last executing test programs: 1m43.997984673s ago: executing program 4 (id=626): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 1m29.648455329s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r1}, 0x20) dup3(r2, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) 1m23.656204808s ago: executing program 4 (id=626): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 1m14.377206666s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r1}, 0x20) dup3(r2, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) 1m7.43689788s ago: executing program 4 (id=626): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 59.092881845s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r1}, 0x20) dup3(r2, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) 56.380690189s ago: executing program 4 (id=626): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 35.120145364s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r1}, 0x20) dup3(r2, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) 31.433111677s ago: executing program 4 (id=626): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 17.34788269s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r1}, 0x20) dup3(r2, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) 16.298043984s ago: executing program 4 (id=626): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 4.123869588s ago: executing program 0 (id=1579): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x3, {0x3, 0x0, 0x7, 0x20000}}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x7}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.892235768s ago: executing program 0 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x4000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x2b, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.623093419s ago: executing program 1 (id=1584): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000039644bc90000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) 3.501997751s ago: executing program 0 (id=1585): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 3.201526411s ago: executing program 0 (id=1586): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001100000000000000000200000000000000000000000000000000000000feffffff0100000019000000000000000800000000000000000000000000e9ffffff7465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000070000000000000000000000200000000000001bac1414bbffffffff00000000000000000006d9177bc20000000000fd0bf400004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000ea09ffff00000000000000000000000000000000000000000001000000ffffffff"]}, 0x1ec) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [], 0x0, 0x0, 0x0}, 0x1f0) 2.855952062s ago: executing program 2 (id=1587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 2.769052832s ago: executing program 0 (id=1588): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x62) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="57606c081b9f80cad335435dcc", 0xd}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) shutdown(r0, 0x2) 2.610294559s ago: executing program 2 (id=1589): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe78, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) 2.531067994s ago: executing program 2 (id=1590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000010100c0"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8=r1]) 2.39238449s ago: executing program 0 (id=1591): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000380), 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.145490838s ago: executing program 1 (id=1592): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) io_uring_enter(0xffffffffffffffff, 0x7b9f, 0x0, 0x0, 0x0, 0x0) 1.911723235s ago: executing program 1 (id=1593): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.910778346s ago: executing program 2 (id=1594): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1.709335782s ago: executing program 2 (id=1595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000014000100ff93fffffffffff802000000", @ANYRES32, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x7) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a002903ffffffff000000000a00000000000000080005"], 0x20}}, 0x0) 1.281127013s ago: executing program 2 (id=1596): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1.160147679s ago: executing program 1 (id=1597): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 938.928436ms ago: executing program 1 (id=1598): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00') 438.433388ms ago: executing program 1 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000014000000a00000000000000", @ANYRES32, @ANYBLOB="0000000001"], 0x48) 0s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r1}, 0x20) dup3(r2, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) kernel console output (not intermixed with test programs): 310.521707][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.532481][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.543672][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.558355][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.568496][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.580311][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.592052][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.608529][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.616547][ T9192] veth0_macvtap: entered promiscuous mode [ 310.633358][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.634366][ T9187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.652710][ T9187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.663977][ T9187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.673825][ T9187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.689943][ T5239] Bluetooth: hci1: command tx timeout [ 310.723232][ T9192] veth1_macvtap: entered promiscuous mode [ 310.807988][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.830819][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.846510][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.857175][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.867386][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.884479][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.894434][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.905237][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.917016][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.991206][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.012628][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.024186][ T9364] mmap: syz.1.1280 (9364): VmData 37453824 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 311.028678][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.049843][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.059783][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.070356][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.087024][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.110880][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.127987][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.172054][ T9192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.181141][ T9192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.191030][ T9192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.199843][ T9192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.239189][ T35] wlan1: Trigger new scan to find an IBSS to join [ 311.298442][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.316278][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.439099][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.455303][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.481909][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.495853][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.543418][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.593140][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.619497][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.628371][ T9266] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.657108][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.664347][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.717668][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.724947][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.145774][ T3009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.423336][ T9266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.581098][ T3009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.759039][ T5239] Bluetooth: hci1: command tx timeout [ 312.810358][ T3009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.887404][ T9266] veth0_vlan: entered promiscuous mode [ 312.975644][ T3009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.070689][ T9390] overlayfs: failed to decode file handle (len=2, type=4347, flags=0, err=-22) [ 313.139961][ T9266] veth1_vlan: entered promiscuous mode [ 313.316751][ T9266] veth0_macvtap: entered promiscuous mode [ 313.380766][ T9266] veth1_macvtap: entered promiscuous mode [ 313.431448][ T3009] bridge_slave_1: left allmulticast mode [ 313.442081][ T3009] bridge_slave_1: left promiscuous mode [ 313.464707][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.486258][ T3009] bridge_slave_0: left allmulticast mode [ 313.499370][ T3009] bridge_slave_0: left promiscuous mode [ 313.514588][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.514661][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.530777][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.540927][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.554261][ T9402] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 313.567347][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.579386][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 313.590571][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.599425][ T5306] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 313.772750][ T5306] usb 2-1: Using ep0 maxpacket: 32 [ 313.780997][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.808471][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.821598][ T5306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 313.835673][ T5306] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 313.845190][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.876100][ T5306] usb 2-1: config 0 descriptor?? [ 314.162563][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 314.162587][ T29] audit: type=1326 audit(1729246770.521:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.2.1293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9721b7dff9 code=0x0 [ 314.201148][ T53] wlan1: Creating new IBSS network, BSSID be:5f:6b:9a:35:dd [ 314.361948][ T5306] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.001C/input/input31 [ 314.445717][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.460643][ T5306] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.001C/input/input32 [ 314.480528][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.499548][ T5306] kye 0003:0458:5011.001C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 314.504356][ T3009] bond0 (unregistering): Released all slaves [ 314.736997][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.752975][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.769600][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.786779][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.801716][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.820588][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.833824][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.851535][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.865156][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.876171][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.892813][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.917197][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.968863][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.994433][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.012641][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.033946][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.058705][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.079613][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.098615][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.128627][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.139331][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.171510][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.202534][ T9266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.218641][ T9266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.235670][ T9266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.266163][ T9266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.460779][ C1] kye 0003:0458:5011.001C: usb_submit_urb(ctrl) failed: -1 [ 315.533129][ T29] audit: type=1400 audit(1729246771.891:607): avc: denied { read } for pid=9423 comm="syz.2.1296" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 315.582732][ T3009] hsr_slave_0: left promiscuous mode [ 315.600144][ T3009] hsr_slave_1: left promiscuous mode [ 315.618070][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.626340][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.639675][ T5233] Bluetooth: hci5: command tx timeout [ 315.647132][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.655951][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.688890][ T3009] veth1_macvtap: left promiscuous mode [ 315.694498][ T3009] veth0_macvtap: left promiscuous mode [ 315.711579][ T3009] veth1_vlan: left promiscuous mode [ 315.717056][ T3009] veth0_vlan: left promiscuous mode [ 315.987266][ T29] audit: type=1326 audit(1729246772.341:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.0.