last executing test programs: 1m43.152064372s ago: executing program 0 (id=4725): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3b, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x5c}}, 0x0) 1m42.473415669s ago: executing program 0 (id=4728): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002300)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000000ac0)}], 0x1) 1m15.095652715s ago: executing program 0 (id=4728): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002300)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000000ac0)}], 0x1) 50.751378553s ago: executing program 0 (id=4728): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002300)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000000ac0)}], 0x1) 25.069236439s ago: executing program 0 (id=4728): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002300)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000000ac0)}], 0x1) 14.639963165s ago: executing program 3 (id=5056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10}]}, 0x2c}}, 0x0) 13.719397474s ago: executing program 3 (id=5059): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000001c0)={0x2}) 10.58990332s ago: executing program 3 (id=5073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d120f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0x200, 0x4}) 7.531711699s ago: executing program 3 (id=5087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=r2], 0x30}}, 0x40000) 7.015418786s ago: executing program 3 (id=5089): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca03000000002eb5f354a094b4c68f7456dad4bd6cac935186aaf6"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0xe24, 0x109040) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000180)={0x1, 0x100}) 5.05571797s ago: executing program 2 (id=5096): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40a00, 0x0) r0 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 4.868230882s ago: executing program 1 (id=5097): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000001100)="94", 0x1) 4.447405572s ago: executing program 1 (id=5099): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x1fb, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000440), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e6, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 4.352027878s ago: executing program 2 (id=5100): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f00000003c0)="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", 0x1000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 4.019553083s ago: executing program 1 (id=5102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() sync() 3.914849453s ago: executing program 4 (id=5103): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) signalfd4(r0, &(0x7f00000001c0), 0x8, 0x0) 3.862347452s ago: executing program 2 (id=5104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) 3.591895683s ago: executing program 4 (id=5105): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002500)={0x2, 0x4e22}, 0x10, 0x0}}], 0x2, 0x0) 3.573569948s ago: executing program 3 (id=5106): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000080)=""/22, 0x16}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.454361393s ago: executing program 2 (id=5107): r0 = epoll_create(0x8) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) 3.289737345s ago: executing program 1 (id=5108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x22}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) 3.238486515s ago: executing program 4 (id=5109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) 2.963688593s ago: executing program 1 (id=5110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) setxattr$incfs_metadata(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa0d061, 0x0) 2.877502418s ago: executing program 0 (id=4728): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002300)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000000ac0)}], 0x1) 2.83550876s ago: executing program 2 (id=5111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000700)="cd", 0x1}], 0x1}}], 0x1, 0xc0c0) 1.272570139s ago: executing program 1 (id=5112): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000200)=""/34, 0x22}], 0x1, 0x0, 0x0) 1.26797315s ago: executing program 2 (id=5113): r0 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1.223735442s ago: executing program 4 (id=5114): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000001e80)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 586.538652ms ago: executing program 4 (id=5115): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) 0s ago: executing program 4 (id=5116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000b010000000008003f00eeff"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): ace activated: batadv_slave_0 [ 572.300185][T14816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.337303][T14816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.361339][T14816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.395772][T14816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.431463][T14816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.470226][T14816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.496805][T14816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.521385][T14816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.548110][T14816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.570050][T14816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.588965][T14816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.657889][T14816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.692276][T14816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.742842][T14816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.764802][T14816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.353504][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.411368][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.568935][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.597983][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.112661][T15035] syz.2.4244: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 574.148839][T15035] CPU: 0 UID: 0 PID: 15035 Comm: syz.2.4244 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 574.159709][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 574.170166][T15035] Call Trace: [ 574.173492][T15035] [ 574.176557][T15035] dump_stack_lvl+0x16c/0x1f0 [ 574.181294][T15035] warn_alloc+0x24d/0x3a0 [ 574.185688][T15035] ? __pfx_warn_alloc+0x10/0x10 [ 574.190601][T15035] ? hlock_class+0x4e/0x130 [ 574.195258][T15035] ? stack_depot_save_flags+0x28/0x8f0 [ 574.200800][T15035] ? kasan_save_stack+0x42/0x60 [ 574.205736][T15035] ? kasan_save_stack+0x33/0x60 [ 574.210670][T15035] ? kasan_save_track+0x14/0x30 [ 574.215592][T15035] ? __kasan_kmalloc+0xaa/0xb0 [ 574.220415][T15035] ? xskq_create+0x52/0x1d0 [ 574.224959][T15035] ? xsk_setsockopt+0x757/0xa10 [ 574.229852][T15035] ? __sys_setsockopt+0x1a4/0x270 [ 574.234931][T15035] ? __x64_sys_setsockopt+0xbd/0x160 [ 574.240259][T15035] ? do_syscall_64+0xcd/0x250 [ 574.245022][T15035] __vmalloc_node_range_noprof+0x10a3/0x14e0 [ 574.251055][T15035] ? xskq_create+0xfb/0x1d0 [ 574.255597][T15035] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 574.261972][T15035] ? xskq_create+0xfb/0x1d0 [ 574.266504][T15035] vmalloc_user_noprof+0x6b/0x90 [ 574.271469][T15035] ? xskq_create+0xfb/0x1d0 [ 574.276003][T15035] xskq_create+0xfb/0x1d0 [ 574.280369][T15035] xsk_setsockopt+0x757/0xa10 [ 574.285333][T15035] ? __pfx_xsk_setsockopt+0x10/0x10 [ 574.290560][T15035] ? find_held_lock+0x2d/0x110 [ 574.295361][T15035] ? selinux_socket_setsockopt+0x6a/0x80 [ 574.301039][T15035] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 574.306628][T15035] ? __pfx_xsk_setsockopt+0x10/0x10 [ 574.311853][T15035] do_sock_setsockopt+0x222/0x480 [ 574.316910][T15035] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 574.322499][T15035] ? __fget_light+0x173/0x210 [ 574.327207][T15035] __sys_setsockopt+0x1a4/0x270 [ 574.332103][T15035] ? __pfx___sys_setsockopt+0x10/0x10 [ 574.337700][T15035] ? handle_mm_fault+0x52d/0xa60 [ 574.342702][T15035] __x64_sys_setsockopt+0xbd/0x160 [ 574.347945][T15035] ? do_syscall_64+0x91/0x250 [ 574.352698][T15035] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.357965][T15035] do_syscall_64+0xcd/0x250 [ 574.362869][T15035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.368790][T15035] RIP: 0033:0x7fb955f7cef9 [ 574.373229][T15035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.392963][T15035] RSP: 002b:00007fb956cf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 574.401413][T15035] RAX: ffffffffffffffda RBX: 00007fb956136058 RCX: 00007fb955f7cef9 [ 574.409421][T15035] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 574.417412][T15035] RBP: 00007fb955fef01e R08: 0000000000000020 R09: 0000000000000000 [ 574.425405][T15035] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 574.433393][T15035] R13: 0000000000000001 R14: 00007fb956136058 R15: 00007ffe1dc983e8 [ 574.441406][T15035] [ 574.496783][T15035] Mem-Info: [ 574.500083][T15035] active_anon:3664 inactive_anon:0 isolated_anon:0 [ 574.500083][T15035] active_file:11348 inactive_file:3608 isolated_file:0 [ 574.500083][T15035] unevictable:768 dirty:431 writeback:0 [ 574.500083][T15035] slab_reclaimable:10129 slab_unreclaimable:101253 [ 574.500083][T15035] mapped:28478 shmem:1241 pagetables:866 [ 574.500083][T15035] sec_pagetables:0 bounce:0 [ 574.500083][T15035] kernel_misc_reclaimable:0 [ 574.500083][T15035] free:1358734 free_pcp:5417 free_cma:0 [ 574.554933][T15035] Node 0 active_anon:14856kB inactive_anon:0kB active_file:45336kB inactive_file:14424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113856kB dirty:1720kB writeback:0kB shmem:3428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10168kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no [ 574.579871][ T30] audit: type=1326 audit(1725598843.200:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15042 comm="syz.3.4150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc57cef9 code=0x0 [ 574.628350][T15035] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 574.677333][T15035] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.823324][T15035] lowmem_reserve[]: 0 2467 2468 0 0 [ 574.828686][T15035] Node 0 DMA32 free:1492088kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:14624kB inactive_anon:0kB active_file:45152kB inactive_file:13952kB unevictable:1536kB writepending:1748kB present:3129332kB managed:2553820kB mlocked:0kB bounce:0kB free_pcp:1432kB local_pcp:792kB free_cma:0kB [ 574.918915][T15035] lowmem_reserve[]: 0 0 0 0 0 [ 574.951535][T15035] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:212kB inactive_anon:0kB active_file:184kB inactive_file:476kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 575.013701][T15035] lowmem_reserve[]: 0 0 0 0 0 [ 575.018542][T15035] Node 1 Normal free:3928388kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:19648kB local_pcp:7432kB free_cma:0kB [ 575.070332][T15035] lowmem_reserve[]: 0 0 0 0 0 [ 575.076296][T15035] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 575.091813][T15035] Node 0 DMA32: 420*4kB (ME) 945*8kB (UME) 634*16kB (UME) 444*32kB (UME) 205*64kB (UME) 57*128kB (UME) 20*256kB (ME) 19*512kB (UME) 19*1024kB (UM) 13*2048kB (ME) 336*4096kB (UM) = 1491192kB [ 575.152599][T15035] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 575.194554][T15035] Node 1 Normal: 14*4kB (UM) 12*8kB (UM) 8*16kB (UM) 9*32kB (UM) 7*64kB (UM) 7*128kB (UM) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 956*4096kB (UM) = 3928440kB [ 575.271174][ T30] audit: type=1400 audit(1725598843.890:880): avc: denied { bind } for pid=15051 comm="syz.0.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 575.307320][T15035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.349346][T15035] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 575.399861][T15035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.441123][T15035] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 575.461152][T15035] 16198 total pagecache pages [ 575.482648][T15035] 0 pages in swap cache [ 575.486872][T15035] Free swap = 124276kB [ 575.491057][T15035] Total swap = 124996kB [ 575.541405][T15035] 2097051 pages RAM [ 575.547412][T15035] 0 pages HighMem/MovableOnly [ 575.566593][T15035] 427258 pages reserved [ 575.570827][T15035] 0 pages cma reserved [ 575.908144][T15070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.491676][ T5306] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 576.745886][ T5306] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 576.777501][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.815186][T15085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.846875][ T5306] usb 4-1: config 0 descriptor?? [ 576.881880][ T5239] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 576.894862][ T5306] cp210x 4-1:0.0: cp210x converter detected [ 576.901416][ T5239] Bluetooth: hci5: Injecting HCI hardware error event [ 576.915614][ T5239] Bluetooth: hci5: hardware error 0x00 [ 576.961763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.026316][ T30] audit: type=1400 audit(1725598845.650:881): avc: denied { setopt } for pid=15089 comm="syz.2.4269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 577.045809][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.347533][ T5306] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 577.683780][ T5306] usb 4-1: cp210x converter now attached to ttyUSB0 [ 577.813798][ T30] audit: type=1326 audit(1725598846.420:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cd97cef9 code=0x7ffc0000 [ 577.889542][ T30] audit: type=1326 audit(1725598846.420:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cd97cef9 code=0x7ffc0000 [ 577.913250][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.989301][ T30] audit: type=1326 audit(1725598846.450:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f42cd97cef9 code=0x7ffc0000 [ 578.012746][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.013267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.119663][ T30] audit: type=1326 audit(1725598846.450:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cd97cef9 code=0x7ffc0000 [ 578.216757][ T30] audit: type=1326 audit(1725598846.450:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f42cd97cef9 code=0x7ffc0000 [ 578.261913][ T46] usb 4-1: USB disconnect, device number 47 [ 578.312589][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 578.353718][ T30] audit: type=1326 