last executing test programs: 1m50.254650067s ago: executing program 2 (id=3088): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) 1m50.213268881s ago: executing program 3 (id=3089): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13) 1m49.897649381s ago: executing program 3 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r1, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) 1m49.801169289s ago: executing program 2 (id=3094): r0 = add_key$user(&(0x7f0000000440), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000480)=""/199, 0xc7, &(0x7f0000000580)={&(0x7f0000000340)={'blake2b-256\x00'}}) 1m49.614548739s ago: executing program 3 (id=3097): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000006680)) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 1m49.468956972s ago: executing program 2 (id=3098): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = io_uring_setup(0x4bea, &(0x7f0000000000)={0x0, 0x8297, 0x8, 0x8000, 0x2f}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1) 1m49.222268348s ago: executing program 3 (id=3101): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) 1m49.140192099s ago: executing program 2 (id=3102): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1}, 0x50) syz_io_uring_setup(0x7d08, &(0x7f0000000400)={0x0, 0x20000, 0x4002, 0xffffffff, 0x3de}, 0x0, 0x0) 1m48.994582846s ago: executing program 3 (id=3103): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffc}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x1, 0x3}, 0x2) 1m48.823756375s ago: executing program 3 (id=3104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) 1m48.726595041s ago: executing program 2 (id=3105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m48.52582803s ago: executing program 2 (id=3106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 1m35.583863281s ago: executing program 1 (id=3231): syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000001780)={0x4, 0x8000000000000001, 0x6, 0x1, 0x5, 0x1, 0x3, 0xfbad}, &(0x7f00000017c0)={0xf, 0x7, 0x8001, 0x8000000000000000, 0x1, 0xcc22, 0x4, 0x2}, 0x0, 0x0, 0x0) 1m35.367512248s ago: executing program 1 (id=3233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xb, &(0x7f00000000c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1d5ae, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m34.964931089s ago: executing program 1 (id=3236): syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101080) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$UHID_CREATE(r0, 0x0, 0x0) 1m34.824569435s ago: executing program 1 (id=3238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008045}, 0x840) 1m34.664637377s ago: executing program 1 (id=3240): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x96}, 0x1c) 1m34.610200518s ago: executing program 1 (id=3241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000680)={0xd4, 0x0, 0x6}) 1m33.669199116s ago: executing program 32 (id=3104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) 1m33.413550012s ago: executing program 33 (id=3106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 1m19.052230404s ago: executing program 34 (id=3241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000680)={0xd4, 0x0, 0x6}) 1m12.247470166s ago: executing program 5 (id=3374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m11.367247631s ago: executing program 5 (id=3382): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.922078376s ago: executing program 5 (id=3386): r0 = socket$nl_generic(0x11, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m10.574081012s ago: executing program 5 (id=3389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m10.500423827s ago: executing program 4 (id=3390): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) 1m10.201047113s ago: executing program 4 (id=3392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.623545817s ago: executing program 4 (id=3395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000002c0)=0x800084, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 1m9.170737906s ago: executing program 4 (id=3397): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 1m8.888209498s ago: executing program 4 (id=3398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8db42640452d591175c9d623b515c6d2d075d57080200000ea0001000000dae5", 0x20) 1m8.504176163s ago: executing program 4 (id=3400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) 1m8.234509556s ago: executing program 5 (id=3401): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m7.738752006s ago: executing program 5 (id=3405): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x57}) 1m0.19681525s ago: executing program 6 (id=3414): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="007b9c941e676794f7c029715e7f5d4ddd1dd06ce9d55a162d2e9e737ea1ffd6d2b8773a35e1a6be4b5e8b3fbd241532c10ce2762945c40000000b0000007a565c", 0x41) 59.907525095s ago: executing program 6 (id=3415): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xffffffff, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x6, 'y)\x00'}, 0x9, 0x1, {0x0}, 0xea}) 59.624021154s ago: executing program 6 (id=3416): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, 0xffffffffffffffff, 0x11, 0x0, r1}, 0x11) 59.411459652s ago: executing program 6 (id=3417): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x3c}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 59.169154818s ago: executing program 6 (id=3418): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x4000}, 0xc) 58.889952741s ago: executing program 6 (id=3420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r0, 0x8910, 0x20001114) 53.083455143s ago: executing program 35 (id=3400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) 52.537184689s ago: executing program 36 (id=3405): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x57}) 51.649337223s ago: executing program 7 (id=3452): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f00000001c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0}) 49.947012889s ago: executing program 0 (id=3459): syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0xff0f000000000000) 49.715621447s ago: executing program 0 (id=3460): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x10006576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r0, 0x100000000) 49.512548788s ago: executing program 0 (id=3461): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) 48.498735588s ago: executing program 0 (id=3462): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x0, 0x0}, {0x2, 0x201, 0x0, 0x0}], 0x2}) 48.294300746s ago: executing program 7 (id=3463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 48.126836149s ago: executing program 7 (id=3464): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 47.92378826s ago: executing program 7 (id=3465): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r0, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) 46.875659706s ago: executing program 0 (id=3466): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r0) 46.654668013s ago: executing program 7 (id=3467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 46.592046233s ago: executing program 0 (id=3468): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) 46.196990923s ago: executing program 7 (id=3469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f0000010200)={0x0, 0x0}) 43.516860586s ago: executing program 37 (id=3420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r0, 0x8910, 0x20001114) 37.219347785s ago: executing program 8 (id=3443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) 31.513713819s ago: executing program 38 (id=3468): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) 30.93625583s ago: executing program 39 (id=3469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f0000010200)={0x0, 0x0}) 22.007406857s ago: executing program 40 (id=3443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) 16.219443311s ago: executing program 9 (id=3501): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 15.759113466s ago: executing program 9 (id=3502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.643752831s ago: executing program 9 (id=3503): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') read$FUSE(r0, &(0x7f0000001940)={0x2020}, 0x2020) 15.478090717s ago: executing program 9 (id=3504): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) 15.350565128s ago: executing program 9 (id=3505): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="1f18e395312d0af6d99feefeb182f3d121929030ce63d01956b05e46b656022b7263cc3e1d40fb1c2700437d11aea9d3", 0x30) 15.248460344s ago: executing program 9 (id=3506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x123c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) 0s ago: executing program 41 (id=3506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x123c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 8037][T11928] [U] 1WT`8H$09\ [ 190.833694][T11928] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 190.846506][T11928] [U] 4XZ^Y)MC. OȞPOW [ 190.853267][T11928] [U] ä%Z [ 190.856715][T11928] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 190.868663][T11926] [U] P>BЍ̖Z% [ 191.067389][ T30] audit: type=1400 audit(1751586221.068:612): avc: denied { read } for pid=11931 comm="syz.0.2801" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.138626][T11934] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 191.148738][ T30] audit: type=1400 audit(1751586221.098:613): avc: denied { open } for pid=11931 comm="syz.0.2801" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.351223][ T5950] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 191.562500][ T5950] usb 1-1: config 0 has no interfaces? [ 191.581980][ T5950] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 191.624260][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.665707][ T5950] usb 1-1: Product: syz [ 191.679106][ T5950] usb 1-1: Manufacturer: syz [ 191.707877][T11921] fido_id[11921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 191.725059][ T5950] usb 1-1: SerialNumber: syz [ 191.770542][ T5950] usb 1-1: config 0 descriptor?? [ 192.008360][ T5950] usb 1-1: USB disconnect, device number 12 [ 192.421827][T11960] dummy0: entered promiscuous mode [ 192.447713][T11959] dummy0: left promiscuous mode [ 193.591667][ T5950] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 193.760900][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 193.800004][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.855472][ T5950] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.888620][ T5950] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 193.910535][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.939852][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.948911][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.960963][ T5889] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 193.994757][ T5950] usb 3-1: Product: syz [ 194.004705][ T5950] usb 3-1: Manufacturer: syz [ 194.017215][ T5950] usb 3-1: SerialNumber: syz [ 194.047372][ T5950] usb 3-1: config 0 descriptor?? [ 194.132970][ T5889] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 194.158290][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.190618][ T5889] usb 1-1: config 0 descriptor?? [ 194.304674][ T5950] usb 3-1: USB disconnect, device number 15 [ 194.643448][ T5889] ath6kl: Failed to read usb control message: -32 [ 194.678474][ T5889] ath6kl: Unable to read the bmi data from the device: -32 [ 194.723662][ T5889] ath6kl: Unable to recv target info: -32 [ 194.769412][ T5889] ath6kl: Failed to init ath6kl core: -32 [ 194.805458][ T5889] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 194.898182][ T5889] usb 1-1: USB disconnect, device number 13 [ 196.146023][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 196.198599][T12038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2843'. [ 196.341052][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2844'. [ 196.555898][T12043] dummy0: entered promiscuous mode [ 196.634326][T12043] dummy0: left promiscuous mode [ 197.416326][T12064] bond0: option mode: unable to set because the bond device has slaves [ 198.410942][ T5889] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.602381][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.643192][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.699217][ T5889] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 198.749385][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.811696][ T5889] usb 2-1: config 0 descriptor?? [ 199.090924][ T5950] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 199.250856][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 199.263579][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.285682][ T5950] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 199.304642][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.322209][ T5950] usb 1-1: config 0 has no interface