last executing test programs: 15.548893847s ago: executing program 0 (id=5066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x80086601, 0x0) 15.294039203s ago: executing program 0 (id=5069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)={0x64, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "e9ff000a06a03d543f77fa2c31"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.016300394s ago: executing program 0 (id=5073): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x7) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140), 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ec40007"], 0x6a) syslog(0x0, &(0x7f0000000300)=""/163, 0xa3) syslog(0xa, &(0x7f0000000180)=""/222, 0xde) syslog(0x0, 0x0, 0x0) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f00000003c0)=""/135, 0x87) syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x1, &(0x7f0000000280)=""/9, 0x9) syslog(0x2, 0x0, 0x0) syslog(0xa, 0x0, 0x0) syslog(0x2, &(0x7f0000000c00)=""/143, 0x8f) syslog(0x4, &(0x7f0000000cc0)=""/11, 0xb) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) write$ppp(r2, &(0x7f00000002c0)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4004) 10.980097712s ago: executing program 0 (id=5083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) 10.607387423s ago: executing program 4 (id=5085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0) 10.605934075s ago: executing program 0 (id=5086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00e006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.042298706s ago: executing program 4 (id=5088): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000001040)={0x0, r3, r2}) 9.74741338s ago: executing program 4 (id=5091): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x5, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x0, 0x0, 0x7ff, 0xa, 0x1}) 9.382953477s ago: executing program 4 (id=5093): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000400)=""/32, 0x20, 0x0, 0x4ad}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x8004480b, 0x0) 8.06640811s ago: executing program 2 (id=5097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x30, r1, 0x1, 0x2, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}}, 0x0) 7.6302347s ago: executing program 2 (id=5099): setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x90f, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000090400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c001280110001006272696467655e736c617665000000001400058006001f"], 0x4c}}, 0x0) 7.509848363s ago: executing program 1 (id=5100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000400010002", 0x7) 7.230237167s ago: executing program 2 (id=5101): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000001a80)=""/102388, 0x19000}], 0x1000000000000069, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000000000000000000000007000000440c00010a2101"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 7.089026791s ago: executing program 1 (id=5102): sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200, 0xa, 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 6.928798093s ago: executing program 0 (id=5103): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 6.80790376s ago: executing program 3 (id=5104): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x0, @private1}}]}, 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 6.7250179s ago: executing program 1 (id=5105): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r0}, 0x20) 6.68335948s ago: executing program 2 (id=5106): r0 = syz_open_dev$media(&(0x7f0000000b80), 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000000b80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000540)={0x80000000, 0x0, &(0x7f00000006c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={r2, &(0x7f0000000000)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{}, {r3}}) 6.68032565s ago: executing program 3 (id=5107): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000e8c000), 0x4) write(r1, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 6.54974323s ago: executing program 4 (id=5108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000150a0309"], 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 6.444981174s ago: executing program 2 (id=5109): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 6.413027212s ago: executing program 3 (id=5110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}]}]}, 0x28}}, 0x0) 6.412070302s ago: executing program 1 (id=5111): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 6.17165454s ago: executing program 4 (id=5112): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b18, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 6.150692216s ago: executing program 3 (id=5113): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.039321971s ago: executing program 1 (id=5114): open(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="140050800800070001000000050002"], 0x30}}, 0x0) 5.914236947s ago: executing program 3 (id=5115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00060065004008"], 0x28}}, 0x0) 5.789250303s ago: executing program 3 (id=5116): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xb6, 0x7a, 0x74, 0x0, 0xbda, 0x158, 0x6197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0xbc, 0xa4}}]}}]}}, 0x0) 5.648969764s ago: executing program 1 (id=5117): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="21eae601ca150d005a25de65f32b0f7c76bb68331f30db6d0b316841f8b6c7f02a446f3532e1d1727e5df0"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r4}, 0x10) request_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, &(0x7f0000000a40)='^%}*\xde(#}\xf4\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000400)=ANY=[@ANYRESDEC=r5], 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc0100, 0x4) getdents64(r7, 0x0, 0x1000000) 0s ago: executing program 2 (id=5118): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r0, 0x0) kernel console output (not intermixed with test programs): 044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2620.182222][T28044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2620.224849][T13440] usb 5-1: USB disconnect, device number 30 [ 2620.517916][T28044] team0: Port device team_slave_0 added [ 2620.552392][T28044] team0: Port device team_slave_1 added [ 2620.805370][T28044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2620.825439][T28044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2620.964887][T28044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2621.049317][T28044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2621.071357][T28044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2621.206929][T28044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2621.392816][T28115] block nbd3: shutting down sockets [ 2621.562723][T28044] hsr_slave_0: entered promiscuous mode [ 2621.632177][T28044] hsr_slave_1: entered promiscuous mode [ 2621.665862][T28044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2621.704649][T28123] syz.4.4517: attempt to access beyond end of device [ 2621.704649][T28123] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2621.717798][T28044] Cannot create hsr debugfs directory [ 2621.724892][T28123] hfsplus: unable to find HFS+ superblock [ 2622.021618][T26261] Bluetooth: hci4: command tx timeout [ 2622.071094][T28129] syz.3.4519: attempt to access beyond end of device [ 2622.071094][T28129] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2622.086698][T28129] hfsplus: unable to find HFS+ superblock [ 2622.224135][T28134] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2622.764386][T28144] xt_hashlimit: overflow, try lower: 3/0 [ 2623.996936][T28044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2624.090823][T26261] Bluetooth: hci4: command tx timeout [ 2624.433196][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4529'. [ 2624.463991][T28158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4529'. [ 2624.673229][T28044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2624.780901][ T47] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2624.990963][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 2625.001844][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2625.020823][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2625.047653][ T47] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2625.074321][T28044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2625.090974][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2625.144902][ T47] usb 5-1: config 0 descriptor?? [ 2625.193790][T28162] ip6gretap0 speed is unknown, defaulting to 1000 [ 2625.595937][ T47] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 2625.624592][T28044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2625.779743][ T47] ft260 0003:0403:6030.002B: chip code: 5e81 abf2 [ 2625.980962][ T47] ft260 0003:0403:6030.002B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 2626.241160][T26261] Bluetooth: hci4: command tx timeout [ 2626.318619][ T47] ft260 0003:0403:6030.002B: failed to retrieve status: -71, no wakeup [ 2626.334122][ T47] ft260 0003:0403:6030.002B: failed to retrieve status: -71 [ 2626.351233][ T47] ft260 0003:0403:6030.002B: failed to reset I2C controller: -71 [ 2627.655771][T28044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2627.803227][T28044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2627.825664][T28202] input: syz0 as /devices/virtual/input/input196 [ 2627.855222][T28044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2627.922091][T28044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2627.930400][ T47] usb 5-1: USB disconnect, device number 31 [ 2628.458158][T28044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2628.578253][T28044] 8021q: adding VLAN 0 to HW filter on device team0 [ 2628.632793][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 2628.640139][ T6419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2628.785062][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 2628.792324][ T6419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2630.564787][T28238] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4553'. [ 2630.584997][T28238] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 2630.863216][ T7486] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2630.883372][T28249] input: syz1 as /devices/virtual/input/input197 [ 2631.328958][ T7486] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2636.493782][T28254] syz.0.4557: attempt to access beyond end of device [ 2636.493782][T28254] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2636.514947][T28044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2636.538025][ T7486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2636.550859][ T7486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2636.562193][ T7486] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2636.577008][ T7486] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2636.586102][ T7486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.596670][ T7486] usb 3-1: config 0 descriptor?? [ 2636.621694][T28254] hfsplus: unable to find HFS+ superblock [ 2636.741899][ T7486] usb 3-1: can't set config #0, error -71 [ 2636.799802][ T7486] usb 3-1: USB disconnect, device number 44 [ 2637.059819][T28044] veth0_vlan: entered promiscuous mode [ 2637.172165][T28044] veth1_vlan: entered promiscuous mode [ 2637.410763][T28269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2637.483517][T28044] veth0_macvtap: entered promiscuous mode [ 2637.606292][T28044] veth1_macvtap: entered promiscuous mode [ 2637.667211][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.262009][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.374243][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.461858][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.483879][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.512817][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.538539][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.563089][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.585433][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.610781][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.650424][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.698577][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.739843][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.755165][T28284] xt_NFQUEUE: number of total queues is 0 [ 2638.774403][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.802672][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.829664][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.856023][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.876926][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.904405][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.930138][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.960327][T28044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2639.111627][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.160790][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.184046][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.220863][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.243971][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.285000][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.311890][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.311974][T28289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4568'. [ 2639.337362][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.358896][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.395679][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.423911][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.464552][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.497624][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.526019][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.548618][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.570884][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.591795][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.620095][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.642436][T28044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2639.665155][T28044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.689950][T28044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2639.826953][T28044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2639.867145][T28044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2639.887711][T28044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2639.910801][T28044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2640.277779][ T5533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2640.310303][ T5533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2640.542802][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2640.648369][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.432586][T28312] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.4576'. [ 2641.968363][T28326] syz.3.4579: attempt to access beyond end of device [ 2641.968363][T28326] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2641.983295][T28326] hfsplus: unable to find HFS+ superblock [ 2642.016801][ T29] audit: type=1400 audit(1724184298.748:1248): avc: denied { setopt } for pid=28324 comm="syz.2.