last executing test programs: 38.686499808s ago: executing program 1 (id=2547): socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 38.452516757s ago: executing program 1 (id=2549): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030101001e000000000000000000000800010001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a01080000000000000000010000000900030073797a32000000002c0004800800024017bef2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x128}}, 0x0) 37.099785018s ago: executing program 1 (id=2552): add_key$keyring(0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0xe) 36.203451481s ago: executing program 0 (id=2314): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_clone(0x2008000, 0x0, 0x47, 0x0, 0x0, 0x0) ptrace(0x4206, r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x87, 0x2, 0x2, 0x7, 0x0, [@mcast1]}, 0x18) 35.396440688s ago: executing program 1 (id=2558): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 34.849412837s ago: executing program 1 (id=2561): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = syz_io_uring_setup(0xee8, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd, @flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x792b, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001540)=[{&(0x7f0000000540)="90c7517294", 0x5}], 0x1, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) 33.259299463s ago: executing program 0 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x94002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r5, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) dup3(r6, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x4c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 32.971477694s ago: executing program 1 (id=2569): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200de00ba8d7061966c86dd60bc426000082c"], 0x0) 29.114615951s ago: executing program 0 (id=2575): socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 20.894167306s ago: executing program 0 (id=2589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 20.210436146s ago: executing program 0 (id=2590): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_clone(0x2008000, 0x0, 0x47, 0x0, 0x0, 0x0) ptrace(0x4206, r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x87, 0x2, 0x2, 0x7, 0x0, [@mcast1]}, 0x18) 17.373186726s ago: executing program 0 (id=2595): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(&(0x7f00000000c0)='./bus\x00', 0x140) 13.8059691s ago: executing program 3 (id=2602): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2035) 12.074934402s ago: executing program 4 (id=2604): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_clone(0x2008000, 0x0, 0x47, 0x0, 0x0, 0x0) ptrace(0x4206, r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x87, 0x2, 0x2, 0x7, 0x0, [@mcast1]}, 0x18) 9.61039339s ago: executing program 4 (id=2606): ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000001e80)={0x0, 0x3, 0xfffffff9, 0x6, 0x3, [], [0x1, 0x5, 0x0, 0x9], [0xfffffa9a, 0x3, 0x29, 0x1000], [0x2, 0x5, 0x7, 0x9]}) 9.373813394s ago: executing program 2 (id=2607): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$phonet_pipe(0x23, 0x5, 0x2) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x5, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.573750674s ago: executing program 2 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x94002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 6.722849102s ago: executing program 3 (id=2610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 6.463537335s ago: executing program 2 (id=2611): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r1) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) ioctl$CEC_DQEVENT(r5, 0x4008af14, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) 6.162982811s ago: executing program 2 (id=2612): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x5a}, 0x20) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, 0x0, &(0x7f0000000140)) close(r7) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r7, 0x0, 0x4ffe6, 0x0) 5.972387725s ago: executing program 4 (id=2613): getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0xfeff, 0xf6, 0x10000, 0x8, 0x5}, &(0x7f00000001c0)=0x14) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x85, &(0x7f00000000c0)={r11, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001c00)=[{&(0x7f0000000240)=@in={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)="d3fca2b38c21607e939e0e96d3c7d5d7ab1232712d176455475b389171ad43e100f79d18e4a9ee62e298d0d187ce0e71d34bd3d734339685cd01fc4043bf0cd6b1eb7a0e9ee74b222315b7c68ab0887b136a226647a1901a8811010ad7777c7c68e4afb14b449305de888c214c991854b567ac21e08b66861167cc16bb4c77", 0x7f}, {&(0x7f0000000380)="d8c9e2caa7522dc73b12f5a122d15c2f54a0e83c014ef5fd2f7b74e4105a4607825c2bdc113e058437c9939cec555fa5bc83a5b70378f2f036e92c839a0bc9abfa1568fc1a5f2259820ff0f5a061103a7bb3622720c6f54d433db65354e483eec1f490", 0x63}, {&(0x7f0000000400)="12a1fd829edd13", 0x7}], 0x3, 0x0, 0x0, 0x40}, {&(0x7f00000004c0)=@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000600)="cdfaf080d435921aa0924aa71ff936ae775286b571342e7aefcd40d0710b108979a5ca7849e348db6c733961edc056aee2eb0af9ec823f2501b65b466b1f669381d18863c1d80818a3b9f5", 0x4b}], 0x1, &(0x7f0000000700)=[@dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x3f, 0xfc4, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}], 0x80, 0x1}, {&(0x7f0000000540)=@in6={0xa, 0x4e24, 0xffff6f78, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x35ef}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x16840}, {&(0x7f0000000d80)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000c0}], 0x4, 0x8000) syz_open_dev$vim2m(&(0x7f0000006400), 0x80000000, 0x2) 4.706326914s ago: executing program 3 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x94002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000800)={'vlan0\x00', @local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x4c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 3.553381102s ago: executing program 2 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_clone(0x2008000, 0x0, 0x47, 0x0, 0x0, 0x0) ptrace(0x4206, r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x87, 0x2, 0x2, 0x7, 0x0, [@mcast1]}, 0x18) 3.513213853s ago: executing program 3 (id=2616): pipe2(&(0x7f0000000400), 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x20084, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x10000, 0x4000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x1a1200, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000033a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r5, &(0x7f0000000540)=ANY=[], 0x78) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x400013b, 0x0, 0x0) 2.203464787s ago: executing program 4 (id=2617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) futex(&(0x7f0000004000), 0x5, 0x2, 0x0, &(0x7f0000004000), 0x82020000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) futex(&(0x7f0000004000), 0x7, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x18) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="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"]) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0xfffffffd}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 592.670995ms ago: executing program 2 (id=2618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0x2b, "5e6424818327b2369deca65eb21f68f937148585381b7e38a13f545b88a5fa593c0feb01593641f5309943"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xfff2}, &(0x7f0000000600)={0x40, 0x9, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, "3487"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x697}, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 586.680718ms ago: executing program 4 (id=2619): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) preadv(r0, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030101001e000000000000000000000800010001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a01080000000000000000010000000900030073797a32000000002c0004800800024017bef2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x128}}, 0x0) 451.494506ms ago: executing program 3 (id=2620): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r1) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) ioctl$CEC_DQEVENT(r5, 0x4008af14, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) 92.440885ms ago: executing program 4 (id=2621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=2622): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/40, 0x28}, {0x0}, {&(0x7f0000000840)=""/56, 0x38}, {&(0x7f0000000880)=""/204, 0xcc}], 0x4}, 0x120) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): set index 0 as target [ 1862.702307][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.725980][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1862.744672][T17096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1862.752281][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1862.785520][ T47] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1862.794743][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.842228][T17096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1862.857217][ T47] usb 3-1: config 0 descriptor?? [ 1862.903657][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.911011][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.001046][ T3860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.008497][ T3860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.299371][ T47] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 1863.357577][ T47] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1863.834302][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.968861][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 1863.980428][T17096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1864.073889][T17169] dummy0: entered promiscuous mode [ 1864.119817][T17168] dummy0: left promiscuous mode [ 1864.208873][T13109] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1864.221476][T17096] veth0_vlan: entered promiscuous mode [ 1864.282603][T17096] veth1_vlan: entered promiscuous mode [ 1864.418863][T17096] veth0_macvtap: entered promiscuous mode [ 1864.443416][T13109] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1864.461058][T17096] veth1_macvtap: entered promiscuous mode [ 1864.472543][T13109] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1864.503447][T13109] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1864.535510][T13109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1864.567393][T13109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1864.600442][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1864.622738][T15972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1864.636594][T15972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1864.637801][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.653248][T13109] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1864.663129][T15972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1864.672477][T13109] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1864.676184][T17100] syz.4.1980 (17100): drop_caches: 1 [ 1864.681279][T13109] usb 2-1: Product: syz [ 1864.691428][T15972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1864.698961][T13109] usb 2-1: Manufacturer: syz [ 1864.706551][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1864.717452][T15972] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1864.728438][T15972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1864.746429][T13109] cdc_wdm 2-1:1.0: skipping garbage [ 1864.757610][T13109] cdc_wdm 2-1:1.0: skipping garbage [ 1864.800973][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.811820][T13109] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1864.819117][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1864.830864][T13109] cdc_wdm 2-1:1.0: Unknown control protocol [ 1864.865029][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.910414][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1864.927412][ T9] usb 3-1: reset high-speed USB device number 40 using dummy_hcd [ 1864.964416][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.990469][ T5293] usb 2-1: USB disconnect, device number 51 [ 1865.011057][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1865.021713][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.043672][T17096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1865.130440][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.161824][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.176880][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.188485][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.198716][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.209421][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.224113][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.238300][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.248699][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.263095][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.289706][T17096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1865.427619][T17096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.495710][T17096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.515083][T17096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.567335][T17096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.704686][ T9] usb 3-1: device descriptor read/64, error -71 [ 1866.040913][ T9] usb 3-1: reset high-speed USB device number 40 using dummy_hcd [ 1866.104206][ T9] usb 3-1: device reset changed ep0 maxpacket size! [ 1866.155302][T14265] usb 3-1: USB disconnect, device number 40 [ 1866.163467][T10275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1866.172434][T10275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.198772][ T29] audit: type=1400 audit(2000000591.400:566): avc: denied { setopt } for pid=17185 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1866.262163][T17186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2006'. [ 1866.525139][T14265] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1866.745541][T14265] usb 3-1: Using ep0 maxpacket: 16 [ 1866.780664][T14265] usb 3-1: config 0 has an invalid interface number: 57 but max is 0 [ 1866.799123][T14265] usb 3-1: config 0 has no interface number 0 [ 1866.812972][T14265] usb 3-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1866.835671][T15972] Bluetooth: hci5: command tx timeout [ 1866.901955][T14265] usb 3-1: config 0 interface 57 has no altsetting 0 [ 1866.931883][T14265] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1866.980985][T14265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.018341][T14265] usb 