number 0 [ 199.332144][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.342464][ T5950] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.358900][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.368978][ T5950] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.383964][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.405944][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.416529][ T5950] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 199.435051][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.446463][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 199.471482][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.488970][ T5950] usb 1-1: Product: syz [ 199.499663][ T5950] usb 1-1: SerialNumber: syz [ 199.508022][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.533884][ T5950] usb 1-1: config 0 descriptor?? [ 199.551276][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.568034][ T5950] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 199.580294][ T5889] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 199.598927][ T5950] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input20 [ 199.617160][ T5889] hid_mf 0003:0079:1846.0016: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 199.687675][ T5889] hid_mf 0003:0079:1846.0016: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 199.816243][ T5889] usb 2-1: USB disconnect, device number 14 [ 199.959270][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.968440][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.975649][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.983985][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.991880][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.999482][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 200.010597][ T5950] usb 1-1: USB disconnect, device number 14 [ 200.016665][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 200.016694][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 200.060276][T12110] fido_id[12110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 200.136645][ T5950] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 200.340780][ C1] sched: DL replenish lagged too much [ 200.367004][T12117] netlink: 'syz.1.2873': attribute type 4 has an invalid length. [ 200.379305][T12117] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2873'. [ 200.580740][T12123] sctp: [Deprecated]: syz.1.2876 (pid 12123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.580740][T12123] Use struct sctp_sack_info instead [ 201.488197][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 201.488213][ T30] audit: type=1400 audit(1751586231.488:616): avc: denied { map } for pid=12139 comm="syz.3.2884" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 201.598491][T12142] vlan2: entered promiscuous mode [ 201.604903][T12142] bridge0: entered promiscuous mode [ 201.687892][T12144] veth0_to_bond: entered allmulticast mode [ 201.849166][ T30] audit: type=1400 audit(1751586231.848:617): avc: denied { append } for pid=12147 comm="syz.3.2888" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 201.873420][T12148] random: crng reseeded on system resumption [ 202.301578][T12159] macvlan3: entered promiscuous mode [ 202.386754][ T30] audit: type=1400 audit(1751586232.388:618): avc: denied { setopt } for pid=12160 comm="syz.3.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.108284][T12183] netlink: 'syz.0.2903': attribute type 4 has an invalid length. [ 204.119558][T12183] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2903'. [ 204.227971][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 204.237670][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 204.250318][T12185] netlink: 'syz.0.2904': attribute type 15 has an invalid length. [ 204.258502][T12185] netlink: 'syz.0.2904': attribute type 18 has an invalid length. [ 204.390575][T12187] mkiss: ax0: crc mode is auto. [ 204.898375][ T30] audit: type=1400 audit(1751586234.898:619): avc: denied { write } for pid=12188 comm="syz.1.2906" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.023923][ T30] audit: type=1326 audit(1751586238.028:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.2.2912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ebf8e929 code=0x0 [ 208.628606][T12245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 209.169213][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 209.228479][T12259] dummy0: entered promiscuous mode [ 209.277308][T12259] dummy0: left promiscuous mode [ 209.285256][T12263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2928'. [ 209.950877][ T5950] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 210.051004][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 210.110986][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 210.120800][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.139510][ T5950] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 210.149127][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.169982][ T5950] usb 5-1: config 0 descriptor?? [ 210.217633][ T5889] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 210.227194][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.241695][ T5889] usb 4-1: Product: syz [ 210.245926][ T5889] usb 4-1: Manufacturer: syz [ 210.257085][ T5889] usb 4-1: SerialNumber: syz [ 210.271592][ T5889] usb 4-1: config 0 descriptor?? [ 210.499099][ T5889] usb 4-1: USB disconnect, device number 13 [ 210.619505][ T5950] apple 0003:05AC:027C.0017: hidraw0: USB HID v0.05 Device [HID 05ac:027c] on usb-dummy_hcd.4-1/input0 [ 210.836745][ T5889] usb 5-1: USB disconnect, device number 15 [ 211.078751][ T30] audit: type=1400 audit(1751586241.078:621): avc: denied { listen } for pid=12279 comm="syz.3.