.710686][ T5229] Bluetooth: hci2: command tx timeout [ 892.720833][ T29] audit: type=1400 audit(1724963484.788:828): avc: denied { map } for pid=17106 comm="syz.3.5048" path="socket:[57265]" dev="sockfs" ino=57265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 893.403015][T11976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.423946][T11976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.448979][T11976] bond0 (unregistering): Released all slaves [ 893.474521][T17021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.489947][T17021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.523204][T17021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.566020][T17021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.573022][T17021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.645796][T17021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.713414][T16992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.956652][T16992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.348605][T17021] hsr_slave_0: entered promiscuous mode [ 894.379378][T17021] hsr_slave_1: entered promiscuous mode [ 894.392873][T17021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.401308][T17021] Cannot create hsr debugfs directory [ 894.414835][ T9898] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 894.458183][T16992] team0: Port device team_slave_0 added [ 894.611531][T16992] team0: Port device team_slave_1 added [ 894.621604][ T9898] usb 4-1: Using ep0 maxpacket: 32 [ 894.632332][ T9898] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 894.652584][ T9898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.661560][ T9898] usb 4-1: Product: syz [ 894.671501][ T9898] usb 4-1: Manufacturer: syz [ 894.683922][ T9898] usb 4-1: SerialNumber: syz [ 894.695199][T11976] hsr_slave_0: left promiscuous mode [ 894.702525][ T9898] usb 4-1: config 0 descriptor?? [ 894.732787][ T9898] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 894.750727][T11976] hsr_slave_1: left promiscuous mode [ 894.763560][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.782615][T11976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.791190][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.800432][T11976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.889791][T11976] veth1_macvtap: left promiscuous mode [ 894.901270][T11976] veth0_macvtap: left promiscuous mode [ 894.907136][T11976] veth1_vlan: left promiscuous mode [ 894.913173][T11976] veth0_vlan: left promiscuous mode [ 895.103894][ T5277] usb 4-1: USB disconnect, device number 67 [ 896.177803][T11976] team0 (unregistering): Port device team_slave_1 removed [ 896.293243][T11976] team0 (unregistering): Port device team_slave_0 removed [ 896.374522][T17134] Bluetooth: MGMT ver 1.23 [ 897.991234][T16992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.003390][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.042167][T16992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.169880][T16992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.184133][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.210037][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.229802][T16992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.249339][ T5277] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 898.436911][ T5277] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 898.461599][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.482046][ T5277] usb 5-1: config 0 descriptor?? [ 898.502253][ T5277] cp210x 5-1:0.0: cp210x converter detected [ 898.663312][T16992] hsr_slave_0: entered promiscuous mode [ 898.691514][T16992] hsr_slave_1: entered promiscuous mode [ 898.743414][T16992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.762117][T16992] Cannot create hsr debugfs directory [ 898.952179][T16894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.971493][ T5277] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 899.249490][ T5277] usb 5-1: cp210x converter now attached to ttyUSB0 [ 899.259903][T16894] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.524035][T12970] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.531309][T12970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.555001][T12970] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.562218][T12970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.644378][ T5226] usb 5-1: USB disconnect, device number 67 [ 899.654173][ T5226] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 899.736893][ T5226] cp210x 5-1:0.0: device disconnected [ 899.840921][T16894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.103056][T17021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 900.219592][T17173] netlink: 'syz.3.5071': attribute type 11 has an invalid length. [ 900.269204][T17021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 900.293864][T17021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 900.346656][T17021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 900.635863][T16894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.783514][T17182] netlink: 'syz.4.5074': attribute type 29 has an invalid length. [ 900.853313][T17182] netlink: 'syz.4.5074': attribute type 29 has an invalid length. [ 900.864116][T17183] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5074'. [ 901.134005][T16894] veth0_vlan: entered promiscuous mode [ 901.170127][T16894] veth1_vlan: entered promiscuous mode [ 901.395674][T16992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 901.409031][T16992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 