3-1: config 0 descriptor?? [ 1867.221300][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.075979][T10275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.083870][T10275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.504821][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.915294][T15972] Bluetooth: hci5: command tx timeout [ 1869.048163][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.376315][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.495476][T14265] usb 3-1: string descriptor 0 read error: -71 [ 1869.504444][T14265] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1869.583362][T14265] gspca_sonixj: reg_w1 err -71 [ 1869.588658][T14265] sonixj 3-1:0.57: probe with driver sonixj failed with error -71 [ 1869.647298][T14265] usb 3-1: USB disconnect, device number 41 [ 1869.653745][T17173] chnl_net:caif_netlink_parms(): no params data found [ 1870.386039][T17223] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1870.990995][T15972] Bluetooth: hci5: command tx timeout [ 1872.336618][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.364683][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.400816][T17173] bridge_slave_0: entered allmulticast mode [ 1872.435808][T17173] bridge_slave_0: entered promiscuous mode [ 1872.531807][T17209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1872.574123][T17209] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1872.657334][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.675050][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.695298][T17173] bridge_slave_1: entered allmulticast mode [ 1872.703935][T17173] bridge_slave_1: entered promiscuous mode [ 1872.872244][ T35] gretap0: left allmulticast mode [ 1872.881827][ T35] gretap0: left promiscuous mode [ 1872.900933][ T35] bridge0: port 4(gretap0) entered disabled state [ 1872.950401][T17234] input: syz0 as /devices/virtual/input/input27 [ 1872.975502][ T35] macsec0: left allmulticast mode [ 1872.980624][ T35] veth1_macvtap: left allmulticast mode [ 1872.987575][ T35] macsec0: left promiscuous mode [ 1873.007989][ T35] bridge0: port 3(macsec0) entered disabled state [ 1873.055399][T15972] Bluetooth: hci5: command tx timeout [ 1873.096102][ T35] bridge_slave_1: left allmulticast mode [ 1873.101832][ T35] bridge_slave_1: left promiscuous mode [ 1873.152611][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.194175][ T35] bridge_slave_0: left allmulticast mode [ 1873.211350][ T35] bridge_slave_0: left promiscuous mode [ 1873.230012][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.755336][ T29] audit: type=1107 audit(2000000598.810:567): pid=17237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1875.495096][T10744] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1875.735070][T10744] usb 4-1: Using ep0 maxpacket: 16 [ 1875.748257][T10744] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 1875.782833][T10744] usb 4-1: config 0 has no interface number 0 [ 1875.819085][T10744] usb 4-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1875.865059][T10744] usb 4-1: config 0 interface 57 has no altsetting 0 [ 1875.894976][T10744] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1875.915532][T10744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.941901][T10744] usb 4-1: config 0 descriptor?? [ 1876.380602][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.434178][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.478417][ T35] bond0 (unregistering): Released all slaves [ 1877.068829][T17209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1877.094021][T17209] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1877.253762][T17173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.296620][T17209] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1877.325607][T17209] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1877.334619][T17173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.812922][T17173] team0: Port device team_slave_0 added [ 1877.989203][T17173] team0: Port device team_slave_1 added [ 1878.020084][T13109] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1878.262527][T13109] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1878.285129][T10744] usb 4-1: string descriptor 0 read error: -71 [ 1878.299394][T13109] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 1878.314625][T10744] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1878.335280][T13109] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 1878.355251][T10744] gspca_sonixj: reg_w1 err -71 [ 1878.360229][T10744] sonixj 4-1:0.57: probe with driver sonixj failed with error -71 [ 1878.369041][T13109] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 1878.384622][T17173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.406479][T10744] usb 4-1: USB disconnect, device number 29 [ 1878.413923][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 1878.420242][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.450749][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1878.450802][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1878.452565][T13109] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1878.513788][T17173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.554920][T13109] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 1878.562482][T13109] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 1878.585321][T13109] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 1878.629989][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 1878.665604][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1878.675324][T17173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.690340][T17209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1878.706778][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.716778][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1878.751176][T17209] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1878.786204][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.810432][T13109] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1878.839439][T13109] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 1878.864751][T13109] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 1879.152227][T13109] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 1879.176694][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 1879.188342][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1879.200044][T13109] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1879.975781][T13109] usb 2-1: string descriptor 0 read error: -22 [ 1880.004752][T13109] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1880.130566][T13109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.155340][T17209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1880.191379][T17209] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1880.207016][T13109] adutux 2-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 1880.387979][T17209] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1880.394051][T17209] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1880.505984][T10402] usb 2-1: USB disconnect, device number 52 [ 1880.532754][T17173] hsr_slave_0: entered promiscuous mode [ 1880.602028][T17173] hsr_slave_1: entered promiscuous mode [ 1880.660684][T17173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1880.685323][T17173] Cannot create hsr debugfs directory [ 1880.965951][ T9383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1880.980179][ T9383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1881.005389][ T9383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1881.014115][ T9383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1881.029770][ T9383] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1881.038736][ T9383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1881.058164][T15972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1881.089899][T15972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1881.117561][T15972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1881.126784][T15972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1881.137085][T15972] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1881.144757][T15972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1881.488255][T15972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1881.500469][T15972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1881.518305][T15972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1881.528287][T15972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1881.537925][T15972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1881.545757][T15972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1883.215750][ T9383] Bluetooth: hci3: command tx timeout [ 1883.453306][ T35] hsr_slave_0: left promiscuous mode [ 1883.461914][ T35] hsr_slave_1: left promiscuous mode [ 1883.486913][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1883.494434][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.522514][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1883.531370][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.615360][ T35] veth1_macvtap: left promiscuous mode [ 1883.625543][ T9383] Bluetooth: hci1: command tx timeout [ 1883.628150][ T35] veth1_vlan: left promiscuous mode [ 1883.660264][ T35] veth0_vlan: left promiscuous mode [ 1884.932861][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1885.053404][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1885.295597][ T9383] Bluetooth: hci3: command tx timeout [ 1885.703085][ T9383] Bluetooth: hci1: command tx timeout [ 1887.375833][ T9383] Bluetooth: hci3: command tx timeout [ 1887.775008][ T9383] Bluetooth: hci1: command tx timeout [ 1889.279416][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.307692][T10744] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1889.354514][T17253] chnl_net:caif_netlink_parms(): no params data found [ 1889.456327][ T9383] Bluetooth: hci3: command tx timeout [ 1889.505448][T10744] usb 2-1: Using ep0 maxpacket: 32 [ 1889.514982][T10744] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1889.544586][T10744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.568842][T10744] usb 2-1: config 0 descriptor?? [ 1889.587404][T10744] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1889.723595][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.855210][ T9383] Bluetooth: hci1: command tx timeout [ 1889.865124][T17282] chnl_net:caif_netlink_parms(): no params data found [ 1889.974224][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.335472][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.442358][T17173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1890.531579][T17173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1890.562423][T17173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1890.627036][T17253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.645373][T17253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.658735][T10744] gspca_sq930x: ucbus_write failed -71 [ 1890.664430][T10744] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1890.673035][T17253] bridge_slave_0: entered allmulticast mode [ 1890.693426][T17253] bridge_slave_0: entered promiscuous mode [ 1890.698097][T10744] usb 2-1: USB disconnect, device number 53 [ 1890.718784][T17253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.731829][T17253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.753162][T17253] bridge_slave_1: entered allmulticast mode [ 1890.762052][T17253] bridge_slave_1: entered promiscuous mode [ 1890.839239][T17173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1890.949840][T17253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.114248][T17253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.482973][T17253] team0: Port device team_slave_0 added [ 1891.524452][T17385] 9pnet_fd: Insufficient options for proto=fd [ 1891.663211][T17282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.685308][T17282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.692796][T17282] bridge_slave_0: entered allmulticast mode [ 1891.736544][T17282] bridge_slave_0: entered promiscuous mode [ 1891.774312][T17253] team0: Port device team_slave_1 added [ 1891.783261][ T29] audit: type=1400 audit(2000000616.970:568): avc: denied { read } for pid=17388 comm="syz.1.2042" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1891.866662][ T29] audit: type=1400 audit(2000000616.970:569): avc: denied { open } for pid=17388 comm="syz.1.2042" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1892.093022][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.153622][T17282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.175932][T17282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.204429][T17282] bridge_slave_1: entered allmulticast mode [ 1892.231627][T17282] bridge_slave_1: entered promiscuous mode [ 1892.391925][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.457707][T17253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.469935][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.497487][T17253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.548194][T17282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.565471][T17282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.677733][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.721308][T17253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.736303][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.830186][T17253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1894.089527][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.295706][T17282] team0: Port device team_slave_0 added [ 1894.327200][T17282] team0: Port device team_slave_1 added [ 1894.428331][T17253] hsr_slave_0: entered promiscuous mode [ 1894.445855][T17253] hsr_slave_1: entered promiscuous mode [ 1894.692723][T17282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1894.732528][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1894.805684][T17282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1894.828383][T17282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1894.846358][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1894.877157][T17282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1895.457410][T17282] hsr_slave_0: entered promiscuous mode [ 1895.468492][T17282] hsr_slave_1: entered promiscuous mode [ 1895.485767][T17282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1895.496189][T17282] Cannot create hsr debugfs directory [ 1895.625183][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1895.756443][T17173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.770194][ T35] bridge_slave_1: left allmulticast mode [ 1895.787437][ T35] bridge_slave_1: left promiscuous mode [ 1895.800596][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.823651][ T35] bridge_slave_0: left allmulticast mode [ 1895.829992][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1895.845788][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1895.864986][ T35] bridge_slave_0: left promiscuous mode [ 1895.870808][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.883628][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.912197][ T9] usb 2-1: config 0 descriptor?? [ 1895.921394][ T35] bridge_slave_1: left allmulticast mode [ 1895.950758][ T35] bridge_slave_1: left promiscuous mode [ 1895.970991][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1895.974548][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.009321][ T35] bridge_slave_0: left allmulticast mode [ 1896.016440][ T35] bridge_slave_0: left promiscuous mode [ 1896.022393][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.152373][T17442] 9pnet_fd: Insufficient options for proto=fd [ 1896.982745][ T9] gspca_sq930x: ucbus_write failed -71 [ 1896.994760][ T9] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1897.053881][ T9] usb 2-1: USB disconnect, device number 54 [ 1897.475203][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.489374][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.503597][ T35] bond0 (unregistering): Released all slaves [ 1897.782326][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.801825][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.819083][ T35] bond0 (unregistering): Released all slaves [ 1898.193745][T17173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1899.979007][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.986352][ T3098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1900.101687][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.109014][ T3098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.900977][ T35] hsr_slave_0: left promiscuous mode [ 1901.931672][ T35] hsr_slave_1: left promiscuous mode [ 1901.953176][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1901.996166][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1902.037695][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1902.075255][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1902.157771][ T35] hsr_slave_0: left promiscuous mode [ 1902.223412][ T35] hsr_slave_1: left promiscuous mode [ 1902.259692][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1902.281705][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1902.324419][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1902.342708][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1902.569713][ T35] veth1_macvtap: left promiscuous mode [ 1902.591754][ T35] veth0_macvtap: left promiscuous mode [ 1902.607148][ T35] veth1_vlan: left promiscuous mode [ 1902.619492][ T35] veth0_vlan: left promiscuous mode [ 1902.647825][ T35] veth1_macvtap: left promiscuous mode [ 1902.665215][ T35] veth0_macvtap: left promiscuous mode [ 1902.675313][ T35] veth1_vlan: left promiscuous mode [ 1902.697239][ T35] veth0_vlan: left promiscuous mode [ 1904.126728][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1904.202777][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1905.643867][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1905.711764][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1907.487744][T17253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1907.560220][T17253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1907.599211][T17253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1907.644440][T17253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1907.934702][T17173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.047359][T17282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1908.060134][T17282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1908.088127][T17282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1908.136088][T17282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1908.146705][ T35] IPVS: stop unused estimator thread 0... [ 1908.945779][T17253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1909.042679][T17253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1909.104090][T17282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1909.129582][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.136888][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1909.221792][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.229309][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1909.434449][T17282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1909.487085][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.494317][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1909.545017][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.552397][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1909.582458][T17173] veth0_vlan: entered promiscuous mode [ 1909.645783][T17173] veth1_vlan: entered promiscuous mode [ 1909.950872][T17173] veth0_macvtap: entered promiscuous mode [ 1909.999472][T17173] veth1_macvtap: entered promiscuous mode [ 1910.181989][T17173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1910.205935][T17173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1910.235072][T17173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1910.251462][T17173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1910.274283][T17173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1910.286047][T17173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1910.308993][T17173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1910.390711][T17173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1910.415355][T17173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1910.450445][T17173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1910.472081][T17173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1910.494660][T17173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1910.524944][T17173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1910.544741][T17173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1910.581001][T17173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.613523][T17173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.645006][T17173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.653826][T17173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.742551][T17253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1910.922477][T17282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.193136][T10275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.238431][T10275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.258418][T17253] veth0_vlan: entered promiscuous mode [ 1911.367412][ T3098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.388677][ T3098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.421216][T17253] veth1_vlan: entered promiscuous mode [ 1911.509065][T17282] veth0_vlan: entered promiscuous mode [ 1911.583808][T17282] veth1_vlan: entered promiscuous mode [ 1911.682614][T17253] veth0_macvtap: entered promiscuous mode [ 1911.747598][T17253] veth1_macvtap: entered promiscuous mode [ 1911.809447][T17282] veth0_macvtap: entered promiscuous mode [ 1911.840646][T17282] veth1_macvtap: entered promiscuous mode [ 1911.849910][ T29] audit: type=1400 audit(2000000637.050:570): avc: denied { write } for pid=17584 comm="syz.1.2076" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1911.869022][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1911.887182][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.916677][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1911.924977][ T29] audit: type=1400 audit(2000000637.100:571): avc: denied { map } for pid=17584 comm="syz.1.2076" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1911.937009][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.982674][ T29] audit: type=1400 audit(2000000637.100:572): avc: denied { execute } for pid=17584 comm="syz.1.2076" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1911.997256][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1912.022005][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.034411][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1912.045189][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.062492][T17253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1912.120930][ T29] audit: type=1400 audit(2000000637.290:573): avc: denied { ioctl } for pid=17586 comm="syz.4.2077" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1912.149825][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1912.164092][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.186425][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1912.197444][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.308539][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1912.393660][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.491967][T17253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1912.583998][T17253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.703738][T17253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1912.883973][T17253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.927750][T17253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.957534][T17253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.973286][T17253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.014340][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.053293][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.095488][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.126240][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.165511][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.176070][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.187486][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.198025][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.207945][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.218663][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.231483][T17282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.245335][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.256011][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.267233][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.277856][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.288779][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.300079][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.310038][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.320686][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.330738][T17282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.341401][T17282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.363637][T17282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.400120][T17282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.425375][T17282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.445134][T17282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.454385][T17282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.817197][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.843711][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.993167][ T3098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.027502][ T3098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.138631][ T6332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.157980][ T6332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.306926][T10275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.314970][T10275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1915.955258][ T5267] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1916.187517][ T5267] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.230374][ T5267] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1916.244319][ T5267] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1916.254270][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1916.283918][ T5267] usb 1-1: SerialNumber: syz [ 1916.320146][T17636] syzkaller1: entered promiscuous mode [ 1916.335435][T17636] syzkaller1: entered allmulticast mode [ 1916.999202][ T47] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1918.050228][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1918.859961][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1918.933179][ T47] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1918.944082][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.961678][ T47] usb 3-1: config 0 descriptor?? [ 1918.972685][ T5267] usb 1-1: 0:2 : does not exist [ 1919.079864][ T5267] usb 1-1: USB disconnect, device number 34 [ 1919.188345][ T47] usb 3-1: can't set config #0, error -71 [ 1919.265608][ T47] usb 3-1: USB disconnect, device number 42 [ 1919.440816][T17643] udevd[17643]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1919.592117][ T29] audit: type=1400 audit(2000000644.780:574): avc: denied { create } for pid=17641 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1919.823064][ T29] audit: type=1326 audit(2000000645.020:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fffd79e79 code=0x7fc00000 [ 1919.945477][ T47] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1920.148762][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 1920.160077][ T47] usb 2-1: config 255 has an invalid interface number: 122 but max is 0 [ 1920.179189][ T47] usb 2-1: config 255 has no interface number 0 [ 1920.205051][ T47] usb 2-1: config 255 interface 122 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 1920.237522][ T47] usb 2-1: config 255 interface 122 altsetting 68 bulk endpoint 0x8 has invalid maxpacket 32 [ 1920.271060][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.280324][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.304254][ T47] usb 2-1: config 255 interface 122 altsetting 68 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 1920.370310][ T47] usb 2-1: config 255 interface 122 altsetting 68 endpoint 0x8A has an invalid bInterval 126, changing to 10 [ 1920.389710][T15972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1920.405320][T15972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1920.414828][T15972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1920.429671][T15972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1920.440855][T15972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1920.448917][T15972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1920.462280][ T7848] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1920.518176][ T47] usb 2-1: config 255 interface 122 altsetting 68 endpoint 0x8A has invalid maxpacket 58470, setting to 1024 [ 1920.543023][ T47] usb 2-1: config 255 interface 122 altsetting 