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.192826][T12305] cgroup: Unknown subsys name 'cpuset' [ 212.338078][T12309] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2949'. [ 212.403495][T12308] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2949'. [ 213.051076][ T5889] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.251004][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 213.267597][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.296014][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.327953][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.353869][ T5889] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.376318][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.407515][ T5889] usb 4-1: config 0 descriptor?? [ 213.421151][ T5950] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 213.611009][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 213.621164][ T5950] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 213.643979][ T5950] usb 1-1: config 0 has no interface number 0 [ 213.667185][ T5950] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=a9.81 [ 213.686992][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.719329][ T5950] usb 1-1: Product: syz [ 213.728410][ T5950] usb 1-1: Manufacturer: syz [ 213.744531][ T5950] usb 1-1: SerialNumber: syz [ 213.767939][ T5950] usb 1-1: config 0 descriptor?? [ 213.799557][ T5950] usb-storage 1-1:0.6: USB Mass Storage device detected [ 213.829095][ T5950] usb-storage 1-1:0.6: device ignored [ 213.872170][ T5889] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 213.916614][ T5889] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 213.964386][ T5889] microsoft 0003:045E:07DA.0018: no inputs found [ 213.985469][ T5889] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 214.169131][ T5889] usb 4-1: USB disconnect, device number 14 [ 214.192169][T12340] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 215.304046][ T30] audit: type=1400 audit(1751586245.308:622): avc: denied { ioctl } for pid=12370 comm="syz.3.2978" path="socket:[29479]" dev="sockfs" ino=29479 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 215.469354][T12376] tmpfs: Cannot change global quota limit on remount [ 216.081064][ T5937] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.266691][ T5937] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 216.287672][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.320672][T12397] SELinux: syz.0.2991 (12397) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 216.335187][ T5937] usb 5-1: config 0 descriptor?? [ 216.788858][ T5937] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 216.828006][ T5937] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 216.876241][ T5937] asix 5-1:0.0: probe with driver asix failed with error -71 [ 216.906049][ T5937] usb 5-1: USB disconnect, device number 16 [ 217.770090][ T30] audit: type=1326 audit(1751586247.768:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 217.893517][ T30] audit: type=1326 audit(1751586247.768:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 217.969901][ T30] audit: type=1326 audit(1751586247.798:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 218.031957][ T30] audit: type=1326 audit(1751586247.798:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 218.160908][ T30] audit: type=1326 audit(1751586247.798:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 218.271942][ T30] audit: type=1326 audit(1751586247.808:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 218.386093][ T30] audit: type=1326 audit(1751586247.808:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 218.476864][ T30] audit: type=1326 audit(1751586247.808:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebf8e929 code=0x7ffc0000 [ 218.777985][ T30] audit: type=1400 audit(1751586248.778:631): avc: denied { create } for pid=12441 comm="syz.4.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.392144][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 221.581016][ T30] audit: type=1400 audit(1751586251.568:632): avc: denied { write } for pid=12494 comm="syz.4.3038" path="socket:[30018]" dev="sockfs" ino=30018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.617063][T12517] mkiss: ax0: crc mode is auto. [ 223.040605][T12523] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 224.169313][ T5950] usb 1-1: USB disconnect, device number 15 [ 224.581304][ T5950] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 224.591094][ T5875] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 224.762406][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 224.776338][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 224.797210][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.816811][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 224.835611][ T5950] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 224.854988][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.868939][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.888778][T12542] netlink: 'syz.0.3060': attribute type 11 has an invalid length. [ 224.906666][ T5875] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 224.919018][ T5950] usb 2-1: Product: syz [ 224.924492][T12542] netlink: 'syz.0.3060': attribute type 13 has an invalid length. [ 224.942112][ T5950] usb 2-1: Manufacturer: syz [ 224.967379][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.982494][ T5950] usb 2-1: SerialNumber: syz [ 225.032666][ T5950] usb 2-1: config 0 descriptor?? [ 225.040395][ T5875] usb 4-1: config 0 descriptor?? [ 225.079220][ T5950] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 225.145330][ T5950] usb 2-1: setting power ON [ 225.178328][ T5950] dvb-usb: bulk message failed: -22 (2/0) [ 225.226336][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.317556][ T5950] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 225.360888][ T5950] usb 2-1: media controller created [ 225.468134][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.566618][ T5875] hid_mf 0003:0079:1846.0019: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 225.619560][ T5950] usb 2-1: selecting invalid altsetting 6 [ 225.619620][ T5950] usb 2-1: digital interface selection failed (-22) [ 225.619637][ T5950] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 225.630456][ T5950] usb 2-1: setting power OFF [ 225.630548][ T5950] dvb-usb: bulk message failed: -22 (2/0) [ 225.630594][ T5950] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 225.630608][ T5950] (NULL device *): no alternate interface [ 225.652201][ T5875] hid_mf 0003:0079:1846.0019: Invalid report, this should never happen! [ 225.652228][ T5875] hid_mf 0003:0079:1846.0019: Force feedback init failed. [ 225.788894][ T5950] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 225.846921][ T5875] usb 4-1: USB disconnect, device number 15 [ 225.882003][ T5950] usb 2-1: USB disconnect, device number 15 [ 225.959210][T12554] fido_id[12554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 226.538977][ T30] audit: type=1400 audit(1751586256.538:633): avc: denied { connect } for pid=12558 comm="syz.0.