901.532142][T17021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.562790][T16992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 901.595531][T16992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 901.664271][T16894] veth0_macvtap: entered promiscuous mode [ 901.762031][T16894] veth1_macvtap: entered promiscuous mode [ 901.873550][T17021] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.962671][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.983851][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.001531][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.021134][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.040242][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.059716][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.072941][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.093602][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.105955][T16894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.274578][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.294144][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.311272][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.333105][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.411076][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.429481][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.464190][T16894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.494239][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.501479][T12990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.594440][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.601691][T12990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.621164][T16894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.651841][T16894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.681181][T16894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.694384][T16894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.024473][T17021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 903.352559][T16992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.589283][T12990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.598531][T12990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.658989][T16992] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.916240][T12970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.965637][T12970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.988763][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.996010][T12990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.142669][T12974] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.149995][T12974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.738601][T17021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.144136][T12990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.334528][T12990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.522387][T12990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.714532][T12990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.780277][T17021] veth0_vlan: entered promiscuous mode [ 905.927448][T17021] veth1_vlan: entered promiscuous mode [ 905.959697][T16992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.131528][T17021] veth0_macvtap: entered promiscuous mode [ 906.481351][T17021] veth1_macvtap: entered promiscuous mode [ 906.682793][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.776033][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.821902][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.840244][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.889372][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.920966][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.940735][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.971541][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.006806][T16134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 907.007758][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.022417][T16134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 907.050266][T16134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 907.061498][T16134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 907.074441][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.103883][T17021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.140988][T16134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 907.151648][T12990] bridge_slave_1: left allmulticast mode [ 907.163823][T12990] bridge_slave_1: left promiscuous mode [ 907.173967][T16134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 907.184122][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.248609][T12990] bridge_slave_0: left allmulticast mode [ 907.254323][T12990] bridge_slave_0: left promiscuous mode [ 907.271932][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.199608][T12990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.213124][T12990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.240051][T12990] bond0 (unregistering): Released all slaves [ 908.321948][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.398667][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.470706][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.503459][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.513585][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.534602][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.544470][T17021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.570968][T17021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.582991][T17021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.767559][ T5279] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 