68 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1920.556568][ T47] usb 2-1: config 255 interface 122 altsetting 68 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1920.582165][ T47] usb 2-1: config 255 interface 122 has no altsetting 0 [ 1920.623510][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=2d.9c [ 1920.656537][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.055776][ T47] usb 2-1: Product: syz [ 1921.060432][ T47] usb 2-1: Manufacturer: syz [ 1921.067327][ T47] usb 2-1: SerialNumber: syz [ 1921.136408][ T7848] usb 3-1: Using ep0 maxpacket: 8 [ 1921.247720][ T7848] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1921.315150][ T7848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.383001][ T7848] usb 3-1: config 0 descriptor?? [ 1921.429791][ T7848] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 1921.581157][ T7848] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1921.688573][T17650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1921.753396][ T7848] usb 3-1: USB disconnect, device number 43 [ 1921.775217][T17650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1922.022038][T17658] chnl_net:caif_netlink_parms(): no params data found [ 1922.125577][ T47] appletouch 2-1:255.122: Failed to read mode from device. [ 1922.153599][ T47] appletouch 2-1:255.122: probe with driver appletouch failed with error -5 [ 1922.218359][ T47] usb 2-1: USB disconnect, device number 55 [ 1922.518067][T17658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.536084][T17658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.543467][T17658] bridge_slave_0: entered allmulticast mode [ 1922.566093][T17658] bridge_slave_0: entered promiscuous mode [ 1922.575813][T15972] Bluetooth: hci0: command tx timeout [ 1922.591184][T17658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.619581][T17658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.636634][T17658] bridge_slave_1: entered allmulticast mode [ 1922.669453][T17658] bridge_slave_1: entered promiscuous mode [ 1922.857754][T17658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.892024][T17658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.094523][T17658] team0: Port device team_slave_0 added [ 1923.519896][T17658] team0: Port device team_slave_1 added [ 1924.329787][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1924.517445][ T9] usb 5-1: device descriptor read/64, error -71 [ 1924.656106][T15972] Bluetooth: hci0: command tx timeout [ 1924.686439][T17658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1924.714527][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1924.822958][T17658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1924.835869][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1924.887868][T17658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1924.914757][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.000935][T17658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.015117][ T9] usb 5-1: device descriptor read/64, error -71 [ 1925.146949][ T9] usb usb5-port1: attempt power cycle [ 1925.416773][T17658] hsr_slave_0: entered promiscuous mode [ 1925.431731][T17658] hsr_slave_1: entered promiscuous mode [ 1926.195663][ T29] audit: type=1400 audit(2000000650.720:576): avc: denied { nlmsg_read } for pid=17706 comm="syz.2.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1926.226479][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1927.398969][ T9383] Bluetooth: hci0: command tx timeout [ 1928.546507][T17658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1928.678022][ T9383] Bluetooth: hci7: command 0x1003 tx timeout [ 1928.685172][T15972] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1929.245289][T17658] Cannot create hsr debugfs directory [ 1929.295277][ T9] usb 5-1: device descriptor read/8, error -71 [ 1929.638454][T15972] Bluetooth: hci0: command tx timeout [ 1931.064620][T17658] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.692782][T17658] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.867410][T17658] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.123285][T17658] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.185444][ T941] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1932.625251][ T941] usb 1-1: device descriptor read/64, error -71 [ 1932.632139][ T47] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1932.916606][ T941] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1933.023975][ T47] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1933.143893][ T47] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1933.187810][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1933.234355][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1933.284982][ T941] usb 1-1: device descriptor read/64, error -71 [ 1933.291552][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1933.318410][T17658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1933.338008][ T47] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1933.362285][ T47] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1933.391774][T17658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1933.401898][ T47] usb 2-1: Product: syz [ 1933.414912][ T47] usb 2-1: Manufacturer: syz [ 1933.437211][ T941] usb usb1-port1: attempt power cycle [ 1933.467615][T17658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1933.488638][ T47] cdc_wdm 2-1:1.0: skipping garbage [ 1933.493974][ T47] cdc_wdm 2-1:1.0: skipping garbage [ 1933.523263][ T47] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1933.547146][T17658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1933.554188][ T47] cdc_wdm 2-1:1.0: Unknown control protocol [ 1933.752496][T10744] usb 2-1: USB disconnect, device number 56 [ 1933.925251][ T941] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1933.998027][ T941] usb 1-1: device descriptor read/8, error -71 [ 1934.053717][T17658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.181493][T17658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.252052][T15120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.259439][T15120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.362529][T15120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.369934][T15120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.615078][ T941] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1934.646901][ T941] usb 1-1: device descriptor read/8, error -71 [ 1934.657851][T10744] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1934.770859][ T941] usb usb1-port1: unable to enumerate USB device [ 1934.859784][T10744] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1934.898391][T10744] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1934.925042][T10744] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1935.101798][T10744] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1935.113587][T10744] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1935.209243][T10744] usb 2-1: string descriptor 0 read error: -71 [ 1935.221310][T10744] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1935.234109][T10744] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1935.268369][T10744] usb 2-1: can't set config #1, error -71 [ 1935.295696][T10744] usb 2-1: USB disconnect, device number 57 [ 1936.442210][T17658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1936.654500][T17658] veth0_vlan: entered promiscuous mode [ 1936.702206][T17658] veth1_vlan: entered promiscuous mode [ 1936.871892][T17658] veth0_macvtap: entered promiscuous mode [ 1936.929313][T17658] veth1_macvtap: entered promiscuous mode [ 1937.030432][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.064029][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.108925][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.132534][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.154918][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.166337][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.176816][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.188030][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.200411][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.212813][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.244899][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.256168][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.276860][T17658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1937.325060][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1937.377403][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.414984][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1937.439929][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.486340][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1937.532427][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.567299][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1937.578471][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.585243][T10744] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1937.589155][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1937.621238][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.635891][T17658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1937.647003][T17658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.892308][T17658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1937.931854][T17658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.944572][T17658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.953660][T17658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.964144][T17658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.985118][T10744] usb 2-1: device descriptor read/64, error -71 [ 1937.991541][T13109] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1937.999343][ T941] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1938.954190][T15120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1938.986732][T15120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1939.131757][ T6331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1939.168210][ T6331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1939.405052][T13109] usb 3-1: Using ep0 maxpacket: 32 [ 1939.418269][ T941] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1939.441893][T13109] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1939.457871][ T941] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1939.504164][T13109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.513182][T10744] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1939.529307][ T941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1939.547233][T13109] usb 3-1: config 0 descriptor?? [ 1939.553016][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1939.566169][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1939.570086][T13109] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1939.595030][ T941] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1939.606102][ T941] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1939.614149][ T941] usb 1-1: Product: syz [ 1939.619333][ T941] usb 1-1: Manufacturer: syz [ 1940.646217][T13109] gspca_sq930x: reg_r 001f failed -110 [ 1940.651800][T13109] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 1940.691470][ T941] cdc_wdm 1-1:1.0: skipping garbage [ 1940.705178][ T941] cdc_wdm 1-1:1.0: skipping garbage [ 1940.729699][T10744] usb 2-1: device descriptor read/64, error -71 [ 1940.846160][ T5267] usb 3-1: USB disconnect, device number 44 [ 1940.860533][ T941] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1940.917057][T10744] usb usb2-port1: attempt power cycle [ 1940.923383][ T941] cdc_wdm 1-1:1.0: Unknown control protocol [ 1940.988677][ T941] usb 1-1: USB disconnect, device number 39 [ 1942.627419][T13357] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1942.905092][T13357] usb 4-1: Using ep0 maxpacket: 32 [ 1942.935199][T13357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.985285][T13357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1943.017420][T13357] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1943.056332][T13357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.151654][T13357] usb 4-1: config 0 descriptor?? [ 1943.365652][ T5293] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1943.645427][ T5293] usb 5-1: device descriptor read/64, error -71 [ 1944.025659][ T5293] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1944.228127][ T5293] usb 5-1: device descriptor read/64, error -71 [ 1944.447001][ T5293] usb usb5-port1: attempt power cycle [ 1944.562824][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1944.570502][ T7848] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1944.609536][T10744] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1944.612729][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1944.695819][T13357] usbhid 4-1:0.0: can't add hid device: -71 [ 1944.703317][T13357] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1945.121733][ T7848] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1945.123263][T10744] usb 1-1: Using ep0 maxpacket: 32 [ 1945.138860][T13357] usb 4-1: USB disconnect, device number 30 [ 1945.166127][ T7848] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1945.167815][ T5293] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1945.265882][ T7848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1945.375041][ T7848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1945.523474][ T7848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1945.813173][T10744] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1945.870585][ T7848] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1945.938253][ T7848] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1945.992867][ T7848] usb 2-1: Product: syz [ 1945.997358][ T5293] usb 5-1: device descriptor read/8, error -71 [ 1946.077106][ T7848] usb 2-1: Manufacturer: syz [ 1946.091847][T10744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.325922][ T5293] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1946.338659][ T7848] cdc_wdm 2-1:1.0: skipping garbage [ 1946.345201][ T7848] cdc_wdm 2-1:1.0: skipping garbage [ 1946.451289][ T7848] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1946.520553][ T7848] cdc_wdm 2-1:1.0: Unknown control protocol [ 1948.097748][T10744] usb 1-1: config 0 descriptor?? [ 1948.229156][ T5293] usb 5-1: device descriptor read/8, error -71 [ 1948.306604][T10744] usb 1-1: can't set config #0, error -71 [ 1948.365929][T10744] usb 1-1: USB disconnect, device number 40 [ 1948.372280][ T5293] usb usb5-port1: unable to enumerate USB device [ 1948.456016][ T9] usb 2-1: USB disconnect, device number 61 [ 1952.997027][ T5269] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1953.087701][ T29] audit: type=1400 audit(2000000678.280:577): avc: denied { mount } for pid=17905 comm="syz.3.2176" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1953.228704][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 1953.241026][ T5269] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1953.265063][ T5269] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.291951][ T5269] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1953.310749][ T29] audit: type=1400 audit(2000000678.510:578): avc: denied { unmount } for pid=17658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1953.362049][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.678513][T13357] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1953.835345][T17925] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1953.905623][T13357] usb 3-1: Using ep0 maxpacket: 32 [ 1953.928217][T13357] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1953.952258][T13357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.015180][T13357] usb 3-1: config 0 descriptor?? [ 1954.036191][T13357] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1954.283855][T13357] gspca_sq930x: reg_r 001f failed -32 [ 1954.302993][T13357] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 1955.979316][T10744] usb 1-1: USB disconnect, device number 41 [ 1956.155563][ T941] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1956.350129][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.378167][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1956.393113][ T941] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1956.413280][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.451238][ T941] usb 5-1: config 0 descriptor?? [ 1956.456326][T13357] usb 3-1: USB disconnect, device number 45 [ 1958.085183][ T941] usbhid 5-1:0.0: can't add hid device: -71 [ 1958.091471][ T941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1958.158824][ T941] usb 5-1: USB disconnect, device number 44 [ 1959.025181][ T941] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1959.270373][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 1959.280308][ T941] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1959.289762][ T941] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.297449][ T5269] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1959.332092][ T941] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1959.357263][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.494406][T17992] lo speed is unknown, defaulting to 1000 [ 1959.516134][ T5269] usb 3-1: Using ep0 maxpacket: 32 [ 1959.518178][T17992] lo speed is unknown, defaulting to 1000 [ 1959.546835][ T5269] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1959.547843][T17992] lo speed is unknown, defaulting to 1000 [ 1959.585208][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.616736][ T5269] usb 3-1: config 0 descriptor?? [ 1959.636012][ T5269] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1959.844720][ T5269] gspca_sq930x: reg_r 001f failed -32 [ 1959.862717][ T5269] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 1960.096112][T17992] infiniband syz0: set active [ 1960.100970][ T941] lo speed is unknown, defaulting to 1000 [ 1960.107028][T17992] infiniband syz0: added lo [ 1960.227365][T17992] RDS/IB: syz0: added [ 1960.236680][T17992] smc: adding ib device syz0 with port count 1 [ 1960.243084][T17992] smc: ib device syz0 port 1 has pnetid [ 1960.250234][ T941] lo speed is unknown, defaulting to 1000 [ 1960.296522][T17992] lo speed is unknown, defaulting to 1000 [ 1960.490096][ T29] audit: type=1400 audit(2000000685.690:579): avc: denied { create } for pid=18008 comm="syz.0.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1960.565196][ T29] audit: type=1400 audit(2000000685.740:580): avc: denied { bind } for pid=18008 comm="syz.0.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1960.821335][T17992] lo speed is unknown, defaulting to 1000 [ 1960.905074][ T941] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1961.099540][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.135716][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.156889][ T941] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1961.166971][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.192647][ T941] usb 5-1: config 0 descriptor?? [ 1961.205418][ T29] audit: type=1400 audit(2000000686.410:581): avc: denied { append } for pid=18018 comm="syz.0.2214" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1961.252628][ T29] audit: type=1400 audit(2000000686.440:582): avc: denied { map } for pid=18018 comm="syz.0.2214" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1961.340602][T17992] lo speed is unknown, defaulting to 1000 [ 1961.362750][ T29] audit: type=1400 audit(2000000686.440:583): avc: denied { write execute } for pid=18018 comm="syz.0.2214" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1961.653061][ T941] usbhid 5-1:0.0: can't add hid device: -71 [ 1961.686217][ T941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1961.725533][ T941] usb 5-1: USB disconnect, device number 45 [ 1961.781461][ T5293] usb 2-1: USB disconnect, device number 62 [ 1962.075142][ T941] usb 3-1: USB disconnect, device number 46 [ 1962.352541][T17992] lo speed is unknown, defaulting to 1000 [ 1963.431839][T18037] syzkaller1: entered promiscuous mode [ 1963.516541][T18037] syzkaller1: entered allmulticast mode [ 1965.523476][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1965.848511][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1965.851852][T17992] lo speed is unknown, defaulting to 1000 [ 1965.862185][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1965.881072][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.908495][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1965.926751][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.045353][ T5269] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1966.238576][ T5269] usb 3-1: Using ep0 maxpacket: 32 [ 1966.267437][ T5269] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1966.285298][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.303653][ T5269] usb 3-1: config 0 descriptor?? [ 1966.334814][ T5269] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1966.470555][T17992] lo speed is unknown, defaulting to 1000 [ 1966.547201][ T5269] gspca_sq930x: reg_r 001f failed -32 [ 1966.552785][ T5269] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 1967.194197][T17992] lo speed is unknown, defaulting to 1000 [ 1967.935999][T15972] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1967.946721][T15972] Bluetooth: hci3: Injecting HCI hardware error event [ 1967.957775][T15972] Bluetooth: hci3: hardware error 0x00 [ 1968.148129][ T5293] usb 2-1: USB disconnect, device number 63 [ 1968.559788][ T5293] kernel write not supported for file /snd/seq (pid: 5293 comm: kworker/1:4) [ 1968.616780][ T5293] usb 3-1: USB disconnect, device number 47 [ 1970.617596][T15972] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1971.607288][T18119] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1971.756128][ T29] audit: type=1400 audit(2000000696.960:584): avc: denied { write } for pid=18122 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1971.790121][T18124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2246'. [ 1971.800431][T18124] openvswitch: netlink: Flow key attr not present in new flow. [ 1974.125082][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1975.705377][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1975.850639][ T9] usb 5-1: device descriptor read/all, error -71 [ 1976.263150][ T29] audit: type=1400 audit(2000000701.440:585): avc: denied { create } for pid=18157 comm="syz.4.2258" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1976.349798][ T29] audit: type=1400 audit(2000000701.460:586): avc: denied { link } for pid=18157 comm="syz.4.2258" name="#13" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1976.383395][T18165] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2257'. [ 1976.403565][T18165] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 1976.456076][ T29] audit: type=1400 audit(2000000701.490:587): avc: denied { rename } for pid=18157 comm="syz.4.2258" name="#14" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1980.674945][ T5293] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1981.527148][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.570037][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.597181][ T5293] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1981.624934][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.653159][ T5293] usb 4-1: config 0 descriptor?? [ 1981.709035][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.715590][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1983.237989][ T5293] usbhid 4-1:0.0: can't add hid device: -71 [ 1983.244193][ T5293] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1983.293346][ T5293] usb 4-1: USB disconnect, device number 31 [ 1984.734965][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1986.895521][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1987.186101][ T9] usb 4-1: device descriptor read/all, error -71 [ 1988.405247][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1989.530161][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1989.545919][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1989.565877][ T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1990.045240][T10744] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1990.368804][T10744] usb 2-1: Using ep0 maxpacket: 32 [ 1990.411787][T10744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1990.454488][T10744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1990.504990][T10744] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1990.545337][T10744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.556492][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.599570][T10744] usb 2-1: config 0 descriptor?? [ 1990.613665][ T9] usb 4-1: config 0 descriptor?? [ 1991.095928][ T9] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x1 [ 1991.131199][ T9] zeroplus 0003:0C12:0030.000D: item fetching failed at offset 3/7 [ 1991.151339][ T9] zeroplus 0003:0C12:0030.000D: parse failed [ 1991.175000][ T9] zeroplus 0003:0C12:0030.000D: probe with driver zeroplus failed with error -22 [ 1991.248832][T10744] usbhid 2-1:0.0: can't add hid device: -71 [ 1991.279664][T10744] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1991.321783][ T9] usb 4-1: USB disconnect, device number 33 [ 1991.354732][T10744] usb 2-1: USB disconnect, device number 64 [ 1994.118568][T18289] ptrace attach of ""[18290] was attempted by "./syz-executor exec"[18289] [ 2000.438751][T18319] tipc: Failed to remove unknown binding: 66,1,1/0:2488141050/2488141052 [ 2000.564916][ T29] audit: type=1400 audit(2000000725.760:588): avc: denied { write } for pid=18320 comm="syz.3.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2001.015732][T17716] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2001.259177][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.274885][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2001.304917][T17716] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 2001.361174][T17716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.407018][T17716] usb 5-1: config 0 descriptor?? [ 2001.856425][T17716] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x1 [ 2001.884862][T17716] zeroplus 0003:0C12:0030.000E: item fetching failed at offset 3/7 [ 2001.894073][T17716] zeroplus 0003:0C12:0030.000E: parse failed [ 2001.955777][T17716] zeroplus 0003:0C12:0030.000E: probe with driver zeroplus failed with error -22 [ 2002.986332][T17716] usb 5-1: USB disconnect, device number 48 [ 2003.039672][T18342] fuse: Bad value for 'fd' [ 2003.140804][T16465] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2003.157178][T16465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2003.169071][T16465] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2003.208501][T16465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2003.222107][T16465] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2003.230622][T16465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2004.266331][T16465] Bluetooth: hci1: command 0x0406 tx timeout [ 2004.622991][T18343] lo speed is unknown, defaulting to 1000 [ 2005.525363][T15972] Bluetooth: hci7: command tx timeout [ 2006.394985][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2006.880255][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.625292][T15972] Bluetooth: hci7: command tx timeout [ 2007.644870][ T9] usb 2-1: config 0 has no interfaces? [ 2007.668372][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.60 [ 2007.684864][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.704104][ T9] usb 2-1: Product: syz [ 2007.713706][ T9] usb 2-1: Manufacturer: syz [ 2007.723845][ T9] usb 2-1: SerialNumber: syz [ 2007.776987][ T9] usb 2-1: config 0 descriptor?? [ 2008.075027][T13109] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2008.476081][T13109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.904932][T13109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.931919][T10744] usb 2-1: USB disconnect, device number 65 [ 2008.954702][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.967776][T13109] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 2008.998140][T13109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.037930][T13109] usb 4-1: config 0 descriptor?? [ 2009.352786][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.569151][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.612097][T13109] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x1 [ 2009.636031][T13109] zeroplus 0003:0C12:0030.000F: item fetching failed at offset 3/7 [ 2009.658086][T13109] zeroplus 0003:0C12:0030.000F: parse failed [ 2009.664246][T13109] zeroplus 0003:0C12:0030.000F: probe with driver zeroplus failed with error -22 [ 2009.695300][T15972] Bluetooth: hci7: command tx timeout [ 2009.854141][T13109] usb 4-1: USB disconnect, device number 34 [ 2009.950566][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.658416][T18394] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2010.684304][T18394] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2011.169060][T18394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2011.262460][T18394] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2011.396897][T18343] chnl_net:caif_netlink_parms(): no params data found [ 2011.426819][T18394] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2011.456549][ T53] bridge_slave_1: left allmulticast mode [ 2011.475915][T18394] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 