last executing test programs: 3m0.333475087s ago: executing program 1 (id=1797): timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000200)) 2m59.704494919s ago: executing program 1 (id=1799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7d, &(0x7f0000000200), 0x8) 2m27.149516249s ago: executing program 1 (id=1799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7d, &(0x7f0000000200), 0x8) 2m5.166942188s ago: executing program 1 (id=1799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7d, &(0x7f0000000200), 0x8) 1m9.440226276s ago: executing program 1 (id=1799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7d, &(0x7f0000000200), 0x8) 27.956057352s ago: executing program 1 (id=1799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7d, &(0x7f0000000200), 0x8) 8.713622621s ago: executing program 3 (id=2340): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 8.277540094s ago: executing program 0 (id=2341): setrlimit(0x1, &(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 7.800012325s ago: executing program 0 (id=2344): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) 7.455287034s ago: executing program 3 (id=2346): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/21, 0x15, 0x0, 0x1000000, 0x0, 0x0, 0x1}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) close(0x3) 7.00915314s ago: executing program 0 (id=2348): r0 = memfd_create(&(0x7f0000000140)=' h\xbae\xf4`\x94\xb2n\xea\x92\xd7\x9cl$\x81tF,g\xa6\xbe\xf1\x82\x8d{\xea\xa8\xa2`\x06k\t\xa16q\xb7\xd4\x96\x98\xb5\x9d\xb3\xf4\xad\xecN$\xe6\x0f\x8cV\xd6\x88\xdc\xc9\x90\x16*\x84=\xab\xb5\x99\x1d\x8d^\x99\xa3\xf9\xe8\xee\xf5\\\a\x00\x00\x00\x00\x00\x00\x00\x98/\xbd\xc1\xafg\xc4\v6\x1d5\xc0V\xae\xae\xbb\x13\xf9\xc6\x99\'\xe4D\x7f\x89\xab:8\" \x97\xf2\xb7\xe6W\xa5\xfb:\x8e)\f\xc9\xc6\xe6\xe9\xef\xacf\xa0\":\xdc\xbb\x14\xb0.\xef$p%\f\x95)Z\x06\xbf\xf6\xbd\x8d\xb0\xdb\x01x\x88\xb5\xa9\xf24\xd8\xd2\x17L\n\xb1&y$\x17\xfb\xe7\x9dKs\x15e \xa5D;', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000fee000/0x12000)=nil, 0x12000}}) 6.501342404s ago: executing program 0 (id=2350): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00C\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xbf\x00\x00\x00\x00'}]}, 0x2c}}, 0x8884) 6.155972529s ago: executing program 2 (id=2351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x50d0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@empty, 0x0, 0x6c}}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5.898715745s ago: executing program 0 (id=2352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="620af8ff0c011021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf9943134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2eed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583584acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7c48de61d5d76331945ecefa26b8471d75f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e4000000000d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb8434503680300383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c0d7b94a50e06320fce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e9611d2e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d7d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000000000000000000000000054371e0e813db47d3cb1cbcd162c6103ebc77dc9beb0070e216e0124883e187514104a9352b26ad7e3a0524145d7c42d2a26ae0344eef9482e6781d43326b8a090600bcbfe1e3230ba95f738239d88a3b9fbc7f79a333414ab3fc69761aca15cbe1b3e1e23dc7774f9caf14f0103e97c31be313b964569b1f44beaebe42dd6620357325e96caab5fddd92ff12cd86c05d7235f459c68cec48e5cb46679e03c75c20a49d541fade58bf4e6bd29b4168810e2e09b044ab3daf55d1bce03daf577a00"/4005], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, 0x0, 0x20000000}, 0x20) 5.463824673s ago: executing program 2 (id=2353): syz_emit_ethernet(0x22, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.057817482s ago: executing program 0 (id=2354): bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() unshare(0x64000600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 4.693284674s ago: executing program 2 (id=2356): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x0, 0x8000}, 0x0, [0x0, 0x0, 0x0, 0x782, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3e], [0xfffffffc, 0x0, 0x0, 0x75, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9, 0x10, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x67b2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1c) 4.27974336s ago: executing program 3 (id=2357): sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 4.24651028s ago: executing program 2 (id=2358): r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 3.651200073s ago: executing program 2 (id=2360): r0 = io_uring_setup(0x194e, &(0x7f0000000280)={0x0, 0x6660, 0x100, 0x1, 0x20352}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x1ffffd) close_range(r0, 0xffffffffffffffff, 0x0) 3.466142807s ago: executing program 4 (id=2361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 3.272551824s ago: executing program 3 (id=2362): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bf"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000d0001a800c000a80050008000000000068000a8014000700fc01000000000000000000000000000014000700fe8000000000000000000000000000bb05000800000000000500080000000000050008000000000014000700fe8800000000000000000000000000010500080000000000050008000000000058000a80050008"], 0xf8}}, 0x0) 2.909247215s ago: executing program 2 (id=2363): r0 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.907812362s ago: executing program 4 (id=2364): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x50000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 2.334997181s ago: executing program 4 (id=2365): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001100)="94", 0x1) ppoll(&(0x7f0000000800)=[{r2}], 0x1, 0x0, 0x0, 0x0) tee(r0, r3, 0x81, 0x0) 2.078723041s ago: executing program 3 (id=2366): mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{0x2, 0x0, r0}], {}, [], {0x10, 0x1}}, 0x2c, 0x3) lchown(&(0x7f00000000c0)='./bus\x00', r0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') 1.376953359s ago: executing program 4 (id=2367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}, 0x17) 1.128055209s ago: executing program 4 (id=2368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) 836.444018ms ago: executing program 3 (id=2369): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x5d000100, 0x0, 0x3, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2370): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, "a8a9"}]}}}], 0x18}}], 0x1, 0xa1c) kernel console output (not intermixed with test programs): w full-speed USB device number 11 using dummy_hcd [ 422.872831][ T29] audit: type=1400 audit(1725012288.409:495): avc: denied { bind } for pid=9200 comm="syz.3.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 422.966465][ T5275] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.003005][ T5275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.051446][ T5275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 423.080704][ T5275] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 423.120649][ T29] audit: type=1400 audit(1725012288.649:496): avc: denied { write } for pid=9202 comm="syz.1.1668" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 423.159497][ T5275] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 423.180457][ T5275] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.226374][ T5275] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.243715][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.251783][ T5275] usb 5-1: Product: syz [ 423.273800][ T5275] usb 5-1: Manufacturer: syz [ 423.289839][ T5275] usb 5-1: SerialNumber: syz [ 423.336444][ T9197] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 424.473911][ T5275] cdc_ncm 5-1:1.0: bind() failure [ 424.504266][ T5275] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 424.511194][ T5275] cdc_ncm 5-1:1.1: bind() failure [ 424.513239][ T9212] batadv_slave_0: entered allmulticast mode [ 424.539741][ T5275] usb 5-1: USB disconnect, device number 11 [ 424.788248][ T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 425.170465][ T29] audit: type=1400 audit(1725012290.699:497): avc: denied { ioctl } for pid=9216 comm="syz.3.1675" path="socket:[21419]" dev="sockfs" ino=21419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.546599][ T29] audit: type=1400 audit(1725012291.099:498): avc: denied { setopt } for pid=9223 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.628089][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1678'. [ 425.656128][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1678'. [ 426.250641][ T9239] input: syz0 as /devices/virtual/input/input14 [ 427.589966][ T9253] block nbd1: shutting down sockets [ 427.871764][ T5238] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 428.419393][ T29] audit: type=1400 audit(1725012293.969:499): avc: denied { watch watch_reads } for pid=9271 comm="syz.2.1696" path="/proc/825/net/unix" dev="proc" ino=4026532968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 428.872620][ T9284] team0: entered promiscuous mode [ 428.877745][ T9284] team_slave_0: entered promiscuous mode [ 428.942786][ T9284] team_slave_1: entered promiscuous mode [ 429.025124][ T9283] team0: left promiscuous mode [ 429.029978][ T9283] team_slave_0: left promiscuous mode [ 429.077651][ T9283] team_slave_1: left promiscuous mode [ 429.373267][ T5274] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 429.467582][ T9296] bond_slave_0: entered promiscuous mode [ 429.473921][ T9296] bond_slave_1: entered promiscuous mode [ 429.479804][ T9296] dummy0: entered promiscuous mode [ 429.521155][ T9296] bond_slave_0: left promiscuous mode [ 429.534445][ T9296] bond_slave_1: left promiscuous mode [ 429.555821][ T9296] dummy0: left promiscuous mode [ 429.585398][ T5274] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.601271][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 429.629381][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.643888][ T5274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.765207][ T5274] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.801241][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.863188][ T2584] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 429.891268][ T5274] usb 2-1: config 0 descriptor?? [ 429.935148][ T9289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 430.325904][ T29] audit: type=1400 audit(1725012295.869:500): avc: denied { ioctl } for pid=9305 comm="syz.3.1711" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 430.508950][ T5274] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 430.514115][ T2584] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 430.528123][ T5274] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 430.634880][ T5274] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 430.660027][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.750048][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.793419][ T9296] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 430.842183][ T9296] bond0 (unregistering): Released all slaves [ 431.071209][ T29] audit: type=1400 audit(1725012296.609:501): avc: denied { relabelfrom } for pid=9309 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 431.152172][ T29] audit: type=1400 audit(1725012296.689:502): avc: denied { relabelto } for pid=9309 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 431.157894][ T9] usb 2-1: USB disconnect, device number 14 [ 431.655541][ T9324] overlayfs: conflicting options: metacopy=off,verity=on [ 431.935772][ T9330] netlink: 'syz.4.1721': attribute type 2 has an invalid length. [ 431.943697][ T9330] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1721'. [ 431.966188][ T5238] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 431.975464][ T5238] Bluetooth: hci2: Injecting HCI hardware error event [ 431.996259][ T54] Bluetooth: hci2: hardware error 0x00 [ 432.263710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 432.422866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 432.512788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 432.531830][ T9345] vcan0: tx address claim with dest, not broadcast [ 433.077139][ T29] audit: type=1400 audit(1725012298.579:503): avc: denied { map } for pid=9354 comm="syz.4.1729" path="socket:[22698]" dev="sockfs" ino=22698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.162535][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 434.524148][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 434.713417][ T9423] netlink: 'syz.3.1732': attribute type 2 has an invalid length. [ 435.637545][ T9392] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 436.265398][ T2584] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 436.427618][ T29] audit: type=1400 audit(1725012301.979:504): avc: denied { watch } for pid=9451 comm="syz.4.1744" path="/30" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 436.551792][ T29] audit: type=1400 audit(1725012301.979:505): avc: denied { watch_sb } for pid=9451 comm="syz.4.1744" path="/30" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 436.731031][ T9458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.278669][ T29] audit: type=1400 audit(1725012302.829:506): avc: denied { getopt } for pid=9469 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 437.838094][ T29] audit: type=1400 audit(1725012303.379:507): avc: denied { bind } for pid=9478 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 438.732655][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 439.001133][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.036704][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.077570][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 439.098320][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.140823][ T9495] io-wq is not configured for unbound workers [ 439.180267][ T9463] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1745'. [ 439.219493][ T9] usb 2-1: config 0 descriptor?? [ 