audit(1725598846.450:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cd97cef9 code=0x7ffc0000 [ 578.395965][ T46] cp210x 4-1:0.0: device disconnected [ 578.404034][ T30] audit: type=1326 audit(1725598846.450:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cd97cef9 code=0x7ffc0000 [ 578.642635][T15119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.881722][ T5276] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 579.042149][ T5239] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 579.095457][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.149806][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.180556][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 579.219660][ T5276] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.237582][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.265370][ T5276] usb 3-1: config 0 descriptor?? [ 579.720463][ T5276] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 579.754835][ T5276] plantronics 0003:047F:FFFF.0058: No inputs registered, leaving [ 579.808966][ T5276] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 579.881906][T15149] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4295'. [ 580.018930][ T5276] usb 3-1: USB disconnect, device number 50 [ 583.773882][T15209] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 584.877186][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 584.877215][ T30] audit: type=1400 audit(1725598853.500:896): avc: denied { watch_mount } for pid=15230 comm="syz.2.4332" path="/502" dev="tmpfs" ino=2554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 586.511647][ T30] audit: type=1400 audit(1725598855.130:897): avc: denied { append } for pid=15259 comm="syz.0.4346" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 587.993036][ T5276] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 588.205090][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.228683][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.250906][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.317693][ T5276] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 588.337022][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.354113][ T5276] usb 3-1: config 0 descriptor?? [ 588.905417][ T5276] acrux 0003:1A34:0802.0059: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 588.954755][ T5276] acrux 0003:1A34:0802.0059: no inputs found [ 588.974867][ T5276] acrux 0003:1A34:0802.0059: Failed to enable force feedback support, error: -19 [ 589.249505][ T5276] usb 3-1: USB disconnect, device number 51 [ 592.510431][T15377] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4390'. [ 592.571104][T15373] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4390'. [ 593.221381][ T5233] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 593.415479][ T30] audit: type=1326 audit(1725598862.040:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.0.4400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556dd7cef9 code=0x0 [ 593.470540][ T5233] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 593.494735][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.536844][ T5233] usb 4-1: config 0 descriptor?? [ 593.566034][ T5233] cp210x 4-1:0.0: cp210x converter detected [ 594.058441][ T5233] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 594.122026][ T5233] usb 4-1: cp210x converter now attached to ttyUSB0 [ 594.406988][T15416] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 594.794673][ T5233] usb 4-1: USB disconnect, device number 48 [ 594.824493][ T5233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 594.882492][ T5233] cp210x 4-1:0.0: device disconnected [ 595.083688][T15430] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4414'. [ 595.204300][ T5277] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 595.425431][ T5277] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 595.460779][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.473051][ T5277] usb 3-1: Product: syz [ 595.478127][ T5277] usb 3-1: Manufacturer: syz [ 595.485113][ T5277] usb 3-1: SerialNumber: syz [ 595.506777][ T5277] usb 3-1: config 0 descriptor?? [ 595.713334][ T5343] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 595.872267][T15442] __vm_enough_memory: pid: 15442, comm: syz.0.4421, bytes: 549390999552 not enough memory for the allocation [ 595.925627][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.952710][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.986729][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.994168][ T5277] usb 3-1: Firmware version (0.0) predates our first public release. [ 596.029522][ T5343] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 596.040477][ T5277] usb 3-1: Please update to version 0.2 or newer [ 596.050233][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.063085][ T5277] usb 3-1: Firmware: build [ 596.096561][ T5343] usb 5-1: config 0 descriptor?? [ 596.308462][ T5277] usb 3-1: USB disconnect, device number 52 [ 596.576446][ T5343] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving [ 596.632972][ T5343] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 596.905722][ T5343] usb 5-1: USB disconnect, device number 39 [ 597.702259][ T5343] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 597.917566][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.954203][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 597.973915][ T5343] usb 2-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 598.000709][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.041052][ T5343] usb 2-1: config 0 descriptor?? [ 598.329527][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.375937][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.465698][ T5343] usbhid 2-1:0.0: can't add hid device: -71 [ 598.485157][ T5343] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 598.524251][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 598.530277][ T5343] usb 2-1: USB disconnect, device number 44 [ 598.592665][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 598.680175][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 598.822262][T15501] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 598.967231][T15501] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 599.071838][T15509] bond0: entered promiscuous mode [ 599.101556][T15509] bond_slave_0: entered promiscuous mode [ 599.107820][T15509] bond_slave_1: entered promiscuous mode [ 599.133946][ T5343] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 599.366379][ T5343] usb 2-1: Using ep0 maxpacket: 16 [ 599.389904][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.400984][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.421643][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.439620][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.451214][ T5343] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 599.451865][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.459669][ T5343] usb 2-1: config 0 descriptor?? [ 599.526418][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.558758][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.592786][T15522] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.4455'. [ 599.611194][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.656197][T15501] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.681474][ T5276] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 599.691455][ T5343] rc_core: IR keymap rc-xbox-dvd not found [ 599.697331][ T5343] Registered IR keymap rc-empty [ 599.748755][ T5343] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 599.786368][ T5343] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 599.809373][ T5343] xbox_remote 2-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 599.846945][ T5343] input: failed to attach handler kbd to device input52, error: -5 [ 599.886412][ T4661] xbox_remote 2-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 599.912969][ T5343] usb 2-1: USB disconnect, device number 45 [ 599.918358][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4457'. [ 599.929800][ T4661] xbox_remote 2-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 599.933066][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.976461][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.023435][ T5276] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.049359][ T5276] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 600.074236][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.117303][ T5276] usb 5-1: config 0 descriptor?? [ 600.580919][ T5276] gt683r_led 0003:1770:FF00.005B: item fetching failed at offset 1/5 [ 600.601480][ T5277] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 600.604272][ T5276] gt683r_led 0003:1770:FF00.005B: hid parsing failed [ 600.628432][ T5276] gt683r_led 0003:1770:FF00.005B: probe with driver gt683r_led failed with error -22 [ 600.781808][ T5233] usb 5-1: USB disconnect, device number 40 [ 600.795378][ T30] audit: type=1400 audit(1725598869.420:899): avc: denied { read } for pid=15536 comm="syz.3.4461" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 600.831589][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.862795][ T30] audit: type=1400 audit(1725598869.420:900): avc: denied { open } for pid=15536 comm="syz.3.4461" path="/29/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 600.863002][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.951194][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.984574][ T5277] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.006009][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.031562][ T5277] usb 3-1: config 0 descriptor?? [ 601.253010][ T30] audit: type=1400 audit(1725598869.860:901): avc: denied { mount } for pid=15540 comm="syz.1.4464" name="/" dev="autofs" ino=44710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 601.454660][ T30] audit: type=1400 audit(1725598870.080:902): avc: denied { unmount } for pid=13963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 601.500918][ T5277] plantronics 0003:047F:FFFF.005C: No inputs registered, leaving [ 601.553618][ T5277] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 601.873242][ T5343] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 601.889034][ T5277] usb 3-1: USB disconnect, device number 53 [ 602.074303][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.107962][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.133387][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.168628][ T5343] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.188112][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.212660][ T5343] usb 5-1: config 0 descriptor?? [ 602.706494][ T5343] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 602.751807][ T5343] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 602.773969][ T5343] plantronics 0003:047F:FFFF.005D: No inputs registered, leaving [ 602.789686][ T5343] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 603.230625][ T5343] usb 5-1: USB disconnect, device number 41 [ 604.135981][ T30] audit: type=1326 audit(1725598872.760:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15580 comm="syz.4.4480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42cd97cef9 code=0x0 [ 605.094788][T15605] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 605.125688][T15605] gretap1: entered promiscuous mode [ 605.135527][T15605] gretap1: entered allmulticast mode [ 605.862895][ T5322] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 606.051398][ T5322] usb 2-1: Using ep0 maxpacket: 8 [ 606.067082][ T5322] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.106399][ T5322] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.117994][ T5322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.130210][ T5322] usb 2-1: Product: syz [ 606.135910][ T5322] usb 2-1: Manufacturer: syz [ 606.140913][ T5322] usb 2-1: SerialNumber: syz [ 606.851802][ T5277] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 607.075009][ T5277] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 607.089242][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 607.121223][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 607.158536][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.211428][ T5277] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.244887][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.296448][ T5277] usb 4-1: config 0 descriptor?? [ 607.317204][ T5322] cdc_ncm 2-1:1.0: failed to get mac address [ 607.329005][T15641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 607.348388][ T5322] cdc_ncm 2-1:1.0: bind() failure [ 607.385212][ T5322] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 607.428763][ T5322] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 607.457936][ T5322] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 607.476960][T15658] syz_tun: entered promiscuous mode [ 607.509177][ T5322] usb 2-1: USB disconnect, device number 46 [ 607.522899][T15658] batadv_slave_0: entered promiscuous mode [ 607.663995][T15660] sctp: [Deprecated]: syz.2.4515 (pid 15660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.663995][T15660] Use struct sctp_sack_info instead [ 607.979284][ T5277] plantronics 0003:047F:FFFF.005E: unknown main item tag 0xd [ 608.008778][ T5277] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving [ 608.072494][ T5277] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 608.443506][T15673] hsr0: entered allmulticast mode [ 608.448671][T15673] hsr_slave_0: entered allmulticast mode [ 608.483769][T15673] hsr_slave_1: entered allmulticast mode [ 608.714737][T15681] netlink: 'syz.1.4525': attribute type 2 has an invalid length. [ 608.753121][ T5322] usb 4-1: USB disconnect, device number 49 [ 608.772465][T15681] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4525'. [ 609.409402][ T30] audit: type=1400 audit(1725598878.030:904): avc: denied { write } for pid=15696 comm="syz.1.4532" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 610.314282][T15717] netlink: 'syz.3.4538': attribute type 12 has an invalid length. [ 610.394868][T15717] netlink: 'syz.3.4538': attribute type 11 has an invalid length. [ 610.432585][T15717] netlink: 'syz.3.4538': attribute type 11 has an invalid length. [ 610.460763][T15717] netlink: 'syz.3.4538': attribute type 11 has an invalid length. [ 610.532496][T15717] netlink: 'syz.3.4538': attribute type 11 has an invalid length. [ 610.592482][T15717] netlink: 'syz.3.4538': attribute type 11 has an invalid length. [ 610.663347][T15717] netlink: 'syz.3.4538': attribute type 11 has an invalid length. [ 610.724172][T15717] netlink: 'syz.3.4538': attribute