2011.507288][ T53] bridge_slave_1: left promiscuous mode [ 2011.538746][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.631510][ T53] bridge_slave_0: left allmulticast mode [ 2011.674937][ T53] bridge_slave_0: left promiscuous mode [ 2011.680910][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.012613][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2021.063138][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2021.103852][ T53] bond0 (unregistering): Released all slaves [ 2022.471821][T18343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2022.502592][T18343] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.547190][T18343] bridge_slave_0: entered allmulticast mode [ 2022.587926][T18343] bridge_slave_0: entered promiscuous mode [ 2022.638449][T18343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2022.683719][T18343] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.713320][T18343] bridge_slave_1: entered allmulticast mode [ 2022.739028][T18343] bridge_slave_1: entered promiscuous mode [ 2025.585694][ T53] hsr_slave_0: left promiscuous mode [ 2025.620289][ T53] hsr_slave_1: left promiscuous mode [ 2025.698828][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2025.718320][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2028.208897][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2028.362394][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2028.747287][ T53] veth1_macvtap: left promiscuous mode [ 2028.768441][ T53] veth0_macvtap: left promiscuous mode [ 2028.774291][ T53] veth1_vlan: left promiscuous mode [ 2028.826733][ T53] veth0_vlan: left promiscuous mode [ 2029.108585][T13109] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2029.645029][T13109] usb 3-1: Using ep0 maxpacket: 8 [ 2029.678642][T13109] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2029.975035][T13109] usb 3-1: config 0 has no interfaces? [ 2030.019949][T13109] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2030.055488][T13109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.063670][T13109] usb 3-1: Product: syz [ 2030.092203][T13109] usb 3-1: Manufacturer: syz [ 2030.113347][T13109] usb 3-1: SerialNumber: syz [ 2030.136582][T13109] usb 3-1: config 0 descriptor?? [ 2031.769803][T13109] usb 3-1: USB disconnect, device number 48 [ 2035.369306][T13109] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2037.695270][T13109] usb 2-1: Using ep0 maxpacket: 8 [ 2037.762258][T13109] usb 2-1: device descriptor read/all, error -71 [ 2039.220937][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2039.403011][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2041.227232][T16465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2041.244160][T16465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2041.254732][T16465] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2041.267888][T16465] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2041.280730][T16465] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2041.299034][T16465] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2041.342343][T15972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2041.358013][T15972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2041.367426][T15972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2041.690353][T15972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2041.729202][T15972] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2041.756731][T15972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2042.510853][T18343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2042.563228][T18619] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2393'. [ 2042.595095][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2042.689542][T18343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2042.844971][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2042.869725][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2042.889009][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2042.931519][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2042.976052][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2043.003110][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2043.045920][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2043.062261][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2043.084851][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.161622][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.169044][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.178585][ T9] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 2043.205083][T18654] lo speed is unknown, defaulting to 1000 [ 2043.259085][T18343] team0: Port device team_slave_0 added [ 2043.354278][T18343] team0: Port device team_slave_1 added [ 2043.697904][T18343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2043.727153][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2043.844900][T18343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2043.894522][T18343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2043.924933][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2043.955821][T16465] Bluetooth: hci3: command tx timeout [ 2044.012205][T18343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.326353][T18695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2047.336858][T16465] Bluetooth: hci3: command tx timeout [ 2047.527356][ T941] usb 3-1: USB disconnect, device number 49 [ 2047.624134][T18343] hsr_slave_0: entered promiscuous mode [ 2047.730509][T18343] hsr_slave_1: entered promiscuous mode [ 2049.074952][T18726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2049.096468][T18726] batadv_slave_0: entered promiscuous mode [ 2049.375341][T16465] Bluetooth: hci3: command tx timeout [ 2049.429773][ T29] audit: type=1400 audit(2000000774.630:589): avc: denied { sqpoll } for pid=18732 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2049.975010][T10744] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2050.194987][T10744] usb 3-1: Using ep0 maxpacket: 8 [ 2050.222972][T10744] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2050.261252][T10744] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2050.319867][T10744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2050.368588][T10744] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2050.426059][T10744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2050.439469][T10744] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2050.456417][T10744] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2050.470337][T10744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.582797][T10744] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 2050.798123][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.041269][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.455477][T16465] Bluetooth: hci3: command tx timeout [ 2052.357872][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.823816][ T941] usb 3-1: USB disconnect, device number 50 [ 2054.313867][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.555348][T10744] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2054.849631][T10744] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.073768][T10744] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2055.254026][T10744] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2055.296646][T10744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2055.304739][T10744] usb 2-1: SerialNumber: syz [ 2055.636276][T10744] usb 2-1: 0:2 : does not exist [ 2055.701182][T10744] usb 2-1: USB disconnect, device number 68 [ 2055.873724][T18654] chnl_net:caif_netlink_parms(): no params data found [ 2055.890560][T18703] udevd[18703]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2057.734113][ T53] bridge_slave_1: left allmulticast mode [ 2057.750636][ T53] bridge_slave_1: left promiscuous mode [ 2057.771957][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.799127][ T53] bridge_slave_0: left allmulticast mode [ 2058.759029][ T53] bridge_slave_0: left promiscuous mode [ 2058.785547][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.935637][T18833] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2059.845025][T10744] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2060.027856][T10744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2060.039211][T10744] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2060.086698][T10744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.111304][T10744] usb 2-1: config 0 descriptor?? [ 2060.526969][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2060.576355][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2060.602662][ T53] bond0 (unregistering): Released all slaves [ 2060.654542][T18654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.685068][T18654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.692464][T18654] bridge_slave_0: entered allmulticast mode [ 2060.765100][T18654] bridge_slave_0: entered promiscuous mode [ 2060.773326][T10744] aquacomputer_d5next 0003:0C70:F001.0010: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.1-1/input0 [ 2060.819792][T18654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.853960][T18654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.873474][T18654] bridge_slave_1: entered allmulticast mode [ 2060.882672][T18654] bridge_slave_1: entered promiscuous mode [ 2061.046118][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 2061.059515][T10744] usb 2-1: USB disconnect, device number 69 [ 2061.114725][T18848] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2061.126832][T18848] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2061.136916][T18848] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2061.145892][T18848] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2061.176169][T18848] vxlan0: entered promiscuous mode [ 2061.181381][T18848] vxlan0: entered allmulticast mode [ 2062.159203][T18654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2062.586950][T18654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2062.823218][T15972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2062.835757][T15972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2062.847656][T15972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2062.887306][T15972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2062.906220][T15972] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2062.914164][T15972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2063.051256][T18654] team0: Port device team_slave_0 added [ 2063.130647][ T29] audit: type=1400 audit(2000000788.320:590): avc: denied { view } for pid=18871 comm="syz.3.2457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2063.295461][T18654] team0: Port device team_slave_1 added [ 2063.535309][T10744] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2063.601866][T18654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2063.609253][ T29] audit: type=1400 audit(2000000788.800:591): avc: denied { setopt } for pid=18868 comm="syz.2.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2063.664708][T18654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2063.814887][T18654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2063.825759][T10744] usb 2-1: Using ep0 maxpacket: 16 [ 2063.855815][T10744] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2063.894744][T10744] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2063.925768][T18654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2063.944855][T18654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2063.981670][T10744] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2064.034142][T10744] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2064.074146][T10744] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2064.085217][T18654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2064.134869][T10744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.183065][T18865] lo speed is unknown, defaulting to 1000 [ 2064.190612][T10744] usb 2-1: Product: syz [ 2064.225170][T10744] usb 2-1: Manufacturer: syz [ 2064.245207][T10744] usb 2-1: SerialNumber: syz [ 2064.376051][ T53] hsr_slave_0: left promiscuous mode [ 2064.428009][ T53] hsr_slave_1: left promiscuous mode [ 2064.495490][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2064.495567][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2064.506389][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2064.506438][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2064.662889][ T53] veth1_macvtap: left promiscuous mode [ 2064.691615][ T53] veth0_macvtap: left promiscuous mode [ 2064.705090][T10744] usb 2-1: USB disconnect, device number 70 [ 2064.705247][ T53] veth1_vlan: left promiscuous mode [ 2064.745422][ T53] veth0_vlan: left promiscuous mode [ 2064.802373][T18885] udevd[18885]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2064.976693][T16465] Bluetooth: hci5: command tx timeout [ 2066.349873][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2066.488605][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2067.055768][T16465] Bluetooth: hci5: command tx timeout [ 2067.577071][T18894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2465'. [ 2067.817995][T18654] hsr_slave_0: entered promiscuous mode [ 2067.859734][T18654] hsr_slave_1: entered promiscuous mode [ 2067.882973][T18654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2067.904167][T18654] Cannot create hsr debugfs directory [ 2068.086367][T13109] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2068.324632][T13109] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2068.351988][T13109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2068.382774][T13109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2068.443760][T13109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2068.544988][T13109] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2068.554172][T13109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.585665][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 2068.627794][T13109] usb 4-1: config 0 descriptor?? [ 2069.131751][T13109] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2069.141040][T16465] Bluetooth: hci5: command tx timeout [ 2069.167757][T13109] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2069.176065][T13109] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2069.184186][T13109] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2069.194018][T13109] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2069.201894][T13109] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2069.561465][T13109] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 