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 226.751570][ T30] audit: type=1400 audit(1751586256.748:634): avc: denied { write } for pid=12562 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.897624][ T30] audit: type=1400 audit(1751586256.748:635): avc: denied { read } for pid=12562 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 228.287482][ T30] audit: type=1400 audit(1751586258.278:636): avc: denied { bind } for pid=12596 comm="syz.3.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.407772][ T30] audit: type=1400 audit(1751586258.278:637): avc: denied { write } for pid=12596 comm="syz.3.3085" path="socket:[30358]" dev="sockfs" ino=30358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.670207][T12609] netlink: 'syz.1.3091': attribute type 4 has an invalid length. [ 229.079496][ T30] audit: type=1400 audit(1751586259.078:638): avc: denied { getopt } for pid=12617 comm="syz.1.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 229.276915][ T30] audit: type=1400 audit(1751586259.208:639): avc: denied { connect } for pid=12620 comm="syz.0.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.801157][ T5950] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 229.995317][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.029471][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 230.086940][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 230.150793][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 230.204955][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.268479][ T5950] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 230.305115][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.324566][ T5950] usb 1-1: Product: syz [ 230.333776][ T5950] usb 1-1: Manufacturer: syz [ 230.338416][ T5950] usb 1-1: SerialNumber: syz [ 230.366498][ T5950] usb 1-1: config 0 descriptor?? [ 230.389034][ T5950] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22 [ 230.559735][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 230.582617][T12646] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 230.619295][T12646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.658729][ T30] audit: type=1400 audit(1751586260.658:640): avc: denied { append } for pid=12632 comm="syz.0.3100" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 230.731400][ T5950] usb 1-1: USB disconnect, device number 16 [ 232.043756][ T5875] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 232.200868][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 232.217118][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.228039][ T5875] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.248737][ T5875] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.259200][ T5875] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.275314][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.282220][ T5875] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 232.295014][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.318754][ T5875] usb 1-1: config 0 descriptor?? [ 232.421135][ T5950] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 232.583472][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.597755][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.611921][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.628737][ T5950] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.640960][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.663441][ T5950] usb 2-1: config 0 descriptor?? [ 232.764908][ T5875] ryos 0003:1E7D:3232.001A: hidraw0: USB HID vff.ff Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 232.986253][ T5875] usb 1-1: USB disconnect, device number 17 [ 233.083814][ T5950] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 233.099928][ T5950] plantronics 0003:047F:FFFF.001B: unsupported Resolution Multiplier 0 [ 233.110238][ T5950] plantronics 0003:047F:FFFF.001B: unsupported Resolution Multiplier 0 [ 233.140446][ T5950] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 233.355684][ T5875] usb 2-1: USB disconnect, device number 16 [ 236.901063][ T5950] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 236.995809][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'. [ 237.021076][T12755] openvswitch: netlink: Unknown nsh attribute 0 [ 237.037625][T12755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.093102][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.117983][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.173697][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.239094][ T5950] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.279917][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.323607][ T5950] usb 5-1: config 0 descriptor?? [ 237.799788][ T5950] plantronics 0003:047F:FFFF.001C: unbalanced collection at end of report description [ 237.847043][ T5950] plantronics 0003:047F:FFFF.001C: parse failed [ 237.881008][ T5950] plantronics 0003:047F:FFFF.001C: probe with driver plantronics failed with error -22 [ 238.049748][ T5950] usb 5-1: USB disconnect, device number 17 [ 238.693904][T12791] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 238.981504][T12800] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 239.418357][T12814] netlink: 'syz.1.3184': attribute type 4 has an invalid length. [ 239.426655][T12814] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3184'. [ 239.623823][ T30] audit: type=1400 audit(2000000004.890:641): avc: denied { map } for pid=12817 comm="syz.4.3186" path="/dev/sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 239.647687][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.671004][ T5889] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 239.759027][ T30] audit: type=1400 audit(2000000004.930:642): avc: denied { execute } for pid=12817 comm="syz.4.3186" path="/dev/sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 239.783312][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.871286][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 239.882278][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.915664][ T5889] usb 1-1: config 0 interface 0 altsetting 203 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 239.960917][ T5889] usb 1-1: config 0 interface 0 altsetting 203 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.998454][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.015569][ T5889] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 240.039950][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.069178][ T5889] usb 1-1: config 