439.262230][ T9463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.822075][ T9] aquacomputer_d5next 0003:0C70:F011.000B: item fetching failed at offset 0/5 [ 439.831061][ T5275] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 439.881872][ T9] aquacomputer_d5next 0003:0C70:F011.000B: probe with driver aquacomputer_d5next failed with error -22 [ 440.050023][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 440.058895][ T5275] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.087467][ T5275] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.191670][ T5275] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 440.217420][ T9] usb 2-1: USB disconnect, device number 15 [ 440.305126][ T5275] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.316627][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.365033][ T5275] usb 4-1: Product: syz [ 440.369286][ T5275] usb 4-1: Manufacturer: syz [ 440.404349][ T5275] usb 4-1: SerialNumber: syz [ 440.419899][ T9503] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1765'. [ 440.462195][ T9503] netlink: 'syz.2.1765': attribute type 2 has an invalid length. [ 440.498886][ T9503] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1765'. [ 441.388445][ T9401] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 441.410564][ T2584] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 441.531006][ T5275] cdc_ncm 4-1:1.0: bind() failure [ 441.576603][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 441.621323][ T5275] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 441.652105][ T5275] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 441.666454][ T5275] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 441.722992][ T5275] usb 4-1: USB disconnect, device number 11 [ 441.872675][ T25] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 441.881803][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.930966][ T25] usb 2-1: Product: syz [ 441.935295][ T25] usb 2-1: Manufacturer: syz [ 441.939941][ T25] usb 2-1: SerialNumber: syz [ 441.965216][ T25] usb 2-1: config 0 descriptor?? [ 442.520308][ T25] usb 2-1: Firmware version (0.0) predates our first public release. [ 442.550985][ T25] usb 2-1: Please update to version 0.2 or newer [ 442.567568][ T25] usb 2-1: Firmware: build [ 442.828542][ T25] usb 2-1: USB disconnect, device number 16 [ 444.061885][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 444.332058][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.387402][ T9565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1790'. [ 444.465954][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.527555][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.582376][ T25] usb 5-1: Product: syz [ 444.586714][ T25] usb 5-1: Manufacturer: syz [ 444.617537][ T25] usb 5-1: SerialNumber: syz [ 444.680292][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 444.836984][ T29] audit: type=1400 audit(1725012310.389:508): avc: denied { getopt } for pid=9568 comm="syz.3.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 445.465787][ T5275] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 445.690295][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 445.699354][ T5275] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.730103][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.753201][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.766200][ T5275] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.811770][ T5275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.829518][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.858199][ T29] audit: type=1400 audit(1725012311.409:509): avc: denied { map } for pid=9579 comm="syz.2.1798" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 445.895987][ T25] cdc_ncm 5-1:1.0: bind() failure [ 445.902796][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.909217][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.948203][ T25] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 445.970504][ T25] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 445.980886][ T25] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 446.025017][ T25] usb 5-1: USB disconnect, device number 12 [ 446.136023][ T5275] usb 4-1: GET_CAPABILITIES returned 0 [ 446.141634][ T5275] usbtmc 4-1:16.0: can't read capabilities [ 446.278516][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.367383][ T9] usb 4-1: USB disconnect, device number 12 [ 446.536476][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.780503][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.145025][ T9401] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 447.149708][ T9392] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 447.197496][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.511557][ T5275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 447.703296][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 447.714804][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 447.752151][ T5275] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 447.782078][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.789524][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'. [ 447.824192][ T5275] usb 5-1: config 0 descriptor?? [ 447.860230][ T5275] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 447.898322][ T63] bridge_slave_1: left allmulticast mode [ 447.915333][ T63] bridge_slave_1: left promiscuous mode [ 447.927777][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.997967][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.249617][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.289628][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.415925][ T25] usb 5-1: USB disconnect, device number 13 [ 448.680099][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 448.698548][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 448.726880][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 448.745103][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 448.771751][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 448.785301][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.911657][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.953606][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.991825][ T54] Bluetooth: hci2: command tx timeout [ 451.028524][ T63] bond0 (unregistering): Released all slaves [ 451.347028][ T9638] 9pnet_fd: Insufficient options for proto=fd [ 452.639863][ T9660] Cannot find set identified by id 0 to match [ 452.783688][ T5275] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 452.802107][ T63] hsr_slave_0: left promiscuous mode [ 452.826480][ T63] hsr_slave_1: left promiscuous mode [ 452.855505][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.867624][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.889156][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.897070][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.906071][ T9398] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 452.907001][ T9398] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 452.983081][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 452.999583][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.015327][ T63] veth1_macvtap: left promiscuous mode [ 453.020950][ T63] veth0_macvtap: left promiscuous mode [ 453.035134][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.048190][ T5275] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 453.064154][ T54] Bluetooth: hci2: command tx timeout [ 453.078099][ T63] veth1_vlan: left promiscuous mode [ 453.088266][ T63] veth0_vlan: left promiscuous mode [ 453.097621][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.117365][ T5275] usb 4-1: config 0 descriptor?? [ 453.171020][ T29] audit: type=1400 audit(1725012318.719:510): avc: denied { ioctl } for pid=9663 comm="syz.4.1830" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 453.671733][ T5275] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 454.126461][ T5339] usb 4-1: USB disconnect, device number 13 [ 455.157928][ T54] Bluetooth: hci2: command tx timeout [ 456.080071][ T63] team0 (unregistering): Port device team_slave_1 removed [ 456.206274][ T63] team0 (unregistering): Port device team_slave_0 removed [ 457.166965][ T9721] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1833'. [ 457.180944][ T9721] ip6gretap0: entered promiscuous mode [ 457.190332][ T9721] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1833'. [ 457.207161][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 457.227351][ T54] Bluetooth: hci2: command tx timeout [ 457.380870][ T29] audit: type=1400 audit(1725012322.929:511): avc: denied { name_bind } for pid=9729 comm="syz.4.1836" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 457.555261][ T9732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.843025][ T29] audit: type=1804 audit(1725012323.389:512): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1838" name="/newroot/50/file0/bus" dev="hugetlbfs" ino=23139 res=1 errno=0 [ 458.011420][ T9603] chnl_net:caif_netlink_parms(): no params data found [ 458.663702][ T9427] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 458.665245][ T2570] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 458.756231][ T5281] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 458.781224][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.822921][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.830275][ T9603] bridge_slave_0: entered allmulticast mode [ 458.853247][ T9603] bridge_slave_0: entered promiscuous mode [ 458.913927][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.969203][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.007060][ T5281] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 459.022192][ T9603] bridge_slave_1: entered allmulticast mode [ 459.035663][ T9603] bridge_slave_1: entered promiscuous mode [ 459.056950][ T9755] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 459.065106][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 459.118090][ T9755] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1846'. [ 459.118553][ T63] IPVS: stop unused estimator thread 0... [ 459.138740][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 459.138797][ T5281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.138883][ T5281] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.138925][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.153923][ T5281] usb 4-1: config 0 descriptor?? [ 459.215342][ T9755] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1846'. [ 459.251006][ T9748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 459.483864][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.643331][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.675648][ T29] audit: type=1400 audit(1725012325.219:513): avc: denied { getopt } for pid=9756 comm="syz.0.1847" lport=40442 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 459.819806][ T5281] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 459.905603][ T5281] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 459.990419][ T5281] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 460.216168][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.248936][ T9603] team0: Port device team_slave_0 added [ 460.260181][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.286751][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.317890][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.350970][ T5214] usb 4-1: USB disconnect, device number 14 [ 460.371705][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 460.400333][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.509968][ T9603] team0: Port device team_slave_1 added [ 460.776561][ T9772] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 460.898968][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.076656][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1855'. [ 461.140023][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.164159][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.203478][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.340625][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.424865][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.431962][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.548184][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1857'. [ 461.549706][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.833999][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.895914][ T5339] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 462.118006][ T5339] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 462.146440][ T5339] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.178397][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.236990][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.271472][ T5339] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 462.276371][ T29] audit: type=1400 audit(1725012327.819:514): avc: denied { create } for pid=9791 comm="syz.3.