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2642.017039][T28325] ax25_connect(): syz.2.4580 uses autobind, please contact jreuter@yaina.de [ 2642.392540][T28335] 9pnet_fd: Insufficient options for proto=fd [ 2642.421322][ T5299] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2642.661255][ T5299] usb 2-1: Using ep0 maxpacket: 32 [ 2642.721448][ T5299] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2642.729496][ T5299] usb 2-1: config 0 has no interface number 0 [ 2642.762745][ T5299] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2642.819629][ T5299] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2642.874203][ T5299] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2642.930391][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2643.005805][ T5299] usb 2-1: config 0 descriptor?? [ 2643.282232][T28348] 9pnet_fd: Insufficient options for proto=fd [ 2644.516852][ T5299] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.002C/input/input198 [ 2644.698329][T28346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4585'. [ 2644.771571][ T5299] uclogic 0003:28BD:0094.002C: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 2644.858264][ T5299] usb 2-1: USB disconnect, device number 35 [ 2645.262512][T28366] input: syz1 as /devices/virtual/input/input199 [ 2645.381987][T11532] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2651.789634][T28377] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.4593'. [ 2651.962379][T28383] syz.0.4595: attempt to access beyond end of device [ 2651.962379][T28383] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2651.992176][T28383] hfsplus: unable to find HFS+ superblock [ 2652.497974][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.505012][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.995516][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4604'. [ 2654.031171][ T5299] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2654.246052][ T5299] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2654.312240][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2654.360768][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2654.413280][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2654.452378][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2654.507885][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2654.576719][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2654.609106][T28419] syz.2.4607: attempt to access beyond end of device [ 2654.609106][T28419] nbd2: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2654.622516][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2654.652663][T28419] hfsplus: unable to find HFS+ superblock [ 2655.509733][T11814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2655.534461][T11814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2655.544602][T11814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2655.553891][T11814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2655.562604][T11814] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2655.571665][T11814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2655.773259][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2655.788564][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2655.799517][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2655.809461][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2655.887408][T28428] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.4610'. [ 2655.903134][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2655.948457][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2656.002620][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2656.017448][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2656.036527][T28433] syz.4.4611: attempt to access beyond end of device [ 2656.036527][T28433] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2656.048209][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2656.063219][T28433] hfsplus: unable to find HFS+ superblock [ 2656.099499][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2656.124848][ T6434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2656.137294][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2656.292410][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2656.317006][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2656.346602][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2656.387088][ T5299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2656.432630][ T5299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2656.479716][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2656.532414][ T6434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2656.547312][ T5299] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2656.582462][T28420] ip6gretap0 speed is unknown, defaulting to 1000 [ 2656.603674][ T5299] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2656.655807][ T5299] usb 2-1: Product: syz [ 2656.669235][ T5299] usb 2-1: Manufacturer: syz [ 2656.685349][ T5299] usb 2-1: SerialNumber: syz [ 2656.765744][ T5299] usb 2-1: config 0 descriptor?? [ 2656.833404][ T5299] usb 2-1: can't set config #0, error -71 [ 2656.868846][ T5299] usb 2-1: USB disconnect, device number 36 [ 2656.924856][ T6434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2657.144010][ T52] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 2657.299739][ T6434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2657.490756][T11532] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2657.670706][T11532] usb 1-1: Using ep0 maxpacket: 8 [ 2657.686989][T11532] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2657.697085][T26261] Bluetooth: hci5: command tx timeout [ 2657.703997][T11532] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2657.704041][T11532] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2657.704075][T11532] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2657.704137][T11532] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2657.704168][T11532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2658.213646][T11532] usb 1-1: GET_CAPABILITIES returned 0 [ 2658.231351][T11532] usbtmc 1-1:16.0: can't read capabilities [ 2658.636315][T11532] usb 1-1: USB disconnect, device number 40 [ 2658.969196][T28420] chnl_net:caif_netlink_parms(): no params data found [ 2659.143267][ T6434] bridge_slave_1: left allmulticast mode [ 2659.149133][ T6434] bridge_slave_1: left promiscuous mode [ 2659.181756][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 2659.198024][ T6434] bridge_slave_0: left allmulticast mode [ 2659.215843][ T6434] bridge_slave_0: left promiscuous mode [ 2659.233144][T28475] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.4623'. [ 2659.251097][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2659.451777][ T6434] bond_slave_0: left promiscuous mode [ 2659.494679][ T6434] bond_slave_1: left promiscuous mode [ 2659.771743][T26261] Bluetooth: hci5: command tx timeout [ 2661.851961][T26261] Bluetooth: hci5: command tx timeout [ 2663.014735][T28529] syz.0.4634: attempt to access beyond end of device [ 2663.014735][T28529] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2663.058988][T28529] hfsplus: unable to find HFS+ superblock [ 2663.677321][ C1] vkms_vblank_simulate: vblank timer overrun [ 2663.779832][ T6434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2663.796926][ T6434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2663.815029][ T6434] bond0 (unregistering): Released all slaves [ 2663.932122][T26261] Bluetooth: hci5: command tx timeout [ 2664.263504][ T6434] tipc: Left network mode [ 2664.423743][T28547] input: syz1 as /devices/virtual/input/input201 [ 2667.835165][T28552] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.4639'. [ 2668.228057][T28420] bridge0: port 1(bridge_slave_0) entered blocking state [ 2668.270068][T28420] bridge0: port 1(bridge_slave_0) entered disabled state [ 2668.303790][T28420] bridge_slave_0: entered allmulticast mode [ 2668.337282][T28420] bridge_slave_0: entered promiscuous mode [ 2668.395908][T28420] bridge0: port 2(bridge_slave_1) entered blocking state [ 2668.419699][T28420] bridge0: port 2(bridge_slave_1) entered disabled state [ 2668.438669][T28420] bridge_slave_1: entered allmulticast mode [ 2668.458776][T28420] bridge_slave_1: entered promiscuous mode [ 2668.710480][T28551] block nbd1: not configured, cannot reconfigure [ 2668.833395][T28567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4643'. [ 2668.868297][T28567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4643'. [ 2669.003941][T28573] syz.0.4644: attempt to access beyond end of device [ 2669.003941][T28573] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2669.023652][T28573] hfsplus: unable to find HFS+ superblock [ 2669.154986][T28420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2669.624183][ T6434] hsr_slave_0: left promiscuous mode [ 2669.651057][ T6434] hsr_slave_1: left promiscuous mode [ 2670.061035][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2670.068581][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2670.178809][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2670.190812][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2670.397513][ T6434] veth1_macvtap: left promiscuous mode [ 2670.404234][ T6434] veth0_macvtap: left promiscuous mode [ 2670.410051][ T6434] veth1_vlan: left promiscuous mode [ 2670.418868][ T6434] veth0_vlan: left promiscuous mode [ 2672.266489][ T6434] team0 (unregistering): Port device team_slave_1 removed [ 2672.450134][ T6434] team0 (unregistering): Port device team_slave_0 removed [ 2673.683717][T28420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2673.738276][T28602] ip6gretap0 speed is unknown, defaulting to 1000 [ 2673.880535][T28605] ip6gretap0 speed is unknown, defaulting to 1000 [ 2674.077436][T28420] team0: Port device team_slave_0 added [ 2674.209148][T28420] team0: Port device team_slave_1 added [ 2674.562999][T28420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2674.586622][T28420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2674.648092][T28420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2674.704597][T28420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2674.722119][T28420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2674.741606][T13440] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2674.777289][T28420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2674.961586][T13440] usb 2-1: Using ep0 maxpacket: 8 [ 2675.014724][T13440] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2C, changing to 0xC [ 2675.042482][T13440] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 2675.060804][T13440] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 2.40 [ 2675.079216][T13440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.125470][T28621] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2675.356971][ T6434] IPVS: stop unused estimator thread 0... [ 2675.388332][T28420] hsr_slave_0: entered promiscuous mode [ 2675.422461][T28420] hsr_slave_1: entered promiscuous mode [ 2676.018122][T28641] syz.4.4659: attempt to access beyond end of device [ 2676.018122][T28641] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2676.056402][T28641] hfsplus: unable to find HFS+ superblock [ 2677.127633][T13440] cdc_ncm 2-1:1.0: bind() failure [ 2677.212971][T13440] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2677.258650][T13440] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2677.321269][T13440] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2677.358165][T13440] usb 2-1: USB disconnect, device number 37 [ 2677.657114][T28656] sctp: [Deprecated]: syz.4.4662 (pid 28656) Use of int in maxseg socket option. [ 2677.657114][T28656] Use struct sctp_assoc_value instead [ 2677.920814][T20151] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2677.945975][T28666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2678.125838][T20151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2678.156574][T20151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2678.207290][T20151] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2678.241478][ T29] audit: type=1326 audit(1724184334.978:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.0.4667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8ab79e79 code=0x0 [ 2678.258162][T20151] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2678.312669][T20151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.626376][T20151] usb 3-1: config 0 descriptor?? [ 2678.864895][T28673] ip6gretap0 speed is unknown, defaulting to 1000 [ 2678.901816][T28680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4667'. [ 2679.016374][T28680] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4667'. [ 2679.108933][T28680] netlink: 'syz.0.4667': attribute type 5 has an invalid length. [ 2679.126852][T28678] ip6gretap0 speed is unknown, defaulting to 1000 [ 2679.145971][T20151] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 2679.179835][T20151] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 2679.189585][T20151] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 2679.209775][T28680] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4667'. [ 2679.226953][T20151] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2679.551441][T20151] usb 3-1: USB disconnect, device number 45 [ 2680.336284][T28420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2680.456743][T28420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2680.508430][T28420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2680.565401][T28420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2681.125299][T28420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2681.197235][T28706] syz.4.4672: attempt to access beyond end of device [ 2681.197235][T28706] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2681.242375][T28706] hfsplus: unable to find HFS+ superblock [ 2681.274926][T28420] 8021q: adding VLAN 0 to HW filter on device team0 [ 2681.382463][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.389712][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2681.549866][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 2681.557063][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2682.558770][T28420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2682.628247][T28420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2683.016976][ T29] audit: type=1326 audit(1724184339.748:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.0.4678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8ab79e79 code=0x0 [ 2683.448548][T28745] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4678'. [ 2683.457955][T28745] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4678'. [ 2683.467712][T28745] netlink: 'syz.0.4678': attribute type 5 has an invalid length. [ 2683.476652][T28745] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4678'. [ 2684.293824][ T6004] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 2684.456838][T28420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2684.542074][T28758] ip6gretap0 speed is unknown, defaulting to 1000 [ 2684.829730][ T29] audit: type=1326 audit(1724184341.558:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28768 comm="syz.1.4683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe723979e79 code=0x0 [ 2684.918412][T28767] ip6gretap0 speed is unknown, defaulting to 1000 [ 2685.503388][T28786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4683'. [ 2685.603759][T28786] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4683'. [ 2685.719032][T28791] syz.4.4686: attempt to access beyond end of device [ 2685.719032][T28791] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2685.736276][T28791] hfsplus: unable to find HFS+ superblock [ 2685.744188][T28786] netlink: 'syz.1.4683': attribute type 5 has an invalid length. [ 2685.747853][T28420] veth0_vlan: entered promiscuous mode [ 2685.798517][T28786] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4683'. [ 2685.837297][T28783] ip6gretap0 speed is unknown, defaulting to 1000 [ 2686.173826][T28420] veth1_vlan: entered promiscuous mode [ 2686.580518][T28420] veth0_macvtap: entered promiscuous mode [ 2686.674103][T28420] veth1_macvtap: entered promiscuous mode [ 2686.788347][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2686.830694][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2686.840565][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2686.898080][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.072253][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.535640][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.589518][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.707422][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.731055][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.765227][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.802464][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.824059][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.850646][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.880735][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.901150][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.921371][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.938133][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.962859][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2687.973193][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2687.987005][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.000339][T28420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2688.080364][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.107876][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.153020][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.180740][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.206430][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.221799][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.242757][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.280199][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.321455][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.351840][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.363238][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.375601][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.388065][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.399862][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.413216][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.425450][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.436377][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.447390][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.464440][T28420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2688.476155][T28420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2688.542101][T28420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2688.576607][T28420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2688.642197][T28420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2688.668162][T28420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2688.701662][T28420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2688.783660][T28827] nbd: device at index 4 is going down [ 2688.940913][ T6434] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 2689.098155][T28829] ip6gretap0 speed is unknown, defaulting to 1000 [ 2689.534407][T28849] xt_NFQUEUE: number of total queues is 0 [ 2689.626491][T28841] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.4696'. [ 2690.121730][T25687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2690.197591][T25687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2690.393804][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2690.587755][T28864] xt_NFQUEUE: number of total queues is 0 [ 2690.596189][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2693.213602][T28884] 9pnet_fd: Insufficient options for proto=fd [ 2693.251683][ T29] audit: type=1326 audit(1724184349.978:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28877 comm="syz.0.4707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8ab79e79 code=0x0 [ 2693.333848][T28887] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.4598'. [ 2693.852529][T28893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4707'. [ 2693.862595][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4708'. [ 2693.931625][T28893] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4707'. [ 2694.006696][T28893] netlink: 'syz.0.4707': attribute type 5 has an invalid length. [ 2694.097763][T28893] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4707'. [ 2694.782273][T28914] syz.3.4712: attempt to access beyond end of device [ 2694.782273][T28914] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2694.813858][T28914] hfsplus: unable to find HFS+ superblock [ 2694.941276][T28921] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.4711'. [ 2694.957673][T28922] xt_NFQUEUE: number of total queues is 0 [ 2695.988988][T28937] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4716'. [ 2697.900576][T28955] 9pnet_fd: Insufficient options for proto=fd [ 2698.072399][T28955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 2698.107208][T28958] xt_NFQUEUE: number of total queues is 0 [ 2698.472115][ T5533] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 2700.156123][ T29] audit: type=1326 audit(1724184356.888:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.0.4726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8ab79e79 code=0x0 [ 2700.556183][T28988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4726'. [ 2700.565373][T28988] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4726'. [ 2700.576013][T28988] netlink: 'syz.0.4726': attribute type 5 has an invalid length. [ 2700.585300][T28988] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4726'. [ 2701.474038][T28994] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.4727'. [ 2702.108344][ T29] audit: type=1326 audit(1724184358.608:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28998 comm="syz.4.4730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb11179e79 code=0x0 [ 2702.965767][T29003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4730'. [ 2702.974896][T29003] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4730'. [ 2702.983976][T29003] netlink: 'syz.4.4730': attribute type 5 has an invalid length. [ 2702.992112][T29003] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4730'. [ 2704.237928][T29013] syz.2.4733: attempt to access beyond end of device [ 2704.237928][T29013] nbd2: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2704.261613][T29013] hfsplus: unable to find HFS+ superblock [ 2704.356726][T29019] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.4734'. [ 2704.561250][T29024] xt_NFQUEUE: number of total queues is 0 [ 2706.121514][T26261] Bluetooth: hci3: command 0x0405 tx timeout [ 2707.168100][ T29] audit: type=1326 audit(1724184363.898:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.3.4741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9985179e79 code=0x0 [ 2707.231817][T29054] block nbd0: shutting down sockets [ 2707.585251][ T29] audit: type=1400 audit(1724184364.308:1256): avc: denied { nlmsg_write } for pid=29059 comm="syz.2.4747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2707.745932][ T29] audit: type=1326 audit(1724184364.478:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29061 comm="syz.0.4746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8ab79e79 code=0x0 [ 2708.982400][T29066] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4746'. [ 2708.991599][T29066] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4746'. [ 2709.000745][T29066] netlink: 'syz.0.4746': attribute type 5 has an invalid length. [ 2709.008491][T29066] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4746'. [ 2710.723667][T29080] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.4752'. [ 2712.393252][T29097] 9pnet_fd: Insufficient options for proto=fd [ 2712.546013][T29107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4757'. [ 2712.852668][T29112] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.4761'. [ 2713.256658][T29119] syz.0.4762: attempt to access beyond end of device [ 2713.256658][T29119] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2713.281652][T29119] hfsplus: unable to find HFS+ superblock [ 2713.938527][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.945974][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.730908][ T29] audit: type=1326 audit(1724184371.458:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29130 comm="syz.4.4767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb11179e79 code=0x0 [ 2715.220772][T23272] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2715.554676][T23272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.918158][T23272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2715.935987][T23272] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2715.956544][T23272] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2716.099348][T23272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2716.221413][T23272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.229563][T23272] usb 1-1: Product: syz [ 2716.284496][T23272] usb 1-1: Manufacturer: syz [ 2716.289205][T23272] usb 1-1: SerialNumber: syz [ 2716.626481][T29134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2716.696164][T29148] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4767'. [ 2716.710988][T29148] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4767'. [ 2716.761699][T29148] netlink: 'syz.4.4767': attribute type 5 has an invalid length. [ 2716.805458][T29148] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4767'. [ 2717.313500][T29134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2717.555981][T23272] cdc_ncm 1-1:1.0: bind() failure [ 2717.574133][T11814] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 2717.603058][T23272] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2717.674098][T23272] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2717.710085][T23272] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 2717.762819][T23272] usb 1-1: USB disconnect, device number 41 [ 2720.432992][T29180] 9pnet_fd: Insufficient options for proto=fd [ 2720.583024][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4780'. [ 2720.808765][T29196] 9pnet_fd: Insufficient options for proto=fd [ 2720.921203][T13440] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2720.975805][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4784'. [ 2721.154499][T13440] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2721.168222][T13440] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2721.258895][T13440] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2721.274082][T13440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.303477][T13440] usb 5-1: Product: syz [ 2721.339827][T13440] usb 5-1: Manufacturer: syz [ 2721.365434][T13440] usb 5-1: SerialNumber: syz [ 2721.400051][T13440] usb 5-1: config 0 descriptor?? [ 2721.439310][T29189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2721.463572][T29189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2721.785864][T29189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2721.801605][T29189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2723.279909][T13440] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 2723.312530][T29218] syz.3.4790: attempt to access beyond end of device [ 2723.312530][T29218] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2723.341256][T29218] hfsplus: unable to find HFS+ superblock [ 2723.366560][T13440] usb 5-1: USB disconnect, device number 32 [ 2724.328311][T29234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4795'. [ 2725.094074][T18827] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2727.588643][T18827] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2727.604284][T18827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2727.691545][T18827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2727.744719][T18827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2727.831147][T18827] usb 5-1: string descriptor 0 read error: -71 [ 2727.859806][T29258] 9pnet_fd: Insufficient options for proto=fd [ 2727.866216][T18827] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2727.866257][T18827] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2727.902650][T18827] usb 5-1: config 0 descriptor?? [ 2727.941776][T18827] usb 5-1: can't set config #0, error -71 [ 2727.984206][T18827] usb 5-1: USB disconnect, device number 33 [ 2728.070980][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4804'. [ 2728.259908][T29267] ip6gretap0 speed is unknown, defaulting to 1000 [ 2729.622652][T29296] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.4817'. [ 2730.384053][T29311] 9pnet_fd: Insufficient options for proto=fd [ 2730.583096][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4819'. [ 2730.747385][T29310] ip6gretap0 speed is unknown, defaulting to 1000 [ 2731.298899][T29324] pim6reg: entered allmulticast mode [ 2731.342856][T29325] netlink: 5296 bytes leftover after parsing attributes in process `syz.2.4824'. [ 2731.693668][T29332] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.4827'. [ 2731.807238][T29333] syz.3.4826: attempt to access beyond end of device [ 2731.807238][T29333] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2731.874520][T29333] hfsplus: unable to find HFS+ superblock [ 2732.731175][T29353] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.4832'. [ 2733.160940][T18827] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2733.163557][T29366] ip6gretap0 speed is unknown, defaulting to 1000 [ 2733.361767][T18827] usb 3-1: Using ep0 maxpacket: 16 [ 2733.382923][T18827] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2733.420452][T18827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.453459][T18827] usb 3-1: config 0 descriptor?? [ 2733.467133][T18827] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2733.517601][T29372] 9pnet_fd: Insufficient options for proto=fd [ 2733.764401][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4839'. [ 2734.036311][T29380] syz.3.4840: attempt to access beyond end of device [ 2734.036311][T29380] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2734.073531][T29380] hfsplus: unable to find HFS+ superblock [ 2734.509110][T18827] gspca_sonixj: reg_w1 err -71 [ 2734.551985][T18827] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 2734.581241][T18827] usb 3-1: USB disconnect, device number 46 [ 2734.984815][T29390] syz.0.4843: attempt to access beyond end of device [ 2734.984815][T29390] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2735.017216][T29390] hfsplus: unable to find HFS+ superblock [ 2736.870074][T29416] syz.0.4851: attempt to access beyond end of device [ 2736.870074][T29416] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2737.557467][T29416] hfsplus: unable to find HFS+ superblock [ 2737.831844][T29425] 9p: Unknown access argument 18446744073709551615: -34 [ 2737.964111][T29430] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2738.080142][T29437] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.4859'. [ 2738.102525][T29437] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2738.118825][ T29] audit: type=1326 audit(1724184394.848:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29435 comm="syz.3.4858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9985179e79 code=0x0 [ 2738.225815][T29433] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2739.682391][T29445] syz.2.4861: attempt to access beyond end of device [ 2739.682391][T29445] nbd2: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2739.704467][T29445] hfsplus: unable to find HFS+ superblock [ 2740.231981][T29461] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.4863'. [ 2741.550950][T29478] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4858'. [ 2741.559977][T29478] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4858'. [ 2741.569710][T29478] netlink: 'syz.3.4858': attribute type 5 has an invalid length. [ 2741.578355][T29478] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4858'. [ 2741.781674][T26261] Bluetooth: hci4: command 0x0406 tx timeout [ 2742.086017][T29481] 9pnet_fd: Insufficient options for proto=fd [ 2742.281841][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 2742.305282][T29475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4867'. [ 2742.901256][T29502] input: syz1 as /devices/virtual/input/input225 [ 2749.264107][ T29] audit: type=1400 audit(1724184405.988:1260): avc: denied { map } for pid=29515 comm="syz.0.4880" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2749.327540][T29521] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.4879'. [ 2749.386719][ T29] audit: type=1400 audit(1724184406.018:1261): avc: denied { setopt } for pid=29514 comm="syz.4.4878" lport=58935 faddr=fc00:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2749.604000][ T29] audit: type=1326 audit(1724184406.328:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.0.4883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8ab79e79 code=0x0 [ 2749.875280][ T47] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2749.945634][T29534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4883'. [ 2749.954692][T29534] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4883'. [ 2749.964277][T29534] netlink: 'syz.0.4883': attribute type 5 has an invalid length. [ 2749.972139][T29534] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4883'. [ 2750.229833][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 2750.276333][ T47] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 2750.952203][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2751.194513][ T47] usb 4-1: config 0 descriptor?? [ 2751.227700][ T47] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 2751.298415][ T47] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 2751.321814][T29546] macsec0: entered promiscuous mode [ 2751.349284][T29546] veth1_macvtap: left promiscuous mode [ 2751.427026][ T29] audit: type=1326 audit(1724184408.158:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29547 comm="syz.0.4886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8ab79e79 code=0x0 [ 2751.482645][ T47] usb 4-1: USB disconnect, device number 44 [ 2751.569894][T29546] macsec0 (unregistering): left promiscuous mode [ 2752.020456][T29560] syz.2.4890: attempt to access beyond end of device [ 2752.020456][T29560] nbd2: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2752.039896][T29560] hfsplus: unable to find HFS+ superblock [ 2753.492364][T29572] input: syz1 as /devices/virtual/input/input228 [ 2755.364648][T29585] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.4898'. [ 2755.704432][T29588] tipc: Enabled bearer , priority 0 [ 2755.717478][ T29] audit: type=1326 audit(1724184412.248:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29580 comm="syz.3.4897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9985179e79 code=0x0 [ 2755.754506][T29592] tipc: Enabled bearer , priority 0 [ 2757.143939][T29603] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.4903'. [ 2757.342677][T29609] syz.0.4905: attempt to access beyond end of device [ 2757.342677][T29609] nbd0: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 2757.372320][T29609] hfsplus: unable to find HFS+ superblock [ 2757.797588][T29587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4897'. [ 2757.834065][T29587] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4897'. [ 2757.870006][T29587] netlink: 'syz.3.4897': attribute type 5 has an invalid length. [ 2757.938722][T29587] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4897'. [ 2758.223825][ T29] audit: type=1326 audit(1724184414.958:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.2.4909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2b8779e79 code=0x0 [ 2758.892622][T29638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4909'. [ 2759.212097][T29638] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4909'. [ 2759.258148][T29638] netlink: 'syz.2.4909': attribute type 5 has an invalid length. [ 2759.278786][T29638] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4909'. [ 2759.311444][ T5300] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2759.413167][T29649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4916'. [ 2759.513340][ T5300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2759.560803][ T5300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2759.571055][T18827] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2759.573182][ T5300] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2759.612085][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2759.641359][ T5300] usb 1-1: SerialNumber: syz [ 2759.784643][T18827] usb 5-1: Using ep0 maxpacket: 32 [ 2759.819938][T18827] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 2759.851057][T18827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2759.919532][T18827] usb 5-1: Product: syz [ 2759.954801][T18827] usb 5-1: Manufacturer: syz [ 2759.957947][ T5300] usb 1-1: 0:2 : does not exist [ 2759.959444][T18827] usb 5-1: SerialNumber: syz [ 2759.994133][ T5300] usb 1-1: unit 5 not found! [ 2760.023879][T18827] usb 5-1: config 0 descriptor?? [ 2760.047564][T18827] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 2760.167538][ T5300] usb 1-1: USB disconnect, device number 42 [ 2760.367132][T29640] udevd[29640]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2760.647717][ T47] usb 5-1: USB disconnect, device number 34 [ 2761.124959][T29672] netlink: 'syz.0.4922': attribute type 2 has an invalid length. [ 2761.151076][T29672] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4922'. [ 2761.203734][ T29] audit: type=1326 audit(1724184417.938:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29674 comm="syz.3.4924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9985179e79 code=0x0 [ 2761.582831][T29681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4924'. [ 2761.592596][T29681] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4924'. [ 2761.603444][T29681] netlink: 'syz.3.4924': attribute type 5 has an invalid length. [ 2761.612429][T29681] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4924'. [ 2763.314451][T29687] 9pnet_fd: Insufficient options for proto=fd [ 2763.433376][T29699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4927'. [ 2763.918399][T29713] Bluetooth: MGMT ver 1.23 [ 2763.977437][T29704] ip6gretap0 speed is unknown, defaulting to 1000 [ 2764.566191][ T29] audit: type=1326 audit(1724184421.288:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.1.4933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe723979e79 code=0x0 [ 2765.174294][T29729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4933'. [ 2765.220084][T29730] 9pnet_fd: Insufficient options for proto=fd [ 2765.303909][T29729] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4933'. [ 2765.478524][T29729] netlink: 'syz.1.4933': attribute type 5 has an invalid length. [ 2765.517343][T29729] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4933'. [ 2765.621094][ T5300] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2765.805201][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2765.857295][ T5300] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2765.972799][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.992114][ T5300] usb 5-1: config 0 descriptor?? [ 2766.482066][ T5300] lenovo 0003:17EF:6047.002E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 2766.774702][ T29] audit: type=1326 audit(1724184423.508:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29736 comm="syz.3.4938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9985179e79 code=0x0 [ 2767.341731][T29744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4938'. [ 2767.351635][T29744] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4938'. [ 2767.360812][T29744] netlink: 'syz.3.4938': attribute type 5 has an invalid length. [ 2767.368684][T29744] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4938'. [ 2767.401866][T11814] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2767.463032][T11814] Bluetooth: hci5: Injecting HCI hardware error event [ 2767.483323][T11814] Bluetooth: hci5: hardware error 0x00 [ 2769.161410][ T5300] lenovo 0003:17EF:6047.002E: Fn-lock setting failed: -71 [ 2769.186796][ T5300] lenovo 0003:17EF:6047.002E: Sensitivity setting failed: -71 [ 2769.226512][ T5300] usb 5-1: USB disconnect, device number 35 [ 2769.448068][T29752] input: syz1 as /devices/virtual/input/input230 [ 2769.618288][T13440] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2770.100729][T13440] usb 4-1: Using ep0 maxpacket: 16 [ 2775.821598][T13440] usb 4-1: device descriptor read/all, error -110 [ 2775.829183][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.835613][T11814] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2775.863344][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.031234][T13440] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2777.359719][T29773] 9pnet_fd: Insufficient options for proto=fd [ 2777.661976][T29772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4948'. [ 2777.685113][T26261] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2777.711467][T26261] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2777.734304][T26261] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2778.143301][T19726] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2778.164873][T19726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2778.180423][T19726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2778.195480][T19726] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2778.205935][T19726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2778.214589][T19726] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2778.227369][T11814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2778.241705][T11814] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2778.251987][T11814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2779.059207][ T29] audit: type=1326 audit(1724184435.778:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29785 comm="syz.3.4952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9985179e79 code=0x0 [ 2779.484536][T18551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2779.558807][T29789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4952'. [ 2779.568619][T29789] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4952'. [ 2779.577766][T29789] netlink: 'syz.3.4952': attribute type 5 has an invalid length. [ 2779.585652][T29789] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4952'. [ 2780.550948][T26261] Bluetooth: hci8: command tx timeout [ 2780.559455][T26261] Bluetooth: hci1: command tx timeout [ 2780.930530][T29778] ip6gretap0 speed is unknown, defaulting to 1000 [ 2781.202449][T18551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2781.347100][T29776] ip6gretap0 speed is unknown, defaulting to 1000 [ 2781.712069][T11814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2781.745127][T11814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2781.783481][T11814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2781.836967][T11814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2781.872240][T11814] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2781.885729][T11814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2782.006289][T18551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2782.190764][T29804] xt_NFQUEUE: number of total queues is 0 [ 2782.338232][T18551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2782.438294][T29811] 9pnet_fd: Insufficient options for proto=fd [ 2782.571798][T11814] Bluetooth: hci8: command tx timeout [ 2782.658266][T11814] Bluetooth: hci1: command tx timeout [ 2782.996665][T29798] ip6gretap0 speed is unknown, defaulting to 1000 [ 2783.732379][T29778] chnl_net:caif_netlink_parms(): no params data found [ 2783.918012][T18551] bridge_slave_1: left allmulticast mode [ 2783.944161][T18551] bridge_slave_1: left promiscuous mode [ 2783.950089][T18551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2784.009388][T18551] bridge_slave_0: left allmulticast mode [ 2784.021043][T11814] Bluetooth: hci4: command tx timeout [ 2784.048524][T18551] bridge_slave_0: left promiscuous mode [ 2784.105952][T18551] bridge0: port 1(bridge_slave_0) entered disabled state [ 2784.671379][T11814] Bluetooth: hci8: command tx timeout [ 2784.732515][T11814] Bluetooth: hci1: command tx timeout [ 2784.872508][T29846] 9pnet_fd: Insufficient options for proto=fd [ 2786.097438][T11814] Bluetooth: hci4: command tx timeout [ 2786.628197][T18551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2786.684103][T18551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2786.714178][T18551] bond0 (unregistering): Released all slaves [ 2786.731958][T11814] Bluetooth: hci8: command tx timeout [ 2786.793076][T18551] bond1 (unregistering): Released all slaves [ 2786.811602][T11814] Bluetooth: hci1: command tx timeout [ 2787.444526][T29776] chnl_net:caif_netlink_parms(): no params data found [ 2787.771823][T29878] 9pnet_fd: Insufficient options for proto=fd [ 2787.863461][T29778] bridge0: port 1(bridge_slave_0) entered blocking state [ 2787.879914][T29778] bridge0: port 1(bridge_slave_0) entered disabled state [ 2787.922520][T29778] bridge_slave_0: entered allmulticast mode [ 2787.958747][T29778] bridge_slave_0: entered promiscuous mode [ 2787.989440][T29878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4970'. [ 2788.171578][T11814] Bluetooth: hci4: command tx timeout [ 2788.252958][T29778] bridge0: port 2(bridge_slave_1) entered blocking state [ 2788.268570][T29778] bridge0: port 2(bridge_slave_1) entered disabled state [ 2788.277658][T29778] bridge_slave_1: entered allmulticast mode [ 2788.300193][T29778] bridge_slave_1: entered promiscuous mode [ 2789.093106][T29778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2789.175117][T18551] hsr_slave_0: left promiscuous mode [ 2789.189247][T18551] hsr_slave_1: left promiscuous mode [ 2789.218682][T18551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2789.253849][T18551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2789.290247][T18551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2789.311458][T18551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2789.487765][T29897] 9pnet_fd: Insufficient options for proto=fd [ 2789.513616][T18551] veth0_macvtap: left promiscuous mode [ 2789.533027][T18551] veth1_vlan: left promiscuous mode [ 2789.538464][T18551] veth0_vlan: left promiscuous mode [ 2789.620136][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 2790.251090][T11814] Bluetooth: hci4: command tx timeout [ 2792.020376][ T5270] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 2792.255963][ T5270] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 2792.268771][ T5270] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2792.306210][ T5270] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2792.315598][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2792.569728][ T5270] usb 4-1: string descriptor 0 read error: -71 [ 2792.615416][ T5270] hub 4-1:32.0: USB hub found [ 2792.624164][ T5270] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 2792.714010][ T5270] usb 4-1: USB disconnect, device number 47 [ 2792.719937][T18551] team0 (unregistering): Port device team_slave_1 removed [ 2792.977115][T18551] team0 (unregistering): Port device team_slave_0 removed [ 2793.849602][T29931] 9pnet_fd: Insufficient options for proto=fd [ 2794.003282][T29929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4981'. [ 2795.527092][T18551] lo (unregistering): left allmulticast mode [ 2795.731612][T29778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2795.829394][T29798] chnl_net:caif_netlink_parms(): no params data found [ 2795.851707][T29937] syz.3.4982: attempt to access beyond end of device [ 2795.851707][T29937] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2795.868805][T29937] hfsplus: unable to find HFS+ superblock [ 2795.912833][T29776] bridge0: port 1(bridge_slave_0) entered blocking state [ 2795.919982][T29776] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.937258][T29776] bridge_slave_0: entered allmulticast mode [ 2795.945656][T29776] bridge_slave_0: entered promiscuous mode [ 2796.069110][T29778] team0: Port device team_slave_0 added [ 2796.107124][T29776] bridge0: port 2(bridge_slave_1) entered blocking state [ 2796.141141][T29776] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.156905][T29776] bridge_slave_1: entered allmulticast mode [ 2796.182301][T29776] bridge_slave_1: entered promiscuous mode [ 2796.226286][T29778] team0: Port device team_slave_1 added [ 2796.814026][T29776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2796.829926][T29776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2796.865138][T29778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2796.881190][T29778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2796.944449][T29778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2796.974300][T29778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2796.974628][T29956] 9pnet_fd: Insufficient options for proto=fd [ 2796.991378][T29778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2797.058586][T29778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2797.154903][T29958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4985'. [ 2797.282561][ T5301] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2797.322975][T29776] team0: Port device team_slave_0 added [ 2797.540813][ T5301] usb 5-1: Using ep0 maxpacket: 16 [ 2797.567889][T29776] team0: Port device team_slave_1 added [ 2797.581956][ T5301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2797.630906][ T5301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2797.667590][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2797.703042][ T5301] usb 5-1: SerialNumber: syz [ 2797.737370][ T5301] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2797.772557][ T5301] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 2797.789372][ T5301] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 2797.852978][T29778] hsr_slave_0: entered promiscuous mode [ 2797.882735][T29778] hsr_slave_1: entered promiscuous mode [ 2797.922977][T29778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2797.941238][ T5301] usb 5-1: USB disconnect, device number 36 [ 2797.976703][T29778] Cannot create hsr debugfs directory [ 2798.107569][T29776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2798.125931][T29776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2798.211894][T29776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2798.258134][T29798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2798.290952][T29798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2798.314182][T29798] bridge_slave_0: entered allmulticast mode [ 2798.350177][T29798] bridge_slave_0: entered promiscuous mode [ 2798.371493][T29776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2798.397807][T29776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2798.497431][T29776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2798.546881][T29798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2798.580945][T29798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2798.590993][T29798] bridge_slave_1: entered allmulticast mode [ 2798.612785][T29798] bridge_slave_1: entered promiscuous mode [ 2798.802125][T29974] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 2799.316689][T18551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2799.415462][T29986] 9pnet_fd: Insufficient options for proto=fd [ 2799.604480][T29798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2799.663122][T29988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4990'. [ 2800.668529][T18551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2800.739772][T29776] hsr_slave_0: entered promiscuous mode [ 2800.776048][T29776] hsr_slave_1: entered