2070.007257][T13109] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2070.081173][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2070.132496][T13109] usb 4-1: USB disconnect, device number 35 [ 2070.207945][T18946] bridge0: port 2(bridge_slave_1) entered disabled state [ 2070.216691][T18946] bridge0: port 1(bridge_slave_0) entered disabled state [ 2070.295030][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2070.308558][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2070.335411][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2070.381694][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2070.438208][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2070.460140][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2070.475507][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2070.502851][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.649317][T18865] chnl_net:caif_netlink_parms(): no params data found [ 2070.747016][T18956] Context (ID=0x0) not attached to queue pair (handle=0x1:0x0) [ 2070.824250][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 2070.837907][ T9] usbtmc 3-1:16.0: can't read capabilities [ 2071.635611][T16465] Bluetooth: hci5: command tx timeout [ 2071.647253][T18936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.716426][T18936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.913074][T18936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.962335][T18936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.997184][T14265] usb 3-1: USB disconnect, device number 51 [ 2072.211158][T18966] tipc: Enabling of bearer rejected, failed to enable media [ 2072.480917][T18865] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.512088][T18865] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.549337][T18865] bridge_slave_0: entered allmulticast mode [ 2072.571988][T18865] bridge_slave_0: entered promiscuous mode [ 2072.820995][T18865] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.847452][T18865] bridge0: port 2(bridge_slave_1) entered disabled state [ 2072.865583][T18865] bridge_slave_1: entered allmulticast mode [ 2072.885402][T18865] bridge_slave_1: entered promiscuous mode [ 2073.055187][T14265] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2073.262240][T18865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2073.275166][T14265] usb 3-1: Using ep0 maxpacket: 32 [ 2073.297055][T14265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.324264][T18865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2073.325953][T14265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.375043][T14265] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2073.384180][T14265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.458786][T14265] usb 3-1: config 0 descriptor?? [ 2073.520428][ T53] bridge_slave_1: left allmulticast mode [ 2073.541650][ T53] bridge_slave_1: left promiscuous mode [ 2073.566087][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.770211][ T53] bridge_slave_0: left allmulticast mode [ 2073.874563][ T53] bridge_slave_0: left promiscuous mode [ 2073.992909][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2074.561402][T14265] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 2074.656041][T14265] ft260 0003:0403:6030.0012: chip code: 6424 8183 [ 2074.790167][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2074.846030][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2074.865572][T14265] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 2074.883577][ T53] bond0 (unregistering): Released all slaves [ 2075.061650][T14265] ft260 0003:0403:6030.0012: failed to retrieve status: -71, no wakeup [ 2075.098657][T18654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2075.099991][T14265] ft260 0003:0403:6030.0012: failed to retrieve status: -71 [ 2075.396048][T14265] ft260 0003:0403:6030.0012: failed to reset I2C controller: -71 [ 2075.445376][T14265] usb 3-1: USB disconnect, device number 52 [ 2075.506751][T18865] team0: Port device team_slave_0 added [ 2075.680515][T18865] team0: Port device team_slave_1 added [ 2075.710394][T18654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2076.337966][T18654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2076.449890][ T53] hsr_slave_0: left promiscuous mode [ 2076.577760][ T53] hsr_slave_1: left promiscuous mode [ 2076.591437][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2076.647515][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2077.733519][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2077.748235][T10402] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2077.900082][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2077.995637][T10402] usb 2-1: Using ep0 maxpacket: 16 [ 2078.017048][T10402] usb 2-1: New USB device found, idVendor=90aa, idProduct=093a, bcdDevice=8e.c4 [ 2078.034937][T10402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.043108][T10402] usb 2-1: Product: syz [ 2078.084886][T10402] usb 2-1: Manufacturer: syz [ 2078.089603][T10402] usb 2-1: SerialNumber: syz [ 2078.118545][T10402] usb 2-1: config 0 descriptor?? [ 2078.648989][T18865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.666798][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.742899][T18865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2078.779352][T18654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2078.910047][T18865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2078.935240][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2079.014852][T18865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2079.588276][T18865] hsr_slave_0: entered promiscuous mode [ 2079.638761][T18865] hsr_slave_1: entered promiscuous mode [ 2079.966627][ T29] audit: type=1400 audit(2000000805.170:592): avc: denied { watch watch_reads } for pid=19078 comm="syz.3.2507" path="pipe:[107587]" dev="pipefs" ino=107587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2080.521462][T18654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2080.722676][ T29] audit: type=1400 audit(2000000805.920:593): avc: denied { append } for pid=19051 comm="syz.1.2501" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2080.836038][ T29] audit: type=1326 audit(2000000806.030:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19051 comm="syz.1.2501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ff7979e79 code=0x0 [ 2080.883647][T18654] 8021q: adding VLAN 0 to HW filter on device team0 [ 2081.163252][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.170805][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2081.289955][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 2081.297332][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2083.052371][T13109] usb 2-1: USB disconnect, device number 71 [ 2083.878615][T18865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2083.947506][T18865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2084.021035][T18865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2084.118031][T18865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2084.366732][T18654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2085.514942][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2085.736840][T19156] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 2085.748634][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.774257][T19156] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 2085.782164][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.782220][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2085.782301][ T9] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2085.782344][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.796384][ T9] usb 4-1: config 0 descriptor?? [ 2085.825833][T18865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2086.070336][T18865] 8021q: adding VLAN 0 to HW filter on device team0 [ 2086.120283][T19142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.153752][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.161182][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2086.173497][T19142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.199265][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 2086.236744][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2086.290358][ T9] usb 4-1: USB disconnect, device number 36 [ 2086.307029][ T3860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.314501][ T3860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.743724][T18654] veth0_vlan: entered promiscuous mode [ 2087.071453][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2087.112015][T18654] veth1_vlan: entered promiscuous mode [ 2087.265769][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2087.321569][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2087.355161][ T9] usb 4-1: config 0 has no interface number 0 [ 2087.379145][ T9] usb 4-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 2087.422705][ T9] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 256, setting to 64 [ 2087.444269][T18654] veth0_macvtap: entered promiscuous mode [ 2087.481612][ T9] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2087.523677][T18654] veth1_macvtap: entered promiscuous mode [ 2087.571085][ T9] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2087.618028][ T9] usb 4-1: config 0 interface 1 has no altsetting 0 [ 2087.640373][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2087.665493][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.753836][ T9] usb 4-1: config 0 descriptor?? [ 2087.793224][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2087.825363][ T9] usb 4-1: can't set config #0, error -71 [ 2087.865396][ T9] usb 4-1: USB disconnect, device number 37 [ 2087.879533][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.933961][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2087.965374][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.988377][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2088.008698][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.029020][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2088.054052][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.083861][T18654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2088.148349][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2088.201007][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.222656][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2088.261360][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.274295][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2088.319563][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.342071][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2088.385650][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.420387][T18654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2088.433542][T18654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.464051][T18654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2088.554536][T18654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.572813][T18654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.614410][T18654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.625859][T18654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.851612][T18865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2090.005028][ T3860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.012929][ T3860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2090.196214][ T29] audit: type=1400 audit(2000000815.390:595): avc: denied { setattr } for pid=19216 comm="syz.1.2537" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2090.257136][T18865] veth0_vlan: entered promiscuous mode [ 2090.264172][T10275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.285549][T10275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2090.352765][T18865] veth1_vlan: entered promiscuous mode [ 2090.561433][T18865] veth0_macvtap: entered promiscuous mode [ 2090.618029][T18865] veth1_macvtap: entered promiscuous mode [ 2090.730365][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.615102][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.662844][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.736084][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.788481][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.868902][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.930414][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.941030][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.951560][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.971193][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.984027][T18865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2093.037415][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2093.093675][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2093.124878][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2093.156064][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2093.176617][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2093.235133][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2093.263751][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2093.366058][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2093.554960][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2093.916845][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2093.985128][T18865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2094.104160][T18865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2094.177116][T18865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2094.366973][T18865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.388965][T18865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.412547][T18865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.473604][T18865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.055641][ T5408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2095.063545][ T5408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2095.269777][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2095.302866][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2096.864326][T19312] tipc: Enabling of bearer rejected, failed to enable media [ 2098.199708][T19325] netlink: 'syz.4.2562': attribute type 3 has an invalid length. [ 2098.239348][T19325] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2562'. [ 2098.416602][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2098.622608][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2098.648272][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2098.692571][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.744200][ T9] usb 4-1: config 0 descriptor?? [ 2098.788453][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 2098.978141][T19338] xt_hashlimit: size too large, truncated