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 462.312134][ T5339] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.312184][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.365984][ T5339] usb 5-1: config 0 descriptor?? [ 462.380188][ T9785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.469878][ T9603] hsr_slave_0: entered promiscuous mode [ 462.506212][ T9603] hsr_slave_1: entered promiscuous mode [ 462.521454][ T54] Bluetooth: hci1: command tx timeout [ 462.899049][ T5339] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 462.902092][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.941765][ T5339] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 462.991777][ T5339] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 463.497366][ T5281] usb 5-1: USB disconnect, device number 14 [ 463.661884][ T9808] [U]   [ 463.667361][ T9808] [U] [ 463.670151][ T9808] [U] [ 463.672909][ T9808] [U] [ 463.686998][ T9808] [U] [ 463.689790][ T9808] [U] [ 463.692570][ T9808] [U] [ 463.695329][ T9808] [U] [ 463.699277][ T9808] [U] [ 463.702023][ T9808] [U] [ 463.704762][ T9808] [U] [ 463.719305][ T9808] [U] [ 463.753438][ T9807] [U] [ 464.049477][ T29] audit: type=1400 audit(1725012329.599:515): avc: denied { ioctl } for pid=9811 comm="syz.3.1870" path="socket:[23352]" dev="sockfs" ino=23352 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 464.160548][ T63] bridge_slave_1: left promiscuous mode [ 464.174885][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.190245][ T63] bridge_slave_0: left allmulticast mode [ 464.201414][ T63] bridge_slave_0: left promiscuous mode [ 464.220491][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.267762][ T29] audit: type=1400 audit(1725012329.819:516): avc: denied { module_request } for pid=9813 comm="syz.3.1871" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 464.524280][ T29] audit: type=1400 audit(1725012330.069:517): avc: denied { watch } for pid=9819 comm="syz.4.1872" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 464.584961][ T54] Bluetooth: hci1: command tx timeout [ 465.185315][ T63] tipc: Disabling bearer [ 465.200641][ T63] tipc: Left network mode [ 465.358387][ T63] IPVS: stopping master sync thread 9030 ... [ 465.719159][ T9762] chnl_net:caif_netlink_parms(): no params data found [ 466.236294][ T63] hsr_slave_0: left promiscuous mode [ 466.250445][ T63] hsr_slave_1: left promiscuous mode [ 466.260212][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.271832][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.343636][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.363052][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.439482][ T63] veth1_macvtap: left promiscuous mode [ 466.464065][ T63] veth0_macvtap: left promiscuous mode [ 466.482272][ T63] veth1_vlan: left promiscuous mode [ 466.490908][ T63] veth0_vlan: left promiscuous mode [ 466.670523][ T54] Bluetooth: hci1: command tx timeout [ 467.734902][ T63] batadv_slave_0 (unregistering): left allmulticast mode [ 467.830429][ T63] team0 (unregistering): Port device team_slave_1 removed [ 467.976390][ T63] team0 (unregistering): Port device team_slave_0 removed [ 468.628010][ T9860] Bluetooth: MGMT ver 1.23 [ 468.745113][ T54] Bluetooth: hci1: command tx timeout [ 469.859424][ T5281] kernel write not supported for file /uinput (pid: 5281 comm: kworker/0:5) [ 470.094907][ T9881] __vm_enough_memory: pid: 9881, comm: syz.4.1898, bytes: 548923785216 not enough memory for the allocation [ 470.116045][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.138267][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.148344][ T9762] bridge_slave_0: entered allmulticast mode [ 470.175447][ T9762] bridge_slave_0: entered promiscuous mode [ 470.238264][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.266022][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.298848][ T9762] bridge_slave_1: entered allmulticast mode [ 470.307485][ T9762] bridge_slave_1: entered promiscuous mode [ 470.332824][ T9603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 470.547394][ T9603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 470.608797][ T9762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.636190][ T9603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 470.689500][ T9762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.702011][ T9603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 470.941612][ T9762] team0: Port device team_slave_0 added [ 470.976632][ T29] audit: type=1400 audit(1725012336.499:518): avc: denied { create } for pid=9895 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 471.032752][ T9762] team0: Port device team_slave_1 added [ 471.066237][ T29] audit: type=1400 audit(1725012336.519:519): avc: denied { write } for pid=9895 comm="syz.0.1905" path="socket:[24096]" dev="sockfs" ino=24096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 471.081990][ T63] IPVS: stop unused estimator thread 0... [ 471.211047][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.221481][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.257974][ T9762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.350178][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.378879][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.430446][ T9762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.676032][ T9905] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1909'. [ 471.781138][ T9762] hsr_slave_0: entered promiscuous mode [ 471.809030][ T9762] hsr_slave_1: entered promiscuous mode [ 471.839231][ T9762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.860477][ T9762] Cannot create hsr debugfs directory [ 472.301041][ T9919] loop0: detected capacity change from 0 to 16384 [ 472.379514][ T9919] loop0: detected capacity change from 16384 to 0 [ 472.725828][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.970156][ T29] audit: type=1400 audit(1725012338.519:520): avc: denied { watch_reads } for pid=9930 comm="syz.0.1920" path="/169/file0" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 473.031945][ T9603] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.261858][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.269292][ T9427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.415377][ T9411] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.422776][ T9411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.267396][ T9949] pim6reg: entered allmulticast mode [ 474.311330][ T9762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.349179][ T9762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.407612][ T9762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.461243][ T9762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.767769][ T29] audit: type=1400 audit(1725012340.319:521): avc: denied { append } for pid=9956 comm="syz.4.1930" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 474.917584][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.271901][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.454626][ T9967] netlink: 'syz.3.1935': attribute type 12 has an invalid length. [ 475.463849][ T9762] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.468315][ T9603] veth0_vlan: entered promiscuous mode [ 475.487795][ T9967] netlink: 'syz.3.1935': attribute type 11 has an invalid length. [ 475.514838][ T9967] netlink: 'syz.3.1935': attribute type 11 has an invalid length. [ 475.525168][ T9967] netlink: 'syz.3.1935': attribute type 11 has an invalid length. [ 475.542213][ T9967] netlink: 'syz.3.1935': attribute type 11 has an invalid length. [ 475.580842][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.588153][ T2570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.608820][ T9967] netlink: 'syz.3.1935': attribute type 11 has an invalid length. [ 475.616830][ T9967] netlink: 'syz.3.1935': attribute type 11 has an invalid length. [ 475.658940][ T9967] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 475.670774][ T9967] netlink: 'syz.3.1935': attribute type 5 has an invalid length. [ 475.678764][ T9967] netlink: 195936 bytes leftover after parsing attributes in process `syz.3.1935'. [ 475.680428][ T9603] veth1_vlan: entered promiscuous mode [ 475.748285][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.755628][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.180623][ T9603] veth0_macvtap: entered promiscuous mode [ 476.195026][ T5214] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 476.267138][ T9603] veth1_macvtap: entered promiscuous mode [ 476.357541][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.378797][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.390217][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.424253][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.450061][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.460809][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.460852][ T5214] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 476.494404][ T5214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.515701][ T5214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.541647][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.561918][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.581742][ T5214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 476.614928][ T5214] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 476.646652][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.658085][ T5214] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 476.678410][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.690373][ T5214] usb 4-1: Manufacturer: syz [ 476.700265][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.719912][ T5214] usb 4-1: config 0 descriptor?? [ 476.731414][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.779238][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.813080][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.859322][ T29] audit: type=1400 audit(1725012342.399:522): avc: denied { ioctl } for pid=9977 comm="syz.4.1939" path="socket:[24492]" dev="sockfs" ino=24492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 476.909067][ T9603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.934336][ T9603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.946758][ T9603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.037279][ T9603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.269642][ T5214] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 477.297501][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.335863][ T5214] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 477.368141][ T5214] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 477.599040][ T2570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.612156][ T2570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.765493][ T5214] usb 4-1: USB disconnect, device number 15 [ 477.869172][ T9411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.881099][ T9411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.069128][ T9762] veth0_vlan: entered promiscuous mode [ 478.141460][ T9762] veth1_vlan: entered promiscuous mode [ 478.751647][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 478.811777][ T9993] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1945'. [ 478.898235][ T9394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.345727][ T9394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.510152][ T9762] veth0_macvtap: entered promiscuous mode [ 479.701928][ T9394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.963169][ T9762] veth1_macvtap: entered promiscuous mode [ 480.194913][T10006] syz.0.1949[10006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.195159][T10006] syz.0.1949[10006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.240714][ T9394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.640727][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.689110][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.710050][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.729589][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.761302][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.807950][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.855153][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.891135][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.918087][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.942205][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.952261][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.959090][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.031311][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.069803][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 481.070677][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.114171][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.158622][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.206382][ T5282] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 481.239129][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.256218][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.270938][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.286327][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.300195][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.318943][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.340665][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.429293][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.451768][ T9762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.483800][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.499070][ T9762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.520083][ T9762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.526902][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.529638][ T9762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.610785][ T5282] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 481.630588][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.710662][ T5282] usb 5-1: config 0 descriptor?? [ 481.892272][ T9394] bridge_slave_1: left allmulticast mode [ 481.899309][ T9394] bridge_slave_1: left promiscuous mode [ 481.923699][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.971245][ T9394] bridge_slave_0: left allmulticast mode [ 481.992049][ T9394] bridge_slave_0: left promiscuous mode [ 482.002264][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.207196][ T5282] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 482.221530][ T5282] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 482.241772][ T5282] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 482.257542][ T5282] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 482.269591][ T5282] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 482.288978][ T5282] acrux 0003:1A34:0802.0010: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 482.307420][ T5282] acrux 0003:1A34:0802.0010: no inputs found [ 482.320770][ T5282] acrux 0003:1A34:0802.0010: Failed to enable force feedback support, error: -19 [ 483.027962][T10030] block nbd3: shutting down sockets [ 483.227240][ T9394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.241769][ T54] Bluetooth: hci2: command tx timeout [ 483.269153][ T9394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.297606][ T9394] bond0 (unregistering): Released all slaves [ 483.856375][ T29] audit: type=1400 audit(1725012349.409:523): avc: denied { getopt } for pid=10035 comm="syz.0.