promiscuous mode [ 2800.811004][T29776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2800.821551][T29776] Cannot create hsr debugfs directory [ 2800.836523][T29798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2801.168437][T18551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2801.723522][T18551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2801.858924][T29798] team0: Port device team_slave_0 added [ 2801.916281][T29798] team0: Port device team_slave_1 added [ 2802.658152][T29798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2802.681823][T29798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2802.728832][T29798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2802.777029][T29798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2802.792298][T29798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2802.868435][T29798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2803.443294][T29798] hsr_slave_0: entered promiscuous mode [ 2803.478878][T29798] hsr_slave_1: entered promiscuous mode [ 2803.498498][T29798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2803.510901][T29798] Cannot create hsr debugfs directory [ 2805.341645][T18551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.749828][T18551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.232154][T18551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.668563][T18551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.041911][T30060] ip6gretap0 speed is unknown, defaulting to 1000 [ 2807.186049][T30068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5008'. [ 2807.493185][T18551] bridge_slave_1: left allmulticast mode [ 2807.508723][T18551] bridge_slave_1: left promiscuous mode [ 2807.547077][T18551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2807.587644][T18551] bridge_slave_0: left allmulticast mode [ 2807.595053][T18551] bridge_slave_0: left promiscuous mode [ 2807.601769][T18551] bridge0: port 1(bridge_slave_0) entered disabled state [ 2807.625778][T18551] bridge_slave_1: left allmulticast mode [ 2807.632439][T18551] bridge_slave_1: left promiscuous mode [ 2807.639896][T18551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2807.665997][T18551] bridge_slave_0: left allmulticast mode [ 2807.673544][T18551] bridge_slave_0: left promiscuous mode [ 2807.684166][T18551] bridge0: port 1(bridge_slave_0) entered disabled state [ 2809.835819][T18551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2809.850872][T18551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2809.874631][T18551] bond0 (unregistering): Released all slaves [ 2810.347228][T18551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2810.375874][T18551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2810.389243][T18551] bond0 (unregistering): Released all slaves [ 2810.595252][T18551] tipc: Disabling bearer [ 2810.602300][T18551] tipc: Disabling bearer [ 2810.640671][T18551] tipc: Disabling bearer [ 2810.646408][T18551] tipc: Left network mode [ 2810.650397][T30072] ip6gretap0 speed is unknown, defaulting to 1000 [ 2811.719687][T30080] netlink: 'syz.4.5010': attribute type 2 has an invalid length. [ 2811.753496][T30080] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5010'. [ 2812.847836][T18551] hsr_slave_0: left promiscuous mode [ 2812.863037][T18551] hsr_slave_1: left promiscuous mode [ 2812.884433][T18551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2812.893084][T18551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2812.932180][T18551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2812.948989][T18551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2813.022847][T18551] hsr_slave_0: left promiscuous mode [ 2813.051783][T18551] hsr_slave_1: left promiscuous mode [ 2813.087244][T18551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2813.113697][T18551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2813.146059][T18551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2813.157449][T18551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2813.181988][T30102] netlink: 'syz.3.5014': attribute type 3 has an invalid length. [ 2813.201541][T30102] netlink: 'syz.3.5014': attribute type 4 has an invalid length. [ 2813.226805][T30102] netlink: 'syz.3.5014': attribute type 7 has an invalid length. [ 2813.349107][T30102] netlink: 'syz.3.5014': attribute type 8 has an invalid length. [ 2813.373287][T30102] netlink: 'syz.3.5014': attribute type 7 has an invalid length. [ 2813.401954][T30102] netlink: 198180 bytes leftover after parsing attributes in process `syz.3.5014'. [ 2813.442298][T18551] veth1_macvtap: left promiscuous mode [ 2813.442769][T30104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 2813.447894][T18551] veth0_macvtap: left promiscuous mode [ 2813.485635][T18551] veth1_vlan: left promiscuous mode [ 2813.500182][T18551] veth0_vlan: left promiscuous mode [ 2813.562710][T18551] veth1_macvtap: left promiscuous mode [ 2813.568332][T18551] veth0_macvtap: left promiscuous mode [ 2813.577039][T18551] veth1_vlan: left promiscuous mode [ 2813.587518][T18551] veth0_vlan: left promiscuous mode [ 2815.588021][T18551] team0 (unregistering): Port device team_slave_1 removed [ 2815.764646][T18551] team0 (unregistering): Port device team_slave_0 removed [ 2817.600823][T18551] pimreg1 (unregistering): left allmulticast mode [ 2818.918092][T18551] team0 (unregistering): Port device team_slave_1 removed [ 2819.109521][T18551] team0 (unregistering): Port device team_slave_0 removed [ 2820.927742][T30106] syz_tun: entered promiscuous mode [ 2820.940435][T30106] batadv_slave_0: entered promiscuous mode [ 2821.361487][T29755] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2821.584773][T29755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2821.631298][T29755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2821.670770][T29755] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2821.716188][T29755] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2821.752300][T29755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2821.771465][T29755] usb 5-1: config 0 descriptor?? [ 2821.884909][T29798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2821.955881][T29798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2822.012152][T29798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2822.051522][T29798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2822.435829][T29755] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 2822.459228][T29755] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2823.261863][T29778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2823.299339][T29778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2823.362886][T30128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5021'. [ 2823.386670][T29755] usb 5-1: USB disconnect, device number 37 [ 2823.511081][T29778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2823.534334][T29778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2824.298067][T29776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2824.341992][T29776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2824.405470][T29776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2824.505864][T29776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2824.707313][T29798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2824.781876][T29755] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2824.874783][T29798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2824.991581][T29755] usb 5-1: Using ep0 maxpacket: 8 [ 2825.000216][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.007453][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2825.023802][T29755] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2825.038965][T29755] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2825.073588][T29755] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 2825.119056][T29778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2825.126010][T29755] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2825.126055][T29755] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2825.126121][T29755] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2825.126184][T29755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2825.318500][T25687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.325774][T25687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2825.397607][T29755] usb 5-1: GET_CAPABILITIES returned 0 [ 2825.440775][T29755] usbtmc 5-1:16.0: can't read capabilities [ 2825.638533][T29778] 8021q: adding VLAN 0 to HW filter on device team0 [ 2825.736138][T29798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2825.763584][T30136] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2825.781542][T29798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2825.814649][T13440] usb 5-1: USB disconnect, device number 38 [ 2825.843069][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.850263][ T6419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2826.005539][T14544] bridge0: port 2(bridge_slave_1) entered blocking state [ 2826.012809][T14544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2826.253010][T29776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2826.290285][T29755] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2826.406298][T29776] 8021q: adding VLAN 0 to HW filter on device team0 [ 2826.485297][T29755] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 2826.509304][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 2826.516583][ T5533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2826.520788][T29755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2826.597173][T29755] usb 4-1: config 0 descriptor?? [ 2826.642414][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2826.649758][ T6439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2826.782461][T29798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2827.161651][T29755] apple 0003:05AC:022B.0030: unknown main item tag 0x0 [ 2827.168604][T29755] apple 0003:05AC:022B.0030: unknown main item tag 0x0 [ 2827.207290][T29755] apple 0003:05AC:022B.0030: unknown main item tag 0x0 [ 2827.280923][T29755] apple 0003:05AC:022B.0030: unknown main item tag 0x0 [ 2827.347550][T29755] apple 0003:05AC:022B.0030: unknown main item tag 0x0 [ 2827.380941][T29755] apple 0003:05AC:022B.0030: unknown main item tag 0x0 [ 2827.387937][T29755] apple 0003:05AC:022B.0030: unknown main item tag 0x0 [ 2827.399427][T29798] veth0_vlan: entered promiscuous mode [ 2827.480469][T29755] apple 0003:05AC:022B.0030: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.3-1/input0 [ 2827.501309][T29798] veth1_vlan: entered promiscuous mode [ 2827.519827][T29778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2827.571627][T29755] usb 4-1: USB disconnect, device number 48 [ 2827.878085][T29798] veth0_macvtap: entered promiscuous mode [ 2827.947588][T29798] veth1_macvtap: entered promiscuous mode [ 2828.148190][T29776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2828.178594][T29778] veth0_vlan: entered promiscuous mode [ 2828.211884][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.260934][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.293338][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.320501][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.339902][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.385195][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.415078][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.448603][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.459880][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.483119][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.511621][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.532960][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.559617][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.572552][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.584492][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.596238][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.613862][T29798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2828.702202][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.733575][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.756807][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.770750][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.790889][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.820265][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.863809][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.900762][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.941078][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.966827][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.002805][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.040741][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.074073][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.110779][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.152498][T30219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 2829.163142][T29798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.181762][T29798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.214486][T29798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2829.274848][T29798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.304632][T29798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.328270][T29798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.360876][T29798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.433628][T29778] veth1_vlan: entered promiscuous mode [ 2829.806745][T29776] veth0_vlan: entered promiscuous mode [ 2830.024101][T29778] veth0_macvtap: entered promiscuous mode [ 2830.101944][T29776] veth1_vlan: entered promiscuous mode [ 2830.134549][T29778] veth1_macvtap: entered promiscuous mode [ 2830.187065][T14544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2830.206237][T14544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2830.390222][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.413806][T11532] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2830.420895][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.447437][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.482667][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.500297][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.530684][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.554998][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.587281][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.624153][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.650996][T11532] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2830.665625][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.672427][T11532] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2830.711663][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.733432][T11532] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2830.750790][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.769637][T11532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2830.782998][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.827263][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.832984][T30242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2830.855422][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.866668][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.869827][T11532] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2830.887485][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.920769][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.006062][T29778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2831.160158][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2831.170111][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.191252][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2831.211382][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.246216][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.302903][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.350806][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.387184][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.415926][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.449912][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.490760][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.515861][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.536297][T13440] usb 5-1: USB disconnect, device number 39 [ 2831.547569][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.592793][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.633768][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.671971][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.701275][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.718458][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.741168][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.761755][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.793035][T29778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2831.904654][T29776] veth0_macvtap: entered promiscuous mode [ 2831.956647][T29778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2831.998092][T29778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2832.049499][T29778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2832.102089][T29778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2832.128446][T29776] veth1_macvtap: entered promiscuous mode [ 2832.280010][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.320674][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.383542][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.434972][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.476641][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.501671][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.524650][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.567481][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.606780][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.656607][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.660748][T13440] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2832.692737][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.742681][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.781471][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.803238][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.828612][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.863444][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.891735][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2832.892289][T13440] usb 3-1: Using ep0 maxpacket: 8 [ 2832.934858][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2832.962566][T13440] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2833.021137][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2833.091740][T13440] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2833.112127][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2833.152552][T13440] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2833.213560][T29776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2833.227324][T13440] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2833.270948][T13440] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2833.320856][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2833.331898][T13440] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2833.407061][T13440] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2833.407325][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2833.434659][T13440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2833.457238][T13440] usb 3-1: Product: syz [ 2833.467367][T13440] usb 3-1: Manufacturer: syz [ 2833.481936][T13440] usb 3-1: SerialNumber: syz [ 2833.497844][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2833.612521][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2833.650843][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2833.680756][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2833.710840][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2833.733286][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2833.779317][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2833.815295][T13440] cdc_ncm 3-1:1.0: bind() failure [ 2833.821754][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2833.852432][T13440] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2833.859315][T13440] cdc_ncm 3-1:1.1: bind() failure [ 2833.868960][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2833.899546][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2833.916898][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2833.950842][T13440] usb 3-1: USB disconnect, device number 47 [ 2833.971117][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2834.023915][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2834.056600][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2834.093000][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2834.110797][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2834.135924][T29776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2834.150728][T29776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2834.197168][T29776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2834.414573][T29776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.459003][T29776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.496534][T29776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.526808][T29776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.905759][T14544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2834.940933][T14544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2835.100750][ T47] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2835.152797][T25686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2835.175882][T25686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2835.306289][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 2835.346999][ T47] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2835.376123][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.395486][ T6439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2835.397750][T25686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2835.420003][ T47] usb 4-1: Product: syz [ 2835.436456][ T47] usb 4-1: Manufacturer: syz [ 2835.438628][ T6439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2835.452003][ T47] usb 4-1: SerialNumber: syz [ 2835.460109][T25686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2835.479645][ T47] usb 4-1: config 0 descriptor?? [ 2835.549405][ T47] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2835.874114][T30334] input: syz1 as /devices/virtual/input/input234 [ 2836.282752][ T29] audit: type=1326 audit(1724184492.978:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30346 comm="syz.0.5064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f956b179e79 code=0x0 [ 2836.646027][ T47] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 2837.032424][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 2837.040223][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.763099][ T47] usb 4-1: USB disconnect, device number 49 [ 2838.670374][T11814] Bluetooth: hci8: unexpected cc 0x1407 length: 100 > 9 [ 2839.021585][T30376] ip6gretap0 speed is unknown, defaulting to 1000 [ 2839.262472][T30402] input: syz1 as /devices/virtual/input/input235 [ 2839.289706][ T5301] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2841.100346][ T5301] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2841.158030][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2841.211793][ T5301] usb 3-1: Product: syz [ 2841.223829][ T5301] usb 3-1: Manufacturer: syz [ 2841.237646][ T5301] usb 3-1: SerialNumber: syz [ 2841.346284][ T5301] usb 3-1: config 0 descriptor?? [ 2842.047676][ T7486] usb 3-1: USB disconnect, device number 48 [ 2842.080862][T18827] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2842.305989][T18827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2842.335786][T18827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2842.372510][T18827] usb 4-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 2842.403198][T18827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2842.451334][T18827] usb 4-1: config 0 descriptor?? [ 2842.741064][T11814] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 2842.750507][T11814] Bluetooth: hci8: Injecting HCI hardware error event [ 2842.764034][T26261] Bluetooth: hci8: hardware error 0x00 [ 2843.017915][T18827] wacom 0003:056A:00D1.0031: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 2843.049908][T18827] wacom 0003:056A:00D1.0031: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.3-1/input0 [ 2843.067933][T18827] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D1.0031/input/input236 [ 2843.291883][T29755] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2843.464251][ T5301] usb 4-1: USB disconnect, device number 50 [ 2843.510814][T29755] usb 1-1: Using ep0 maxpacket: 8 [ 2843.532499][T29755] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2843.571720][T29755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2843.579786][T29755] usb 1-1: Product: syz [ 2843.633188][T29755] usb 1-1: Manufacturer: syz [ 2843.637857][T29755] usb 1-1: SerialNumber: syz [ 2843.674609][T29755] usb 1-1: config 0 descriptor?? [ 2843.903654][T30451] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5090'. [ 2844.014374][T29755] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2844.245925][ T29] audit: type=1326 audit(1724184500.978:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30457 comm="syz.2.5094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb468b79e79 code=0x0 [ 2844.373758][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2844.387537][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2844.396428][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2844.571431][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2844.579215][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2844.632646][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2844.640123][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2844.770779][ T5299] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2845.121270][T26261] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 2845.386977][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.397978][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.405665][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.416578][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.434607][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.490240][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.535575][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.567112][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.608531][T30474] netlink: 'syz.2.5097': attribute type 4 has an invalid length. [ 2845.622590][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.623410][ T5299] usb 5-1: config 0 has no interfaces? [ 2845.635971][T29755] usb write operation failed. (-71) [ 2845.650958][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.658418][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.674704][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.683126][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.691967][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.702344][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.710385][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.718276][ T5299] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2845.718314][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2845.752876][T29755] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2845.764845][ T5299] usb 5-1: config 0 descriptor?? [ 2845.794737][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.810709][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.818166][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.830579][T29755] dvbdev: DVB: registering new adapter (Terratec H7) [ 2845.845425][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.868912][T29755] usb 1-1: media controller created [ 2845.891019][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.902385][T29755] usb read operation failed. (-71) [ 2845.911432][T29755] usb write operation failed. (-71) [ 2845.922760][T29755] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2845.931625][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.939269][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2845.952251][T29755] usb 1-1: USB disconnect, device number 43 [ 2846.014686][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2846.034950][ T7486] hid-generic 0000:04AD:0000.0032: unknown main item tag 0x0 [ 2846.057715][T30480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5099'. [ 2846.111340][ T7486] hid-generic 0000:04AD:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2846.195633][T29755] usb 5-1: USB disconnect, device number 40 [ 2846.313907][T30482] Bluetooth: MGMT ver 1.23 [ 2846.378353][T30485] netlink: 132700 bytes leftover after parsing attributes in process `syz.2.5101'. [ 2846.401104][T30485] netlink: zone id is out of range [ 2846.406327][T30485] netlink: zone id is out of range [ 2846.430762][T30485] netlink: zone id is out of range [ 2846.442531][T30485] netlink: zone id is out of range [ 2846.459524][T30485] netlink: zone id is out of range [ 2846.468698][T30485] netlink: zone id is out of range [ 2846.495260][T30485] netlink: zone id is out of range [ 2846.515445][T30485] netlink: zone id is out of range [ 2846.543060][T30477] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 2846.579674][T30485] netlink: zone id is out of range [ 2846.604830][T30485] netlink: zone id is out of range [ 2846.725144][T29755] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 2846.774359][T29755] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 2846.801463][T29755] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 2846.808928][T29755] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 2846.837346][T29755] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2846.912038][ T29] audit: type=1400 audit(1724184503.648:1272): avc: denied { setopt } for pid=30492 comm="syz.3.5107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2847.020767][T13440] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2847.132488][T30499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5108'. [ 2847.177508][T30499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5108'. [ 2847.228429][T13440] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2847.251848][T13440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2847.259929][T13440] usb 1-1: Product: syz [ 2847.286822][T13440] usb 1-1: Manufacturer: syz [ 2847.311200][T13440] usb 1-1: SerialNumber: syz [ 2847.326598][T13440] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2847.476374][T29755] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2847.743249][ T7486] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2847.981545][ T7486] usb 5-1: Using ep0 maxpacket: 8 [ 2848.026987][ T7486] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2848.067904][ T7486] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2848.100814][ T7486] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2848.146739][ T7486] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2853.200579][T29755] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2872.010707][ T7486] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2879.810768][ T7486] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2880.118621][ T7486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.441140][ C0] hrtimer: interrupt took 17754341 ns [ 2880.451907][ T7486] usb 5-1: can't set config #16, error -71 [ 2880.752617][ T7486] usb 5-1: USB disconnect, device number 41 [ 2884.884306][T19726] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2884.966361][T19726] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2885.000896][T19726] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2885.026968][T19726] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2885.072139][T19726] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2885.091637][T19726] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2885.217236][T29784] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2885.240918][T29784] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2885.250906][T29784] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2885.301362][T26261] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2885.330786][T26261] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2885.353534][T26261] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2885.442363][T11814] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2885.479029][T11814] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2885.534669][T11814] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2885.544447][T11814] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2885.553189][T11814] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2885.562024][T11814] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2886.312237][T26261] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2886.334783][T26261] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2886.354239][T26261] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2886.364073][T26261] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2886.372899][T26261] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2886.395257][T26261] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2886.419329][T11814] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2886.440588][T11814] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2886.452156][T11814] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2886.468386][T11814] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2886.484723][T11814] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2886.496612][T11814] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2887.245686][T11814] Bluetooth: hci9: command tx timeout [ 2887.451393][T11814] Bluetooth: hci8: command tx timeout [ 2887.702906][T11814] Bluetooth: hci11: command tx timeout [ 2888.583472][T11814] Bluetooth: hci13: command tx timeout [ 2888.741056][T11814] Bluetooth: hci12: command tx timeout [ 2889.305127][T11814] Bluetooth: hci9: command tx timeout [ 2889.542053][T11814] Bluetooth: hci8: command tx timeout [ 2889.781739][T11814] Bluetooth: hci11: command tx timeout [ 2890.659719][T11814] Bluetooth: hci13: command tx timeout [ 2890.811930][T11814] Bluetooth: hci12: command tx timeout [ 2891.381157][T11814] Bluetooth: hci9: command tx timeout [ 2891.630827][T11814] Bluetooth: hci8: command tx timeout [ 2891.863865][T11814] Bluetooth: hci11: command tx timeout [ 2892.742568][T11814] Bluetooth: hci13: command tx timeout [ 2892.905581][T11814] Bluetooth: hci12: command tx timeout [ 2893.460993][T11814] Bluetooth: hci9: command tx timeout [ 2893.701244][T11814] Bluetooth: hci8: command tx timeout [ 2893.933103][T11814] Bluetooth: hci11: command tx timeout [ 2894.824857][T11814] Bluetooth: hci13: command tx timeout [ 2894.986089][T11814] Bluetooth: hci12: command tx timeout [ 2899.011686][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 2899.018061][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 2942.220502][T29784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2942.237555][T29784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2942.247729][T29784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2942.259756][T29784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2942.268899][T29784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2942.278656][T29784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2943.854187][T11814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2943.880961][T11814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2943.920829][T11814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2943.933369][T11814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2943.945019][T11814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2943.962692][T11814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2944.422268][T11814] Bluetooth: hci1: command tx timeout [ 2944.967823][T29784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2944.987051][T29784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2945.000332][T29784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2945.013317][T29784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2945.023990][T29784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2945.031694][T29784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2945.206294][T29784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2945.221824][T29784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2945.233246][T29784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2945.251948][T29784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2945.260167][T29784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2945.269044][T29784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2945.512347][T11814] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2945.526732][T11814] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2945.536641][T11814] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2945.548365][T11814] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2945.557612][T11814] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2945.565814][T11814] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2946.101238][T11814] Bluetooth: hci3: command tx timeout [ 2946.491950][T11814] Bluetooth: hci1: command tx timeout [ 2947.141541][T11814] Bluetooth: hci4: command tx timeout [ 2947.402724][T11814] Bluetooth: hci5: command tx timeout [ 2947.700934][T11814] Bluetooth: hci14: command tx timeout [ 2948.190686][T11814] Bluetooth: hci3: command tx timeout [ 2948.595725][T11814] Bluetooth: hci1: command tx timeout [ 2949.225921][T11814] Bluetooth: hci4: command tx timeout [ 2949.473966][T11814] Bluetooth: hci5: command tx timeout [ 2949.774873][T11814] Bluetooth: hci14: command tx timeout [ 2950.261146][T11814] Bluetooth: hci3: command tx timeout [ 2950.664128][T11814] Bluetooth: hci1: command tx timeout [ 2951.301041][T11814] Bluetooth: hci4: command tx timeout [ 2951.542272][T11814] Bluetooth: hci5: command tx timeout [ 2951.860773][T11814] Bluetooth: hci14: command tx timeout [ 2952.341375][T11814] Bluetooth: hci3: command tx timeout [ 2953.380983][T11814] Bluetooth: hci4: command tx timeout [ 2953.621720][T11814] Bluetooth: hci5: command tx timeout [ 2953.941555][T11814] Bluetooth: hci14: command tx timeout [ 2960.400300][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 2960.407662][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 3002.852493][T29784] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 3002.869899][T29784] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 3002.894973][T29784] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 3002.904651][T29784] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 3002.922113][T29784] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 3002.934685][T29784] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 3004.573952][T11814] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 3004.608026][T11814] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 3004.621887][T11814] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 3004.632058][T11814] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 3004.640400][T11814] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 3004.656363][T11814] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 3005.077271][T29784] Bluetooth: hci15: command tx timeout [ 3005.364269][T11814] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 3005.392910][T11814] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 3005.410768][T11814] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 3005.428490][T11814] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 3005.437434][T11814] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 3005.445843][T11814] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 3005.777642][T11814] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 3005.929359][T29783] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 3005.940281][T29783] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 3005.954425][T29783] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 3005.964706][T29783] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 3005.973365][T29783] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 3006.103140][T29784] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 3006.119939][T29784] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 3006.134781][T29784] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 3006.143759][T29784] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 3006.152044][T29784] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 3006.159783][T29784] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 3006.746321][T29784] Bluetooth: hci16: command tx timeout [ 3007.142461][T29784] Bluetooth: hci15: command tx timeout [ 3007.533175][T29784] Bluetooth: hci17: command tx timeout [ 3007.942877][T29784] Bluetooth: hci9: command 0x0406 tx timeout [ 3007.948971][T29784] Bluetooth: hci8: command 0x0406 tx timeout [ 3007.958542][T29783] Bluetooth: hci11: command 0x0406 tx timeout [ 3008.101217][T30587] Bluetooth: hci18: command tx timeout [ 3008.262491][T30587] Bluetooth: hci19: command tx timeout [ 3008.829742][T30587] Bluetooth: hci16: command tx timeout [ 3009.221117][T30587] Bluetooth: hci15: command tx timeout [ 3009.632744][T30587] Bluetooth: hci17: command tx timeout [ 3010.181384][T26261] Bluetooth: hci18: command tx timeout [ 3010.332344][T26261] Bluetooth: hci19: command tx timeout [ 3010.912341][T30587] Bluetooth: hci16: command tx timeout [ 3011.301709][T11814] Bluetooth: hci15: command tx timeout [ 3011.691267][T11814] Bluetooth: hci17: command tx timeout [ 3012.257110][T11814] Bluetooth: hci18: command tx timeout [ 3012.423356][T11814] Bluetooth: hci19: command tx timeout [ 3012.987008][T11814] Bluetooth: hci13: command 0x0406 tx timeout [ 3013.000783][T26261] Bluetooth: hci12: command 0x0406 tx timeout [ 3013.006952][T26261] Bluetooth: hci16: command tx timeout [ 3013.781101][T11814] Bluetooth: hci17: command tx timeout [ 3014.341134][T11814] Bluetooth: hci18: command tx timeout [ 3014.501130][T11814] Bluetooth: hci19: command tx timeout [ 3021.811124][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.817495][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 3035.217116][ T30] INFO: task kworker/u8:10:19499 blocked for more than 143 seconds. [ 3035.242091][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3035.248059][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3035.350846][ T30] task:kworker/u8:10 state:D stack:24008 pid:19499 tgid:19499 ppid:2 flags:0x00004000 [ 3035.408824][ T30] Workqueue: events_unbound linkwatch_event [ 3035.450955][ T30] Call Trace: [ 3035.454296][ T30] [ 3035.457244][ T30] __schedule+0xe37/0x5490 [ 3035.580206][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3035.641928][ T30] ? __pfx___schedule+0x10/0x10 [ 3035.646853][ T30] ? schedule+0x298/0x350 [ 3035.699088][ T30] ? __pfx_lock_release+0x10/0x10 [ 3035.726107][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3035.748866][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3035.754467][ T30] schedule+0xe7/0x350 [ 3035.758570][ T30] schedule_preempt_disabled+0x13/0x30 [ 3035.781169][ T30] __mutex_lock+0x5b8/0x9c0 [ 3035.785755][ T30] ? linkwatch_event+0x51/0xc0 [ 3035.790569][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3035.850877][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 3035.855981][ T30] ? __pfx_lock_release+0x10/0x10 [ 3035.910346][ T30] ? linkwatch_event+0x51/0xc0 [ 3035.941825][ T30] ? rtnl_lock+0x9/0x20 [ 3035.946054][ T30] linkwatch_event+0x51/0xc0 [ 3035.980763][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 3035.986238][ T30] ? rcu_is_watching+0x12/0xc0 [ 3036.034815][ T30] process_one_work+0x9c5/0x1b40 [ 3036.039841][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 3036.071023][ T30] ? __pfx_process_one_work+0x10/0x10 [ 3036.076486][ T30] ? assign_work+0x1a0/0x250 [ 3036.113251][ T30] worker_thread+0x6c8/0xf20 [ 3036.117919][ T30] ? __kthread_parkme+0x148/0x220 [ 3036.152560][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3036.157750][ T30] kthread+0x2c1/0x3a0 [ 3036.201437][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3036.209765][ T30] ? __pfx_kthread+0x10/0x10 [ 3036.243902][ T30] ret_from_fork+0x45/0x80 [ 3036.248396][ T30] ? __pfx_kthread+0x10/0x10 [ 3036.282132][ T30] ret_from_fork_asm+0x1a/0x30 [ 3036.286983][ T30] [ 3036.290033][ T30] INFO: task syz-executor:27410 blocked for more than 144 seconds. [ 3036.350736][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3036.356972][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3036.401415][ T30] task:syz-executor state:D stack:24032 pid:27410 tgid:27410 ppid:1 flags:0x00004006 [ 3036.445809][ T30] Call Trace: [ 3036.449148][ T30] [ 3036.470768][ T30] __schedule+0xe37/0x5490 [ 3036.475261][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3036.480490][ T30] ? __pfx___schedule+0x10/0x10 [ 3036.516172][ T30] ? schedule+0x298/0x350 [ 3036.540690][ T30] ? __pfx_lock_release+0x10/0x10 [ 3036.572127][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3036.576884][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3036.610848][ T30] schedule+0xe7/0x350 [ 3036.640497][ T30] schedule_preempt_disabled+0x13/0x30 [ 3036.671400][ T30] __mutex_lock+0x5b8/0x9c0 [ 3036.675982][ T30] ? tun_chr_close+0x3e/0x230 [ 3036.700711][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3036.705913][ T30] ? locks_remove_file+0x399/0x5a0 [ 3036.771377][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 3036.776928][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 3036.802724][ T30] ? tun_chr_close+0x3e/0x230 [ 3036.807485][ T30] ? rtnl_lock+0x9/0x20 [ 3036.840826][ T30] tun_chr_close+0x3e/0x230 [ 3036.845426][ T30] __fput+0x408/0xbb0 [ 3036.849443][ T30] task_work_run+0x14e/0x250 [ 3036.900882][ T30] ? __pfx_task_work_run+0x10/0x10 [ 3036.906091][ T30] ? switch_task_namespaces+0xeb/0x100 [ 3036.950805][ T30] do_exit+0xaa3/0x2bb0 [ 3036.957081][ T30] ? get_signal+0x8f2/0x2770 [ 3036.980809][ T30] ? __pfx_do_exit+0x10/0x10 [ 3036.985476][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 3036.990552][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3037.026175][ T30] do_group_exit+0xd3/0x2a0 [ 3037.050950][ T30] get_signal+0x25fd/0x2770 [ 3037.076799][ T30] ? __pfx_get_signal+0x10/0x10 [ 3037.091900][ T30] ? __pfx_vfs_read+0x10/0x10 [ 3037.096658][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 3037.121321][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3037.164443][ T30] ? ksys_read+0x1ab/0x260 [ 3037.168941][ T30] ? __pfx_ksys_read+0x10/0x10 [ 3037.211429][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 3037.217159][ T30] do_syscall_64+0xda/0x250 [ 3037.260870][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3037.266868][ T30] RIP: 0033:0x7fdb111788bc [ 3037.302410][ T30] RSP: 002b:00007ffd8b64ba30 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3037.320741][ T30] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007fdb111788bc [ 3037.328780][ T30] RDX: 0000000000000028 RSI: 00007ffd8b64bae0 RDI: 00000000000000f9 [ 3037.401595][ T30] RBP: 00007ffd8b64ba8c R08: 0000000000000000 R09: 0079746972756365 [ 3037.409634][ T30] R10: 00007fdb112e87e0 R11: 0000000000000246 R12: 0000000000000009 [ 3037.466949][ T30] R13: 00000000002b7297 R14: 00000000002b7297 R15: 00007ffd8b64bae0 [ 3037.497534][ T30] [ 3037.511188][ T30] INFO: task syz.3.4980:29927 blocked for more than 145 seconds. [ 3037.519012][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3037.565452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3037.600886][ T30] task:syz.3.4980 state:D stack:26192 pid:29927 tgid:29927 ppid:28420 flags:0x00004006 [ 3037.633775][ T30] Call Trace: [ 3037.659565][ T30] [ 3037.671078][ T30] __schedule+0xe37/0x5490 [ 3037.675564][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3037.711928][ T30] ? __pfx___schedule+0x10/0x10 [ 3037.716855][ T30] ? schedule+0x298/0x350 [ 3037.752213][ T30] ? __pfx_lock_release+0x10/0x10 [ 3037.757323][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3037.790671][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3037.796208][ T30] schedule+0xe7/0x350 [ 3037.800310][ T30] schedule_preempt_disabled+0x13/0x30 [ 3037.846748][ T30] __mutex_lock+0x5b8/0x9c0 [ 3037.870773][ T30] ? tun_chr_close+0x3e/0x230 [ 3037.901224][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3037.906331][ T30] ? locks_remove_file+0x399/0x5a0 [ 3037.945244][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 3037.972286][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 3037.979221][ T30] ? tun_chr_close+0x3e/0x230 [ 3038.008386][ T30] ? rtnl_lock+0x9/0x20 [ 3038.012907][ T30] tun_chr_close+0x3e/0x230 [ 3038.017450][ T30] __fput+0x408/0xbb0 [ 3038.070883][ T30] task_work_run+0x14e/0x250 [ 3038.075576][ T30] ? __pfx_task_work_run+0x10/0x10 [ 3038.119097][ T30] ? switch_task_namespaces+0xeb/0x100 [ 3038.131115][ T30] do_exit+0xaa3/0x2bb0 [ 3038.135323][ T30] ? get_signal+0x1dcf/0x2770 [ 3038.140029][ T30] ? __pfx_do_exit+0x10/0x10 [ 3038.191497][ T30] ? cgroup_update_frozen+0x14d/0x6a0 [ 3038.196950][ T30] do_group_exit+0xd3/0x2a0 [ 3038.245719][ T30] get_signal+0x25fd/0x2770 [ 3038.250323][ T30] ? __pfx_get_signal+0x10/0x10 [ 3038.291407][ T30] ? lock_acquire+0x1b1/0x560 [ 3038.312207][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 3038.317833][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3038.350985][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 3038.380950][ T30] ret_from_fork_asm+0x1a/0x30 [ 3038.385802][ T30] [ 3038.390327][ T30] INFO: task syz.0.5103:30488 blocked for more than 146 seconds. [ 3038.458214][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3038.480693][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3038.520705][ T30] task:syz.0.5103 state:D stack:27024 pid:30488 tgid:30488 ppid:29776 flags:0x00004006 [ 3038.550803][ T30] Call Trace: [ 3038.554150][ T30] [ 3038.557098][ T30] __schedule+0xe37/0x5490 [ 3038.613865][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3038.619139][ T30] ? hlock_class+0x4e/0x130 [ 3038.640975][ T30] ? __pfx___schedule+0x10/0x10 [ 3038.645902][ T30] ? schedule+0x298/0x350 [ 3038.650262][ T30] ? __pfx_lock_release+0x10/0x10 [ 3038.691425][ T30] ? mark_lock+0xb5/0xc60 [ 3038.711043][ T30] ? __pfx_mark_lock+0x10/0x10 [ 3038.715877][ T30] schedule+0xe7/0x350 [ 3038.719974][ T30] schedule_timeout+0x258/0x2a0 [ 3038.788887][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 3038.821646][ T30] ? mark_held_locks+0x9f/0xe0 [ 3038.826482][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3038.850753][ T30] __wait_for_common+0x3de/0x5f0 [ 3038.855785][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 3038.881963][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 3038.887520][ T30] ? mark_held_locks+0x9f/0xe0 [ 3038.930740][ T30] __flush_work+0x5bd/0xc60 [ 3038.935339][ T30] ? __pfx___flush_work+0x10/0x10 [ 3038.940394][ T30] ? _raw_spin_lock_irqsave+0x42/0x60 [ 3038.992455][ T30] ? lock_timer_base+0x5d/0x220 [ 3039.011366][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 3039.016742][ T30] ? __pfx___might_resched+0x10/0x10 [ 3039.050710][ T30] ? mark_held_locks+0x9f/0xe0 [ 3039.055549][ T30] nf_flow_table_cleanup+0x2d0/0x3d0 [ 3039.095100][ T30] ? __pfx_nf_flow_table_cleanup+0x10/0x10 [ 3039.130708][ T30] ? nf_tables_flowtable_event+0x35/0x480 [ 3039.136533][ T30] ? __pfx_virt_wifi_event+0x10/0x10 [ 3039.171016][ T30] ? nft_offload_netdev_event+0x58/0x3e0 [ 3039.200700][ T30] flow_offload_netdev_event+0x57/0x70 [ 3039.207733][ T30] notifier_call_chain+0xb9/0x410 [ 3039.260760][ T30] ? __pfx_flow_offload_netdev_event+0x10/0x10 [ 3039.266991][ T30] call_netdevice_notifiers_info+0xbe/0x140 [ 3039.309442][ T30] dev_close_many+0x333/0x6a0 [ 3039.316299][ T30] ? __pfx_dev_close_many+0x10/0x10 [ 3039.340809][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 3039.346106][ T30] unregister_netdevice_many_notify+0x477/0x1e40 [ 3039.378881][ T30] ? __pfx_lock_release+0x10/0x10 [ 3039.426031][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3039.460872][ T30] ? __queue_work+0x43b/0x1070 [ 3039.465881][ T30] ? mark_held_locks+0x9f/0xe0 [ 3039.503219][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 3039.509316][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3039.571464][ T30] ? linkwatch_schedule_work+0x181/0x1c0 [ 3039.577198][ T30] ? linkwatch_fire_event+0x6f/0x270 [ 3039.618841][ T30] __tun_detach+0x11cc/0x14a0 [ 3039.637490][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 3039.654777][ T30] tun_chr_close+0xc8/0x230 [ 3039.686858][ T30] __fput+0x408/0xbb0 [ 3039.710802][ T30] task_work_run+0x14e/0x250 [ 3039.715474][ T30] ? __pfx_task_work_run+0x10/0x10 [ 3039.751721][ T30] ? switch_task_namespaces+0xeb/0x100 [ 3039.757268][ T30] do_exit+0xaa3/0x2bb0 [ 3039.789698][ T30] ? get_signal+0x8f2/0x2770 [ 3039.794440][ T30] ? __pfx_do_exit+0x10/0x10 [ 3039.800139][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 3039.840985][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3039.846439][ T30] do_group_exit+0xd3/0x2a0 [ 3039.882239][ T30] get_signal+0x25fd/0x2770 [ 3039.886846][ T30] ? __pfx_get_signal+0x10/0x10 [ 3039.941861][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 3039.947505][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3039.971722][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 3039.977436][ T30] do_syscall_64+0xda/0x250 [ 3040.011383][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3040.017366][ T30] RIP: 0033:0x7f956b179e79 [ 3040.060849][ T30] RSP: 002b:00007ffc84a6c3b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3040.069336][ T30] RAX: 0000000000000000 RBX: 00000000002b6fa3 RCX: 00007f956b179e79 [ 3040.142567][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 3040.181677][ T30] RBP: 00007ffc84a6c488 R08: 0000000000000001 R09: 00007ffc84a6c69f [ 3040.189718][ T30] R10: 00007f956b000000 R11: 0000000000000246 R12: 0000000000000032 [ 3040.242898][ T30] R13: 00007ffc84a6c4b0 R14: 00007ffc84a6c4d0 R15: ffffffffffffffff [ 3040.289687][ T30] [ 3040.309443][ T30] INFO: task syz-executor:30534 blocked for more than 148 seconds. [ 3040.352297][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3040.358305][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3040.405883][ T30] task:syz-executor state:D stack:27552 pid:30534 tgid:30534 ppid:1 flags:0x00000004 [ 3040.441680][ T30] Call Trace: [ 3040.445020][ T30] [ 3040.447967][ T30] __schedule+0xe37/0x5490 [ 3040.506341][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3040.530761][ T30] ? find_held_lock+0x2d/0x110 [ 3040.535609][ T30] ? __pfx___schedule+0x10/0x10 [ 3040.570923][ T30] ? schedule+0x298/0x350 [ 3040.575320][ T30] ? __pfx_lock_release+0x10/0x10 [ 3040.580371][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3040.609756][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3040.660769][ T30] schedule+0xe7/0x350 [ 3040.664916][ T30] schedule_preempt_disabled+0x13/0x30 [ 3040.670406][ T30] __mutex_lock+0x5b8/0x9c0 [ 3040.713789][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3040.740668][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3040.771496][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3040.776715][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 3040.801784][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3040.807323][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3040.850827][ T30] ? avc_has_perm+0x11b/0x1c0 [ 3040.855581][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3040.891637][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 3040.896755][ T30] ? __lock_acquire+0xbdd/0x3cb0 [ 3040.929437][ T30] netlink_rcv_skb+0x16b/0x440 [ 3040.970802][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3040.976363][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3041.010750][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 3041.030953][ T30] netlink_unicast+0x53c/0x7f0 [ 3041.035794][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3041.063824][ T30] netlink_sendmsg+0x8b8/0xd70 [ 3041.068670][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3041.117587][ T30] __sys_sendto+0x47f/0x4e0 [ 3041.155102][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 3041.160198][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 3041.186607][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 3041.210696][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 3041.215531][ T30] ? do_syscall_64+0x91/0x250 [ 3041.241346][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 3041.251248][ T30] do_syscall_64+0xcd/0x250 [ 3041.278717][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3041.333677][ T30] RIP: 0033:0x7fac96d7bd0c [ 3041.342872][ T30] RSP: 002b:00007fff5d4846a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3041.376118][ T30] RAX: ffffffffffffffda RBX: 00007fac97a44620 RCX: 00007fac96d7bd0c [ 3041.413547][ T30] RDX: 0000000000000028 RSI: 00007fac97a44670 RDI: 0000000000000003 [ 3041.435847][ T30] RBP: 0000000000000000 R08: 00007fff5d4846f4 R09: 000000000000000c [ 3041.462396][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3041.470441][ T30] R13: 0000000000000000 R14: 00007fac97a44670 R15: 0000000000000000 [ 3041.534972][ T30] [ 3041.539085][ T30] INFO: task syz-executor:30536 blocked for more than 149 seconds. [ 3041.581539][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3041.587493][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3041.636768][ T30] task:syz-executor state:D stack:27552 pid:30536 tgid:30536 ppid:1 flags:0x00000004 [ 3041.680722][ T30] Call Trace: [ 3041.684057][ T30] [ 3041.687006][ T30] __schedule+0xe37/0x5490 [ 3041.720661][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3041.725947][ T30] ? find_held_lock+0x2d/0x110 [ 3041.760721][ T30] ? __pfx___schedule+0x10/0x10 [ 3041.790865][ T30] ? schedule+0x298/0x350 [ 3041.795265][ T30] ? __pfx_lock_release+0x10/0x10 [ 3041.800377][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3041.837360][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3041.869536][ T30] schedule+0xe7/0x350 [ 3041.878869][ T30] schedule_preempt_disabled+0x13/0x30 [ 3041.901059][ T30] __mutex_lock+0x5b8/0x9c0 [ 3041.905632][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3041.930749][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3041.935850][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3041.993735][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 3041.998756][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3042.031109][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3042.036386][ T30] ? avc_has_perm+0x11b/0x1c0 [ 3042.072154][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3042.103618][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 3042.108712][ T30] ? __lock_acquire+0xbdd/0x3cb0 [ 3042.161197][ T30] netlink_rcv_skb+0x16b/0x440 [ 3042.166045][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3042.206247][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3042.223879][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 3042.229242][ T30] netlink_unicast+0x53c/0x7f0 [ 3042.261662][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3042.267040][ T30] netlink_sendmsg+0x8b8/0xd70 [ 3042.301549][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3042.306915][ T30] __sys_sendto+0x47f/0x4e0 [ 3042.343236][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 3042.380851][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 3042.386302][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 3042.410703][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 3042.415533][ T30] ? do_syscall_64+0x91/0x250 [ 3042.420248][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 3042.459836][ T30] do_syscall_64+0xcd/0x250 [ 3042.484471][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3042.490465][ T30] RIP: 0033:0x7fd7ee37bd0c [ 3042.536144][ T30] RSP: 002b:00007ffffeaf8f90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3042.573849][ T30] RAX: ffffffffffffffda RBX: 00007fd7ef044620 RCX: 00007fd7ee37bd0c [ 3042.613904][ T30] RDX: 0000000000000028 RSI: 00007fd7ef044670 RDI: 0000000000000003 [ 3042.638977][ T30] RBP: 0000000000000000 R08: 00007ffffeaf8fe4 R09: 000000000000000c [ 3042.678875][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3042.721600][ T30] R13: 0000000000000000 R14: 00007fd7ef044670 R15: 0000000000000000 [ 3042.729646][ T30] [ 3042.758884][ T30] INFO: task syz-executor:30537 blocked for more than 150 seconds. [ 3042.791300][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3042.797266][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3042.845279][ T30] task:syz-executor state:D stack:27552 pid:30537 tgid:30537 ppid:1 flags:0x00004004 [ 3042.894032][ T30] Call Trace: [ 3042.897376][ T30] [ 3042.900350][ T30] __schedule+0xe37/0x5490 [ 3042.930733][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3042.936009][ T30] ? find_held_lock+0x2d/0x110 [ 3042.973760][ T30] ? __pfx___schedule+0x10/0x10 [ 3042.978690][ T30] ? schedule+0x298/0x350 [ 3043.010792][ T30] ? __pfx_lock_release+0x10/0x10 [ 3043.015909][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3043.060682][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3043.081025][ T30] schedule+0xe7/0x350 [ 3043.085176][ T30] schedule_preempt_disabled+0x13/0x30 [ 3043.121385][ T30] __mutex_lock+0x5b8/0x9c0 [ 3043.125988][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3043.144351][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3043.149462][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3043.201504][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 3043.206535][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3043.240961][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3043.246240][ T30] ? avc_has_perm+0x11b/0x1c0 [ 3043.270499][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3043.300994][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 3043.308480][ T30] ? __lock_acquire+0xbdd/0x3cb0 [ 3043.345181][ T30] netlink_rcv_skb+0x16b/0x440 [ 3043.350019][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3043.401160][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3043.422167][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 3043.427535][ T30] netlink_unicast+0x53c/0x7f0 [ 3043.460671][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3043.466032][ T30] netlink_sendmsg+0x8b8/0xd70 [ 3043.483834][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3043.489201][ T30] __sys_sendto+0x47f/0x4e0 [ 3043.541715][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 3043.546820][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 3043.580360][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 3043.600814][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 3043.605646][ T30] ? do_syscall_64+0x91/0x250 [ 3043.654969][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 3043.660239][ T30] do_syscall_64+0xcd/0x250 [ 3043.701199][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3043.707183][ T30] RIP: 0033:0x7f891477bd0c [ 3043.744231][ T30] RSP: 002b:00007ffe6db05560 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3043.771314][ T30] RAX: ffffffffffffffda RBX: 00007f8915444620 RCX: 00007f891477bd0c [ 3043.779365][ T30] RDX: 0000000000000028 RSI: 00007f8915444670 RDI: 0000000000000003 [ 3043.851472][ T30] RBP: 0000000000000000 R08: 00007ffe6db055b4 R09: 000000000000000c [ 3043.859516][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3043.910809][ T30] R13: 0000000000000000 R14: 00007f8915444670 R15: 0000000000000000 [ 3043.941160][ T30] [ 3043.944289][ T30] INFO: task syz-executor:30541 blocked for more than 152 seconds. [ 3043.978936][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3044.030678][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3044.051677][ T30] task:syz-executor state:D stack:27552 pid:30541 tgid:30541 ppid:1 flags:0x00000004 [ 3044.090051][ T30] Call Trace: [ 3044.098822][ T30] [ 3044.110771][ T30] __schedule+0xe37/0x5490 [ 3044.115257][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3044.120499][ T30] ? find_held_lock+0x2d/0x110 [ 3044.181605][ T30] ? __pfx___schedule+0x10/0x10 [ 3044.186534][ T30] ? schedule+0x298/0x350 [ 3044.231006][ T30] ? __pfx_lock_release+0x10/0x10 [ 3044.236110][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3044.259871][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3044.291038][ T30] schedule+0xe7/0x350 [ 3044.303064][ T30] schedule_preempt_disabled+0x13/0x30 [ 3044.308607][ T30] __mutex_lock+0x5b8/0x9c0 [ 3044.354649][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3044.359858][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3044.390921][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 3044.421008][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 3044.430147][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3044.463447][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3044.468719][ T30] ? avc_has_perm+0x11b/0x1c0 [ 3044.511006][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3044.516281][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 3044.540710][ T30] ? __lock_acquire+0xbdd/0x3cb0 [ 3044.545722][ T30] netlink_rcv_skb+0x16b/0x440 [ 3044.550520][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3044.620697][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3044.626063][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 3044.661215][ T30] netlink_unicast+0x53c/0x7f0 [ 3044.666057][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3044.690717][ T30] netlink_sendmsg+0x8b8/0xd70 [ 3044.695562][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3044.730744][ T30] __sys_sendto+0x47f/0x4e0 [ 3044.750742][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 3044.755835][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 3044.801395][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 3044.832785][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 3044.837621][ T30] ? do_syscall_64+0x91/0x250 [ 3044.866041][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 3044.891412][ T30] do_syscall_64+0xcd/0x250 [ 3044.896286][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3044.921370][ T30] RIP: 0033:0x7f46a7d7bd0c [ 3044.925850][ T30] RSP: 002b:00007ffc7ce9a300 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3044.991344][ T30] RAX: ffffffffffffffda RBX: 00007f46a8a44620 RCX: 00007f46a7d7bd0c [ 3044.999404][ T30] RDX: 0000000000000028 RSI: 00007f46a8a44670 RDI: 0000000000000003 [ 3045.044469][ T30] RBP: 0000000000000000 R08: 00007ffc7ce9a354 R09: 000000000000000c [ 3045.080719][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3045.088755][ T30] R13: 0000000000000000 R14: 00007f46a8a44670 R15: 0000000000000000 [ 3045.150746][ T30] [ 3045.153829][ T30] INFO: task syz-executor:30542 blocked for more than 153 seconds. [ 3045.200693][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 3045.206644][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.