type 4 has an invalid length. [ 610.783961][T15717] netlink: 'syz.3.4538': attribute type 5 has an invalid length. [ 610.861354][T15717] netlink: 195936 bytes leftover after parsing attributes in process `syz.3.4538'. [ 610.981667][T15728] tipc: Started in network mode [ 610.986692][T15728] tipc: Node identity 9ca6, cluster identity 4711 [ 611.082806][T15728] tipc: Node number set to 40102 [ 611.394760][T15739] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 612.621399][ T30] audit: type=1400 audit(1725598881.240:905): avc: denied { mount } for pid=15762 comm="syz.2.4559" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 612.940923][T15771] Bluetooth: MGMT ver 1.23 [ 613.130678][T15773] syz_tun: entered promiscuous mode [ 613.446189][ T30] audit: type=1400 audit(1725598882.070:906): avc: denied { create } for pid=15781 comm="syz.1.4568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 613.503236][ T30] audit: type=1400 audit(1725598882.070:907): avc: denied { ioctl } for pid=15781 comm="syz.1.4568" path="socket:[45579]" dev="sockfs" ino=45579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 615.073704][T15816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4581'. [ 615.511661][ T30] audit: type=1400 audit(1725598884.130:908): avc: denied { getopt } for pid=15818 comm="syz.4.4583" lport=35685 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 617.668433][ T30] audit: type=1400 audit(1725598886.290:909): avc: denied { write } for pid=15864 comm="syz.3.4604" name="anycast6" dev="proc" ino=4026534295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 618.623498][T15887] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 619.128811][T15897] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4616'. [ 619.191465][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4616'. [ 619.973681][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4626'. [ 620.071853][ T30] audit: type=1400 audit(1725598888.690:910): avc: denied { read } for pid=15912 comm="syz.3.4623" path="socket:[45844]" dev="sockfs" ino=45844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 620.434366][ T30] audit: type=1400 audit(1725598889.060:911): avc: denied { write } for pid=15925 comm="syz.4.4629" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 620.683082][T15932] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 620.823647][T15934] sit0: entered allmulticast mode [ 620.960551][T15934] sit0: entered promiscuous mode [ 621.530353][T15943] ip6gretap0 speed is unknown, defaulting to 1000 [ 622.347346][T15953] ip6gretap0 speed is unknown, defaulting to 1000 [ 625.493719][ T46] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 625.698276][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 625.719054][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 625.751411][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 625.773544][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 625.811444][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 625.830837][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.882694][ T46] usb 5-1: config 0 descriptor?? [ 626.377268][ T46] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.005F/input/input54 [ 626.545397][ T46] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.005F/input/input55 [ 626.700993][ T46] kye 0003:0458:5005.005F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 626.798724][ T46] usb 5-1: USB disconnect, device number 42 [ 627.229732][T16021] netlink: 'syz.0.4667': attribute type 29 has an invalid length. [ 627.414949][T16024] nbd: device at index 4 is going down [ 627.788866][T16029] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 627.810578][T16031] input: syz1 as /devices/virtual/input/input56 [ 627.831368][T16029] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 630.630624][T11364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 630.648561][T11364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 630.657680][T11364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 630.668916][T11364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 630.685596][T11364] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 630.694801][T11364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 630.950627][T16082] ip6gretap0 speed is unknown, defaulting to 1000 [ 631.169703][ T30] audit: type=1400 audit(1725598899.790:912): avc: denied { accept } for pid=16091 comm="syz.3.4696" path="socket:[47220]" dev="sockfs" ino=47220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 632.027694][T16082] chnl_net:caif_netlink_parms(): no params data found [ 632.670778][T16082] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.680625][T16082] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.690885][T16082] bridge_slave_0: entered allmulticast mode [ 632.708802][T16082] bridge_slave_0: entered promiscuous mode [ 632.736005][T16082] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.766501][T16082] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.797106][T16082] bridge_slave_1: entered allmulticast mode [ 632.807326][ T5239] Bluetooth: hci7: command tx timeout [ 632.832408][T16082] bridge_slave_1: entered promiscuous mode [ 632.959069][T16082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.009391][T16082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.440094][T16082] team0: Port device team_slave_0 added [ 633.535177][T16082] team0: Port device team_slave_1 added [ 633.747343][ T30] audit: type=1400 audit(1725598902.370:913): avc: denied { append } for pid=16137 comm="syz.3.4707" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 633.854144][T16082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.894593][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.004375][T16082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.058130][T16082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.099614][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.202817][T16082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.387423][ T30] audit: type=1400 audit(1725598903.010:914): avc: denied { unmount } for pid=9225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 634.577881][T16145] netlink: 'syz.0.4712': attribute type 6 has an invalid length. [ 634.587168][T16145] netlink: 'syz.0.4712': attribute type 8 has an invalid length. [ 634.662823][T16082] hsr_slave_0: entered promiscuous mode [ 634.695398][T16082] hsr_slave_1: entered promiscuous mode [ 634.705080][ T30] audit: type=1400 audit(1725598903.330:915): avc: denied { append } for pid=16149 comm="syz.3.4715" name="userio" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 634.730553][T16082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.754952][T16082] Cannot create hsr debugfs directory [ 634.831483][ T5343] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 634.881569][ T5239] Bluetooth: hci7: command tx timeout [ 635.043069][ T5343] usb 2-1: Using ep0 maxpacket: 32 [ 635.054380][ T5343] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 635.082673][ T5343] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 635.126469][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 635.161380][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 635.211346][ T5343] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 635.250108][ T5343] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.326561][ T5343] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 635.363330][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.397392][ T5343] usb 2-1: config 0 descriptor?? [ 635.659222][ T5343] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 635.926160][ T5343] usb 2-1: USB disconnect, device number 47 [ 635.975481][ T5343] usblp0: removed [ 636.112818][T16082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.427918][T16082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.655435][T16082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.961449][ T5239] Bluetooth: hci7: command tx timeout [ 637.005278][T16082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.906490][ T9892] syz_tun (unregistering): left allmulticast mode [ 637.952112][ T9892] syz_tun (unregistering): left promiscuous mode [ 637.958647][ T9892] bridge0: port 3(syz_tun) entered disabled state [ 638.055201][T16082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 638.179457][T16082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 638.448637][ T1068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.551345][T16082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 638.725861][T16082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 638.934541][ T1068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.044310][ T5239] Bluetooth: hci7: command tx timeout [ 639.258950][ T1068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.678170][ T1068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.281108][T16082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.510419][T11364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 640.538051][T11364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 640.555913][T11364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 640.566385][T11364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 640.576030][T11364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 640.584402][T11364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 640.658693][T16082] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.695436][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.441731][ T5233] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 641.660609][ T5233] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 641.670280][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.728745][ T5233] usb 4-1: config 0 descriptor?? [ 641.745688][ T5233] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 642.222103][ T5233] cpia1 4-1:0.0: unexpected state after lo power cmd: 4e [ 642.649870][ T5233] cpia1 4-1:0.0: only firmware version 1 is supported (got: 9) [ 642.658386][ T5239] Bluetooth: hci2: command tx timeout [ 642.963871][ T1068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.003206][ T1068] bond_slave_0: left promiscuous mode [ 643.043941][ T1068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.068697][ T5279] usb 4-1: USB disconnect, device number 50 [ 643.082427][ T1068] bond_slave_1: left promiscuous mode [ 643.118103][ T1068] bond0 (unregistering): Released all slaves [ 643.219521][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.226872][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.356253][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.363594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.500100][T16191] ip6gretap0 speed is unknown, defaulting to 1000 [ 644.691372][ T1068] hsr_slave_0: left promiscuous mode [ 644.715518][ T1068] hsr_slave_1: left promiscuous mode [ 644.721539][ T5239] Bluetooth: hci2: command tx timeout [ 644.735654][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.751440][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.762666][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.770311][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.845791][ T1068] veth0_macvtap: left promiscuous mode [ 644.863000][ T1068] veth1_vlan: left promiscuous mode [ 644.868491][ T1068] veth0_vlan: left promiscuous mode [ 645.194223][T16222] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 646.812838][ T5239] Bluetooth: hci2: command tx timeout [ 647.285138][T16239] syz.4.4749: attempt to access beyond end of device [ 647.285138][T16239] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 647.330053][T16239] F2FS-fs (loop4): Unable to read 1th superblock [ 647.353279][T16239] syz.4.4749: attempt to access beyond end of device [ 647.353279][T16239] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 647.401387][T16239] F2FS-fs (loop4): Unable to read 2th superblock [ 648.417817][ T1068] team0 (unregistering): Port device team_slave_1 removed [ 648.690114][ T1068] team0 (unregistering): Port device team_slave_0 removed [ 648.883299][ T5239] Bluetooth: hci2: command tx timeout [ 651.639926][T16241] ip6gretap0 speed is unknown, defaulting to 1000 [ 652.647885][T16082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.729992][T16191] chnl_net:caif_netlink_parms(): no params data found [ 653.406748][T16191] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.444740][T16191] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.468735][T16191] bridge_slave_0: entered allmulticast mode [ 653.491427][T16191] bridge_slave_0: entered promiscuous mode [ 653.525224][T16082] veth0_vlan: entered promiscuous mode [ 653.573221][T16191] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.584407][T16191] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.624752][T16191] bridge_slave_1: entered allmulticast mode [ 653.656029][T16191] bridge_slave_1: entered promiscuous mode [ 653.889790][T16191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.960377][T16191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.015507][T16082] veth1_vlan: entered promiscuous mode [ 654.657769][T16191] team0: Port device team_slave_0 added [ 655.129316][T16191] team0: Port device team_slave_1 added [ 655.686693][T16191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.697096][T16191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.722003][T16357] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.4765'. [ 655.776258][T16191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.779340][T16357] netlink: 'syz.1.4765': attribute type 1 has an invalid length. [ 655.810958][T16191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.832485][T16191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.842030][T16357] netlink: 113 bytes leftover after parsing attributes in process `syz.1.4765'. [ 655.942709][T16191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.019791][T16082] veth0_macvtap: entered promiscuous mode [ 656.227209][T16082] veth1_macvtap: entered promiscuous mode [ 656.314652][T16191] hsr_slave_0: entered promiscuous mode [ 656.325440][T16191] hsr_slave_1: entered promiscuous mode [ 656.667807][T16366] netlink: 'syz.1.4769': attribute type 4 has an invalid length. [ 