0 descriptor?? [ 240.495524][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'. [ 240.506153][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3197'. [ 240.537674][ T5889] microsoft 0003:045E:00F9.001D: item fetching failed at offset 0/3 [ 240.575240][ T5889] microsoft 0003:045E:00F9.001D: parse failed [ 240.589303][ T5889] microsoft 0003:045E:00F9.001D: probe with driver microsoft failed with error -22 [ 240.788919][ T5889] usb 1-1: USB disconnect, device number 18 [ 240.890120][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 241.757612][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 241.784262][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 241.805820][T12871] netlink: 'syz.0.3212': attribute type 12 has an invalid length. [ 242.841151][ T5889] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 243.012755][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 243.036964][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.070346][ T5889] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 243.110242][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.155170][ T5889] usb 1-1: config 0 descriptor?? [ 243.206248][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 243.289096][ T30] audit: type=1400 audit(2000000008.550:643): avc: denied { recv } for pid=5821 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.240 dest=48158 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 243.582598][ T5889] steelseries 0003:1038:1410.001E: not enough fields in HID_OUTPUT_REPORT 0 [ 243.827254][ T5889] usb 1-1: USB disconnect, device number 19 [ 244.309798][T12934] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 244.665279][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 244.687421][T12943] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 244.717204][T12943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.445158][T12959] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.3256'. [ 246.228763][T12970] xt_hashlimit: max too large, truncated to 1048576 [ 246.258029][T12970] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 246.655267][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 246.670682][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.685896][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.694581][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.706946][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.717493][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.754135][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.766476][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.776636][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.794842][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.803998][ T30] audit: type=1400 audit(2000000012.010:644): avc: denied { mounton } for pid=12977 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 246.835376][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.851261][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 246.906504][T12978] netlink: 'syz.4.3265': attribute type 20 has an invalid length. [ 247.413817][ T30] audit: type=1400 audit(2000000012.670:645): avc: denied { read } for pid=12990 comm="syz.4.3269" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 247.551106][ T30] audit: type=1400 audit(2000000012.670:646): avc: denied { open } for pid=12990 comm="syz.4.3269" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 247.919999][T13002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.940189][T12977] chnl_net:caif_netlink_parms(): no params data found [ 248.359482][T12979] chnl_net:caif_netlink_parms(): no params data found [ 248.791226][ T5823] Bluetooth: hci5: command tx timeout [ 248.953768][ T5823] Bluetooth: hci6: command tx timeout [ 249.081039][T12977] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.151083][T12977] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.158355][T12977] bridge_slave_0: entered allmulticast mode [ 249.211415][T12977] bridge_slave_0: entered promiscuous mode [ 249.508799][T12977] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.530443][T12977] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.559183][T12977] bridge_slave_1: entered allmulticast mode [ 249.580669][T12977] bridge_slave_1: entered promiscuous mode [ 249.632478][ T30] audit: type=1326 audit(2000000014.900:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.4.3284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7645b8e929 code=0x0 [ 250.012340][ T30] audit: type=1400 audit(2000000015.280:648): avc: denied { connect } for pid=13037 comm="syz.0.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 250.064649][T12977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.099826][T12979] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.116066][T12979] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.149571][T12979] bridge_slave_0: entered allmulticast mode [ 250.192000][T12979] bridge_slave_0: entered promiscuous mode [ 250.230156][T12977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.318709][T12979] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.338293][T12979] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.367470][T12979] bridge_slave_1: entered allmulticast mode [ 250.401935][T12979] bridge_slave_1: entered promiscuous mode [ 250.503983][T12977] team0: Port device team_slave_0 added [ 250.657868][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3290'. [ 250.684047][T13046] nbd: illegal input index -1900544 [ 250.704760][T12977] team0: Port device team_slave_1 added [ 250.825996][T12979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.871439][ T5823] Bluetooth: hci5: command tx timeout [ 250.885135][T12979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.019482][T12977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.031215][ T5816] Bluetooth: hci6: command tx timeout [ 251.061116][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.151124][T12977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.196422][ T30] audit: type=1400 audit(2000000016.460:649): avc: denied { setopt } for pid=13049 comm="syz.4.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.305759][ T30] audit: type=1400 audit(2000000016.510:650): avc: denied { connect } for pid=13043 comm="syz.0.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 251.380239][T12977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.394722][ T30] audit: type=1400 audit(2000000016.560:651): avc: denied { getopt } for pid=13049 comm="syz.4.