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 484.372395][ T5282] usb 5-1: USB disconnect, device number 15 [ 484.519102][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.560991][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.586030][ T9394] hsr_slave_0: left promiscuous mode [ 484.596760][ T9394] hsr_slave_1: left promiscuous mode [ 484.675497][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.684410][ T9394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.707032][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.714591][ T9394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.779655][ T9394] veth1_macvtap: left promiscuous mode [ 484.819528][ T9394] veth0_macvtap: left promiscuous mode [ 484.831863][ T9394] veth1_vlan: left promiscuous mode [ 484.852002][ T9394] veth0_vlan: left promiscuous mode [ 485.310161][ T54] Bluetooth: hci2: command tx timeout [ 486.291459][ T9394] team0 (unregistering): Port device team_slave_1 removed [ 486.400607][ T9394] team0 (unregistering): Port device team_slave_0 removed [ 487.401253][ T54] Bluetooth: hci2: command tx timeout [ 487.803397][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.836955][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.861575][T10015] chnl_net:caif_netlink_parms(): no params data found [ 488.604218][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.637785][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.677614][T10015] bridge_slave_0: entered allmulticast mode [ 488.701826][T10015] bridge_slave_0: entered promiscuous mode [ 488.754957][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.773578][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.781039][T10015] bridge_slave_1: entered allmulticast mode [ 488.823871][T10015] bridge_slave_1: entered promiscuous mode [ 489.251993][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.280543][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.367252][T10092] netlink: 'syz.0.1981': attribute type 8 has an invalid length. [ 489.388770][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 489.471514][ T54] Bluetooth: hci2: command tx timeout [ 489.491733][T10015] team0: Port device team_slave_0 added [ 489.513879][ T5274] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 489.554934][T10015] team0: Port device team_slave_1 added [ 489.709311][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.736685][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.767532][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.800126][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.848462][ T5274] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.881340][T10096] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 489.900582][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.929553][T10096] gretap2: entered promiscuous mode [ 489.939454][T10096] gretap2: entered allmulticast mode [ 489.943453][ T5274] usb 3-1: config 0 descriptor?? [ 489.950826][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.968015][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.045423][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.178881][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.244882][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.297808][ T29] audit: type=1326 audit(1725012355.799:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.4.1985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4dc979ef9 code=0x0 [ 490.393946][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.509991][ T5274] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 490.526093][ T5274] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 490.548671][ T5274] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 490.589911][ T5274] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 490.647697][T10015] hsr_slave_0: entered promiscuous mode [ 490.660178][T10015] hsr_slave_1: entered promiscuous mode [ 490.938084][ T5282] usb 3-1: USB disconnect, device number 18 [ 491.558441][T10114] input: syz1 as /devices/virtual/input/input19 [ 492.180618][T10120] netlink: 'syz.4.1993': attribute type 3 has an invalid length. [ 492.282745][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 492.358551][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'. [ 492.996106][T10015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 493.035907][T10015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 493.179933][T10015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.250562][T10015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.059389][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.171431][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.201491][ T5274] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 494.231032][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.238442][ T9427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.301891][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.309195][ T9394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.419027][ T5274] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 494.456563][ T5274] usb 5-1: config 0 has no interface number 0 [ 494.590201][ T5274] usb 5-1: New USB device found, idVendor=093a, idProduct=2624, bcdDevice=94.5b [ 494.628202][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.645079][ T5274] usb 5-1: Product: syz [ 494.649319][ T5274] usb 5-1: Manufacturer: syz [ 494.657106][ T5274] usb 5-1: SerialNumber: syz [ 494.675797][ T5274] usb 5-1: config 0 descriptor?? [ 494.698314][ T5274] gspca_main: gspca_pac7302-2.14.0 probing 093a:2624 [ 495.616799][ T5274] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 496.161967][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.215591][ T8] usb 5-1: USB disconnect, device number 16 [ 496.929096][T10015] veth0_vlan: entered promiscuous mode [ 497.006561][T10015] veth1_vlan: entered promiscuous mode [ 497.209076][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 497.423665][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.430726][T10015] veth0_macvtap: entered promiscuous mode [ 497.481443][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.525113][T10015] veth1_macvtap: entered promiscuous mode [ 497.573107][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.678887][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.728016][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.763991][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.792080][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.802051][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.833803][ T25] usb 4-1: config 0 descriptor?? [ 497.847145][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.881076][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.942022][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.974642][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.010192][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.095338][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.166714][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.200934][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.234429][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.266557][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.295629][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.328275][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.374702][ T25] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 498.400177][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.410888][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.462111][ T25] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 498.495791][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.601409][T10015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.663955][ T5282] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 498.668705][T10015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.702434][T10015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.711225][T10015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.906348][ T5275] usb 4-1: USB disconnect, device number 16 [ 498.951197][ T5282] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 498.961349][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.991935][ T5282] usb 5-1: Product: syz [ 499.016376][ T5282] usb 5-1: Manufacturer: syz [ 499.056453][ T5282] usb 5-1: SerialNumber: syz [ 499.079917][ T5282] usb 5-1: config 0 descriptor?? [ 499.301560][ T9394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.381068][ T9394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.610549][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.630663][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.818453][ T5274] usb 5-1: USB disconnect, device number 17 [ 500.281424][ T29] audit: type=1400 audit(1725012365.829:525): avc: denied { write } for pid=10198 comm="syz.2.2026" name="file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 501.069898][ T9405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.370796][ T9405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.660637][ T9405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.961412][T10216] fuse: Unknown parameter 'rootmod0000000000000000000000000000000000000000' [ 502.000790][ T9405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.033079][ T5274] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 502.268634][ T5274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.301887][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.371383][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 502.522388][ T5274] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 502.607003][ T5274] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 502.667188][ T5274] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.711493][ T5274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.775673][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.812211][ T5274] usb 3-1: Product: syz [ 502.836559][ T5274] usb 3-1: Manufacturer: syz [ 502.851807][ T9405] bridge_slave_1: left allmulticast mode [ 502.871710][ T5274] usb 3-1: SerialNumber: syz [ 502.895580][T10211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.909346][ T9405] bridge_slave_1: left promiscuous mode [ 502.940256][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.079093][ T9405] bridge_slave_0: left allmulticast mode [ 503.162439][ T9405] bridge_slave_0: left promiscuous mode [ 503.225311][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.559181][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 503.609816][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'. [ 504.210013][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.232004][ T5274] cdc_ncm 3-1:1.0: bind() failure [ 504.259972][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.288811][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.304621][ T5274] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 504.339538][ T5274] cdc_ncm 3-1:1.1: bind() failure [ 504.353755][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.400857][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 504.432138][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.567887][ T5274] usb 3-1: USB disconnect, device number 19 [ 505.924550][ T9405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.971309][ T9405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.009283][ T9405] bond0 (unregistering): Released all slaves [ 506.109564][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 506.171152][T10246] syz_tun: entered promiscuous mode [ 506.590841][ T54] Bluetooth: hci2: command tx timeout [ 507.320244][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.330158][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.461944][ T9405] hsr_slave_0: left promiscuous mode [ 507.479175][ T9405] hsr_slave_1: left promiscuous mode [ 507.506697][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.530329][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.542045][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.566086][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.640688][ T9405] veth1_macvtap: left promiscuous mode [ 507.646482][ T9405] veth0_macvtap: left promiscuous mode [ 507.652343][ T9405] veth1_vlan: left promiscuous mode [ 507.673593][ T9405] veth0_vlan: left promiscuous mode [ 508.278349][ T5214] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 508.491194][ T5214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.503056][ T5214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.536698][ T5214] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 508.609808][ T5214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 508.621871][ T5214] usb 5-1: SerialNumber: syz [ 508.665804][ T54] Bluetooth: hci2: command tx timeout [ 508.934341][ T5214] usb 5-1: 0:2 : does not exist [ 508.939492][ T5214] usb 5-1: usbmixer: too many channels (61) in unit 5 [ 509.063436][ T5214] usb 5-1: USB disconnect, device number 18 [ 509.387933][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.488852][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.512229][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.559300][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.612886][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 509.629097][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.610126][ T9405] team0 (unregistering): Port device team_slave_1 removed [ 510.727848][ T9405] team0 (unregistering): Port device team_slave_0 removed [ 510.744649][ T5238] Bluetooth: hci2: command tx timeout [ 511.198699][ T29] audit: type=1400 audit(1725012376.749:526): avc: denied { create } for pid=10292 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 511.307723][ T29] audit: type=1400 audit(1725012376.789:527): avc: denied { write } for pid=10292 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 511.359188][ T29] audit: type=1400 audit(1725012376.789:528): avc: denied { nlmsg_read } for pid=10292 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 511.787500][ T5238] Bluetooth: hci1: command tx timeout [ 512.826724][ T54] Bluetooth: hci2: command tx timeout [ 513.482825][ T29] audit: type=1400 audit(1725012379.029:529): avc: denied { bind } for pid=10299 comm="syz.0.