908.925734][T17021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.943467][T17021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.953356][T17021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.968814][T17267] syz.4.5105 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 908.972642][T17021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.004633][ T5279] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 909.025268][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.061436][ T5279] usb 4-1: config 0 descriptor?? [ 909.124628][ T5279] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 909.267883][ T5229] Bluetooth: hci4: command tx timeout [ 909.351091][T16992] veth0_vlan: entered promiscuous mode [ 909.533126][T12990] hsr_slave_0: left promiscuous mode [ 909.534124][T12990] hsr_slave_1: left promiscuous mode [ 909.554341][T12990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.554389][T12990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.559853][T12990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.559886][T12990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.640408][T12990] veth1_macvtap: left promiscuous mode [ 909.640583][T12990] veth0_macvtap: left promiscuous mode [ 909.640840][T12990] veth1_vlan: left promiscuous mode [ 909.641005][T12990] veth0_vlan: left promiscuous mode [ 910.081996][ T5279] gspca_stv06xx: I2C: Read error writing address: -71 [ 910.113830][ T5279] usb 4-1: USB disconnect, device number 68 [ 911.350692][ T5229] Bluetooth: hci4: command tx timeout [ 911.533620][T12990] team0 (unregistering): Port device team_slave_1 removed [ 911.707752][T12990] team0 (unregistering): Port device team_slave_0 removed [ 913.339618][T16992] veth1_vlan: entered promiscuous mode [ 913.431247][ T5229] Bluetooth: hci4: command tx timeout [ 914.177347][T16992] veth0_macvtap: entered promiscuous mode [ 914.310916][T12986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.376965][T12986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.483856][T16992] veth1_macvtap: entered promiscuous mode [ 914.532229][T17252] chnl_net:caif_netlink_parms(): no params data found [ 914.742877][T12974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.749052][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.759953][T12974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.780105][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.802154][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.824043][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.837395][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.855913][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.870189][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.889134][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.904293][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.924541][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.939658][T16992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.282624][T17252] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.349079][T17252] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.359035][T17252] bridge_slave_0: entered allmulticast mode [ 915.375437][T17252] bridge_slave_0: entered promiscuous mode [ 915.417998][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.457383][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.484751][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.509201][ T5229] Bluetooth: hci4: command tx timeout [ 915.520503][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.539711][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.589853][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.602806][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.622140][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.640725][T16992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.663827][T16992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.674291][T16992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.698215][T16992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.708397][T16992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.929540][T17252] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.937001][T17252] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.969339][T17252] bridge_slave_1: entered allmulticast mode [ 916.026824][T17252] bridge_slave_1: entered promiscuous mode [ 916.372650][T11976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.500489][T17252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.590031][T17252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.772557][T11976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.049062][T17345] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5137'. [ 917.262678][T11976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.418963][T17252] team0: Port device team_slave_0 added [ 917.467813][T17252] team0: Port device team_slave_1 added [ 917.553301][T16134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 917.588258][T16134] Bluetooth: hci4: command tx timeout [ 917.590749][T16995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 917.608940][T16995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 917.626369][T16995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 917.634376][T16995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 917.652758][T16995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 917.728710][ T5226] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 917.793142][T11976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.934431][ T5226] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 917.951103][ T5226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.963517][T17356] loop2: detected capacity change from 0 to 7 [ 917.970458][ T5226] usb 5-1: Product: syz [ 917.997505][ T5226] usb 5-1: Manufacturer: syz [ 918.012695][T17356] Dev loop2: unable to read RDB block 7 [ 918.018506][ T5226] usb 5-1: SerialNumber: syz [ 918.028702][ T5226] usb 5-1: config 0 descriptor?? [ 918.034400][ T5226] cypress_m8 5-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 918.086080][ T5226] nokiaca42v2 ttyUSB0: required endpoint is missing [ 918.095581][T17252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.095601][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.095633][T17252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.117957][T17252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.140247][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.190729][T17356] loop2: unable to read partition table [ 918.203934][T17356] loop2: partition table beyond EOD, truncated [ 918.219435][T17356] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 918.219474][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.334332][T17252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.820842][T12974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.846730][T12974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.917801][T17252] hsr_slave_0: entered promiscuous mode [ 918.968799][T17252] hsr_slave_1: entered promiscuous mode [ 919.080557][T11976] bridge_slave_1: left allmulticast mode [ 919.124604][T11976] bridge_slave_1: left promiscuous mode [ 919.154265][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.203074][ T9898] usb 5-1: USB disconnect, device number 68 [ 919.210723][ T9898] cypress_m8 5-1:0.0: device disconnected [ 919.226252][T11976] bridge_slave_0: left allmulticast mode [ 919.231936][T11976] bridge_slave_0: left promiscuous mode [ 919.251701][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.756605][T16995] Bluetooth: hci2: command tx timeout [ 920.703574][T11976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.746874][T11976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.782912][T11976] bond0 (unregistering): Released all slaves [ 921.413448][T17381] tipc: Started in network mode [ 921.421184][T17381] tipc: Node identity ffffffff, cluster identity 4711 [ 921.430281][T17381] tipc: Node number set to 4294967295 [ 921.455371][T12995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.479631][T12995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.824985][T16995] Bluetooth: hci2: command tx timeout [ 922.555525][T11976] hsr_slave_0: left promiscuous mode [ 922.618537][T11976] hsr_slave_1: left promiscuous mode [ 922.695861][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.707973][T11976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.755565][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.763180][T11976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.872567][T11976] veth1_macvtap: left promiscuous mode [ 922.898696][T11976] veth0_macvtap: left promiscuous mode [ 922.906860][T11976] veth1_vlan: left promiscuous mode [ 922.912726][T11976] veth0_vlan: left promiscuous mode [ 923.924576][T16995] Bluetooth: hci2: command tx timeout [ 924.403942][T11976] team0 (unregistering): Port device team_slave_1 removed [ 924.521628][T11976] team0 (unregistering): Port device team_slave_0 removed [ 924.594434][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 924.630681][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 924.653912][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 924.663912][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 924.684589][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 924.711585][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 925.842321][T17351] chnl_net:caif_netlink_parms(): no params data found [ 926.003662][ T5229] Bluetooth: hci2: command tx timeout [ 926.609306][T17351] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.617127][T17351] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.624404][T17351] bridge_slave_0: entered allmulticast mode [ 926.666164][T17351] bridge_slave_0: entered promiscuous mode [ 926.778859][T17351] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.802204][T16995] Bluetooth: hci0: command tx timeout [ 926.802279][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.802500][T17351] bridge_slave_1: entered allmulticast mode [ 926.849093][T17351] bridge_slave_1: entered promiscuous mode [ 927.061143][T17351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.097159][T17351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.236114][ T5277] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 927.449616][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 927.467110][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.494312][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.522030][T11976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.558612][ T5277] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 927.602455][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.640669][T17351] team0: Port device team_slave_0 added [ 927.652949][ T5277] usb 4-1: config 0 descriptor?? [ 927.675851][T17351] team0: Port device team_slave_1 added [ 927.878632][T11976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.053806][ T5279] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 928.068571][T17351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.086112][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.130913][T17351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.150110][ T5277] uclogic 0003:28BD:0094.0065: interface is invalid, ignoring [ 928.192424][T11976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.224460][T17409] chnl_net:caif_netlink_parms(): no params data found [ 928.252229][T17351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.263569][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.301949][T17351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.316103][ T5279] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 928.373391][ T5279] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.382972][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 928.404030][ T5279] usb 5-1: SerialNumber: syz [ 928.503950][T11976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.529013][ T9898] usb 4-1: USB disconnect, device number 69 [ 928.565659][T17252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 928.631903][T17252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 928.751253][T17252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 928.779769][T17252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 928.864832][T16995] Bluetooth: hci0: command tx timeout [ 928.880046][T17351] hsr_slave_0: entered promiscuous mode [ 928.900236][T17351] hsr_slave_1: entered promiscuous mode [ 928.914302][T17351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.924425][T17351] Cannot create hsr debugfs directory [ 929.040262][T17409] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.063403][T17409] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.073521][T17409] bridge_slave_0: entered allmulticast mode [ 929.094166][T17409] bridge_slave_0: entered promiscuous mode [ 929.121384][T17409] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.136626][T17409] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.144528][T17409] bridge_slave_1: entered allmulticast mode [ 929.167682][T17409] bridge_slave_1: entered promiscuous mode [ 929.383560][ T5279] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 929.491483][T17409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.592006][T17409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.644956][ T5285] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 929.701678][T16554] usb 5-1: USB disconnect, device number 69 [ 929.722002][T16554] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 929.754505][T11976] bridge_slave_1: left allmulticast mode [ 929.769133][T11976] bridge_slave_1: left promiscuous mode [ 929.779194][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.793901][T11976] bridge_slave_0: left allmulticast mode [ 929.800970][T11976] bridge_slave_0: left promiscuous mode [ 929.810957][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.841524][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 929.860498][ T5285] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.873076][ T5285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 929.887365][ T5285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 929.903053][ T5285] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 929.923037][ T5285] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 929.935778][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.179031][ T5285] usb 4-1: usb_control_msg returned -32 [ 930.189558][ T5285] usbtmc 4-1:16.0: can't read capabilities [ 930.712063][T11976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.734472][T11976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.751181][T11976] bond0 (unregistering): Released all slaves [ 930.947225][T16995] Bluetooth: hci0: command tx timeout [ 931.036771][T17409] team0: Port device team_slave_0 added [ 931.144409][T17409] team0: Port device team_slave_1 added [ 931.426397][T17409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.433382][T17409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.468801][T17409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.583082][T17409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.590380][T17409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.634520][T17409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.703254][T11976] hsr_slave_0: left promiscuous mode [ 931.710000][T11976] hsr_slave_1: left promiscuous mode [ 931.723117][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.732338][T11976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.754030][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.769277][T11976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.857738][T11976] veth1_macvtap: left promiscuous mode [ 931.863461][T11976] veth0_macvtap: left promiscuous mode [ 931.870154][T11976] veth1_vlan: left promiscuous mode [ 931.883504][T11976] veth0_vlan: left promiscuous mode [ 932.153935][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.413304][ T5226] usb 4-1: USB disconnect, device number 70 [ 933.024826][T16995] Bluetooth: hci0: command tx timeout [ 933.163327][T17474] Bluetooth: MGMT ver 1.23 [ 933.673614][T11976] team0 (unregistering): Port device team_slave_1 removed [ 933.770547][T11976] team0 (unregistering): Port device team_slave_0 removed [ 935.070327][T17409] hsr_slave_0: entered promiscuous mode [ 935.101461][T17409] hsr_slave_1: entered promiscuous mode [ 935.148511][T17409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 935.156257][T17409] Cannot create hsr debugfs directory [ 935.342103][T17252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.697985][ T5277] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 935.754522][T17252] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.900387][T12974] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.907645][T12974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.996788][ T5277] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 936.012878][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.033750][ T5277] usb 4-1: Product: syz [ 936.043926][ T5277] usb 4-1: Manufacturer: syz [ 936.063821][ T5277] usb 4-1: SerialNumber: syz [ 936.187903][T12974] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.195141][T12974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.222340][ T5277] usb 4-1: config 0 descriptor?? [ 937.671459][T17351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 937.698157][ T5277] usb 4-1: can't set config #0, error -71 [ 937.710134][ T5277] usb 4-1: USB disconnect, device number 71 [ 937.741616][T17351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 937.842248][T17351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 937.869658][T17351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 937.969347][ T29] audit: type=1400 audit(1724963530.018:829): avc: denied { shutdown } for pid=17498 comm="syz.4.5194" laddr=ff02::1 lport=20004 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 938.108495][T17252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 938.580614][T17351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.748126][T17351] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.942150][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.949442][T12990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.005346][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.012493][T12990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.062321][ T5285] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 939.079785][ T5285] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 939.101818][ T5285] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 939.142792][ T5285] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 939.208841][ T5285] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz0 [ 939.215923][T17252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.303530][T17409] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 939.376446][T17351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.403657][T17409] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 939.419997][ T5226] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 939.473626][T17409] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 939.518226][T17409] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 939.623427][ T5226] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 939.650966][ T5226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.686588][ T5226] usb 5-1: Product: syz [ 939.690999][ T5226] usb 5-1: Manufacturer: syz [ 939.716776][ T5226] usb 5-1: SerialNumber: syz [ 939.758284][ T5226] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 939.832235][T17252] veth0_vlan: entered promiscuous mode [ 939.868837][ T5277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 939.993828][T17252] veth1_vlan: entered promiscuous mode [ 940.353777][T17252] veth0_macvtap: entered promiscuous mode [ 940.701135][T17252] veth1_macvtap: entered promiscuous mode [ 941.011601][T17409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.051558][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.129602][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.163483][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.203895][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.253231][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.340545][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.390181][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.477031][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.579842][T17252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.646101][T17351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.895028][T17409] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.966688][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.993087][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.066888][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.102736][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.141623][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.192957][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.228689][T17252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.539356][T17252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.599166][T17252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.658353][T17252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.764689][T17252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.890184][T12974] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.897444][T12974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.472300][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.479539][T11976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.966579][T17537] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 951.025366][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.093358][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.128915][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.154243][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.163560][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 951.185740][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 953.293569][ T5229] Bluetooth: hci5: command tx timeout [ 954.155054][ C0] hrtimer: interrupt took 11706754 ns [ 955.405008][ T5229] Bluetooth: hci5: command tx timeout [ 956.603727][T16995] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 956.675719][T16995] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 