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f875f17dff9 code=0x0 [ 316.282715][ T5278] usb 2-1: USB disconnect, device number 21 [ 316.583950][ T9441] fuse: Bad value for 'fd' [ 316.766195][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 316.850800][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 317.720499][ T5233] Bluetooth: hci5: command tx timeout [ 317.724426][ T9425] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.734580][ T9425] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 317.797416][ T9425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.846383][ T9425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.868199][ T9425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.915927][ T9425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.925845][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 317.978736][ T9425] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 318.010155][ T9425] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 318.025024][ T9425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.035735][ T9425] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 318.063898][ T9425] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 318.085007][ T9425] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 318.094618][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.099101][ T9425] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 318.110258][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.114738][ T9425] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 318.118244][ T9399] bridge_slave_0: entered allmulticast mode [ 318.160137][ T9399] bridge_slave_0: entered promiscuous mode [ 318.169138][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.176308][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.183787][ T9399] bridge_slave_1: entered allmulticast mode [ 318.192526][ T9399] bridge_slave_1: entered promiscuous mode [ 318.297896][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.322047][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.414673][ T9399] team0: Port device team_slave_0 added [ 318.426549][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.443406][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.470860][ T9399] team0: Port device team_slave_1 added [ 318.559359][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.566110][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.567231][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.575307][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.608369][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 318.618175][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.640427][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.657119][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.685233][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.809549][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 318.819579][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.832707][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.854329][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.880171][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.890835][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.914794][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.946372][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.963302][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.984168][ T9472] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 318.998704][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.018889][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.026184][ T9399] hsr_slave_0: entered promiscuous mode [ 319.034220][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.049283][ T9399] hsr_slave_1: entered promiscuous mode [ 319.055565][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.073040][ T9399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.077352][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.098904][ T9399] Cannot create hsr debugfs directory [ 319.109750][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.126011][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.139726][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.149014][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.160278][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.168921][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.181384][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.209938][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.219680][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.228974][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.254132][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.264228][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 319.273430][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 319.290427][ T9] usb 2-1: Product: syz [ 319.294706][ T9] usb 2-1: Manufacturer: syz [ 319.304681][ T9] usb 2-1: SerialNumber: syz [ 319.305342][ T3009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.324982][ T9] usb 2-1: config 0 descriptor?? [ 319.335624][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 319.453497][ T3009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.572610][ T3009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.627702][ T9] usb 2-1: USB disconnect, device number 22 [ 319.642048][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 319.685430][ T3009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.799882][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 319.806647][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout [ 319.828681][ T3009] bridge_slave_1: left allmulticast mode [ 319.834577][ T3009] bridge_slave_1: left promiscuous mode [ 319.840535][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.850552][ T3009] bridge_slave_0: left allmulticast mode [ 319.857182][ T3009] bridge_slave_0: left promiscuous mode [ 319.864503][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.959337][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.121099][ T5233] Bluetooth: hci5: command 0x0419 tx timeout [ 320.509320][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 320.551580][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.592258][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.602552][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.611997][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.619771][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 320.627297][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.699793][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 320.714161][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.741775][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.773505][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 320.792060][ T29] audit: type=1800 audit(1729246777.131:609): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1317" name="bus" dev="overlay" ino=1835 res=0 errno=0 [ 320.832115][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.861165][ T25] usb 3-1: config 0 descriptor?? [ 320.974680][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.003289][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.018409][ T3009] bond0 (unregistering): Released all slaves [ 321.171507][ T9496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.194950][ T9496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.205488][ T9496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.211692][ T9496] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 321.218352][ T9496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.232312][ T9496] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 321.254147][ T9496] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 321.306200][ T25] wacom 0003:056A:0300.001D: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 321.323044][ T25] wacom 0003:056A:0300.001D: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.2-1/input0 [ 321.336094][ T25] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0300.001D/input/input33 [ 321.544052][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.587243][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.597701][ T3009] hsr_slave_0: left promiscuous mode [ 321.606082][ T3009] hsr_slave_1: left promiscuous mode [ 321.606791][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.622448][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.622515][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.638116][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.655196][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.663535][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.677637][ T25] usb 3-1: USB disconnect, device number 23 [ 321.707130][ T3009] veth1_macvtap: left promiscuous mode [ 321.713167][ T3009] veth0_macvtap: left promiscuous mode [ 321.719204][ T3009] veth1_vlan: left promiscuous mode [ 321.724670][ T3009] veth0_vlan: left promiscuous mode [ 322.167231][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 322.340145][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 322.356840][ T25] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 322.365844][ T25] usb 1-1: config 0 has no interface number 0 [ 322.372108][ T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 322.396781][ T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 322.407021][ T25] usb 1-1: config 0 interface 126 has no altsetting 0 [ 322.437294][ T25] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 322.446638][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.454842][ T25] usb 1-1: Product: syz [ 322.459346][ T25] usb 1-1: Manufacturer: syz [ 322.464005][ T25] usb 1-1: SerialNumber: syz [ 322.471213][ T25] usb 1-1: config 0 descriptor?? [ 322.476963][ T9505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.485511][ T9505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.577119][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 322.606371][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.612807][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.663205][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 322.928110][ T25] ir_usb 1-1:0.126: IR Dongle converter detected [ 323.134004][ T25] usb 1-1: IRDA class descriptor not found, device not bound [ 323.242659][ T5239] Bluetooth: hci5: command 0x0419 tx timeout [ 323.243471][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 323.251228][ T4615] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.254806][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 323.254891][ T5238] Bluetooth: hci1: command 0x041b tx timeout [ 323.372130][ T5278] usb 1-1: USB disconnect, device number 28 [ 323.444438][ T9399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.478795][ T9399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.510389][ T9399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.587042][ T9399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.727086][ T9483] chnl_net:caif_netlink_parms(): no params data found [ 323.837429][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 323.931885][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.944476][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.952746][ T9483] bridge_slave_0: entered allmulticast mode [ 323.960734][ T9483] bridge_slave_0: entered promiscuous mode [ 323.978222][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.988272][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.995998][ T9483] bridge_slave_1: entered allmulticast mode [ 324.003650][ T9483] bridge_slave_1: entered promiscuous mode [ 324.057572][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.104620][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.118745][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.176706][ T9483] team0: Port device team_slave_0 added [ 324.187942][ T9483] team0: Port device team_slave_1 added [ 324.220890][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.229021][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.236283][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.265578][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.282105][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.289266][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.317918][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.363261][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.370472][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.409006][ T9483] hsr_slave_0: entered promiscuous mode [ 324.415454][ T9483] hsr_slave_1: entered promiscuous mode [ 324.422645][ T9483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.430744][ T9483] Cannot create hsr debugfs directory [ 324.437761][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.444981][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.241700][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.319056][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.319186][ T4615] Bluetooth: hci2: command 0x0c1a tx timeout [ 325.325128][ T5233] Bluetooth: hci5: command 0x0419 tx timeout [ 325.325279][ T5238] Bluetooth: hci1: command 0x041b tx timeout [ 325.463219][ T9399] veth0_vlan: entered promiscuous mode [ 325.495960][ T9399] veth1_vlan: entered promiscuous mode [ 325.503737][ T9547] block nbd2: NBD_DISCONNECT [ 325.510770][ T9483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 325.513606][ T9547] block nbd2: Send disconnect failed -89 [ 325.532208][ T9545] block nbd2: Disconnected due to user request. [ 325.539724][ T9545] block nbd2: shutting down sockets [ 325.542660][ T9483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 325.579067][ T9483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 325.598226][ T9483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 325.651356][ T9399] veth0_macvtap: entered promiscuous mode [ 325.686169][ T9399] veth1_macvtap: entered promiscuous mode [ 325.758372][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.770001][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.780188][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.790778][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.808241][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.824847][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.837874][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.853152][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.866258][ T29] audit: type=1400 audit(1729246782.221:610): avc: denied { read } for pid=9551 comm="syz.0.1341" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 325.870864][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.926399][ T29] audit: type=1400 audit(1729246782.221:611): avc: denied { open } for pid=9551 comm="syz.0.1341" path="/dev/ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 325.953497][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.965161][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.975273][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.009076][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.026034][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.053590][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.071939][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.086897][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.101307][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.138362][ T9399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.155783][ T9399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.165309][ T9399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.182171][ T9399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.205988][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.294722][ T9483] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.362946][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.370163][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.384764][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.391992][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.538699][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.546620][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.596564][ T2562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.605792][ T2562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.956368][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.418127][ T5238] Bluetooth: hci1: command 0x041b tx timeout [ 327.437614][ T2903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.516996][ T9483] veth0_vlan: entered promiscuous mode [ 327.545513][ T9483] veth1_vlan: entered promiscuous mode [ 327.603297][ T9483] veth0_macvtap: entered promiscuous mode [ 327.613748][ T9483] veth1_macvtap: entered promiscuous mode [ 327.650474][ T2903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.673428][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.684530][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.694436][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.704978][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.714935][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.734260][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.750442][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.761073][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.771065][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.781640][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.792916][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.833965][ T2903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.856662][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.867292][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.882761][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.893456][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.903585][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.914075][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.924235][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.934808][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.946053][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.956766][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.971935][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.992525][ T9483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.001494][ T9483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.011701][ T9483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.021151][ T9483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.055012][ T2903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.163964][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.235408][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.329033][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.336952][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.593417][ T29] audit: type=1400 audit(1729246784.941:612): avc: denied { mount } for pid=9583 comm="syz.0.1349" name="/" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 328.601699][ T2903] bridge_slave_1: left allmulticast mode [ 328.636879][ T29] audit: type=1400 audit(1729246784.991:613): avc: denied { search } for pid=9583 comm="syz.0.1349" name="/" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.662125][ T2903] bridge_slave_1: left promiscuous mode [ 328.681126][ T29] audit: type=1400 audit(1729246784.991:614): avc: denied { setattr } for pid=9583 comm="syz.0.1349" name="/" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.683196][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.725186][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.747594][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.760283][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.777797][ T29] audit: type=1400 audit(1729246785.131:615): avc: denied { unmount } for pid=5243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 328.800018][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.812958][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 328.822583][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.830488][ T2903] bridge_slave_0: left allmulticast mode [ 328.836465][ T2903] bridge_slave_0: left promiscuous mode [ 328.842899][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.948728][ T941] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 329.098684][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 329.118405][ T941] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 329.145809][ T941] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 329.156925][ T941] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.184176][ T941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.193590][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.201770][ T941] usb 3-1: Product: syz [ 329.205983][ T941] usb 3-1: Manufacturer: syz [ 329.217728][ T941] usb 3-1: SerialNumber: syz [ 329.280230][ T5280] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 329.465596][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 329.492980][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.509667][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.523639][ T5280] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 329.536765][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.549653][ T5280] usb 1-1: config 0 descriptor?? [ 329.644469][ T941] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 329.675613][ T2903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.699405][ T2903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.713614][ T2903] bond0 (unregistering): Released all slaves [ 329.991257][ T5280] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 330.173050][ T5280] ft260 0003:0403:6030.001E: chip code: 5e81 abf2 [ 330.323658][ T2903] hsr_slave_0: left promiscuous mode [ 330.331290][ T2903] hsr_slave_1: left promiscuous mode [ 330.337935][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.347124][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.358335][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.366916][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.383614][ T5280] ft260 0003:0403:6030.001E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 330.413519][ T2903] veth1_macvtap: left promiscuous mode [ 330.419825][ T2903] veth0_macvtap: left promiscuous mode [ 330.425604][ T2903] veth1_vlan: left promiscuous mode [ 330.435713][ T2903] veth0_vlan: left promiscuous mode [ 330.461992][ T941] usb 3-1: current rate 9317369 is different from the runtime rate 9338507 [ 330.656457][ T5280] ft260 0003:0403:6030.001E: failed to retrieve status: -32, no wakeup [ 330.751368][ T941] usb 3-1: USB disconnect, device number 24 [ 330.920873][ T5280] usb 1-1: USB disconnect, device number 29 [ 330.937068][ T5239] Bluetooth: hci5: command tx timeout [ 331.394109][ T29] audit: type=1400 audit(1729246787.751:616): avc: denied { wake_alarm } for pid=9605 comm="syz.2.1357" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.416067][ T2903] team0 (unregistering): Port device team_slave_1 removed [ 331.671683][ T2903] team0 (unregistering): Port device team_slave_0 removed [ 331.673760][ T29] audit: type=1400 audit(1729246788.031:617): avc: denied { write } for pid=9610 comm="syz.0.1360" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 331.822953][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.836246][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.845656][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.855472][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.863315][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.870875][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.191214][ T9624] kvm: emulating exchange as write [ 332.819541][ T5280] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 332.998899][ T5239] Bluetooth: hci5: command tx timeout [ 333.008856][ T5280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.028710][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 333.036711][ T5280] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 333.073461][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.081840][ T9623] netlink: 'syz.1.1362': attribute type 10 has an invalid length. [ 333.113011][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.120602][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.128950][ T5280] usb 1-1: config 0 descriptor?? [ 333.141445][ T5280] pwc: Askey VC010 type 2 USB webcam detected. [ 333.167684][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.174983][ T9623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.182558][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.189788][ T9623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.245126][ T9623] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 333.275958][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.296923][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.338756][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 333.347942][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.412110][ T9] usb 3-1: config 0 descriptor?? [ 333.514452][ T9587] chnl_net:caif_netlink_parms(): no params data found [ 333.568166][ T5280] pwc: recv_control_msg error -32 req 02 val 2b00 [ 333.577545][ T5280] pwc: recv_control_msg error -32 req 02 val 2700 [ 333.610628][ T5280] pwc: recv_control_msg error -32 req 02 val 2c00 [ 333.628733][ T5280] pwc: recv_control_msg error -32 req 04 val 1000 [ 333.862137][ T29] audit: type=1400 audit(1729246790.221:618): avc: denied { unmount } for pid=9103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 333.868714][ T5280] pwc: recv_control_msg error -71 req 04 val 1400 [ 333.919090][ T5280] pwc: recv_control_msg error -71 req 02 val 2000 [ 333.928829][ T5280] pwc: recv_control_msg error -71 req 02 val 2100 [ 333.953790][ T9] isku 0003:1E7D:319C.001F: item fetching failed at offset 5/7 [ 333.962301][ T5239] Bluetooth: hci1: command tx timeout [ 333.984951][ T5280] pwc: recv_control_msg error -71 req 04 val 1500 [ 334.015452][ T5280] pwc: recv_control_msg error -71 req 02 val 2500 [ 334.023661][ T9] isku 0003:1E7D:319C.001F: parse failed [ 334.048968][ T9] isku 0003:1E7D:319C.001F: probe with driver isku failed with error -22 [ 334.057800][ T5280] pwc: recv_control_msg error -71 req 02 val 2400 [ 334.080917][ T5280] pwc: recv_control_msg error -71 req 02 val 2600 [ 334.098901][ T5280] pwc: recv_control_msg error -71 req 02 val 2900 [ 334.109498][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.118323][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.118733][ T5280] pwc: recv_control_msg error -71 req 02 val 2800 [ 334.149991][ T9587] bridge_slave_0: entered allmulticast mode [ 334.158791][ T5280] pwc: recv_control_msg error -71 req 04 val 1100 [ 334.172583][ T9587] bridge_slave_0: entered promiscuous mode [ 334.175274][ T5280] pwc: recv_control_msg error -71 req 04 val 1200 [ 334.186382][ T5280] pwc: Registered as video71. [ 334.193736][ T5280] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 334.209867][ T5280] usb 1-1: USB disconnect, device number 30 [ 334.217769][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.242964][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.251759][ T9587] bridge_slave_1: entered allmulticast mode [ 334.259237][ T5229] usb 3-1: USB disconnect, device number 25 [ 334.261003][ T9587] bridge_slave_1: entered promiscuous mode [ 334.330633][ T9616] chnl_net:caif_netlink_parms(): no params data found [ 334.376131][ T9587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.412388][ T9587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.472296][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.487137][ T2562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.496390][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.518506][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.526508][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.548153][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.557746][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.576157][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.585102][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.594000][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.602910][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.611362][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.627242][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.634974][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.643905][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.660204][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.667781][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.676107][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.687292][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.694891][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.698862][ T2562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.711506][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.733912][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.752038][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.753317][ T9587] team0: Port device team_slave_0 added [ 334.774919][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.780801][ T9587] team0: Port device team_slave_1 added [ 334.788068][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.797258][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.806068][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.878706][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.886194][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.902643][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.913423][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.921307][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.928955][ T941] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 334.940265][ T941] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 334.979975][ T2562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.068825][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 335.080415][ T5239] Bluetooth: hci5: command tx timeout [ 335.144341][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.155924][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.234905][ T9587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.320376][ T2562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.382515][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.394841][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.422903][ T9587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.587201][ T29] audit: type=1400 audit(1729246791.941:619): avc: denied { mount } for pid=9666 comm="syz.0.1378" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 335.675230][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.683835][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.698447][ T9616] bridge_slave_0: entered allmulticast mode [ 335.706098][ T9616] bridge_slave_0: entered promiscuous mode [ 335.723068][ T9587] hsr_slave_0: entered promiscuous mode [ 335.752762][ T9587] hsr_slave_1: entered promiscuous mode [ 335.769863][ T9676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9676 comm=syz.0.1380 [ 335.782675][ T9587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.791378][ T9587] Cannot create hsr debugfs directory [ 335.797308][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.804785][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.812337][ T9616] bridge_slave_1: entered allmulticast mode [ 335.819818][ T9616] bridge_slave_1: entered promiscuous mode [ 335.837382][ T9676] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 335.862877][ T9680] input: syz0 as /devices/virtual/input/input37 [ 335.887009][ T9676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.956642][ T9678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.968230][ T9678] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 335.990276][ T9678] bond1: (slave vti0): Error -95 calling set_mac_address [ 336.040495][ T5239] Bluetooth: hci1: command tx timeout [ 336.070417][ T9616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.171185][ T9616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.327904][ T2562] bridge_slave_1: left allmulticast mode [ 336.338271][ T2562] bridge_slave_1: left promiscuous mode [ 336.345947][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.355759][ T2562] bridge_slave_0: left allmulticast mode [ 336.365224][ T2562] bridge_slave_0: left promiscuous mode [ 336.378001][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.596870][ T29] audit: type=1400 audit(1729246792.951:620): avc: denied { ioctl } for pid=9692 comm="syz.2.1387" path="socket:[35482]" dev="sockfs" ino=35482 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.168916][ T5238] Bluetooth: hci5: command tx timeout [ 337.235211][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.264473][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.281277][ T29] audit: type=1400 audit(1729246793.641:621): avc: denied { accept } for pid=9703 comm="syz.2.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 337.309104][ T2562] bond0 (unregistering): Released all slaves [ 337.358087][ T9616] team0: Port device team_slave_0 added [ 337.485778][ T29] audit: type=1400 audit(1729246793.841:622): avc: denied { write } for pid=9707 comm="syz.0.1393" path="socket:[36237]" dev="sockfs" ino=36237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.509140][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.573197][ T9616] team0: Port device team_slave_1 added [ 337.702399][ T9712] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 337.731743][ T9712] batman_adv: batadv0: Adding interface: ip6gretap1 [ 337.749361][ T9712] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.775002][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.783276][ T9712] batman_adv: batadv0: Interface activated: ip6gretap1 [ 338.041377][ T5280] libceph: connect (1)[c::]:6789 error -101 [ 338.062668][ T5280] libceph: mon0 (1)[c::]:6789 connect error [ 338.078812][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.088698][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.119571][ T5238] Bluetooth: hci1: command tx timeout [ 338.149947][ T9616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.177281][ T29] audit: type=1400 audit(1729246794.531:623): avc: denied { create } for pid=9728 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.186048][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.206437][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.229827][ T29] audit: type=1400 audit(1729246794.561:624): avc: denied { write } for pid=9728 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.246546][ T9616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.253053][ T9720] ceph: No mds server is up or the cluster is laggy [ 338.265571][ T9729] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1403'. [ 338.295566][ T29] audit: type=1400 audit(1729246794.561:625): avc: denied { nlmsg_write } for pid=9728 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.349208][ T5282] libceph: connect (1)[c::]:6789 error -101 [ 338.355546][ T5282] libceph: mon0 (1)[c::]:6789 connect error [ 338.575223][ T2562] hsr_slave_0: left promiscuous mode [ 338.625487][ T2562] hsr_slave_1: left promiscuous mode [ 338.643715][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.657625][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.666729][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.674621][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.706915][ T2562] veth1_macvtap: left promiscuous mode [ 338.712851][ T2562] veth0_macvtap: left promiscuous mode [ 338.744441][ T2562] veth1_vlan: left promiscuous mode [ 338.787015][ T2562] veth0_vlan: left promiscuous mode [ 338.819563][ T5280] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 338.986069][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.012364][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.030578][ T5280] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 339.039881][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.074669][ T5280] usb 3-1: config 0 descriptor?? [ 339.520589][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.556789][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.622226][ T5280] cougar 0003:060B:700A.0021: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.2-1/input0 [ 339.837552][ T5229] usb 3-1: USB disconnect, device number 26 [ 339.867934][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 339.932515][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 340.030783][ T5280] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 340.209242][ T5238] Bluetooth: hci1: command tx timeout [ 340.214768][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 340.237183][ T5280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 340.278779][ T5280] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 340.287932][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.296908][ T5280] usb 1-1: Product: syz [ 340.301242][ T5280] usb 1-1: Manufacturer: syz [ 340.305923][ T5280] usb 1-1: SerialNumber: syz [ 340.313024][ T5280] usb 1-1: config 0 descriptor?? [ 340.321889][ T9756] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 340.330609][ T5280] hub 1-1:0.0: bad descriptor, ignoring hub [ 340.337351][ T5280] hub 1-1:0.0: probe with driver hub failed with error -5 [ 340.347649][ T5280] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 340.633985][ T5280] usb 1-1: USB disconnect, device number 31 [ 340.634052][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 340.782187][ T5229] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 340.828775][ T5306] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 340.949577][ T5229] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 340.963629][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.973095][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.988240][ T9616] hsr_slave_0: entered promiscuous mode [ 340.994957][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.002215][ T9616] hsr_slave_1: entered promiscuous mode [ 341.008382][ T9616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.017922][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.027332][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.038398][ T9616] Cannot create hsr debugfs directory [ 341.045212][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.054175][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.063337][ T5306] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 341.072709][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.081243][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.092359][ T5306] usb 2-1: Product: syz [ 341.096700][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.108284][ T5306] usb 2-1: Manufacturer: syz [ 341.117248][ T5306] usb 2-1: SerialNumber: syz [ 341.133597][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.145574][ T5306] usb 2-1: config 0 descriptor?? [ 341.153061][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.182247][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.202298][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.223527][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.234826][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.252089][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.262348][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.273518][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.299498][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.320169][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.345495][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.354943][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.364848][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.375990][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.399076][ T5229] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 341.409182][ T5229] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 341.417640][ T5229] usb 3-1: Product: syz [ 341.429863][ T5229] usb 3-1: Manufacturer: syz [ 341.434852][ T5306] hso 2-1:0.0: Failed to find BULK IN ep [ 341.441728][ T5229] usb 3-1: SerialNumber: syz [ 341.451373][ T5306] usb-storage 2-1:0.0: USB Mass Storage device detected [ 341.460298][ T5229] usb 3-1: config 0 descriptor?? [ 341.486536][ T5229] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 341.654219][ T5282] usb 2-1: USB disconnect, device number 23 [ 341.777509][ T29] audit: type=1400 audit(1729246798.131:626): avc: denied { mounton } for pid=9766 comm="syz.0.1415" path="/381/file0/file1" dev="ramfs" ino=35682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 341.803535][ T5280] usb 3-1: USB disconnect, device number 27 [ 341.805130][ T9767] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 341.820139][ T9767] overlayfs: failed to set xattr on upper [ 341.820774][ T5280] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 341.825900][ T9767] overlayfs: ...falling back to redirect_dir=nofollow. [ 341.825917][ T9767] overlayfs: ...falling back to metacopy=off. [ 341.825931][ T9767] overlayfs: ...falling back to index=off. [ 341.825944][ T9767] overlayfs: ...falling back to uuid=null. [ 342.004211][ T9587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.019468][ T9587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.036912][ T9587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.098794][ T9587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.155409][ T9616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.212476][ T9616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.237051][ T9616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.248176][ T9616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.376787][ T9587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.388875][ T5280] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 342.423438][ T9587] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.469134][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.476349][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.514279][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.521512][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.559261][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 342.571472][ T5280] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 342.587142][ T5280] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.599280][ T5280] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.607531][ T5280] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.616010][ T5280] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.679076][ T5280] usb 1-1: config 0 has no interface number 0 [ 342.679706][ T9616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.688634][ T5280] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 342.707019][ T9616] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.718802][ T5280] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 342.771202][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.778385][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.797191][ T5280] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.813597][ T5280] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.828502][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.835774][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.843933][ T5280] usb 1-1: config 0 interface 125 has no altsetting 0 [ 342.850942][ T5280] usb 1-1: config 0 interface 125 has no altsetting 2 [ 342.865728][ T5280] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 342.875870][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.884069][ T5280] usb 1-1: Product: syz [ 342.884613][ T9616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.888485][ T5280] usb 1-1: Manufacturer: syz [ 342.902041][ T9616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.969016][ T5280] usb 1-1: SerialNumber: syz [ 343.000242][ T5280] usb 1-1: config 0 descriptor?? [ 348.088803][ T5280] usb 1-1: can't set config #0, error -110 [ 349.188731][ T941] usb 1-1: USB disconnect, device number 32 [ 349.333267][ T9587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.410416][ T29] audit: type=1400 audit(1729246805.771:627): avc: denied { sqpoll } for pid=9798 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 349.555615][ T9587] veth0_vlan: entered promiscuous mode [ 349.584025][ T9587] veth1_vlan: entered promiscuous mode [ 349.598824][ T29] audit: type=1400 audit(1729246805.941:628): avc: denied { ioctl } for pid=9804 comm="syz.1.1428" path="socket:[36435]" dev="sockfs" ino=36435 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 349.672512][ T9616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.753565][ T9587] veth0_macvtap: entered promiscuous mode [ 349.799849][ T9587] veth1_macvtap: entered promiscuous mode [ 349.857920][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.877961][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.893142][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.903831][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.934811][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.968729][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.988750][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.009007][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.032980][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.054112][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.078704][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.098854][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.127676][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.143240][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.154311][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.165184][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.182114][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.203809][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.257375][ T9587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.283198][ T9587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.298714][ T9587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.307531][ T9587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.580192][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.588118][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.702742][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.747736][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.806016][ T9616] veth0_vlan: entered promiscuous mode [ 350.858103][ T9616] veth1_vlan: entered promiscuous mode [ 351.144034][ T9616] veth0_macvtap: entered promiscuous mode [ 351.191057][ T9616] veth1_macvtap: entered promiscuous mode [ 351.311233][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.322555][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.332796][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.343617][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.353779][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.364580][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.445133][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.458810][ T5306] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 351.498602][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.580533][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.668646][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.719927][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.856051][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.021230][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.067635][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.078483][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.088659][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.099303][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.128629][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.159515][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.197143][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.227211][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.249619][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.260403][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.281457][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.333685][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.385383][ T9616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.408629][ T9616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.428625][ T9616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.437399][ T9616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.503442][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.778711][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.786631][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.928289][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.929101][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.948685][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.958067][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.974826][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.984164][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 352.992843][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.036596][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.294771][ T53] bridge_slave_1: left allmulticast mode [ 353.311094][ T53] bridge_slave_1: left promiscuous mode [ 353.327196][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.397041][ T53] bridge_slave_0: left allmulticast mode [ 353.403778][ T53] bridge_slave_0: left promiscuous mode [ 353.420710][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.328741][ T29] audit: type=1800 audit(1729246810.671:629): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1448" name="file1" dev="overlay" ino=2076 res=0 errno=0 [ 354.653357][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.670966][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.685979][ T53] bond0 (unregistering): Released all slaves [ 355.079091][ T5239] Bluetooth: hci5: command tx timeout [ 355.090152][ T29] audit: type=1400 audit(1729246811.431:630): avc: denied { append } for pid=9875 comm="syz.2.1451" name="ppp" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.448505][ T53] hsr_slave_0: left promiscuous mode [ 355.461612][ T53] hsr_slave_1: left promiscuous mode [ 355.468361][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.476322][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.500771][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.508223][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.551632][ T53] veth1_macvtap: left promiscuous mode [ 355.557251][ T53] veth0_macvtap: left promiscuous mode [ 355.563128][ T53] veth1_vlan: left promiscuous mode [ 355.568494][ T53] veth0_vlan: left promiscuous mode [ 356.275413][ T53] team0 (unregistering): Port device team_slave_1 removed [ 356.481436][ T53] team0 (unregistering): Port device team_slave_0 removed [ 356.668412][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.682060][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.699998][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.717777][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.728484][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.745128][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.170017][ T5239] Bluetooth: hci5: command tx timeout [ 357.609352][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 358.057476][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 358.098409][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.106105][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.113606][ T9851] bridge_slave_0: entered allmulticast mode [ 358.122428][ T9851] bridge_slave_0: entered promiscuous mode [ 358.132761][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.141069][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.148456][ T9851] bridge_slave_1: entered allmulticast mode [ 358.157392][ T9851] bridge_slave_1: entered promiscuous mode [ 358.199126][ T5280] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 358.351848][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.365175][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.381416][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.393797][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.403830][ T5280] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 358.413100][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.423695][ T5280] usb 3-1: config 0 descriptor?? [ 358.555210][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.579855][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.607356][ T9886] bridge_slave_0: entered allmulticast mode [ 358.624225][ T9886] bridge_slave_0: entered promiscuous mode [ 358.676308][ T9851] team0: Port device team_slave_0 added [ 358.690013][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.712085][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.727227][ T9886] bridge_slave_1: entered allmulticast mode [ 358.738132][ T9886] bridge_slave_1: entered promiscuous mode [ 358.748914][ T29] audit: type=1400 audit(1729246815.101:631): avc: denied { getopt } for pid=9932 comm="syz.1.