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.432130][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.536068][T12977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.684588][T12979] team0: Port device team_slave_0 added [ 251.886565][T12979] team0: Port device team_slave_1 added [ 251.990177][T12977] hsr_slave_0: entered promiscuous mode [ 252.025747][T12977] hsr_slave_1: entered promiscuous mode [ 252.041146][ T5889] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 252.066192][T12977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.100956][T12977] Cannot create hsr debugfs directory [ 252.184667][T12979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.205979][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.234016][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 252.266323][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.284036][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.304405][T12979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.326763][ T5889] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 252.358714][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.396262][ T5889] usb 1-1: config 0 descriptor?? [ 252.457650][T12979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.470882][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.558322][T12979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.923696][ T5889] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf4 found [ 252.945616][ T5889] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf3 found [ 252.954590][ T5816] Bluetooth: hci5: command tx timeout [ 253.009688][T12979] hsr_slave_0: entered promiscuous mode [ 253.020423][T12979] hsr_slave_1: entered promiscuous mode [ 253.027206][T12979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.046726][T12979] Cannot create hsr debugfs directory [ 253.087235][ T5889] usb 1-1: USB disconnect, device number 20 [ 253.111731][ T5816] Bluetooth: hci6: command tx timeout [ 253.611737][T12977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.679582][T12977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.843062][T12977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.986555][T12977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.235534][T12979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 254.297255][T12979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 254.406902][T12979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.455242][T12979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.561206][ T5950] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 254.731117][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 254.755519][ T5950] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 254.768578][T12977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.784757][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 254.855537][ T5950] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.931336][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.958964][T12979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.986112][T12977] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.001713][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.031543][ T5816] Bluetooth: hci5: command tx timeout [ 255.057093][ T5950] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 255.096306][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.103498][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.118123][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 255.169928][ T5950] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.191045][ T5816] Bluetooth: hci6: command tx timeout [ 255.215006][T12979] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.251254][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.277706][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.284931][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.304278][ T30] audit: type=1400 audit(2000000020.570:652): avc: denied { egress } for pid=5937 comm="kworker/0:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 255.330340][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.368732][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.375387][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.416006][ T5950] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 255.425344][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.432485][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.455201][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 255.476982][ T30] audit: type=1400 audit(2000000020.570:653): avc: denied { sendto } for pid=5937 comm="kworker/0:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 255.520699][ T5950] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.561841][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.568999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.615572][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.697112][ T5950] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.774930][ T5950] usb 5-1: string descriptor 0 read error: -22 [ 255.797947][ T5950] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 255.841915][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.868871][T12979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.952658][ T5950] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 256.352233][T13108] netlink: 'syz.0.3310': attribute type 9 has an invalid length. [ 256.379291][ T5950] usb 5-1: USB disconnect, device number 18 [ 256.757241][T12977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.866038][T12979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.347105][T12977] veth0_vlan: entered promiscuous mode [ 258.383559][T12979] veth0_vlan: entered promiscuous mode [ 258.435471][T12977] veth1_vlan: entered promiscuous mode [ 258.495714][T12979] veth1_vlan: entered promiscuous mode [ 258.575753][T12977] veth0_macvtap: entered promiscuous mode [ 258.608957][T12977] veth1_macvtap: entered promiscuous mode [ 258.637062][T12979] veth0_macvtap: entered promiscuous mode [ 258.661054][T12979] veth1_macvtap: entered promiscuous mode [ 258.691187][ T5937] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 