656.743052][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.779287][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.817031][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.851321][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.885645][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.917551][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.954409][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.005374][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.054306][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.102844][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.156745][T16082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.226444][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.264921][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.304954][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.344842][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.385757][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.422523][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.449489][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.511483][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.541462][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.571454][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.614777][T16082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.767677][T16082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.809139][T16082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.851417][T16082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.860205][T16082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.790657][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.800574][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.104576][T16300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.129172][T16300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.342413][ T30] audit: type=1400 audit(1725598927.960:916): avc: denied { mount } for pid=16082 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 659.364971][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.768407][T16191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 659.860917][T16191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 659.883946][ T5306] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 659.915397][T16191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 660.098306][ T5306] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 660.111482][ T5306] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 660.151439][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 660.182644][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 660.222003][ T5306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 660.244452][T16191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 660.273425][ T5306] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.308697][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.341658][ T5306] usb 2-1: config 0 descriptor?? [ 660.364977][T16395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 660.922157][ T5306] plantronics 0003:047F:FFFF.0060: unknown main item tag 0xd [ 660.943579][T16191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.975042][ T5306] plantronics 0003:047F:FFFF.0060: No inputs registered, leaving [ 661.013907][ T5306] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 661.066531][T16191] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.184357][T16334] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.191682][T16334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.265256][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.272593][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.440788][ T5306] usb 2-1: USB disconnect, device number 48 [ 661.839420][ T30] audit: type=1400 audit(1725598930.460:917): avc: denied { getopt } for pid=16412 comm="syz.3.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 662.044934][T16191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.306054][T16191] veth0_vlan: entered promiscuous mode [ 662.376510][T16191] veth1_vlan: entered promiscuous mode [ 662.455966][ T5306] kernel write not supported for file /radio5 (pid: 5306 comm: kworker/1:5) [ 662.568025][T16191] veth0_macvtap: entered promiscuous mode [ 662.642963][T16191] veth1_macvtap: entered promiscuous mode [ 662.776403][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.821336][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.874153][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.904574][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.930831][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.964753][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.993669][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.035545][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.056800][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.092731][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.100503][T16439] ebt_among: src integrity fail: 300 [ 663.111280][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.139172][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.171976][T16191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.273053][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.311516][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.345669][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.392926][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.411334][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.458942][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.491547][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.540793][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.564854][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.612892][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.637435][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.670836][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.727086][T16191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.800015][T16191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.844131][T16191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.872300][T16191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.892804][T16191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.452801][T16300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.486317][T16300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.712693][T16300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.744593][T16300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.974080][T16471] sp0: Synchronizing with TNC [ 665.981518][T16300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.337290][T16300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.658188][T16300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.000453][T16502] kernel read not supported for file /!selinuxselinux (pid: 16502 comm: syz.1.4825) [ 667.055585][ T30] audit: type=1800 audit(1725598935.680:918): pid=16502 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4825" name="!selinuxselinux" dev="mqueue" ino=49281 res=0 errno=0 [ 667.059300][T16300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.531867][ T5306] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 667.717232][T11364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.734118][T11364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.751728][T11364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.754990][T16300] bridge_slave_1: left allmulticast mode [ 667.767254][T11364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.777898][T11364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 667.787472][T11364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.798733][ T5306] usb 5-1: Using ep0 maxpacket: 16 [ 667.839275][T16300] bridge_slave_1: left promiscuous mode [ 667.883178][T16300] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.913968][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.931278][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.947473][ T5306] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 667.961340][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.976356][ T5306] usb 5-1: config 0 descriptor?? [ 668.024863][T16300] bridge_slave_0: left allmulticast mode [ 668.030584][T16300] bridge_slave_0: left promiscuous mode [ 668.051754][T16300] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.518904][ T5306] waterforce 0003:1044:7A4D.0061: unknown main item tag 0x0 [ 668.552996][ T5306] waterforce 0003:1044:7A4D.0061: unknown main item tag 0x0 [ 668.582282][ T5306] waterforce 0003:1044:7A4D.0061: unknown main item tag 0x0 [ 668.589787][ T5306] waterforce 0003:1044:7A4D.0061: unknown main item tag 0x0 [ 668.622414][ T5306] waterforce 0003:1044:7A4D.0061: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.4-1/input0 [ 668.733413][ T5306] waterforce 0003:1044:7A4D.0061: fw version request failed with -38 [ 668.776911][ T5306] usb 5-1: USB disconnect, device number 43 [ 669.101393][ T5279] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 669.152825][ T1186] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 669.296336][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 669.325995][ T5279] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 669.341655][ T5279] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.364283][ T1186] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 669.380776][ T5279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 669.390826][ T1186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.411305][ T5279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 669.433121][ T1186] usb 4-1: config 0 descriptor?? [ 669.442285][ T5279] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.501352][ T5279] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 669.522186][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.785793][ T5279] usb 2-1: usb_control_msg returned -32 [ 669.813104][ T5279] usbtmc 2-1:16.0: can't read capabilities [ 669.844721][ T5239] Bluetooth: hci2: command tx timeout [ 669.893553][ T1186] usb 4-1: Cannot set MAC address [ 669.898957][ T1186] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 669.973131][ T1186] usb 4-1: USB disconnect, device number 51 [ 670.361417][ T5279] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 670.527552][T16300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.564004][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 670.573766][ T5279] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 670.592951][ T5279] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.607267][T16300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.624532][ T5279] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.642339][ T5279] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.659471][T16300] bond0 (unregistering): Released all slaves [ 670.675952][ T5279] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.708657][ T5279] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 670.725472][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.896090][T16507] ip6gretap0 speed is unknown, defaulting to 1000 [ 671.030133][ T5279] usb 5-1: usb_control_msg returned -32 [ 671.048473][ T5279] usbtmc 5-1:16.0: can't read capabilities [ 671.717477][T16300] hsr_slave_0: left promiscuous mode [ 671.728092][T16300] hsr_slave_1: left promiscuous mode [ 671.772985][T16300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.798687][T16300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.841173][T16300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.848512][T16540] netlink: 'syz.3.4842': attribute type 11 has an invalid length. [ 671.857116][T16300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.864532][ T5322] usb 2-1: USB disconnect, device number 49 [ 671.922249][ T5239] Bluetooth: hci2: command tx timeout [ 672.035966][T16300] veth1_macvtap: left promiscuous mode [ 672.059434][T16300] veth0_macvtap: left promiscuous mode [ 672.080799][T16300] veth1_vlan: left promiscuous mode [ 672.099717][T16300] veth0_vlan: left promiscuous mode [ 673.142255][ T5343] usb 5-1: USB disconnect, device number 44 [ 673.797637][ T5343] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 674.013561][ T5239] Bluetooth: hci2: command tx timeout [ 674.015215][ T5343] usb 5-1: Using ep0 maxpacket: 8 [ 674.027253][ T5343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.037913][ T5343] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 674.084477][ T5343] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 674.101459][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.144472][ T5343] usb 5-1: config 0 descriptor?? [ 674.400589][ T5233] usb 5-1: USB disconnect, device number 45 [ 674.774594][T16300] team0 (unregistering): Port device team_slave_1 removed [ 674.950578][T16300] team0 (unregistering): Port device team_slave_0 removed [ 676.083071][ T5239] Bluetooth: hci2: command tx timeout [ 678.813699][ T5233] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 678.943282][T16507] chnl_net:caif_netlink_parms(): no params data found [ 679.031296][ T5233] usb 2-1: Using ep0 maxpacket: 16 [ 679.063510][ T5233] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 679.072204][ T5233] usb 2-1: config 0 has no interface number 0 [ 679.078401][ T5233] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 679.131442][ T5233] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 679.202814][ T5233] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 679.221274][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 679.229482][ T5233] usb 2-1: Product: syz [ 679.251304][ T5233] usb 2-1: SerialNumber: syz [ 679.263247][ T5233] usb 2-1: config 0 descriptor?? [ 679.274828][ T5233] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 679.287547][ T5233] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input60 [ 679.588428][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 679.814129][T16507] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.845189][T16507] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.845486][T16507] bridge_slave_0: entered allmulticast mode [ 679.852837][T16507] bridge_slave_0: entered promiscuous mode [ 679.919237][T16507] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.919508][T16507] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.919775][T16507] bridge_slave_1: entered allmulticast mode [ 679.962265][T16507] bridge_slave_1: entered promiscuous mode [ 680.103057][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 680.103976][ T5343] usb 2-1: USB disconnect, device number 50 [ 680.110102][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 680.142489][ T5343] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 680.265757][T16507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.344903][T16507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.351396][ T5322] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 680.543723][T16507] team0: Port device