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 513.862841][ T54] Bluetooth: hci1: command tx timeout [ 514.149704][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 514.542193][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 514.709011][T10231] chnl_net:caif_netlink_parms(): no params data found [ 515.423208][T10279] chnl_net:caif_netlink_parms(): no params data found [ 515.664616][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.682247][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.706656][T10231] bridge_slave_0: entered allmulticast mode [ 515.739145][T10231] bridge_slave_0: entered promiscuous mode [ 515.759631][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.781384][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.788965][T10231] bridge_slave_1: entered allmulticast mode [ 515.820256][T10231] bridge_slave_1: entered promiscuous mode [ 515.948594][ T5238] Bluetooth: hci1: command tx timeout [ 516.746830][ T9405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.040901][T10231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.364805][ T9405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.451493][T10231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.847019][ T9405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.032549][ T54] Bluetooth: hci1: command tx timeout [ 518.095715][T10279] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.126768][T10279] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.148344][T10279] bridge_slave_0: entered allmulticast mode [ 518.159968][T10279] bridge_slave_0: entered promiscuous mode [ 518.246917][ T9405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.401177][T10231] team0: Port device team_slave_0 added [ 518.442041][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.483115][T10279] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.512420][ T5238] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 518.540538][T10279] bridge_slave_1: entered allmulticast mode [ 518.718626][T10279] bridge_slave_1: entered promiscuous mode [ 518.810924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 518.967864][T10231] team0: Port device team_slave_1 added [ 519.176816][T10279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.506041][T10231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.529701][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.619311][T10231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.653791][T10279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.679663][T10231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.688662][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.767969][T10231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.186523][T10279] team0: Port device team_slave_0 added [ 520.228524][T10279] team0: Port device team_slave_1 added [ 520.424828][T10231] hsr_slave_0: entered promiscuous mode [ 520.476713][T10231] hsr_slave_1: entered promiscuous mode [ 520.981644][T10279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.012206][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.111448][T10279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.156681][T10279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.208718][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.308570][T10279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.116062][ T9405] bridge_slave_1: left allmulticast mode [ 522.130062][ T9405] bridge_slave_1: left promiscuous mode [ 522.242170][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.279879][ T9405] bridge_slave_0: left allmulticast mode [ 522.328026][ T9405] bridge_slave_0: left promiscuous mode [ 522.335776][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.611068][ T29] audit: type=1400 audit(1725012388.159:530): avc: denied { append } for pid=10376 comm="syz.4.2092" name="userio" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.723554][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.784899][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.819452][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.859285][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.901025][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 522.928312][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 525.054589][ T9405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.063539][ T54] Bluetooth: hci3: command tx timeout [ 525.136135][ T9405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.201205][ T9405] bond0 (unregistering): Released all slaves [ 525.942683][T10279] hsr_slave_0: entered promiscuous mode [ 525.996338][T10279] hsr_slave_1: entered promiscuous mode [ 526.035076][T10279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.067406][T10279] Cannot create hsr debugfs directory [ 526.870999][ T9405] hsr_slave_0: left promiscuous mode [ 526.898160][ T9405] hsr_slave_1: left promiscuous mode [ 526.959465][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.987829][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.023838][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.031319][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.157579][ T54] Bluetooth: hci3: command tx timeout [ 527.255137][ T9405] veth1_macvtap: left promiscuous mode [ 527.260894][ T9405] veth0_macvtap: left promiscuous mode [ 527.283696][ T9405] veth1_vlan: left promiscuous mode [ 527.289189][ T9405] veth0_vlan: left promiscuous mode [ 527.318096][T10418] netlink: 177584 bytes leftover after parsing attributes in process `syz.0.2109'. [ 527.416798][T10418] netlink: zone id is out of range [ 527.421992][T10418] netlink: zone id is out of range [ 527.541779][T10418] netlink: zone id is out of range [ 527.569676][T10418] netlink: zone id is out of range [ 527.588929][T10418] netlink: zone id is out of range [ 527.598370][T10418] netlink: zone id is out of range [ 527.635210][T10418] netlink: zone id is out of range [ 527.640538][T10418] netlink: zone id is out of range [ 527.652403][T10418] netlink: zone id is out of range [ 527.657576][T10418] netlink: zone id is out of range [ 529.225359][ T54] Bluetooth: hci3: command tx timeout [ 529.830175][ T9405] team0 (unregistering): Port device team_slave_1 removed [ 530.018285][ T9405] team0 (unregistering): Port device team_slave_0 removed [ 531.309024][ T54] Bluetooth: hci3: command tx timeout [ 532.811547][ T29] audit: type=1400 audit(1725012398.359:531): avc: denied { read append } for pid=10432 comm="syz.4.2116" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 532.898689][ T29] audit: type=1400 audit(1725012398.409:532): avc: denied { open } for pid=10432 comm="syz.4.2116" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 532.931517][ T29] audit: type=1400 audit(1725012398.449:533): avc: denied { map } for pid=10432 comm="syz.4.2116" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 532.964164][ T29] audit: type=1400 audit(1725012398.449:534): avc: denied { execute } for pid=10432 comm="syz.4.2116" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 534.838172][T10379] chnl_net:caif_netlink_parms(): no params data found [ 535.757669][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.784591][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.830269][T10379] bridge_slave_0: entered allmulticast mode [ 535.855000][T10379] bridge_slave_0: entered promiscuous mode [ 535.900129][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.909968][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.918337][T10379] bridge_slave_1: entered allmulticast mode [ 535.976514][T10379] bridge_slave_1: entered promiscuous mode [ 536.360185][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.461178][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.960756][T10476] ALSA: seq fatal error: cannot create timer (-19) [ 537.019528][T10231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 537.062069][T10231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.168601][T10379] team0: Port device team_slave_0 added [ 537.188169][T10231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.254970][T10231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 537.317999][T10379] team0: Port device team_slave_1 added [ 537.566312][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.594599][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.698246][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.853735][ T29] audit: type=1400 audit(1725012403.399:535): avc: denied { read } for pid=10488 comm="syz.0.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 537.894362][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.901375][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.960096][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.537606][T10379] hsr_slave_0: entered promiscuous mode [ 538.568603][T10379] hsr_slave_1: entered promiscuous mode [ 538.622202][T10379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.640840][T10379] Cannot create hsr debugfs directory [ 538.689598][T10279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 538.745163][T10279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 538.831368][T10279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.875638][T10279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 540.366430][T10379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.706011][T10379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.824712][T10515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2145'. [ 540.990591][T10379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.338053][T10379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.475631][T10519] netlink: 'syz.4.2147': attribute type 5 has an invalid length. [ 541.570352][T10231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.756648][T10279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.878918][T10231] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.138924][T10279] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.201015][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.208371][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.251798][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.259136][ T9401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.432212][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.439602][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.617933][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.625333][ T9401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.682494][ T5274] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 542.889548][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 542.921955][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 542.979617][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.014073][T10379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 543.028091][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.047145][ T5274] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.057862][T10379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.098461][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.103957][T10231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.171259][ T5274] usb 5-1: config 0 descriptor?? [ 543.198557][T10231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.323127][T10379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.392845][T10379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.708336][ T5274] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 543.792179][ T5274] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 543.968234][ T5274] usb 5-1: USB disconnect, device number 19 [ 544.984020][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.175457][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.332375][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.339726][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.629001][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.636329][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.878257][T10279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.150203][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.812608][T10279] veth0_vlan: entered promiscuous mode [ 547.010595][T10231] veth0_vlan: entered promiscuous mode [ 547.140971][T10279] veth1_vlan: entered promiscuous mode [ 547.517870][T10231] veth1_vlan: entered promiscuous mode [ 547.848121][T10279] veth0_macvtap: entered promiscuous mode [ 548.030336][T10231] veth0_macvtap: entered promiscuous mode [ 548.118357][T10231] veth1_macvtap: entered promiscuous mode [ 548.186524][T10279] veth1_macvtap: entered promiscuous mode [ 548.367249][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.412336][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.422228][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.627187][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.652155][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.727226][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.811191][T10231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.917168][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.972252][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.111429][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.178591][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.219098][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.247144][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.259633][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.283089][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.298926][T10279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.384933][T10573] sit0: entered allmulticast mode [ 549.439144][T10574] sit0: entered promiscuous mode [ 549.901306][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.980477][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.010555][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.040463][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.080494][T10279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.131243][T10279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.175585][T10279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.357920][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.400720][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.521597][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.587195][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.619652][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.656030][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.687842][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.728841][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.819899][T10231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.948130][T10279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.991992][T10279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.056409][T10279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.102027][T10279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.171439][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.236737][T10231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.259924][T10231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.305238][T10231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.339687][T10231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.453857][T10379] veth0_vlan: entered promiscuous mode [ 552.515317][ T9427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.579313][ T9427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.934896][T10379] veth1_vlan: entered promiscuous mode [ 553.263884][ T9394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.271780][ T9394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.444039][ T9394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.500759][ T9394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.599761][ T29] audit: type=1400 audit(1725012419.139:536): avc: denied { bind } for pid=10601 comm="syz.0.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 553.811812][ T9409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.931549][ T9409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.999581][T10379] veth0_macvtap: entered promiscuous mode [ 554.097202][T10379] veth1_macvtap: entered promiscuous mode [ 554.128133][ T5214] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 554.197657][T10606] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 554.350380][ T5214] usb 5-1: Using ep0 maxpacket: 8 [ 554.361652][T10606] overlayfs: conflicting lowerdir path [ 554.367137][ T5214] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 554.367185][ T5214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.367219][ T5214] usb 5-1: Product: syz [ 554.367246][ T5214] usb 5-1: Manufacturer: syz [ 554.367272][ T5214] usb 5-1: SerialNumber: syz [ 554.440075][ T5214] usb 5-1: config 0 descriptor?? [ 554.478150][ T5214] gspca_main: sq905-2.14.0 probing 2770:9120 [ 554.579907][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.644191][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.681927][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.796826][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.827877][T10608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2054'. [ 554.866816][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.901395][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.938363][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.981075][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.015459][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.051468][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.095741][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.219201][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.298281][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.339638][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.376256][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.418628][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.460979][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.495539][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.532388][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.571877][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.605925][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.644687][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.674924][ T5214] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 555.731877][ T5214] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 555.795393][ T5214] usb 5-1: USB disconnect, device number 20 [ 556.300748][T10379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.414543][T10379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.429914][T10379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.539270][T10379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.248166][ T9405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.599222][ T9405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.888153][ T9405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.139994][ T9405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.230977][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.242077][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.852541][ T5274] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 559.066367][ T9411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.081617][ T9411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.111090][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 559.150088][ T9405] bridge_slave_1: left allmulticast mode [ 559.169659][ T5274] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 559.175241][ T5274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.175295][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 559.175332][ T5274] usb 3-1: SerialNumber: syz [ 559.202468][T10624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 559.532345][ T9405] bridge_slave_1: left promiscuous mode [ 559.538344][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.594255][ T5274] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 559.710766][ T9405] bridge_slave_0: left allmulticast mode [ 559.716745][ T9405] bridge_slave_0: left promiscuous mode [ 559.729910][ T5274] usb 3-1: USB disconnect, device number 20 [ 559.744575][ T9986] IPVS: starting estimator thread 0... [ 559.816087][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.833762][T10630] IPVS: using max 14 ests per chain, 33600 per kthread [ 560.230162][ T29] audit: type=1400 audit(1725012425.779:537): avc: denied { open } for pid=10631 comm="syz.4.2186" path="/dev/ptyqc" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 560.501959][ T29] audit: type=1400 audit(1725012425.779:538): avc: denied { ioctl } for pid=10631 comm="syz.4.2186" path="/dev/ptyqc" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 561.021124][T10638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.105189][T10638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.139769][T10638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.178812][T10638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.217708][T10638] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 561.230575][T10638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.435209][ T5214] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 561.831145][ T5214] usb 5-1: Using ep0 maxpacket: 8 [ 561.917477][ T5214] usb 5-1: unable to get BOS descriptor or descriptor too short [ 561.978693][ T5214] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 562.016865][ T5214] usb 5-1: can't read configurations, error -71 [ 562.912748][ T5274] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 563.115818][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 563.132196][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.190702][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.220391][ T5274] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 563.271477][ T5274] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 563.291841][ T5274] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 563.353316][ T5274] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 563.386826][ T5274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.411594][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.456362][ T5274] usb 3-1: Product: syz [ 563.460697][ T5274] usb 3-1: Manufacturer: syz [ 563.483167][ T5274] usb 3-1: SerialNumber: syz [ 563.628406][T10638] Bluetooth: hci2: command tx timeout [ 563.645822][ T9405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.712082][ T9405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.843596][ T5274] cdc_ncm 3-1:1.0: bind() failure [ 563.843767][ T9405] bond0 (unregistering): Released all slaves [ 563.901236][ T5274] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 563.934848][ T5274] cdc_ncm 3-1:1.1: bind() failure [ 563.996138][ T5274] usb 3-1: USB disconnect, device number 21 [ 565.713057][T10638] Bluetooth: hci2: command tx timeout [ 566.371132][ T9405] hsr_slave_0: left promiscuous mode [ 566.511810][ T9405] hsr_slave_1: left promiscuous mode [ 566.551322][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.607843][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.622055][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.678486][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.034715][ T9405] veth1_macvtap: left promiscuous mode [ 567.040366][ T9405] veth0_macvtap: left promiscuous mode [ 567.070293][ T9405] veth1_vlan: left promiscuous mode [ 567.081922][ T9405] veth0_vlan: left promiscuous mode [ 567.783622][T10638] Bluetooth: hci2: command tx timeout [ 568.766061][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.775228][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.967861][ T29] audit: type=1400 audit(1725012434.519:539): avc: denied { setopt } for pid=10689 comm="syz.0.2207" lport=57783 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 569.864507][T10638] Bluetooth: hci2: command tx timeout [ 571.060065][ T9405] team0 (unregistering): Port device team_slave_1 removed [ 571.199079][ T9405] team0 (unregistering): Port device team_slave_0 removed [ 573.730807][T10699] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 574.293997][ T5214] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 574.500131][ T5214] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 574.538485][ T5214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.581422][ T5214] usb 5-1: config 0 descriptor?? [ 574.615634][ T5214] cp210x 5-1:0.0: cp210x converter detected [ 574.675122][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 574.744638][T10635] chnl_net:caif_netlink_parms(): no params data found [ 574.888445][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 574.951891][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 574.976296][ T9] usb 3-1: config 179 has no interface number 0 [ 575.006060][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 575.058440][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 575.088713][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 575.121074][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 575.174756][ T5214] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 575.186506][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 575.186597][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 575.186638][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.288641][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.306150][T10712] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 575.635888][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.905646][ T5214] usb 5-1: cp210x converter now attached to ttyUSB0 [ 576.171204][ T9986] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input23 [ 576.552115][ T5214] usb 3-1: USB disconnect, device number 22 [ 576.552300][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 576.596510][ T5214] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 576.680453][ T9986] usb 5-1: USB disconnect, device number 23 [ 576.692183][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.719062][ T9986] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 576.761477][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.770633][T10635] bridge_slave_0: entered allmulticast mode [ 576.788091][ T9986] cp210x 5-1:0.0: device disconnected [ 576.820035][T10635] bridge_slave_0: entered promiscuous mode [ 576.861949][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.939103][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.950183][T10635] bridge_slave_1: entered allmulticast mode [ 576.992099][T10635] bridge_slave_1: entered promiscuous mode [ 577.021190][ T29] audit: type=1400 audit(1725012442.569:540): avc: denied { ioctl } for pid=10727 comm="syz.3.2220" path="socket:[29557]" dev="sockfs" ino=29557 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 577.429457][T10635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.580653][T10635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.914348][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 578.109044][T10635] team0: Port device team_slave_0 added [ 578.124772][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 578.214432][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 578.262049][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 578.277870][T10635] team0: Port device team_slave_1 added [ 578.298352][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 578.298412][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.298497][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.298538][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.390909][ T9] usb 3-1: config 0 descriptor?? [ 578.409792][T10730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.998162][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 579.056384][ T9] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 579.108169][ T9] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 579.291988][ T9] usb 3-1: USB disconnect, device number 23 [ 579.392014][T10635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.417042][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.545858][T10635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.831784][T10635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.874003][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.963027][T10635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.210211][T10635] hsr_slave_0: entered promiscuous mode [ 581.342592][T10635] hsr_slave_1: entered promiscuous mode [ 582.570802][ T29] audit: type=1400 audit(1725012448.099:541): avc: denied { append } for pid=10778 comm="syz.4.2236" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 582.718129][ T29] audit: type=1400 audit(1725012448.109:542): avc: denied { sqpoll } for pid=10778 comm="syz.4.