to 1048576 [ 2099.025794][ T9] pwc: send_video_command error -71 [ 2099.052516][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2099.081193][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 2099.129773][ T9] usb 4-1: USB disconnect, device number 38 [ 2099.538406][ T29] audit: type=1400 audit(2000000824.740:596): avc: denied { mounton } for pid=19349 comm="syz.2.2571" path="/125/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 2099.654980][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2099.869825][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.896486][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2099.944942][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.986844][ T9] usb 4-1: config 0 descriptor?? [ 2100.025198][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 2100.754686][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2102.801687][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 2102.835036][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2102.858992][T19364] tipc: Enabling of bearer rejected, failed to enable media [ 2102.862123][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 2102.899745][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 2102.933856][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 2102.956650][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 2102.986749][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 2103.014295][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 2103.042997][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 2103.071856][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 2103.100249][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 2103.176842][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 2103.572456][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 2103.605138][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 2103.689129][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 2103.975586][ T9] pwc: Registered as video71. [ 2104.097539][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 2104.277390][ T9] usb 4-1: USB disconnect, device number 39 [ 2104.647027][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.653437][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2105.482383][T19395] ªªªªªª: renamed from vlan0 (while UP) [ 2110.949131][ T29] audit: type=1400 audit(2000000836.150:597): avc: denied { getopt } for pid=19410 comm="syz.2.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2111.105393][T19416] tipc: Enabling of bearer rejected, failed to enable media [ 2113.937014][T15972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2113.973114][ T29] audit: type=1400 audit(2000000839.050:598): avc: denied { mounton } for pid=19435 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2114.007701][T15972] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2114.039675][T15972] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2114.085037][T15972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2114.096419][T15972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2114.106866][T15972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2114.403825][T19435] lo speed is unknown, defaulting to 1000 [ 2116.305253][T15972] Bluetooth: hci7: command tx timeout [ 2117.170702][T19457] tipc: Enabling of bearer rejected, failed to enable media [ 2118.234083][T19435] chnl_net:caif_netlink_parms(): no params data found [ 2118.335063][T15972] Bluetooth: hci7: command tx timeout [ 2119.711882][T19435] bridge0: port 1(bridge_slave_0) entered blocking state [ 2119.747661][T19435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2119.786688][T19435] bridge_slave_0: entered allmulticast mode [ 2119.807789][T19435] bridge_slave_0: entered promiscuous mode [ 2119.848211][T19435] bridge0: port 2(bridge_slave_1) entered blocking state [ 2119.863652][T19435] bridge0: port 2(bridge_slave_1) entered disabled state [ 2119.887370][T19435] bridge_slave_1: entered allmulticast mode [ 2119.909761][T19435] bridge_slave_1: entered promiscuous mode [ 2120.423685][T15972] Bluetooth: hci7: command tx timeout [ 2120.957109][T19435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2121.093159][T19435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2121.682129][T19435] team0: Port device team_slave_0 added [ 2121.838133][T19435] team0: Port device team_slave_1 added [ 2122.335630][T19435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2122.342671][T19435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2122.445323][T19435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2122.505580][T15972] Bluetooth: hci7: command tx timeout [ 2122.546737][T19435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2122.576236][T19435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2122.634839][T19435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2124.108426][T19435] hsr_slave_0: entered promiscuous mode [ 2124.191594][T19435] hsr_slave_1: entered promiscuous mode [ 2124.274987][T19435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2124.283091][T19435] Cannot create hsr debugfs directory [ 2125.480811][ T5409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.786858][T19504] tipc: Started in network mode [ 2125.815259][T19504] tipc: Node identity dac5dee1496b, cluster identity 4711 [ 2125.854386][T19504] tipc: Enabled bearer , priority 0 [ 2125.901639][T19502] tipc: Disabling bearer [ 2125.976883][T16465] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2126.129874][T16465] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2126.343122][T16465] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2126.401984][T16465] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2126.432250][T16465] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2126.453199][T16465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2127.072499][ T5409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.257723][ T5409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.213386][ T5409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.469913][T19532] ptrace attach of ""[19533] was attempted by "./syz-executor exec"[19532] [ 2129.548161][T16465] Bluetooth: hci4: command tx timeout [ 2129.920544][T19518] lo speed is unknown, defaulting to 1000 [ 2130.320099][T19536] futex_wake_op: syz.4.2617 tries to shift op by 32; fix this program [ 2131.506998][ T5409] bridge_slave_1: left allmulticast mode [ 2131.518843][ T5409] bridge_slave_1: left promiscuous mode [ 2131.556958][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.624947][T16465] Bluetooth: hci4: command tx timeout [ 2131.687056][ T5409] bridge_slave_0: left allmulticast mode [ 2131.692797][ T5409] bridge_slave_0: left promiscuous mode [ 2131.739898][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.926142][T19554] ------------[ cut here ]------------ [ 2131.932973][T19554] WARNING: CPU: 0 PID: 19554 at kernel/bpf/helpers.c:132 bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 2131.943676][T19554] Modules linked in: [ 2131.947680][T19554] CPU: 0 UID: 0 PID: 19554 Comm: syz.3.2622 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 2131.958584][T19554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2131.969045][T19554] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2131.975538][T19554] Code: 41 5c 41 5d ff e0 cc 66 90 e8 84 1d e5 ff e8 5f 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 69 1d e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 bb 49 42 00 eb 93 e8 b4 49 42 00 eb ae [ 2131.996984][T19554] RSP: 0018:ffffc90002eefa80 EFLAGS: 00010287 [ 2132.003135][T19554] RAX: 000000000000006f RBX: ffff88802fe0f000 RCX: ffffc9000ab49000 [ 2132.012203][T19554] RDX: 0000000000040000 RSI: ffffffff81a55b37 RDI: 0000000000000005 [ 2132.020380][T19554] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2132.028530][T19554] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2132.036669][T19554] R13: ffffc90002eefb38 R14: 0000000000000000 R15: 0000000000000000 [ 2132.045121][T19554] FS: 00007f4ce22dd6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2132.054129][T19554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2132.060911][T19554] CR2: 00007ff611123f98 CR3: 000000005e41c000 CR4: 00000000003526f0 [ 2132.069039][T19554] DR0: 0000000000002000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2132.077502][T19554] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2132.086936][T19554] Call Trace: [ 2132.090273][T19554] [ 2132.093347][T19554] ? show_regs+0x8c/0xa0 [ 2132.098892][T19554] ? __warn+0xe5/0x3c0 [ 2132.103229][T19554] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 2132.109444][T19554] ? report_bug+0x3c0/0x580 [ 2132.114115][T19554] ? handle_bug+0x3d/0x70 [ 2132.118679][T19554] ? exc_invalid_op+0x17/0x50 [ 2132.123910][T19554] ? asm_exc_invalid_op+0x1a/0x20 [ 2132.129358][T19554] ? bpf_map_lookup_percpu_elem+0xa7/0xc0 [ 2132.135269][T19554] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 2132.141286][T19554] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10 [ 2132.147745][T19554] ___bpf_prog_run+0x3e51/0xabd0 [ 2132.153054][T19554] __bpf_prog_run32+0xc1/0x100 [ 2132.158105][T19554] ? __pfx___bpf_prog_run32+0x10/0x10 [ 2132.164114][T19554] ? __pfx_lock_acquire+0x10/0x10 [ 2132.169474][T19554] ? __pfx_lock_release+0x10/0x10 [ 2132.174591][T19554] ? __pfx___cant_migrate+0x10/0x10 [ 2132.180234][T19554] ? migrate_disable+0x106/0x160 [ 2132.185320][T19554] bpf_prog_test_run_syscall+0x3ae/0x770 [ 2132.192569][T19554] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2132.200183][T19554] ? fput+0x32/0x390 [ 2132.204191][T19554] ? __bpf_prog_get+0xa0/0x2f0 [ 2132.209172][T19554] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2132.216579][T19554] __sys_bpf+0x10d2/0x4a00 [ 2132.221111][T19554] ? __pfx___sys_bpf+0x10/0x10 [ 2132.226399][T19554] ? __fget_files+0x256/0x400 [ 2132.231287][T19554] ? do_futex+0x123/0x350 [ 2132.235978][T19554] ? __pfx_do_futex+0x10/0x10 [ 2132.240930][T19554] ? xfd_validate_state+0x5d/0x180 [ 2132.246359][T19554] __x64_sys_bpf+0x78/0xc0 [ 2132.251201][T19554] ? lockdep_hardirqs_on+0x7c/0x110 [ 2132.257791][T19554] do_syscall_64+0xcd/0x250 [ 2132.263046][T19554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2132.269125][T19554] RIP: 0033:0x7f4ce1579e79 [ 2132.273601][T19554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2132.295502][T19554] RSP: 002b:00007f4ce22dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2132.304012][T19554] RAX: ffffffffffffffda RBX: 00007f4ce1715f80 RCX: 00007f4ce1579e79 [ 2132.313040][T19554] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 2132.321175][T19554] RBP: 00007f4ce15e7916 R08: 0000000000000000 R09: 0000000000000000 [ 2132.329332][T19554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2132.337950][T19554] R13: 0000000000000000 R14: 00007f4ce1715f80 R15: 00007ffc1ad976c8 [ 2132.346143][T19554] [ 2132.349306][T19554] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2132.356636][T19554] CPU: 0 UID: 0 PID: 19554 Comm: syz.3.2622 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 2132.367613][T19554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2132.377728][T19554] Call Trace: [ 2132.381076][T19554] [ 2132.384070][T19554] dump_stack_lvl+0x3d/0x1f0 [ 2132.388843][T19554] panic+0x6dc/0x7c0 [ 2132.392897][T19554] ? __pfx_panic+0x10/0x10 [ 2132.397419][T19554] ? show_trace_log_lvl+0x363/0x500 [ 2132.402751][T19554] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 2132.408896][T19554] check_panic_on_warn+0xab/0xb0 [ 2132.413909][T19554] __warn+0xf1/0x3c0 [ 2132.417964][T19554] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 2132.423755][T19554] report_bug+0x3c0/0x580 [ 2132.428155][T19554] handle_bug+0x3d/0x70 [ 2132.432390][T19554] exc_invalid_op+0x17/0x50 [ 2132.437278][T19554] asm_exc_invalid_op+0x1a/0x20 [ 2132.442721][T19554] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 2132.449729][T19554] Code: 41 5c 41 5d ff e0 cc 66 90 e8 84 1d e5 ff e8 5f 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 69 1d e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 bb 49 42 00 eb 93 e8 b4 49 42 00 eb ae [ 2132.469767][T19554] RSP: 0018:ffffc90002eefa80 EFLAGS: 00010287 [ 2132.476442][T19554] RAX: 000000000000006f RBX: ffff88802fe0f000 RCX: ffffc9000ab49000 [ 2132.484565][T19554] RDX: 0000000000040000 RSI: ffffffff81a55b37 RDI: 0000000000000005 [ 2132.492762][T19554] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2132.500783][T19554] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2132.508784][T19554] R13: ffffc90002eefb38 R14: 0000000000000000 R15: 0000000000000000 [ 2132.517139][T19554] ? bpf_map_lookup_percpu_elem+0xa7/0xc0 [ 2132.523165][T19554] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10 [ 2132.529919][T19554] ___bpf_prog_run+0x3e51/0xabd0 [ 2132.534950][T19554] __bpf_prog_run32+0xc1/0x100 [ 2132.539822][T19554] ? __pfx___bpf_prog_run32+0x10/0x10 [ 2132.545869][T19554] ? __pfx_lock_acquire+0x10/0x10 [ 2132.551343][T19554] ? __pfx_lock_release+0x10/0x10 [ 2132.556514][T19554] ? __pfx___cant_migrate+0x10/0x10 [ 2132.562013][T19554] ? migrate_disable+0x106/0x160 [ 2132.567005][T19554] bpf_prog_test_run_syscall+0x3ae/0x770 [ 2132.572690][T19554] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2132.578946][T19554] ? fput+0x32/0x390 [ 2132.582888][T19554] ? __bpf_prog_get+0xa0/0x2f0 [ 2132.587705][T19554] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2132.593919][T19554] __sys_bpf+0x10d2/0x4a00 [ 2132.598473][T19554] ? __pfx___sys_bpf+0x10/0x10 [ 2132.603388][T19554] ? __fget_files+0x256/0x400 [ 2132.608228][T19554] ? do_futex+0x123/0x350 [ 2132.612876][T19554] ? __pfx_do_futex+0x10/0x10 [ 2132.617795][T19554] ? xfd_validate_state+0x5d/0x180 [ 2132.622976][T19554] __x64_sys_bpf+0x78/0xc0 [ 2132.627464][T19554] ? lockdep_hardirqs_on+0x7c/0x110 [ 2132.632717][T19554] do_syscall_64+0xcd/0x250 [ 2132.637296][T19554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2132.643244][T19554] RIP: 0033:0x7f4ce1579e79 [ 2132.647685][T19554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2132.667371][T19554] RSP: 002b:00007f4ce22dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2132.675843][T19554] RAX: ffffffffffffffda RBX: 00007f4ce1715f80 RCX: 00007f4ce1579e79 [ 2132.683910][T19554] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 2132.691919][T19554] RBP: 00007f4ce15e7916 R08: 0000000000000000 R09: 0000000000000000 [ 2132.700022][T19554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2132.708032][T19554] R13: 0000000000000000 R14: 00007f4ce1715f80 R15: 00007ffc1ad976c8 [ 2132.716127][T19554] [ 2132.719483][T19554] Kernel Offset: disabled [ 2132.723985][T19554] Rebooting in 86400 seconds..