team_slave_0 added [ 680.558703][T16507] team0: Port device team_slave_1 added [ 680.585175][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.616853][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.654812][ T5322] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 680.677381][ T5322] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 680.687157][ T5322] usb 5-1: Product: syz [ 680.701364][ T5322] usb 5-1: config 0 descriptor?? [ 680.797613][T16507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.821486][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.852947][ T5233] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 680.890801][T16507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.966491][T16507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.981698][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.033600][T16507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.123813][ T5233] usb 4-1: Using ep0 maxpacket: 8 [ 681.133635][ T5233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.182674][ T5233] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 681.190469][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.212964][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.223735][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.236513][ T5233] usb 4-1: config 0 descriptor?? [ 681.258979][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.287043][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.314416][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.340929][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.353813][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.383065][T16507] hsr_slave_0: entered promiscuous mode [ 681.411513][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.418737][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.486673][T16507] hsr_slave_1: entered promiscuous mode [ 681.496261][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.531387][ T5322] konepure 0003:1E7D:2DB4.0062: unknown main item tag 0x0 [ 681.592240][ T5322] konepure 0003:1E7D:2DB4.0062: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 681.601797][ T5233] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 681.666201][ T5322] usb 5-1: USB disconnect, device number 46 [ 682.244678][ T5322] usb 4-1: USB disconnect, device number 52 [ 682.275116][ T5322] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 683.119104][T16627] ptrace attach of "./syz-executor exec"[16630] was attempted by ""[16627] [ 683.430357][T16507] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 683.441539][T11364] Bluetooth: hci6: command 0x0406 tx timeout [ 683.561191][T16507] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 683.709397][T16507] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 683.818589][T16507] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 683.871361][ T5279] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 684.098215][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 684.126945][ T5279] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.156876][ T5279] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.204660][ T5279] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.259750][ T5279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 684.280005][ T5279] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 684.321537][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.366883][ T5279] usb 2-1: config 0 descriptor?? [ 684.436541][T16507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.559983][T16507] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.645988][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.653307][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.775257][ T5322] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 684.785263][T16334] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.792685][T16334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.807870][ T5322] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz0] on syz0 [ 684.888437][T16654] input: syz0 as /devices/virtual/input/input61 [ 684.917497][ T5279] hid-steam 0003:28DE:1102.0064: unknown main item tag 0x0 [ 684.956966][ T5279] hid-steam 0003:28DE:1102.0064: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 685.052980][ T5343] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 685.101527][ T5279] hid-steam 0003:28DE:1102.0064: Steam Controller 'XXXXXXXXXX' connected [ 685.138537][ T5279] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0064/input/input62 [ 685.247228][ T5279] hid-steam 0003:28DE:1102.0065: unknown main item tag 0x0 [ 685.261319][ T5343] usb 5-1: Using ep0 maxpacket: 8 [ 685.284991][ T5343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.316534][ T5279] hid-steam 0003:28DE:1102.0065: hidraw1: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 685.329321][ T5343] usb 5-1: config 0 has no interfaces? [ 685.363372][ T5343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.391092][ T5343] usb 5-1: config 0 has no interfaces? [ 685.415157][ T5306] usb 2-1: USB disconnect, device number 51 [ 685.419280][ T5343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.459883][ T5343] usb 5-1: config 0 has no interfaces? [ 685.489226][ T5343] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 685.518118][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.563195][ T5343] usb 5-1: Product: syz [ 685.567542][ T5343] usb 5-1: Manufacturer: syz [ 685.597748][ T5343] usb 5-1: SerialNumber: syz [ 685.655412][ T5306] hid-steam 0003:28DE:1102.0064: Steam Controller 'XXXXXXXXXX' disconnected [ 685.665342][ T5343] usb 5-1: config 0 descriptor?? [ 685.918595][ T5343] usb 5-1: USB disconnect, device number 47 [ 686.033962][T16507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.185105][T16662] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4887'. [ 686.201683][T16662] ip6gretap0: entered promiscuous mode [ 686.219354][T16662] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4887'. [ 686.400516][T16507] veth0_vlan: entered promiscuous mode [ 686.457843][T16507] veth1_vlan: entered promiscuous mode [ 686.720036][T16507] veth0_macvtap: entered promiscuous mode [ 686.758086][T16507] veth1_macvtap: entered promiscuous mode [ 686.858142][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.893148][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.941391][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.974081][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.986370][T16192] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 687.022856][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.046770][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.085701][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.116695][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.161304][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.194552][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.204788][T16192] usb 2-1: Using ep0 maxpacket: 16 [ 687.229939][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.241448][T16192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.267795][T16192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.277728][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.297034][T16192] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.318117][T16507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.340557][T16192] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 687.379217][T16192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.405232][T16192] usb 2-1: config 0 descriptor?? [ 687.489354][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.525473][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.561333][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.598190][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.643104][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.671298][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.698444][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.730086][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.750887][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.793228][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.833266][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.870458][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.913464][T16507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.987540][T16192] HID 045e:07da: Invalid code 65791 type 1 [ 688.026445][T16507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.050995][T16192] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0066/input/input63 [ 688.081921][T16507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.090802][T16507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.138876][T16507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.149935][T16192] microsoft 0003:045E:07DA.0066: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 688.640690][T16319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.674293][T16319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.713065][ T5343] usb 2-1: USB disconnect, device number 52 [ 688.925262][T16334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.949676][T16334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.491385][ T5343] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 689.600861][T16706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4906'. [ 689.631710][T16706] netlink: 'syz.4.4906': attribute type 7 has an invalid length. [ 689.665137][T16706] netlink: 'syz.4.4906': attribute type 8 has an invalid length. [ 689.691541][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 689.693855][ T5343] usb 4-1: Using ep0 maxpacket: 8 [ 689.767427][ T5343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 689.812824][ T5343] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 689.843023][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.893222][ T5343] usb 4-1: config 0 descriptor?? [ 689.906359][ T5343] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 690.310868][T16319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.559339][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.667570][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.754036][T16319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.847728][ T5233] usb 4-1: USB disconnect, device number 53 [ 691.165127][T16319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.587143][T16319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.720807][T16718] mkiss: ax0: crc mode is auto. [ 691.934612][T11364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 691.952400][T11364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 691.967357][T11364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 691.997323][T11364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 692.024841][T11364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 692.034285][T11364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 692.555112][T16724] ip6gretap0 speed is unknown, defaulting to 1000 [ 692.613940][T16319] bridge_slave_1: left allmulticast mode [ 692.619656][T16319] bridge_slave_1: left promiscuous mode [ 692.666432][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.764026][T16319] bridge_slave_0: left allmulticast mode [ 692.769748][T16319] bridge_slave_0: left promiscuous mode [ 692.791702][T16319] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.457462][T16745] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.4921'. [ 693.502902][T16745] netlink: 'syz.2.4921': attribute type 1 has an invalid length. [ 693.510709][T16745] netlink: 121 bytes leftover after parsing attributes in process `syz.2.4921'. [ 693.840075][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4923'. [ 694.098594][T16751] 9pnet_fd: p9_fd_create_tcp (16751): problem connecting socket to 127.0.0.1 [ 694.174876][T11364] Bluetooth: hci2: command tx timeout [ 694.699556][T16754] input: syz0 as /devices/virtual/input/input64 [ 695.142009][T16319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.198242][T16319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.226682][T16319] bond0 (unregistering): Released all slaves [ 695.664347][T16759] sctp: [Deprecated]: syz.4.4927 (pid 16759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.664347][T16759] Use struct sctp_sack_info instead [ 695.922841][T16764] sctp: [Deprecated]: syz.1.4930 (pid 16764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.922841][T16764] Use struct sctp_sack_info instead [ 696.241585][T11364] Bluetooth: hci2: command tx timeout [ 697.222972][T16319] hsr_slave_0: left promiscuous mode [ 697.274148][T16319] hsr_slave_1: left promiscuous mode [ 697.312731][T16319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.320239][T16319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.381013][T16319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.399323][T16319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.556011][T16319] veth1_macvtap: left promiscuous mode [ 697.571415][T16319] veth0_macvtap: left promiscuous mode [ 697.577991][T16319] veth1_vlan: left promiscuous mode [ 697.612915][T16319] veth0_vlan: left promiscuous mode [ 698.321479][T11364] Bluetooth: hci2: command tx timeout [ 700.401643][T11364] Bluetooth: hci2: command tx timeout [ 700.463215][ T5278] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 700.593392][T16319] team0 (unregistering): Port device team_slave_1 removed [ 700.715891][ T5278] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 700.724874][ T5278] usb 3-1: config 179 has no interface number 0 [ 700.741383][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 700.778351][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 700.802659][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 700.864009][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 700.906278][ T5278] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 700.923665][T16319] team0 (unregistering): Port device team_slave_0 removed [ 700.932690][ T5278] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 700.963069][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.988638][T16820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.053595][T16820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.775676][ T5233] usb 3-1: USB disconnect, device number 54 [ 701.775720][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 703.618382][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4945'. [ 704.003209][T16724] chnl_net:caif_netlink_parms(): no params data found [ 