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 583.070322][ T29] audit: type=1400 audit(1725012448.619:543): avc: denied { write } for pid=10785 comm="syz.4.2239" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 585.510456][T10811] loop0: detected capacity change from 0 to 2 [ 586.276516][T10635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.435079][T10635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 586.521848][T10635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 586.636545][T10635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 586.766479][ T29] audit: type=1400 audit(1725012452.319:544): avc: denied { read } for pid=10820 comm="syz.2.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 587.297569][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 587.451807][T10826] netlink: 'syz.4.2256': attribute type 4 has an invalid length. [ 587.659133][T10635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.933745][ T9986] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 587.964443][T10635] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.061580][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.068972][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.160049][ T9986] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 588.210104][ T9986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.219992][ T9986] usb 3-1: Product: syz [ 588.256695][ T9986] usb 3-1: Manufacturer: syz [ 588.271519][ T9986] usb 3-1: SerialNumber: syz [ 588.311545][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.318875][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.321496][ T9986] usb 3-1: config 0 descriptor?? [ 588.930328][ T29] audit: type=1400 audit(1725012454.469:545): avc: denied { getopt } for pid=10836 comm="syz.4.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 588.977506][T10635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.600567][ T9986] usb 3-1: f81604_read: reg: 100f failed: -EPROTO [ 589.665371][ T9986] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 589.688451][ T9986] usb 3-1: USB disconnect, device number 24 [ 589.711508][T10846] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 589.816793][ T9986] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 590.176545][ T9986] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 590.558153][T10857] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 590.581908][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 590.785015][T10635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.892273][ T25] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 590.900528][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.982227][ T25] usb 4-1: config 0 has no interface number 0 [ 591.059124][ T25] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 591.154446][ T25] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 591.222021][ T25] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 591.235388][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.261269][ T25] usb 4-1: Product: syz [ 591.265557][ T25] usb 4-1: Manufacturer: syz [ 591.270199][ T25] usb 4-1: SerialNumber: syz [ 591.318024][T10861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.357601][ T25] usb 4-1: config 0 descriptor?? [ 591.423893][ T25] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 591.510373][T10635] veth0_vlan: entered promiscuous mode [ 591.636111][T10635] veth1_vlan: entered promiscuous mode [ 591.970587][T10635] veth0_macvtap: entered promiscuous mode [ 592.020533][ T29] audit: type=1400 audit(1725012457.559:546): avc: denied { write } for pid=10865 comm="syz.2.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 592.081893][T10635] veth1_macvtap: entered promiscuous mode [ 592.110755][ T29] audit: type=1400 audit(1725012457.629:547): avc: denied { read } for pid=10865 comm="syz.2.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 592.396041][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.458026][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.549141][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.668195][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.727701][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.788873][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.846713][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.886324][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.946223][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.001707][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.089589][T10635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.184419][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.273871][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.332687][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.417972][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.447947][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.489330][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.609130][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.736468][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.777600][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.825559][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.876960][T10635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.008181][T10635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.049368][ T5274] usb 4-1: USB disconnect, device number 17 [ 594.077726][ T5281] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 594.111942][T10635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.178912][T10635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.276504][T10635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.295008][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 594.340908][ T5281] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 594.440703][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.631149][ T5281] usb 3-1: config 0 descriptor?? [ 594.712013][ T5281] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 595.170702][ T9411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.178741][ T9411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.519514][ T9411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.657205][ T9411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.759494][ T29] audit: type=1400 audit(1725012461.309:548): avc: denied { mounton } for pid=10901 comm="syz.4.2283" path="/210/file0" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 595.849769][ T5281] gspca_sonixj: reg_w1 err -71 [ 595.915217][ T5281] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 595.945260][ T29] audit: type=1400 audit(1725012461.369:549): avc: denied { read } for pid=10901 comm="syz.4.2283" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 596.031353][ T5281] usb 3-1: USB disconnect, device number 25 [ 596.048398][ T29] audit: type=1400 audit(1725012461.419:550): avc: denied { open } for pid=10901 comm="syz.4.2283" path="/210/file0" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 596.719251][ T29] audit: type=1400 audit(1725012462.269:551): avc: denied { mount } for pid=10906 comm="syz.3.2285" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 598.115073][T10925] netlink: 'syz.0.2291': attribute type 19 has an invalid length. [ 598.800680][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.366780][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.622072][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.865409][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.791386][ T63] bridge_slave_1: left allmulticast mode [ 600.797641][ T63] bridge_slave_1: left promiscuous mode [ 600.809346][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.148617][ T63] bridge_slave_0: left allmulticast mode [ 601.157551][ T63] bridge_slave_0: left promiscuous mode [ 601.171854][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.658991][T10943] ebt_among: src integrity fail: 300 [ 601.706059][ T5282] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 601.912059][ T5282] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 602.011085][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.090374][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.166001][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 602.279452][ T5282] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 602.316329][ T5282] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 602.345991][ T5282] usb 5-1: Manufacturer: syz [ 602.379087][ T5282] usb 5-1: config 0 descriptor?? [ 602.487216][ T29] audit: type=1400 audit(1725012468.039:552): avc: denied { write } for pid=10949 comm="syz.0.2302" path="socket:[32047]" dev="sockfs" ino=32047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 603.005971][ T5282] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 603.015449][ T5282] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 603.031578][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 603.074786][ T5282] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 603.078522][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 603.156887][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 603.192058][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 603.259156][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 603.300480][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 603.675871][ T5282] usb 5-1: USB disconnect, device number 24 [ 605.327592][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.390053][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.455614][ T63] bond0 (unregistering): Released all slaves [ 605.462755][ T54] Bluetooth: hci2: command tx timeout [ 605.759281][T10947] team_slave_0: Device is already in use. [ 605.988148][T10967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2309'. [ 607.548166][ T54] Bluetooth: hci2: command tx timeout [ 608.332026][ T63] hsr_slave_0: left promiscuous mode [ 608.560714][ T63] hsr_slave_1: left promiscuous mode [ 608.692903][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.700408][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.815526][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.845123][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.066823][ T63] veth1_macvtap: left promiscuous mode [ 609.090758][ T63] veth0_macvtap: left promiscuous mode [ 609.096670][ T63] veth1_vlan: left promiscuous mode [ 609.102134][ T63] veth0_vlan: left promiscuous mode [ 609.397061][T11003] net_ratelimit: 394 callbacks suppressed [ 609.397088][T11003] sock: sock_set_timeout: `syz.3.2322' (pid 11003) tries to set negative timeout [ 609.626383][ T54] Bluetooth: hci2: command tx timeout [ 610.487169][ T5282] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 610.714957][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 610.820132][ T5282] usb 5-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 610.831049][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.851382][ T5282] usb 5-1: Product: syz [ 610.859217][ T5282] usb 5-1: Manufacturer: syz [ 610.864647][ T5282] usb 5-1: SerialNumber: syz [ 610.880428][ T5282] usb 5-1: config 0 descriptor?? [ 610.894376][ T5282] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 611.392799][ T5282] gspca_zc3xx: reg_r err -71 [ 611.397586][ T5282] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 611.479614][ T5282] usb 5-1: USB disconnect, device number 25 [ 611.704873][ T54] Bluetooth: hci2: command tx timeout [ 611.960750][ T29] audit: type=1400 audit(1725012477.489:553): avc: denied { mounton } for pid=11017 comm="syz.3.2329" path="/proc/74/cgroup" dev="proc" ino=33310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 613.877274][ T63] team0 (unregistering): Port device team_slave_1 removed [ 614.231639][ T63] team0 (unregistering): Port device team_slave_0 removed [ 614.667338][ T54] Bluetooth: hci2: command tx timeout [ 616.825507][ T29] audit: type=1400 audit(1725012482.369:554): avc: denied { bind } for pid=11040 comm="syz.3.