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.797930][ T9851] team0: Port device team_slave_1 added [ 358.839096][ T5239] Bluetooth: hci1: command tx timeout [ 358.920543][ T5280] hid (null): report_id 0 is invalid [ 358.943936][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.953740][ T5280] lg-g15 0003:046D:C222.0022: unknown main item tag 0x0 [ 358.979448][ T5280] lg-g15 0003:046D:C222.0022: unknown main item tag 0x0 [ 358.986571][ T5280] lg-g15 0003:046D:C222.0022: report_id 0 is invalid [ 359.051700][ T5280] lg-g15 0003:046D:C222.0022: item 0 1 1 8 parsing failed [ 359.061313][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.068354][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.098730][ T5280] lg-g15 0003:046D:C222.0022: probe with driver lg-g15 failed with error -22 [ 359.159044][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.179155][ T5280] usb 3-1: USB disconnect, device number 28 [ 359.198111][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.248706][ T5239] Bluetooth: hci5: command tx timeout [ 359.287000][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.297615][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.324895][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.397786][ T9886] team0: Port device team_slave_0 added [ 359.465617][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.554566][ T9851] hsr_slave_0: entered promiscuous mode [ 359.571522][ T9851] hsr_slave_1: entered promiscuous mode [ 359.587273][ T9851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.595518][ T9851] Cannot create hsr debugfs directory [ 359.604326][ T9886] team0: Port device team_slave_1 added [ 359.696132][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.821017][ T9949] netlink: 'syz.1.1473': attribute type 5 has an invalid length. [ 359.942189][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.040198][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.077318][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.118844][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.208901][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.244817][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.259723][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.292452][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.314641][ T11] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 360.581724][ T9886] hsr_slave_0: entered promiscuous mode [ 360.590387][ T9886] hsr_slave_1: entered promiscuous mode [ 360.605568][ T9886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.617055][ T9886] Cannot create hsr debugfs directory [ 360.858169][ T53] bridge_slave_1: left allmulticast mode [ 360.864309][ T53] bridge_slave_1: left promiscuous mode [ 360.870424][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.885310][ T53] bridge_slave_0: left allmulticast mode [ 360.891916][ T9966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.906069][ T53] bridge_slave_0: left promiscuous mode [ 360.912144][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.923007][ T5239] Bluetooth: hci1: command tx timeout [ 361.319685][ T5239] Bluetooth: hci5: command tx timeout [ 361.587251][ T2562] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 361.954584][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.967272][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.981522][ T53] bond0 (unregistering): Released all slaves [ 362.490013][ T9994] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1487'. [ 362.575743][ T53] hsr_slave_0: left promiscuous mode [ 362.604072][ T53] hsr_slave_1: left promiscuous mode [ 362.614436][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.627871][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.641687][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.658108][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.716077][ T53] veth1_macvtap: left promiscuous mode [ 362.722046][ T53] veth0_macvtap: left promiscuous mode [ 362.727892][ T53] veth1_vlan: left promiscuous mode [ 362.733686][ T53] veth0_vlan: left promiscuous mode [ 362.999489][ T5239] Bluetooth: hci1: command tx timeout [ 363.745695][ T53] team0 (unregistering): Port device team_slave_1 removed [ 363.859195][ T53] team0 (unregistering): Port device team_slave_0 removed [ 364.764403][T10000] vlan0: entered promiscuous mode [ 364.769961][T10000] gretap0: entered promiscuous mode [ 364.775610][T10000] vlan0: entered allmulticast mode [ 364.781064][ T5280] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 364.789384][T10000] gretap0: entered allmulticast mode [ 364.802566][T10000] gretap0: left allmulticast mode [ 364.808819][T10000] gretap0: left promiscuous mode [ 364.951157][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.983543][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.993754][ T5280] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 365.004033][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.015862][ T5280] usb 2-1: config 0 descriptor?? [ 365.089889][ T5239] Bluetooth: hci1: command tx timeout [ 365.140315][ T29] audit: type=1400 audit(1729246821.491:632): avc: denied { watch_sb } for pid=10026 comm="syz.0.1499" path="/409" dev="tmpfs" ino=2167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 365.223703][ T9851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.334275][ T9851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.362320][ T9851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.407566][ T9851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.794499][ T29] audit: type=1400 audit(1729246822.151:633): avc: denied { write } for pid=10031 comm="syz.0.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.946000][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.030420][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.052292][ T5280] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 366.106943][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.114212][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.159677][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.166868][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.200832][ T9886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.229654][ T9886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.259055][ T9886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.292548][ T9886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.312930][ T941] usb 2-1: USB disconnect, device number 24 [ 366.566086][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.618277][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.641778][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.649044][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.677113][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.684368][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.845761][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.022821][ T9851] veth0_vlan: entered promiscuous mode [ 367.067100][ T9851] veth1_vlan: entered promiscuous mode [ 367.186695][ T9851] veth0_macvtap: entered promiscuous mode [ 367.231648][ T9851] veth1_macvtap: entered promiscuous mode [ 367.291011][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.329110][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.347032][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.358079][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.374846][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.385825][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.395832][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.416396][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.428102][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.453593][T10063] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 367.472945][T10063] bond0: (slave bond_slave_0): Releasing backup interface [ 367.500897][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.516703][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.530987][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.542040][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.552180][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.576370][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.590592][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.607098][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.627021][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.641740][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.686728][ T9851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.710674][ T9851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.720534][ T9851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.729977][ T9851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.984848][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.002955][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.089477][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.098601][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.327188][ T9886] veth0_vlan: entered promiscuous mode [ 368.353151][ T9886] veth1_vlan: entered promiscuous mode [ 368.367580][ T29] audit: type=1400 audit(1729246824.721:634): avc: denied { mount } for pid=10082 comm="syz.0.1516" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 368.416998][ T9886] veth0_macvtap: entered promiscuous mode [ 368.441189][ T9886] veth1_macvtap: entered promiscuous mode [ 368.515900][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.527921][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.558768][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.569723][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.579704][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.590541][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.602099][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.616390][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.636617][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.658809][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.687373][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.750390][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.780745][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.792050][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.809439][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.832357][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.843355][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.853604][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.864489][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.878635][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.890258][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.905265][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.919266][ T9886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.928234][ T9886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.937975][ T9886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.947093][ T9886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.254983][ T3009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.347534][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.356311][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.388223][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.405161][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.591243][ T3009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.821802][ T3009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.904164][ T3009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.089677][ T3009] bridge_slave_1: left allmulticast mode [ 370.096761][ T3009] bridge_slave_1: left promiscuous mode [ 370.132425][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.190317][ T3009] bridge_slave_0: left allmulticast mode [ 370.196077][ T3009] bridge_slave_0: left promiscuous mode [ 370.203138][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.495898][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.507515][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.538854][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.559796][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.588029][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.601215][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.853406][ T5239] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.855164][ T5233] Bluetooth: hci5: command 0x1003 tx timeout [ 370.956783][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.990127][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.002776][ T3009] bond0 (unregistering): Released all slaves [ 371.276116][T10106] chnl_net:caif_netlink_parms(): no params data found [ 371.343038][ T3009] hsr_slave_0: left promiscuous mode [ 371.349367][ T3009] hsr_slave_1: left promiscuous mode [ 371.355503][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.363738][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.374559][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.382258][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.407417][ T3009] veth1_macvtap: left promiscuous mode [ 371.413173][ T3009] veth0_macvtap: left promiscuous mode [ 371.421018][ T3009] veth1_vlan: left promiscuous mode [ 371.426361][ T3009] veth0_vlan: left promiscuous mode [ 371.717209][ T29] audit: type=1326 audit(1729246828.061:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.2.1527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9721b7dff9 code=0x0 [ 371.768898][ T29] audit: type=1400 audit(1729246828.071:636): avc: denied { getopt } for pid=10113 