704.786077][T16724] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.813874][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.835657][T16724] bridge_slave_0: entered allmulticast mode [ 704.868208][T16724] bridge_slave_0: entered promiscuous mode [ 704.899421][T16724] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.928564][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.951815][T16724] bridge_slave_1: entered allmulticast mode [ 704.960352][T16724] bridge_slave_1: entered promiscuous mode [ 705.240964][T16724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.278195][T16724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.499310][T16724] team0: Port device team_slave_0 added [ 705.554155][T16724] team0: Port device team_slave_1 added [ 705.832932][T16724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.839941][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.931938][T16724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.966717][T16724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.995315][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.096579][T16724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.511577][T16724] hsr_slave_0: entered promiscuous mode [ 706.539213][T16724] hsr_slave_1: entered promiscuous mode [ 707.641481][ T5278] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 707.828388][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 707.858441][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 707.900153][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 707.928910][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 707.981362][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.008377][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.038335][ T5278] usb 5-1: config 0 descriptor?? [ 708.522045][T16901] loop0: detected capacity change from 0 to 7 [ 708.532537][ T5278] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 708.578776][ T5278] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving [ 708.629349][ T5278] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 708.633535][T16901] Dev loop0: unable to read RDB block 7 [ 708.708091][T16901] loop0: AHDI p2 [ 708.731494][T16901] loop0: partition table partially beyond EOD, truncated [ 709.080529][ T5343] usb 5-1: USB disconnect, device number 48 [ 709.097273][T16724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 709.142679][T16724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 709.198448][T16724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 709.268672][T16724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 709.491390][ T5233] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 709.712240][ T5233] usb 3-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 709.752177][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.788862][ T5233] usb 3-1: config 0 descriptor?? [ 709.824915][T16724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.944459][T16724] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.045402][T16346] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.045591][T16346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.049352][T16346] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.049546][T16346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.286696][ T5233] apple 0003:05AC:022B.0068: unknown main item tag 0x0 [ 710.323631][ T5233] apple 0003:05AC:022B.0068: unknown main item tag 0x0 [ 710.330635][ T5233] apple 0003:05AC:022B.0068: unknown main item tag 0x0 [ 710.372740][ T5233] apple 0003:05AC:022B.0068: unknown main item tag 0x0 [ 710.380359][ T5233] apple 0003:05AC:022B.0068: unknown main item tag 0x0 [ 710.402904][ T5233] apple 0003:05AC:022B.0068: unknown main item tag 0x0 [ 710.409867][ T5233] apple 0003:05AC:022B.0068: unknown main item tag 0x0 [ 710.417771][ T5306] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 710.482237][ T5233] apple 0003:05AC:022B.0068: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.2-1/input0 [ 710.542320][ T5233] usb 3-1: USB disconnect, device number 55 [ 710.636212][ T5306] usb 2-1: Using ep0 maxpacket: 32 [ 710.655584][ T5306] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 710.665055][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.711543][ T5306] usb 2-1: config 0 descriptor?? [ 710.730019][ T5306] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 711.046961][T16724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.100903][T16930] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4999'. [ 711.142935][T16930] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4999'. [ 711.302673][T16724] veth0_vlan: entered promiscuous mode [ 711.348666][T16724] veth1_vlan: entered promiscuous mode [ 711.539031][T16724] veth0_macvtap: entered promiscuous mode [ 711.587516][T16724] veth1_macvtap: entered promiscuous mode [ 711.667635][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.696529][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.718031][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.742091][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.762799][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.787723][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.792074][ T5306] gspca_sunplus: reg_w_riv err -71 [ 711.811144][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.821386][ T5306] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 711.837061][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.848323][ T5343] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 711.855439][ T5306] usb 2-1: USB disconnect, device number 53 [ 711.870726][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.899067][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.923388][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.948396][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.979046][T16724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.038249][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.050516][ T5343] usb 3-1: Using ep0 maxpacket: 8 [ 712.104850][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.129148][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.153057][ T5343] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 712.171278][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.179346][ T5343] usb 3-1: Product: syz [ 712.191983][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.213564][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.225459][ T5343] usb 3-1: Manufacturer: syz [ 712.230126][ T5343] usb 3-1: SerialNumber: syz [ 712.253081][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.264688][ T5343] usb 3-1: config 0 descriptor?? [ 712.285722][ T5343] redrat3 3-1:0.0: Couldn't find all endpoints [ 712.294575][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.321605][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.342013][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.362439][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.383436][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.411489][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.415197][ T30] audit: type=1400 audit(1725598981.030:919): avc: denied { read } for pid=16936 comm="syz.3.5002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 712.439348][T16724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.543948][T16724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.575333][T16724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.596328][T16724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.616517][T16724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.058640][T16192] usb 3-1: USB disconnect, device number 56 [ 713.124102][T16334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.161369][T16334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.356295][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.376589][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.746285][T16958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5011'. [ 714.512017][ T30] audit: type=1400 audit(1725598983.130:920): avc: denied { setattr } for pid=16968 comm="syz.4.5015" name="bus" dev="tmpfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 714.844248][T16977] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5019'. [ 715.056318][T16980] syz.1.5021[16980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 715.056581][T16980] syz.1.5021[16980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 715.069753][ T5343] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 715.272710][T16192] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 715.293535][ T5343] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 715.311398][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.341537][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 715.366400][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 715.410399][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 715.448324][ T5343] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 715.477761][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.510179][T16192] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 715.552992][ T5343] usb 5-1: config 0 descriptor?? [ 715.561905][T16192] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.573993][T16975] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 715.625503][T16192] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.655556][T16192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.686281][T16192] usb 4-1: Product: syz [ 715.690544][T16192] usb 4-1: Manufacturer: syz [ 715.737409][T16192] usb 4-1: SerialNumber: syz [ 715.784028][T16973] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 716.080886][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.090069][ T5343] plantronics 0003:047F:FFFF.0069: unknown main item tag 0xd [ 716.146451][ T5343] plantronics 0003:047F:FFFF.0069: No inputs registered, leaving [ 716.202974][ T5343] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 716.282978][T16192] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 716.355778][T16192] usb 4-1: USB disconnect, device number 54 [ 716.437068][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.571084][ T5343] usb 5-1: USB disconnect, device number 49 [ 716.668588][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.887528][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.501726][ T12] bridge_slave_1: left allmulticast mode [ 717.523886][ T12] bridge_slave_1: left promiscuous mode [ 717.534278][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.606779][ T12] bridge_slave_0: left allmulticast mode [ 717.632137][ T12] bridge_slave_0: left promiscuous mode [ 717.651923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.294267][ T30] audit: type=1400 audit(1725598986.920:921): avc: denied { watch } for pid=17007 comm="syz.1.5031" path="/277" dev="tmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 718.396491][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.411353][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.425043][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.438955][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.451153][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 718.460571][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.471409][ T30] audit: type=1400 audit(1725598986.920:922): avc: denied { watch_sb } for pid=17007 comm="syz.1.5031" path="/277" dev="tmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 719.250841][T17018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.988301][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.020011][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.060503][ T12] bond0 (unregistering): Released all slaves [ 720.656844][T17012] Bluetooth: hci2: command tx timeout [ 720.758600][T17031] batadv_slave_1: entered promiscuous mode [ 720.767180][T17030] batadv_slave_1: left promiscuous mode [ 720.782805][T17010] ip6gretap0 speed is unknown, defaulting to 1000 [ 721.402719][ T12] hsr_slave_0: left promiscuous mode [ 721.443613][ T12] hsr_slave_1: left promiscuous mode [ 721.480766][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.511909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.538889][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.562978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.659740][ T12] veth1_macvtap: left promiscuous mode [ 721.666017][ T12] veth0_macvtap: left promiscuous mode [ 721.672241][ T12] veth1_vlan: left promiscuous mode [ 721.677880][ T12] veth0_vlan: left promiscuous mode [ 721.808943][T17052] input: syz0 as /devices/virtual/input/input68 [ 722.723940][T17012] Bluetooth: hci2: command tx timeout [ 723.047971][ T46] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 723.254163][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 723.510118][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 723.520187][ T46] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 723.533535][ T46] usb 4-1: can't read configurations, error -71 [ 724.045861][ T12] team0 (unregistering): Port device team_slave_1 removed [ 724.318350][ T12] team0 (unregistering): Port device team_slave_0 removed [ 724.802262][T17012] Bluetooth: hci2: command tx timeout [ 726.906676][T17012] Bluetooth: hci2: command tx timeout [ 727.222913][ T5277] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 727.483472][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5062'. [ 727.493747][ T5277] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 727.502489][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 727.522964][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 727.535088][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 727.552455][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 727.601289][ T5277] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 727.610535][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.648738][T17010] chnl_net:caif_netlink_parms(): no params data found [ 727.663551][ T5277] usb 4-1: config 0 descriptor?? [ 727.672083][T17079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 728.313694][ T5277] plantronics 0003:047F:FFFF.006A: unknown main item tag 0xd [ 728.345528][ T5277] plantronics 0003:047F:FFFF.006A: No inputs registered, leaving [ 728.381570][T17010] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.388844][T17010] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.423215][ T5277] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 728.451909][T17010] bridge_slave_0: entered allmulticast mode [ 728.485321][T17010] bridge_slave_0: entered promiscuous mode [ 