956.684512][T16995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 956.718170][T16995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 956.740661][T16995] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 956.755761][T16995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 957.445935][T16995] Bluetooth: hci5: command tx timeout [ 958.789536][T16995] Bluetooth: hci7: command tx timeout [ 959.509999][T16995] Bluetooth: hci5: command tx timeout [ 960.886090][T16995] Bluetooth: hci7: command tx timeout [ 962.957098][T16995] Bluetooth: hci7: command tx timeout [ 965.029421][T16995] Bluetooth: hci7: command tx timeout [ 968.026334][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2674 jiffies s: 35529 root: 0x1/. [ 968.107987][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 968.213879][ T19] Sending NMI from CPU 1 to CPUs 0: [ 968.228870][ C0] NMI backtrace for cpu 0 [ 968.228888][ C0] CPU: 0 UID: 0 PID: 5285 Comm: kworker/0:5 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 968.228917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 968.228933][ C0] Workqueue: usb_hub_wq hub_event [ 968.228958][ C0] RIP: 0010:stack_access_ok+0x1db/0x270 [ 968.228984][ C0] Code: ff ff e8 b8 e1 4e 00 48 39 eb 41 0f 93 c6 e9 30 ff ff ff e8 a7 e1 4e 00 4c 8b 3c 24 4c 39 fd 0f 83 d3 fe ff ff e8 95 e1 4e 00 <48> 8b 44 24 08 48 01 e8 49 39 c6 48 89 04 24 0f 83 b9 fe ff ff e8 [ 968.229006][ C0] RSP: 0018:ffffc90000007208 EFLAGS: 00000006 [ 968.229024][ C0] RAX: 0000000000010104 RBX: ffffc900000072d0 RCX: ffffffff813cdd16 [ 968.229040][ C0] RDX: ffff88802a433c00 RSI: ffffffff813cde5b RDI: 0000000000000005 [ 968.229055][ C0] RBP: ffffc9000398f590 R08: 0000000000000005 R09: 0000000000000000 [ 968.229070][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900000072d8 [ 968.229085][ C0] R13: ffffc900000072e0 R14: ffffc90003988000 R15: ffffc90003990000 [ 968.229101][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 968.229124][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.229141][ C0] CR2: 0000001b2c808ff8 CR3: 0000000066edc000 CR4: 00000000003506f0 [ 968.229155][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 968.229168][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 968.229183][ C0] Call Trace: [ 968.229191][ C0] [ 968.229202][ C0] ? show_regs+0x8c/0xa0 [ 968.229235][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 968.229265][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 968.229295][ C0] ? nmi_handle+0x1a9/0x5c0 [ 968.229317][ C0] ? stack_access_ok+0x1db/0x270 [ 968.229339][ C0] ? default_do_nmi+0x6a/0x160 [ 968.229378][ C0] ? exc_nmi+0x170/0x1e0 [ 968.229409][ C0] ? end_repeat_nmi+0xf/0x53 [ 968.229435][ C0] ? stack_access_ok+0x96/0x270 [ 968.229455][ C0] ? stack_access_ok+0x1db/0x270 [ 968.229477][ C0] ? stack_access_ok+0x1db/0x270 [ 968.229499][ C0] ? stack_access_ok+0x1db/0x270 [ 968.229522][ C0] ? stack_access_ok+0x1db/0x270 [ 968.229545][ C0] [ 968.229552][ C0] [ 968.229563][ C0] unwind_next_frame+0xd9b/0x23a0 [ 968.229587][ C0] ? unwind_next_frame+0x1182/0x23a0 [ 968.229611][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 968.229640][ C0] arch_stack_walk+0x100/0x170 [ 968.229668][ C0] ? unwind_next_frame+0x1182/0x23a0 [ 968.229692][ C0] ? dummy_timer+0x1750/0x38d0 [ 968.229718][ C0] stack_trace_save+0x95/0xd0 [ 968.229744][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 968.229772][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 968.229802][ C0] kasan_save_stack+0x33/0x60 [ 968.229833][ C0] ? kasan_save_stack+0x33/0x60 [ 968.229861][ C0] ? kasan_save_track+0x14/0x30 [ 968.229890][ C0] ? kasan_save_free_info+0x3b/0x60 [ 968.229916][ C0] ? poison_slab_object+0xf7/0x160 [ 968.229945][ C0] ? __kasan_slab_free+0x32/0x50 [ 968.229976][ C0] ? kfree+0x12a/0x3b0 [ 968.230002][ C0] ? dummy_timer+0x1750/0x38d0 [ 968.230026][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 968.230049][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 968.230073][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 968.230095][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 968.230120][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.230153][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 968.230186][ C0] ? pie_calculate_probability+0x266/0x850 [ 968.230219][ C0] ? fq_pie_timer+0x215/0x5a0 [ 968.230248][ C0] ? call_timer_fn+0x1a0/0x610 [ 968.230277][ C0] ? __run_timers+0x74b/0xaf0 [ 968.230305][ C0] ? run_timer_base+0x111/0x190 [ 968.230333][ C0] ? run_timer_softirq+0x1a/0x40 [ 968.230366][ C0] ? handle_softirqs+0x216/0x8f0 [ 968.230390][ C0] ? irq_exit_rcu+0xbb/0x120 [ 968.230412][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 968.230436][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.230469][ C0] ? __sanitizer_cov_trace_pc+0x5f/0x70 [ 968.230500][ C0] ? unwind_next_frame+0x1182/0x23a0 [ 968.230540][ C0] kasan_save_track+0x14/0x30 [ 968.230571][ C0] kasan_save_free_info+0x3b/0x60 [ 968.230597][ C0] poison_slab_object+0xf7/0x160 [ 968.230629][ C0] __kasan_slab_free+0x32/0x50 [ 968.230660][ C0] kfree+0x12a/0x3b0 [ 968.230687][ C0] ? dummy_timer+0x1750/0x38d0 [ 968.230714][ C0] dummy_timer+0x1750/0x38d0 [ 968.230743][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 968.230777][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 968.230815][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 968.230838][ C0] ? __pfx_lock_release+0x10/0x10 [ 968.230870][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 968.230895][ C0] ? timerqueue_del+0x83/0x150 [ 968.230923][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 968.230947][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 