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.172894][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.196246][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.210693][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.244365][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.260931][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 372.286726][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.649204][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 372.688641][ T5239] Bluetooth: hci1: command tx timeout [ 372.773208][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 374.359716][ T5239] Bluetooth: hci5: command tx timeout [ 374.683301][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.703133][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.728818][T10106] bridge_slave_0: entered allmulticast mode [ 374.763040][T10106] bridge_slave_0: entered promiscuous mode [ 374.772996][ T5239] Bluetooth: hci1: command tx timeout [ 374.835299][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.880230][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.887551][T10106] bridge_slave_1: entered allmulticast mode [ 374.894923][T10106] bridge_slave_1: entered promiscuous mode [ 374.929315][ T5282] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 375.075491][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.086272][ T29] audit: type=1400 audit(1729246831.431:637): avc: denied { write } for pid=10171 comm="syz.1.1544" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 375.109473][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.134976][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.147065][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.175011][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.208650][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.247041][ T5282] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.277560][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.300537][ T5282] usb 1-1: config 0 descriptor?? [ 375.416197][T10106] team0: Port device team_slave_0 added [ 375.444314][T10106] team0: Port device team_slave_1 added [ 375.519361][ T29] audit: type=1326 audit(1729246831.881:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d257dff9 code=0x7fc00000 [ 375.542874][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.609484][ T29] audit: type=1326 audit(1729246831.941:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0d257dff9 code=0x7fc00000 [ 375.681108][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.688175][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.714145][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.721835][ T29] audit: type=1326 audit(1729246831.941:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d257dff9 code=0x7fc00000 [ 375.733151][ T5282] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 375.745269][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.777569][ T5282] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 375.786532][ T29] audit: type=1400 audit(1729246832.041:641): avc: denied { audit_write } for pid=10183 comm="syz.2.1549" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 375.798039][ T5282] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 375.808176][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.872421][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.885128][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.911231][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.926772][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.022173][ T3009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.049082][ T5282] usb 1-1: USB disconnect, device number 34 [ 376.114177][T10125] chnl_net:caif_netlink_parms(): no params data found [ 376.128955][ T5280] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 376.184422][T10106] hsr_slave_0: entered promiscuous mode [ 376.193534][T10106] hsr_slave_1: entered promiscuous mode [ 376.210594][T10106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.218309][T10106] Cannot create hsr debugfs directory [ 376.245116][ T29] audit: type=1400 audit(1729246832.591:642): avc: denied { write } for pid=10193 comm="syz.2.1552" lport=53347 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 376.285649][ T3009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.314463][ T5280] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 376.323913][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.343336][ T5280] usb 2-1: config 0 descriptor?? [ 376.449046][ T29] audit: type=1400 audit(1729246832.811:643): avc: denied { create } for pid=10199 comm="syz.2.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 376.457224][ T5239] Bluetooth: hci5: command tx timeout [ 376.504526][ T3009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.702028][ T3009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.776697][T10125] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.792829][T10125] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.806421][T10125] bridge_slave_0: entered allmulticast mode [ 376.821474][T10125] bridge_slave_0: entered promiscuous mode [ 376.838772][ T5239] Bluetooth: hci1: command tx timeout [ 376.895856][T10125] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.916888][T10125] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.937804][T10125] bridge_slave_1: entered allmulticast mode [ 376.961594][T10125] bridge_slave_1: entered promiscuous mode [ 377.084836][T10125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.127571][T10125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.283367][T10125] team0: Port device team_slave_0 added [ 377.345536][T10125] team0: Port device team_slave_1 added [ 377.506977][ T3009] bridge_slave_1: left allmulticast mode [ 377.523105][ T29] audit: type=1400 audit(1729246833.881:644): avc: denied { recv } for pid=2562 comm="kworker/u8:6" saddr=10.128.0.169 src=42744 daddr=10.128.1.178 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 377.528371][ T3009] bridge_slave_1: left promiscuous mode [ 377.570089][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.583466][ T5280] usb 2-1: Cannot set autoneg [ 377.588459][ T5280] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 377.615966][ T3009] bridge_slave_0: left allmulticast mode [ 377.626687][ T5280] usb 2-1: USB disconnect, device number 25 [ 377.634932][ T3009] bridge_slave_0: left promiscuous mode [ 377.641186][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.762710][ T29] audit: type=1326 audit(1729246834.121:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.0.1557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f875f17dff9 code=0x0 [ 378.521118][ T5239] Bluetooth: hci5: command tx timeout [ 378.616679][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.642970][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.666047][ T3009] bond0 (unregistering): Released all slaves [ 378.690146][T10125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.697331][T10125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.723926][T10125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.743106][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 378.755612][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 378.922748][ T5239] Bluetooth: hci1: command tx timeout [ 378.947061][T10125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.958631][T10125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.984578][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.991048][T10125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.225147][T10125] hsr_slave_0: entered promiscuous mode [ 379.233647][T10125] hsr_slave_1: entered promiscuous mode [ 379.240746][T10125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.256532][T10125] Cannot create hsr debugfs directory [ 379.548747][ T3009] hsr_slave_0: left promiscuous mode [ 379.563681][ T3009] hsr_slave_1: left promiscuous mode [ 379.571737][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.581118][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.589481][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.597138][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.620714][ T3009] veth1_macvtap: left promiscuous mode [ 379.626304][ T3009] veth0_macvtap: left promiscuous mode [ 379.632122][ T3009] veth1_vlan: left promiscuous mode [ 379.637429][ T3009] veth0_vlan: left promiscuous mode [ 379.658717][ T5280] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 379.847256][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.878848][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.888808][ T5280] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 379.897909][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.921133][ T5280] usb 3-1: config 0 descriptor?? [ 380.359738][ T5280] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 380.366659][ T5280] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 380.392294][ T5280] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 380.399330][ T5280] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 380.406283][ T5280] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 380.427130][ T5280] lua 0003:1E7D:2C2E.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 380.587636][ T5280] usb 3-1: USB disconnect, device number 29 [ 380.608431][ T5239] Bluetooth: hci5: command tx timeout [ 380.626040][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 380.694019][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 381.239671][ T29] audit: type=1326 audit(1729246837.601:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10256 comm="syz.2.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9721b7dff9 code=0x0 [ 381.810682][T10106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.829489][T10106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.923424][T10106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.943616][T10106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.215148][T10106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.293433][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.320361][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.327575][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.351516][T10271] input: syz0 as /devices/virtual/input/input39 [ 382.404272][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.411563][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.526683][T10125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.567233][T10125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.609377][T10125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.632814][T10125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.683632][T10281] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 382.700927][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.708518][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.754537][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.761799][T10281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.769375][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.776561][T10281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.841100][T10281] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 382.962211][T10125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.982082][T10125] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.022777][T10125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.033916][T10125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.055826][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.063070][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.072617][ T941] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 383.141690][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.148984][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.235809][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.259329][ T941] usb 2-1: Using ep0 maxpacket: 16 [ 383.268320][ T941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.282923][ T941] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 383.317642][ T941] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 383.322033][T10106] veth0_vlan: entered promiscuous mode [ 383.348499][ T941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.358055][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 383.367435][ T941] usb 2-1: SerialNumber: syz [ 383.391611][T10284] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.392201][T10106] veth1_vlan: entered promiscuous mode [ 383.406747][ T941] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 383.520464][T10125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.543489][T10106] veth0_macvtap: entered promiscuous mode [ 383.573712][T10106] veth1_macvtap: entered promiscuous mode [ 383.622208][ T941] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 383.625878][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.656389][ T941] usb 2-1: USB disconnect, device number 26 [ 