728.521819][T17010] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.529279][T17010] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.572761][T17010] bridge_slave_1: entered allmulticast mode [ 728.602667][T17010] bridge_slave_1: entered promiscuous mode [ 728.777213][T17010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.827429][T17010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.083733][ T5276] usb 4-1: USB disconnect, device number 57 [ 729.153421][T17010] team0: Port device team_slave_0 added [ 729.228561][T17010] team0: Port device team_slave_1 added [ 729.389072][T17010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.409052][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.492611][T17010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.533181][T17010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.540284][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.631370][T17010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.839170][T17010] hsr_slave_0: entered promiscuous mode [ 729.868365][T17010] hsr_slave_1: entered promiscuous mode [ 730.013356][T16192] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 730.221294][T16192] usb 5-1: Using ep0 maxpacket: 16 [ 730.234047][T16192] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 730.261417][T16192] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 730.291353][T16192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.312575][T16192] usb 5-1: config 0 descriptor?? [ 730.339071][T16192] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input70 [ 730.481623][ T5278] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 730.552849][ T4661] bcm5974 5-1:0.0: could not read from device [ 730.595574][T16192] bcm5974 5-1:0.0: could not read from device [ 730.639044][T16192] input: failed to attach handler mousedev to device input70, error: -5 [ 730.702323][ T4661] bcm5974 5-1:0.0: could not read from device [ 730.721717][T16192] usb 5-1: USB disconnect, device number 50 [ 730.773779][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 730.821457][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 730.857726][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 730.892260][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 730.946090][ T5278] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 730.971505][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.014318][ T5278] usb 4-1: config 0 descriptor?? [ 731.044884][T17116] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 731.629492][T17010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 731.690039][ T5278] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 731.695220][T17010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 731.738274][T17010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 731.745349][ T5278] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 731.781460][ T5278] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 731.789150][ T5278] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 731.794948][T17010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 731.824974][ T5278] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 731.843850][ T5278] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 731.871135][ T5278] plantronics 0003:047F:FFFF.006B: No inputs registered, leaving [ 731.926843][ T5278] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 732.028135][ T5278] usb 4-1: USB disconnect, device number 58 [ 732.286003][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.330046][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.357016][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.384194][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.409604][T17010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.422045][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.441414][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.467377][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.496096][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.521245][T17010] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.526558][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.562865][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.570678][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.582766][ T5343] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 732.610308][T16346] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.617762][T16346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.627901][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.654242][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.674072][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.683450][T16346] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.690843][T16346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.709522][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.734650][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.755629][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.800722][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.830253][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.855238][ T5343] usb 3-1: config 0 has no interfaces? [ 732.860832][ T5343] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 732.903020][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.910783][ T5276] hid-generic 0000:1000000:0000.006C: unknown main item tag 0x0 [ 732.925181][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.974691][ T5276] hid-generic 0000:1000000:0000.006C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 732.986857][ T5343] usb 3-1: config 0 descriptor?? [ 733.283124][ T5343] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 733.342500][T17148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5087'. [ 733.523181][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.527148][T16192] usb 3-1: USB disconnect, device number 57 [ 733.546154][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.602291][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 733.643897][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 733.685743][ T5343] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 733.716192][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.747794][ T5343] usb 5-1: config 0 descriptor?? [ 733.853148][T17010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.136108][T16192] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 734.141067][T17010] veth0_vlan: entered promiscuous mode [ 734.219089][T17010] veth1_vlan: entered promiscuous mode [ 734.267169][ T5343] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 734.303739][ T5343] plantronics 0003:047F:FFFF.006D: No inputs registered, leaving [ 734.345344][ T5343] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 734.377682][T16192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.411097][T17010] veth0_macvtap: entered promiscuous mode [ 734.441500][T16192] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 734.464083][T17010] veth1_macvtap: entered promiscuous mode [ 734.531294][T16192] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 734.540456][T16192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.576336][T16192] usb 4-1: config 0 descriptor?? [ 734.578467][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.645791][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.692611][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.723683][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.764032][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.769456][ T5277] usb 5-1: USB disconnect, device number 51 [ 734.795086][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.852192][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.883725][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.921444][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.951432][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.991940][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.017946][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.062477][T17010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.075830][T17165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5094'. [ 735.120282][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.121035][T16192] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 735.160639][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.192936][T16192] plantronics 0003:047F:FFFF.006E: No inputs registered, leaving [ 735.194346][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.261575][T16192] plantronics 0003:047F:FFFF.006E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 735.276520][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.307299][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.358335][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.401615][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.422707][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.441437][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.484417][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.501345][T17010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.544290][T17010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.563872][T17010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.608012][T17010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.652980][T17010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.700420][T17010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.722594][T17010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.955445][ T5343] usb 4-1: USB disconnect, device number 59 [ 736.291806][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.331492][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.525766][T16212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.574851][T16212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.354333][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.391373][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.433090][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.455207][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.482858][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.507822][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.536053][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.564684][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.592609][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.616609][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.633072][ T1186] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 737.661387][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.713161][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.720647][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.748721][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.791273][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.822263][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.863464][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.893919][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.909172][ T1186] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 737.923235][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.941424][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.961494][ T1186] usb 4-1: Product: syz [ 737.965843][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 737.982409][ T1186] usb 4-1: Manufacturer: syz [ 737.993114][ T1186] usb 4-1: SerialNumber: syz [ 738.008483][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 738.037517][ T5343] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 738.065041][ T1186] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 738.086267][ T5343] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 738.103837][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.232329][ T5276] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 738.445930][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.797221][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.059783][ T30] audit: type=1400 audit(1725599008.650:923): avc: denied { add_name } for pid=17206 comm="syz.2.5113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 740.145097][T17210] o2cb: This node has not been configured. [ 740.192028][ T30] audit: type=1400 audit(1725599008.760:924): avc: denied { create } for pid=17206 comm="syz.2.5113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 740.283037][T17210] o2cb: Cluster check failed. Fix errors before retrying. [ 740.344996][ T30] audit: type=1400 audit(1725599008.760:925): avc: denied { associate } for pid=17206 comm="syz.2.5113" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 740.368600][T17210] (syz.2.5113,17210,1):user_dlm_register:674 ERROR: status = -22 [ 740.544882][T17210] (syz.2.5113,17210,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 740.890127][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5116'. [ 741.743160][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 741.759191][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 741.782678][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 741.802855][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 741.811613][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 741.834391][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.923415][T17012] Bluetooth: hci2: command tx timeout [ 746.013308][T17012] Bluetooth: hci2: command tx timeout [ 748.105242][ T5228] Bluetooth: hci2: command tx timeout [ 749.444518][T17012] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 749.459879][T17012] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 749.470035][T17012] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 749.479228][T17012] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 749.489512][T17012] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 749.511650][T17012] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 750.183327][T17012] Bluetooth: hci2: command tx timeout [ 751.611576][T17012] Bluetooth: hci8: command tx timeout [ 753.357755][T11364] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 753.371754][T11364] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 753.402100][T11364] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 753.428483][T11364] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 753.437827][T11364] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 753.448360][T11364] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 753.694321][T11364] Bluetooth: hci8: command tx timeout [ 753.922014][T11364] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 753.936887][T11364] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 