968.230976][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 968.231002][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 968.231037][ C0] hrtimer_interrupt+0x31b/0x800 [ 968.231071][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 968.231095][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 968.231121][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.231154][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 968.231187][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 04 1b 78 7e 65 8b 05 05 1b 78 7e a9 00 01 ff 00 <48> 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 [ 968.231208][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00000206 [ 968.231225][ C0] RAX: 0000000000000102 RBX: 0000000000abcc77 RCX: ffffffff892431ed [ 968.231240][ C0] RDX: ffff88802a433c00 RSI: 00000000000f4240 RDI: 0000000000000005 [ 968.231255][ C0] RBP: 00000010c6f7a0b5 R08: 0000000000000005 R09: 00000000000f4240 [ 968.231271][ C0] R10: 00000000000f4240 R11: 0000000000000000 R12: 00000000000f4240 [ 968.231285][ C0] R13: 0000000000000001 R14: 0000000000112e0b R15: 0000000000000000 [ 968.231305][ C0] ? pie_calculate_probability+0x2ad/0x850 [ 968.231341][ C0] pie_calculate_probability+0x266/0x850 [ 968.231383][ C0] fq_pie_timer+0x215/0x5a0 [ 968.231420][ C0] call_timer_fn+0x1a0/0x610 [ 968.231449][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 968.231481][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 968.231510][ C0] ? __pfx_lock_release+0x10/0x10 [ 968.231543][ C0] ? mark_held_locks+0x9f/0xe0 [ 968.231571][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 968.231604][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 968.231636][ C0] __run_timers+0x74b/0xaf0 [ 968.231672][ C0] ? __pfx___run_timers+0x10/0x10 [ 968.231703][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 968.231744][ C0] run_timer_base+0x111/0x190 [ 968.231774][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 968.231807][ C0] run_timer_softirq+0x1a/0x40 [ 968.231836][ C0] handle_softirqs+0x216/0x8f0 [ 968.231865][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 968.231893][ C0] irq_exit_rcu+0xbb/0x120 [ 968.231916][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 968.231942][ C0] [ 968.231949][ C0] [ 968.231958][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.231991][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5f/0x70 [ 968.232024][ C0] Code: 00 00 85 c0 74 2b 8b 82 f8 15 00 00 83 f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 <48> 89 01 48 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 [ 968.232045][ C0] RSP: 0018:ffffc9000398f518 EFLAGS: 00000283 [ 968.232062][ C0] RAX: 0000000000000220 RBX: ffffc9000398f5a0 RCX: ffffc900150e0000 [ 968.232078][ C0] RDX: 0000000000100000 RSI: ffffffff813cf082 RDI: ffffc9000398f5a8 [ 968.232094][ C0] RBP: ffffc9000398f9d8 R08: 0000000000000004 R09: 0000000000000001 [ 968.232108][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003988000 [ 968.232123][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000001 [ 968.232144][ C0] ? unwind_next_frame+0x1182/0x23a0 [ 968.232169][ C0] unwind_next_frame+0x1182/0x23a0 [ 968.232193][ C0] ? usb_control_msg+0xbd/0x4b0 [ 968.232224][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 968.232252][ C0] arch_stack_walk+0x100/0x170 [ 968.232279][ C0] ? hub_ext_port_status+0x14e/0x670 [ 968.232310][ C0] stack_trace_save+0x95/0xd0 [ 968.232336][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 968.232373][ C0] kasan_save_stack+0x33/0x60 [ 968.232403][ C0] ? kasan_save_stack+0x33/0x60 [ 968.232431][ C0] ? kasan_save_track+0x14/0x30 [ 968.232460][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 968.232489][ C0] ? usb_control_msg+0xbd/0x4b0 [ 968.232546][ C0] kasan_save_track+0x14/0x30 [ 968.232576][ C0] __kasan_kmalloc+0xaa/0xb0 [ 968.232607][ C0] usb_control_msg+0xbd/0x4b0 [ 968.232638][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 968.232667][ C0] ? hub_event+0x5bf/0x4e10 [ 968.232688][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 968.232719][ C0] hub_ext_port_status+0x14e/0x670 [ 968.232754][ C0] hub_event+0x6e0/0x4e10 [ 968.232788][ C0] ? find_held_lock+0x2d/0x110 [ 968.232817][ C0] ? __pfx_hub_event+0x10/0x10 [ 968.232840][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 968.232870][ C0] ? __pfx_lock_release+0x10/0x10 [ 968.232909][ C0] process_one_work+0x9c5/0x1b40 [ 968.232948][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 968.232978][ C0] ? __pfx_process_one_work+0x10/0x10 [ 968.233015][ C0] ? assign_work+0x1a0/0x250 [ 968.233047][ C0] worker_thread+0x6c8/0xed0 [ 968.233085][ C0] ? __kthread_parkme+0x148/0x220 [ 968.233112][ C0] ? __pfx_worker_thread+0x10/0x10 [ 968.233144][ C0] kthread+0x2c1/0x3a0 [ 968.233167][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.233191][ C0] ? __pfx_kthread+0x10/0x10 [ 968.233216][ C0] ret_from_fork+0x45/0x80 [ 968.233247][ C0] ? __pfx_kthread+0x10/0x10 [ 968.233271][ C0] ret_from_fork_asm+0x1a/0x30 [ 968.233310][ C0] [ 969.179879][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.145982][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 970.197826][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 970.220077][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 970.240180][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 970.253801][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 970.271016][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 972.409559][ T5229] Bluetooth: hci8: command tx timeout [ 974.483428][ T5229] Bluetooth: hci8: command tx timeout [ 976.568526][ T5229] Bluetooth: hci8: command tx timeout