383.667879][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.703342][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.756605][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.768947][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.791234][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.809892][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.825975][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.841020][T10106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.882933][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.913740][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.934893][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.968500][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.007000][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.018302][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.031925][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.045794][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.052937][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.062430][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.076557][T10106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.126888][T10106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.149389][T10106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.170023][T10106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.196464][T10106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.281586][ T5306] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 384.385816][T10125] veth0_vlan: entered promiscuous mode [ 384.421055][T10125] veth1_vlan: entered promiscuous mode [ 384.426862][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.459327][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.478705][ T5306] usb 1-1: Using ep0 maxpacket: 32 [ 384.491856][ T5306] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 384.515855][ T5306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.546574][ T5306] usb 1-1: config 0 descriptor?? [ 384.565752][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.566117][ T5306] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 384.590369][T10125] veth0_macvtap: entered promiscuous mode [ 384.596380][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.987062][T10125] veth1_macvtap: entered promiscuous mode [ 385.111684][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.148648][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.178716][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.197522][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.208618][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.219325][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.229324][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.241018][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.250992][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.262142][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.274358][T10125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.304000][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.314852][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.329313][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.341095][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.351238][ T29] audit: type=1400 audit(1729246841.711:647): avc: denied { setopt } for pid=10331 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 385.372823][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.383702][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.395393][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.408717][ T938] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 385.438603][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.448859][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.459419][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.471235][T10125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.581739][ T938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.597645][ T938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.608011][T10125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.617121][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.625537][T10125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.634728][ T938] usb 3-1: Product: syz [ 385.641015][T10125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.645153][ T938] usb 3-1: Manufacturer: syz [ 385.654442][ T938] usb 3-1: SerialNumber: syz [ 385.666703][T10125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.895162][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.929153][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.011152][ T3009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.025960][ T5306] gspca_vc032x: reg_w err -71 [ 386.031011][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.036747][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.062068][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.084542][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.095680][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.124833][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.134914][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.146702][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.158616][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.164295][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.176037][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.196997][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.228703][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.237129][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.247619][ T3009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.268063][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.273835][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.289061][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.297103][ T5306] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.308690][ T5306] gspca_vc032x: Unknown sensor... [ 386.315264][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.323395][ T5306] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 386.332187][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.348346][ T5306] usb 1-1: USB disconnect, device number 35 [ 386.417384][ T3009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.602344][ T3009] team0: Port device netdevsim0 removed [ 386.636619][ T3009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.733455][ T938] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 386.740415][ T938] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 386.778092][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.787615][ T938] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 386.794670][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.805097][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.817269][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.830329][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 386.838012][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.001350][ T3009] bridge_slave_1: left allmulticast mode [ 387.007083][ T3009] bridge_slave_1: left promiscuous mode [ 387.029047][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.038956][ T3009] bridge_slave_0: left allmulticast mode [ 387.044727][ T3009] bridge_slave_0: left promiscuous mode [ 387.050994][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.062845][ T3009] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 387.070294][ T2903] [ 387.071855][ T3009] BUG: spinlock bad magic on CPU#0, kworker/u8:9/3009 [ 387.072991][ T2903] ============================= [ 387.073003][ T2903] WARNING: suspicious RCU usage [ 387.079800][ T3009] Oops: general protection fault, probably for non-canonical address 0xe0001bffe00020b9: 0000 [#1] PREEMPT SMP KASAN PTI [ 387.079836][ T3009] KASAN: maybe wild-memory-access in range [0x0000ffff000105c8-0x0000ffff000105cf] [ 387.084691][ T2903] 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 Not tainted [ 387.089537][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: kworker/u8:9 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 387.089577][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 387.089599][ T3009] Workqueue: netns cleanup_net [ 387.102321][ T2903] ----------------------------- [ 387.111526][ T3009] [ 387.111536][ T3009] RIP: 0010:spin_bug+0x100/0x1d0 [ 387.111577][ T3009] Code: 08 84 d2 0f 85 db 00 00 00 48 85 ed 44 8b 4b 08 74 7d 48 8d bd c8 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 68 44 8b 85 c8 05 00 00 48 8d 8d [ 387.111608][ T3009] RSP: 0018:ffffc900099c77e0 EFLAGS: 00010002 [ 387.119036][ T2903] net/sched/sch_generic.c:1284 suspicious rcu_dereference_protected() usage! [ 387.129539][ T3009] RAX: dffffc0000000000 RBX: ffff888061398020 RCX: ffffffff816d46e9 [ 387.129564][ T3009] RDX: 00001fffe00020b9 RSI: ffffffff816defe6 RDI: 0000ffff000105c8 [ 387.129588][ T3009] RBP: 0000ffff00010000 R08: 0000000000000005 R09: 0000000000000001 [ 387.129608][ T3009] R10: 0000000080000001 R11: 205d393030335420 R12: ffffffff8b6d3760 [ 387.129631][ T3009] R13: ffff88802fcbda00 R14: ffffc900099c7920 R15: 0000000000000001 [ 387.129653][ T3009] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 387.129685][ T3009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.129709][ T3009] CR2: 00007fddedbdd800 CR3: 00000000325b6000 CR4: 00000000003526f0 [ 387.129731][ T3009] Call Trace: [ 387.129741][ T3009] [ 387.129754][ T3009] ? die_addr+0x3b/0xa0 [ 387.129793][ T3009] ? exc_general_protection+0x155/0x230 [ 387.129836][ T3009] ? asm_exc_general_protection+0x26/0x30 [ 387.129887][ T3009] ? __wake_up_klogd.part.0+0x99/0xf0 [ 387.129925][ T3009] ? vprintk+0x86/0xa0 [ 387.129969][ T3009] ? spin_bug+0x100/0x1d0 [ 387.140497][ T2903] [ 387.140497][ T2903] other info that might help us debug this: [ 387.140497][ T2903] [ 387.144794][ T3009] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 387.149732][ T2903] [ 387.149732][ T2903] rcu_scheduler_active = 2, debug_locks = 1 [ 387.151965][ T3009] do_raw_spin_lock+0x225/0x2c0 [ 387.156889][ T2903] 8 locks held by kworker/u8:7/2903: [ 387.176482][ T3009] ? trace_lock_acquire+0x14a/0x1d0 [ 387.176529][ T3009] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 387.176569][ T3009] ? lock_acquire+0x2f/0xb0 [ 387.176598][ T3009] ? down+0x2a/0xa0 [ 387.176645][ T3009] _raw_spin_lock_irqsave+0x42/0x60 [ 387.176683][ T3009] ? down+0x2a/0xa0 [ 387.176729][ T3009] down+0x2a/0xa0 [ 387.176774][ T3009] ? lockdep_rtnl_is_held+0x26/0x40 [ 387.176813][ T3009] netpoll_poll_disable+0x79/0x110 [ 387.176856][ T3009] __dev_close_many+0xd9/0x310 [ 387.176893][ T3009] ? __pfx___dev_close_many+0x10/0x10 [ 387.176931][ T3009] ? __pfx_mark_lock+0x10/0x10 [ 387.176964][ T3009] dev_close_many+0x24c/0x6a0 [ 387.177003][ T3009] ? __pfx_dev_close_many+0x10/0x10 [ 387.183209][ T2903] #0: [ 387.191909][ T3009] unregister_netdevice_many_notify+0x489/0x1e50 [ 387.191955][ T3009] ? find_held_lock+0x2d/0x110 [ 387.200078][ T2903] ffff8880770e0148 [ 387.207883][ T3009] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 387.215899][ T2903] ( [ 387.223831][ T3009] ? mutex_is_locked+0x12/0x50 [ 387.223869][ T3009] ? unregister_netdevice_queue+0x22f/0x3f0 [ 387.232301][ T2903] (wq_completion)bond0 [ 387.240737][ T3009] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 387.240785][ T3009] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 387.240824][ T3009] ? mutex_is_locked+0x12/0x50 [ 387.240856][ T3009] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 387.240895][ T3009] cleanup_net+0x58c/0xb40 [ 387.240932][ T3009] ? __pfx_cleanup_net+0x10/0x10 [ 387.240968][ T3009] ? trace_lock_acquire+0x14a/0x1d0 [ 387.241012][ T3009] ? process_one_work+0x921/0x1ba0 [ 387.241048][ T3009] ? lock_acquire+0x2f/0xb0 [ 387.241078][ T3009] ? process_one_work+0x921/0x1ba0 [ 387.241113][ T3009] process_one_work+0x9c5/0x1ba0 [ 387.241154][ T3009] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 387.241187][ T3009] ? __pfx_process_one_work+0x10/0x10 [ 387.241226][ T3009] ? assign_work+0x1a0/0x250 [ 387.241278][ T3009] worker_thread+0x6c8/0xf00 [ 387.241320][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 387.241354][ T3009] kthread+0x2c1/0x3a0 [ 387.241403][ T3009] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.241445][ T3009] ? __pfx_kthread+0x10/0x10 [ 387.241487][ T3009] ret_from_fork+0x45/0x80 [ 387.241518][ T3009] ? __pfx_kthread+0x10/0x10 [ 387.241560][ T3009] ret_from_fork_asm+0x1a/0x30 [ 387.248171][ T2903] #11){+.+.}-{0:0} [ 387.256143][ T3009] [ 387.256157][ T3009] Modules linked in: [ 387.256187][ T3009] ---[ end trace 0000000000000000 ]--- [ 387.256202][ T3009] RIP: 0010:spin_bug+0x100/0x1d0 [ 387.256243][ T3009] Code: 08 84 d2 0f 85 db 00 00 00 48 85 ed 44 8b 4b 08 74 7d 48 8d bd c8 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 68 44 8b 85 c8 05 00 00 48 8d 8d [ 387.259554][ T2903] , at: process_one_work+0x129b/0x1ba0 [ 387.262474][ T3009] RSP: 0018:ffffc900099c77e0 EFLAGS: 00010002 [ 387.266623][ T2903] #1: ffffc900093b7d80 [ 387.272162][ T3009] [ 387.272173][ T3009] RAX: dffffc0000000000 RBX: ffff888061398020 RCX: ffffffff816d46e9 [ 387.272198][ T3009] RDX: 00001fffe00020b9 RSI: ffffffff816defe6 RDI: 0000ffff000105c8 [ 387.272221][ T3009] RBP: 0000ffff00010000 R08: 0000000000000005 R09: 0000000000000001 [ 387.277920][ T2903] ((work_completion)(&(&bond->mii_work)->work) [ 387.283275][ T3009] R10: 0000000080000001 R11: 205d393030335420 R12: ffffffff8b6d3760 [ 387.283301][ T3009] R13: ffff88802fcbda00 R14: ffffc900099c7920 R15: 0000000000000001 [ 387.283325][ T3009] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 387.287383][ T2903] ){+.+.}-{0:0} [ 387.291698][ T3009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.291724][ T3009] CR2: 00007fddedbdd800 CR3: 00000000325b6000 CR4: 00000000003526f0 [ 387.291748][ T3009] Kernel panic - not syncing: Fatal exception [ 387.302284][ T3009] Kernel Offset: disabled