753.962243][T11364] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 753.971527][T11364] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 753.979992][T11364] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 753.989188][T11364] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 754.475767][ T5228] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 754.491129][ T5228] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 754.501569][ T5228] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 754.510831][ T5228] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 754.531673][ T5228] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 754.541402][ T5228] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 755.143440][ T5228] Bluetooth: hci7: command 0x0406 tx timeout [ 755.545450][ T5228] Bluetooth: hci9: command tx timeout [ 755.773069][ T5228] Bluetooth: hci8: command tx timeout [ 756.093874][ T5228] Bluetooth: hci10: command tx timeout [ 756.653284][ T5228] Bluetooth: hci11: command tx timeout [ 757.611610][ T5228] Bluetooth: hci9: command tx timeout [ 757.871555][ T5228] Bluetooth: hci8: command tx timeout [ 758.174836][ T5228] Bluetooth: hci10: command tx timeout [ 758.733313][ T5228] Bluetooth: hci11: command tx timeout [ 759.691404][ T5228] Bluetooth: hci9: command tx timeout [ 760.252549][ T5228] Bluetooth: hci10: command tx timeout [ 760.811962][ T5228] Bluetooth: hci11: command tx timeout [ 761.773225][ T5228] Bluetooth: hci9: command tx timeout [ 762.345681][ T5228] Bluetooth: hci10: command tx timeout [ 762.892140][ T5228] Bluetooth: hci11: command tx timeout [ 765.852427][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2656 jiffies s: 24749 root: 0x1/. [ 765.891983][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 765.899199][ T19] Sending NMI from CPU 1 to CPUs 0: [ 765.905302][ C0] NMI backtrace for cpu 0 [ 765.905319][ C0] CPU: 0 UID: 0 PID: 1186 Comm: kworker/0:2 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 765.905351][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 765.905370][ C0] Workqueue: usb_hub_wq hub_event [ 765.905401][ C0] RIP: 0010:unwind_next_frame+0x1b26/0x23a0 [ 765.905432][ C0] Code: b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 84 e0 f5 ff ff 4c 89 ef e8 d9 87 ad 00 e9 d3 f5 ff ff e8 2f c6 4e 00 49 8d 7c 24 02 <48> ba 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 0f b6 0c 10 49 [ 765.905462][ C0] RSP: 0018:ffffc900000065f8 EFLAGS: 00000006 [ 765.905482][ C0] RAX: 0000000000010302 RBX: ffffc90000006678 RCX: ffffffff813cedbe [ 765.905500][ C0] RDX: ffff888028713c00 RSI: ffffffff813cfa21 RDI: ffffffff91569154 [ 765.905519][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000004 [ 765.905535][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff91569152 [ 765.905551][ C0] R13: ffffc90004697988 R14: 0000000000000001 R15: 0000000000000001 [ 765.905568][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 765.905594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.905613][ C0] CR2: 000000110c361917 CR3: 000000006be66000 CR4: 00000000003506f0 [ 765.905630][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.905647][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 765.905663][ C0] Call Trace: [ 765.905671][ C0] [ 765.905681][ C0] ? show_regs+0x8c/0xa0 [ 765.905723][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 765.905763][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 765.905801][ C0] ? nmi_handle+0x1a9/0x5c0 [ 765.905826][ C0] ? unwind_next_frame+0x1b26/0x23a0 [ 765.905853][ C0] ? default_do_nmi+0x6a/0x160 [ 765.905883][ C0] ? exc_nmi+0x170/0x1e0 [ 765.905911][ C0] ? end_repeat_nmi+0xf/0x53 [ 765.905944][ C0] ? unwind_next_frame+0xebe/0x23a0 [ 765.905970][ C0] ? unwind_next_frame+0x1b21/0x23a0 [ 765.905996][ C0] ? unwind_next_frame+0x1b26/0x23a0 [ 765.906024][ C0] ? unwind_next_frame+0x1b26/0x23a0 [ 765.906052][ C0] ? unwind_next_frame+0x1b26/0x23a0 [ 765.906078][ C0] [ 765.906086][ C0] [ 765.906096][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 765.906139][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 765.906176][ C0] arch_stack_walk+0x100/0x170 [ 765.906209][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.906243][ C0] stack_trace_save+0x95/0xd0 [ 765.906276][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 765.906311][ C0] ? find_held_lock+0x2d/0x110 [ 765.906344][ C0] kasan_save_stack+0x33/0x60 [ 765.906383][ C0] ? kasan_save_stack+0x33/0x60 [ 765.906421][ C0] ? kasan_save_track+0x14/0x30 [ 765.906458][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 765.906494][ C0] ? dummy_urb_enqueue+0x8d/0x8a0 [ 765.906527][ C0] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 765.906562][ C0] ? usb_submit_urb+0x87c/0x1730 [ 765.906601][ C0] ? ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 765.906627][ C0] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 765.906662][ C0] ? usb_hcd_giveback_urb+0x396/0x450 [ 765.906696][ C0] ? dummy_timer+0x17c3/0x38d0 [ 765.906728][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 765.906755][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 765.906784][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 765.906810][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 765.906845][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.906874][ C0] ? unwind_next_frame+0x289/0x23a0 [ 765.906899][ C0] ? arch_stack_walk+0x100/0x170 [ 765.906926][ C0] ? stack_trace_save+0x95/0xd0 [ 765.906957][ C0] ? kasan_save_stack+0x33/0x60 [ 765.906994][ C0] ? __kasan_record_aux_stack+0xba/0xd0 [ 765.907025][ C0] ? __call_rcu_common.constprop.0+0x9a/0x790 [ 765.907062][ C0] ? dst_release+0x1b5/0x1e0 [ 765.907090][ C0] ? __dev_queue_xmit+0x2341/0x4300 [ 765.907126][ C0] ? ip6_finish_output2+0x1184/0x1a50 [ 765.907163][ C0] ? ip6_finish_output+0x3f9/0x1300 [ 765.907200][ C0] ? ip6_output+0x1f8/0x540 [ 765.907235][ C0] ? ndisc_send_skb+0xa2d/0x1c30 [ 765.907271][ C0] ? ndisc_send_rs+0x129/0x670 [ 765.907308][ C0] ? addrconf_rs_timer+0x407/0x840 [ 765.907342][ C0] ? call_timer_fn+0x1a0/0x610 [ 765.907380][ C0] ? __run_timers+0x74b/0xaf0 [ 765.907417][ C0] ? run_timer_base+0x111/0x190 [ 765.907454][ C0] ? run_timer_softirq+0x1a/0x40 [ 765.907492][ C0] ? handle_softirqs+0x216/0x8f0 [ 765.907521][ C0] ? irq_exit_rcu+0xbb/0x120 [ 765.907548][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 765.907599][ C0] kasan_save_track+0x14/0x30 [ 765.907638][ C0] __kasan_kmalloc+0xaa/0xb0 [ 765.907679][ C0] dummy_urb_enqueue+0x8d/0x8a0 [ 765.907713][ C0] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 765.907755][ C0] usb_hcd_submit_urb+0x2d1/0x2090 [ 765.907797][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 765.907833][ C0] ? lock_acquire+0x1b1/0x560 [ 765.907875][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 765.907913][ C0] ? find_held_lock+0x2d/0x110 [ 765.907946][ C0] ? ath9k_hif_usb_reg_in_cb+0x487/0x690 [ 765.907977][ C0] usb_submit_urb+0x87c/0x1730 [ 765.908021][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 765.908052][ C0] ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 765.908083][ C0] __usb_hcd_giveback_urb+0x389/0x6e0 [ 765.908127][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 765.908167][ C0] dummy_timer+0x17c3/0x38d0 [ 765.908205][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 765.908253][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 765.908299][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 765.908328][ C0] ? __pfx_lock_release+0x10/0x10 [ 765.908382][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 765.908416][ C0] ? timerqueue_del+0x83/0x150 [ 765.908454][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 765.908486][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 765.908520][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 765.908550][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 765.908593][ C0] hrtimer_interrupt+0x31b/0x800 [ 765.908632][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 765.908660][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 765.908696][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.908725][ C0] RIP: 0010:unwind_next_frame+0x289/0x23a0 [ 765.908753][ C0] Code: 91 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 4f 9f ad 00 42 8b 04 b5 6c 70 5d 91 <41> 83 c5 01 4a 8d 3c ad 6c 70 5d 91 48 89 fa 48 c1 ea 03 89 44 24 [ 765.908778][ C0] RSP: 0018:ffffc900000071a0 EFLAGS: 00000246 [ 765.908797][ C0] RAX: 000000000011dd99 RBX: ffffc90000007220 RCX: ffffffff813ce13d [ 765.908816][ C0] RDX: 0000000000000000 RSI: ffffffff813ce14b RDI: ffffffff91749b30 [ 765.908833][ C0] RBP: 0000000000000001 R08: 0000000000000004 R09: 000000000005cab1 [ 765.908849][ C0] R10: 00000000000a4000 R11: 0000000000000000 R12: ffffffff86cab159 [ 765.908866][ C0] R13: 000000000005cab1 R14: 000000000005cab1 R15: ffffc90000007255 [ 765.908885][ C0] ? hub_event+0x199/0x4e10 [ 765.908915][ C0] ? unwind_next_frame+0x23d/0x23a0 [ 765.908941][ C0] ? unwind_next_frame+0x24b/0x23a0 [ 765.908971][ C0] ? hub_event+0x19a/0x4e10 [ 765.909001][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 765.909035][ C0] arch_stack_walk+0x100/0x170 [ 765.909068][ C0] ? hub_event+0x19a/0x4e10 [ 765.909099][ C0] stack_trace_save+0x95/0xd0 [ 765.909135][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 765.909174][ C0] kasan_save_stack+0x33/0x60 [ 765.909211][ C0] ? kasan_save_stack+0x33/0x60 [ 765.909247][ C0] ? __kasan_record_aux_stack+0xba/0xd0 [ 765.909277][ C0] ? __call_rcu_common.constprop.0+0x9a/0x790 [ 765.909313][ C0] ? dst_release+0x1b5/0x1e0 [ 765.909340][ C0] ? __dev_queue_xmit+0x2341/0x4300 [ 765.909371][ C0] ? ip6_finish_output2+0x1184/0x1a50 [ 765.909407][ C0] ? ip6_finish_output+0x3f9/0x1300 [ 765.909443][ C0] ? ip6_output+0x1f8/0x540 [ 765.909477][ C0] ? ndisc_send_skb+0xa2d/0x1c30 [ 765.909532][ C0] ? ndisc_send_rs+0x129/0x670 [ 765.909569][ C0] ? addrconf_rs_timer+0x407/0x840 [ 765.909603][ C0] ? call_timer_fn+0x1a0/0x610 [ 765.909640][ C0] ? __run_timers+0x74b/0xaf0 [ 765.909677][ C0] ? run_timer_base+0x111/0x190 [ 765.909715][ C0] ? run_timer_softirq+0x1a/0x40 [ 765.909752][ C0] ? handle_softirqs+0x216/0x8f0 [ 765.909780][ C0] ? irq_exit_rcu+0xbb/0x120 [ 765.909807][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 765.909842][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.909872][ C0] ? kcov_remote_start+0x3df/0x6e0 [ 765.909896][ C0] ? hub_event+0x19a/0x4e10 [ 765.909948][ C0] __kasan_record_aux_stack+0xba/0xd0 [ 765.909981][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 765.910012][ C0] __call_rcu_common.constprop.0+0x9a/0x790 [ 765.910054][ C0] dst_release+0x1b5/0x1e0 [ 765.910084][ C0] __dev_queue_xmit+0x2341/0x4300 [ 765.910120][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 765.910168][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 765.910202][ C0] ? __pfx_hlock_class+0x10/0x10 [ 765.910233][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 765.910274][ C0] ? __pfx_mark_lock+0x10/0x10 [ 765.910314][ C0] ? lock_acquire+0x1b1/0x560 [ 765.910352][ C0] ? find_held_lock+0x2d/0x110 [ 765.910391][ C0] ? mark_held_locks+0x9f/0xe0 [ 765.910434][ C0] ip6_finish_output2+0x1184/0x1a50 [ 765.910480][ C0] ip6_finish_output+0x3f9/0x1300 [ 765.910523][ C0] ip6_output+0x1f8/0x540 [ 765.910563][ C0] ? __pfx_ip6_output+0x10/0x10 [ 765.910599][ C0] ndisc_send_skb+0xa2d/0x1c30 [ 765.910641][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 765.910682][ C0] ? __pfx_dst_output+0x10/0x10 [ 765.910718][ C0] ? __alloc_skb+0x1fe/0x380 [ 765.910764][ C0] ? __asan_memcpy+0x3c/0x60 [ 765.910803][ C0] ndisc_send_rs+0x129/0x670 [ 765.910846][ C0] addrconf_rs_timer+0x407/0x840 [ 765.910886][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 765.910929][ C0] call_timer_fn+0x1a0/0x610 [ 765.910967][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 765.911004][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 765.911041][ C0] ? __pfx_lock_release+0x10/0x10 [ 765.911083][ C0] ? mark_held_locks+0x9f/0xe0 [ 765.911119][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 765.911162][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 765.911204][ C0] __run_timers+0x74b/0xaf0 [ 765.911255][ C0] ? __pfx___run_timers+0x10/0x10 [ 765.911301][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 765.911357][ C0] run_timer_base+0x111/0x190 [ 765.911401][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 765.911448][ C0] run_timer_softirq+0x1a/0x40 [ 765.911487][ C0] handle_softirqs+0x216/0x8f0 [ 765.911521][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 765.911554][ C0] irq_exit_rcu+0xbb/0x120 [ 765.911583][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 765.911620][ C0] [ 765.911628][ C0] [ 765.911638][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.911668][ C0] RIP: 0010:kcov_remote_start+0x3df/0x6e0 [ 765.911696][ C0] Code: 90 e8 15 cc 2a 03 e9 4b ff ff ff e8 eb 35 07 00 e9 ba fc ff ff e8 b1 37 07 00 9c 58 f6 c4 02 0f 85 50 02 00 00 fb 48 83 c4 18 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc be 02 00 00 00 4c 89 [ 765.911723][ C0] RSP: 0018:ffffc90004697a38 EFLAGS: 00000282 [ 765.911743][ C0] RAX: 0000000000000002 RBX: ffff8880b882d648 RCX: 1ffffffff2d2a393 [ 765.911762][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0f9c0 [ 765.911780][ C0] RBP: ffff888028713c00 R08: 0000000000000001 R09: fffffbfff2d248ee [ 765.911798][ C0] R10: ffffffff96924777 R11: 0000000000000000 R12: ffff888066c8c500 [ 765.911815][ C0] R13: 0000000000000200 R14: 0000000000100000 R15: ffffc9001535c000 [ 765.911848][ C0] hub_event+0x19a/0x4e10 [ 765.911876][ C0] ? hlock_class+0x4e/0x130 [ 765.911906][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 765.911954][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 765.911995][ C0] ? find_held_lock+0x2d/0x110 [ 765.912030][ C0] ? __pfx_hub_event+0x10/0x10 [ 765.912061][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 765.912100][ C0] ? __pfx_lock_release+0x10/0x10 [ 765.912156][ C0] process_one_work+0x9c5/0x1b40 [ 765.912206][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 765.912245][ C0] ? __pfx_process_one_work+0x10/0x10 [ 765.912293][ C0] ? assign_work+0x1a0/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 765.912334][ C0] worker_thread+0x6c8/0xed0 [ 765.912387][ C0] ? __pfx_worker_thread+0x10/0x10 [ 765.912429][ C0] kthread+0x2c1/0x3a0 [ 765.912459][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 765.912495][ C0] ? __pfx_kthread+0x10/0x10 [ 765.912526][ C0] ret_from_fork+0x45/0x80 [ 765.912566][ C0] ? __pfx_kthread+0x10/0x10 [ 765.912597][ C0] ret_from_fork_asm+0x1a/0x30 [ 765.912647][ C0]