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 617.021889][T10995] macsec0: entered promiscuous mode [ 617.035424][T10995] macsec0: left promiscuous mode [ 617.075072][T10997] veth1_macvtap: left promiscuous mode [ 618.589643][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 618.874053][T10951] chnl_net:caif_netlink_parms(): no params data found [ 618.948150][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.072421][ T5339] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 619.087623][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.148619][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.211503][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.263569][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.271636][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.373908][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.432654][T11066] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 619.445977][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.481782][ T5339] usb 4-1: config 0 has no interfaces? [ 619.531994][ T5339] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 619.549646][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.579851][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.600076][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.619957][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.639601][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.661604][ T5339] usb 4-1: config 0 descriptor?? [ 619.679173][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.730931][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.748585][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.768178][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.789968][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.809719][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.831050][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.851407][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.868225][ T5214] hid-generic 0000:1000000:0000.0016: unknown main item tag 0x0 [ 619.929027][ T5214] hid-generic 0000:1000000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 620.375644][ T46] usb 4-1: USB disconnect, device number 18 [ 620.397656][T10951] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.454427][T10951] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.498624][T10951] bridge_slave_0: entered allmulticast mode [ 620.510281][T11075] loop0: detected capacity change from 0 to 6 [ 620.547095][T10951] bridge_slave_0: entered promiscuous mode [ 620.567006][T11075] Dev loop0: unable to read RDB block 6 [ 620.652490][T11075] loop0: AHDI p2 [ 620.713553][T11075] loop0: partition table partially beyond EOD, truncated [ 620.725320][T10951] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.768579][T10951] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.790863][T10951] bridge_slave_1: entered allmulticast mode [ 620.870380][T10951] bridge_slave_1: entered promiscuous mode [ 621.171057][T11080] input: syz1 as /devices/virtual/input/input26 [ 621.466857][T10951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.549176][T10951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.918307][T11084] netlink: 566 bytes leftover after parsing attributes in process `syz.2.2358'. [ 622.358505][T10951] team0: Port device team_slave_0 added [ 622.408433][T10951] team0: Port device team_slave_1 added [ 623.060543][T11096] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2362'. [ 623.089674][T10951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.128922][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.181109][T10951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.266612][T10951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.292833][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.337846][ T5274] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 623.399289][T10951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.555450][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 623.575289][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 623.601142][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 623.629271][ T5274] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.669206][ T5274] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 623.681335][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 623.699855][ T5274] usb 3-1: Product: syz [ 623.747327][ T5274] usb 3-1: Manufacturer: syz [ 623.752184][ T5274] usb 3-1: SerialNumber: syz [ 623.781048][T11098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.798460][ T5274] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input27 [ 623.905290][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 623.951611][T10951] hsr_slave_0: entered promiscuous mode [ 630.218770][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.231962][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.266086][T10951] hsr_slave_1: entered promiscuous mode [ 632.270048][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 632.978768][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 632.997008][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 633.010587][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 633.025277][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 633.036955][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 633.048746][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 635.440676][T11118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 635.457781][T11118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 635.485147][T11118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 635.498210][T11118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 635.510574][T11118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 635.519879][T11118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.915081][T11127] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 637.931402][T11127] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 637.946849][T11127] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 637.959223][T11127] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 637.971024][T11127] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 637.981019][T11127] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 638.848259][T11123] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 638.878774][T11123] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 638.908794][T11123] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 638.928335][T11123] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 638.936767][T11123] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 638.950697][T11123] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 647.637363][T11131] Bluetooth: hci3: command 0x0405 tx timeout [ 657.068411][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2679 jiffies s: 19117 root: 0x2/. [ 657.097702][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 657.106620][ T19] Sending NMI from CPU 0 to CPUs 1: SYZFAIL: failed to recv rpc [ 657.111890][ C1] NMI backtrace for cpu 1 [ 657.111913][ C1] CPU: 1 UID: 0 PID: 11114 Comm: syz.4.2370 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 657.111946][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 657.111961][ C1] RIP: 0010:lock_acquire+0x1c1/0x560 [ 657.112012][ C1] Code: 45 0f b6 c9 ff b4 24 00 01 00 00 41 57 8b 4c 24 2c 8b 74 24 28 e8 3f ad ff ff 48 c7 c7 40 da 4c 8b 48 83 c4 28 e8 ef 62 ac 09 ff ff ff ff 65 0f c1 05 7a ca 98 7e 83 f8 01 0f 85 ea 02 00 00 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 657.112038][ C1] RSP: 0018:ffffc90000a18800 EFLAGS: 00000092 [ 657.112059][ C1] RAX: 0000000000000001 RBX: 1ffff92000143102 RCX: 0000000000000001 [ 657.112076][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cda40 RDI: ffffffff8bb0ee40 [ 657.112094][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff28cace1 [ 657.112111][ C1] R10: ffffffff9465670f R11: 0000000000000000 R12: 0000000000000001 [ 657.112128][ C1] R13: 0000000000000000 R14: ffffffff8dde60c8 R15: 0000000000000000 [ 657.112146][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 657.112172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.112191][ C1] CR2: 00007f891921d763 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 657.112209][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.112227][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 657.112247][ C1] Call Trace: [ 657.112258][ C1] [ 657.112268][ C1] ? show_regs+0x8c/0xa0 [ 657.112315][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 657.112357][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 657.112402][ C1] ? nmi_handle+0x1a9/0x5c0 [ 657.112433][ C1] ? lock_acquire+0x1c1/0x560 [ 657.112478][ C1] ? default_do_nmi+0x6a/0x160 [ 657.112508][ C1] ? exc_nmi+0x170/0x1e0 [ 657.112536][ C1] ? end_repeat_nmi+0xf/0x53 [ 657.112573][ C1] ? lock_acquire+0x1c1/0x560 [ 657.112620][ C1] ? lock_acquire+0x1c1/0x560 [ 657.112667][ C1] ? lock_acquire+0x1c1/0x560 [ 657.112712][ C1] [ 657.112722][ C1] [ 657.112733][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 657.112778][ C1] ? lock_acquire+0x1b1/0x560 [ 657.112822][ C1] ? find_held_lock+0x2d/0x110 [ 657.112866][ C1] ? clockevents_program_event+0x155/0x380 [ 657.112918][ C1] timekeeping_debug_get_ns+0x86/0x5b0 [ 657.112962][ C1] ? ktime_get+0xd9/0x1a0 [ 657.113006][ C1] ktime_get+0xd9/0x1a0 [ 657.113047][ C1] clockevents_program_event+0x155/0x380 [ 657.113097][ C1] tick_program_event+0xa9/0x140 [ 657.113134][ C1] hrtimer_interrupt+0x36d/0x800 [ 657.113180][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 657.113215][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 657.113253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.113305][ C1] RIP: 0010:write_comp_data+0x1f/0x90 [ 657.113355][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 7f 1a 78 7e 65 8b 05 80 1a 78 7e a9 00 01 ff 00 74 1d c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c [ 657.113384][ C1] RSP: 0018:ffffc90000a18b78 EFLAGS: 00000206 [ 657.113407][ C1] RAX: 0000000000000102 RBX: ffff88805ecf0ae0 RCX: ffffffff8924550a [ 657.113427][ C1] RDX: ffff8880285d3c00 RSI: 0000000000000000 RDI: 0000000000000001 [ 657.113447][ C1] RBP: ffff88805c624300 R08: 0000000000000001 R09: 0000000000000000 [ 657.113467][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805ecf0b18 [ 657.113487][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.113512][ C1] ? pie_calculate_probability+0x64a/0x850 [ 657.113567][ C1] pie_calculate_probability+0x64a/0x850 [ 657.113625][ C1] fq_pie_timer+0x215/0x5a0 [ 657.113661][ C1] call_timer_fn+0x1a0/0x610 [ 657.113704][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 657.113734][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 657.113778][ C1] ? __pfx_lock_release+0x10/0x10 [ 657.113826][ C1] ? mark_held_locks+0x9f/0xe0 [ 657.113874][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 657.113906][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 657.113935][ C1] __run_timers+0x74b/0xaf0 [ 657.113986][ C1] ? __pfx___run_timers+0x10/0x10 [ 657.114032][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 657.114083][ C1] ? irqentry_exit+0x3b/0x90 [ 657.114127][ C1] run_timer_base+0x111/0x190 [ 657.114172][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 657.114222][ C1] run_timer_softirq+0x1a/0x40 [ 657.114262][ C1] handle_softirqs+0x216/0x8f0 [ 657.114295][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 657.114328][ C1] irq_exit_rcu+0xbb/0x120 [ 657.114356][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 657.114388][ C1] [ 657.114395][ C1] [ 657.114404][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.114447][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 657.114486][ C1] Code: c1 05 7a ca 98 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 657.114510][ C1] RSP: 0018:ffffc9000307f4d8 EFLAGS: 00000206 [ 657.114529][ C1] RAX: dffffc0000000000 RBX: 1ffff9200060fe9d RCX: 0000000000000001 [ 657.114546][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cda40 RDI: ffffffff8bb0ee40 [ 657.114564][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28cace0 [ 657.114580][ C1] R10: ffffffff94656707 R11: 0000000000000000 R12: 0000000000000000 [ 657.114598][ C1] R13: 0000000000000000 R14: ffffffff8ddb9fe0 R15: 0000000000000000 [ 657.114628][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 657.114668][ C1] ? lock_acquire+0x1b1/0x560 [ 657.114705][ C1] ? find_held_lock+0x2d/0x110 [ 657.114736][ C1] ? __page_table_check_pte_clear+0x2d4/0x580 [ 657.114776][ C1] page_ext_get+0x3a/0x310 [ 657.114807][ C1] ? page_ext_get+0x34/0x310 [ 657.114844][ C1] page_table_check_clear.part.0+0x32/0x540 [ 657.114883][ C1] __page_table_check_pte_clear+0x328/0x580 [ 657.114920][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 657.114957][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 657.114987][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 657.115028][ C1] unmap_page_range+0x21ac/0x3c10 [ 657.115083][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 657.115139][ C1] ? uprobe_munmap+0x20/0x5d0 [ 657.115173][ C1] unmap_single_vma+0x194/0x2b0 [ 657.115214][ C1] unmap_vmas+0x22f/0x490 [ 657.115255][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 657.115296][ C1] ? __pfx_lock_release+0x10/0x10 [ 657.115336][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 657.115369][ C1] exit_mmap+0x1b8/0xb20 [ 657.115398][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 657.115443][ C1] __mmput+0x12a/0x480 [ 657.115470][ C1] mmput+0x62/0x70 [ 657.115494][ C1] do_exit+0x9bf/0x2bb0 [ 657.115531][ C1] ? get_signal+0x8f2/0x2770 [ 657.115558][ C1] ? __pfx_do_exit+0x10/0x10 [ 657.115592][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 657.115618][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 657.115664][ C1] do_group_exit+0xd3/0x2a0 [ 657.115701][ C1] get_signal+0x25fb/0x2770 [ 657.115736][ C1] ? __pfx_get_signal+0x10/0x10 [ 657.115771][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 657.115806][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 657.115845][ C1] ? handle_mm_fault+0x52d/0xa60 [ 657.115878][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 657.115923][ C1] irqentry_exit_to_user_mode+0x13f/0x280 [ 657.115959][ C1] asm_exc_page_fault+0x26/0x30 [ 657.115999][ C1] RIP: 0033:0x7fa4dc84da54 [ 657.116018][ C1] Code: Unable to access opcode bytes at 0x7fa4dc84da2a. [ 657.116029][ C1] RSP: 002b:00007ffe5d8c2e30 EFLAGS: 00010246 [ 657.116047][ C1] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 657.116064][ C1] RDX: 0000001b30b20000 RSI: 0000000000400000 RDI: 00007fa4dca68bd0 [ 657.116081][ C1] RBP: 00007ffe5d8c308c R08: 0000000000000004 R09: 0000000000040000 [ 657.116097][ C1] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 657.116114][ C1] R13: 0000000000098b5a R14: 00000000000987e0 R15: 00007ffe5d8c30e0 [ 657.116141][ C1]