258.704180][T12977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.736328][T12977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.758630][T12979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.776810][T12977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.796497][T12977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.807713][T12977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.820711][T12977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.839500][T12979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.859222][T12979] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.886696][ T5937] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 258.901207][T12979] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.910149][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.924653][T12979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.936098][ T5937] usb 1-1: Product: syz [ 258.941809][ T5937] usb 1-1: Manufacturer: syz [ 258.946563][T12979] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.960937][ T5937] usb 1-1: SerialNumber: syz [ 258.968360][ T5937] usb 1-1: config 0 descriptor?? [ 259.023519][ T5937] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 259.298643][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.323906][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.415139][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.491241][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.613827][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.650868][ T5937] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 259.698897][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.717778][ T5937] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 259.772116][ T30] audit: type=1400 audit(2000000025.040:654): avc: denied { mounton } for pid=12977 comm="syz-executor" path="/root/syzkaller.ISirSn/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 259.807688][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.836878][ T5937] usb 1-1: USB disconnect, device number 21 [ 259.898974][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.001312][ T30] audit: type=1400 audit(2000000025.090:655): avc: denied { mounton } for pid=12977 comm="syz-executor" path="/root/syzkaller.ISirSn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 260.228409][ T30] audit: type=1400 audit(2000000025.090:656): avc: denied { mounton } for pid=12977 comm="syz-executor" path="/root/syzkaller.ISirSn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 260.518211][ T30] audit: type=1400 audit(2000000025.160:657): avc: denied { unmount } for pid=12977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.720569][ T30] audit: type=1400 audit(2000000025.210:658): avc: denied { mounton } for pid=12977 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 260.848020][T13164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13164 comm=syz.5.3328 [ 260.901069][ T5937] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 260.926084][ T30] audit: type=1400 audit(2000000025.210:659): avc: denied { mount } for pid=12977 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 261.075081][ T30] audit: type=1400 audit(2000000025.210:660): avc: denied { mounton } for pid=12977 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 261.127540][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.217597][ T5816] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 261.229474][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: kworker/u9:2 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 261.229505][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.229519][ T5816] Workqueue: hci3 hci_rx_work [ 261.229553][ T5816] Call Trace: [ 261.229559][ T5816] [ 261.229567][ T5816] dump_stack_lvl+0x16c/0x1f0 [ 261.229600][ T5816] sysfs_warn_dup+0x7f/0xa0 [ 261.229626][ T5816] sysfs_create_dir_ns+0x24b/0x2b0 [ 261.229653][ T5816] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 261.229677][ T5816] ? find_held_lock+0x2b/0x80 [ 261.229705][ T5816] ? do_raw_spin_unlock+0x172/0x230 [ 261.229728][ T5816] kobject_add_internal+0x2c4/0x9b0 [ 261.229751][ T5816] kobject_add+0x16e/0x240 [ 261.229768][ T5816] ? __pfx_kobject_add+0x10/0x10 [ 261.229786][ T5816] ? do_raw_spin_unlock+0x172/0x230 [ 261.229807][ T5816] ? kobject_put+0xab/0x5a0 [ 261.229843][ T5816] device_add+0x288/0x1a70 [ 261.229872][ T5816] ? __pfx_dev_set_name+0x10/0x10 [ 261.229891][ T5816] ? __pfx_device_add+0x10/0x10 [ 261.229919][ T5816] ? mgmt_send_event_skb+0x2fb/0x460 [ 261.229954][ T5816] hci_conn_add_sysfs+0x17e/0x230 [ 261.229984][ T5816] le_conn_complete_evt+0x1075/0x1d70 [ 261.230018][ T5816] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 261.230045][ T5816] ? hci_event_packet+0x459/0x11c0 [ 261.230078][ T5816] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 261.230113][ T5816] ? skb_pull_data+0x166/0x210 [ 261.230143][ T5816] hci_le_meta_evt+0x354/0x5e0 [ 261.230175][ T5816] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 261.230210][ T5816] hci_event_packet+0x685/0x11c0 [ 261.230238][ T5816] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 261.230268][ T5816] ? __pfx_hci_event_packet+0x10/0x10 [ 261.230297][ T5816] ? kcov_remote_start+0x3c9/0x6d0 [ 261.230318][ T5816] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.230351][ T5816] hci_rx_work+0x2c5/0x16b0 [ 261.230381][ T5816] ? rcu_is_watching+0x12/0xc0 [ 261.230408][ T5816] process_one_work+0x9cf/0x1b70 [ 261.230438][ T5816] ? __pfx_process_one_work+0x10/0x10 [ 261.230465][ T5816] ? assign_work+0x1a0/0x250 [ 261.230497][ T5816] worker_thread+0x6c8/0xf10 [ 261.230527][ T5816] ? __pfx_worker_thread+0x10/0x10 [ 261.230546][ T5816] kthread+0x3c2/0x780 [ 261.230563][ T5816] ? __pfx_kthread+0x10/0x10 [ 261.230581][ T5816] ? rcu_is_watching+0x12/0xc0 [ 261.230603][ T5816] ? __pfx_kthread+0x10/0x10 [ 261.230621][ T5816] ret_from_fork+0x5d4/0x6f0 [ 261.230647][ T5816] ? __pfx_kthread+0x10/0x10 [ 261.230664][ T5816] ret_from_fork_asm+0x1a/0x30 [ 261.230696][ T5816] [ 261.511221][ T5937] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 261.520814][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.528810][ T5937] usb 1-1: Product: syz [ 261.536922][ T5937] usb 1-1: Manufacturer: syz [ 261.541593][ T5937] usb 1-1: SerialNumber: syz [ 261.557754][ T5937] usb 1-1: config 0 descriptor?? [ 261.568614][ T5937] usb 1-1: ucan: probing device on interface #0 [ 261.575252][ T5937] usb 1-1: ucan: invalid EP count (0) [ 261.580677][ T5937] usb 1-1: ucan: probe failed; try to update the device firmware [ 261.606727][ T5816] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 261.626558][ T5816] Bluetooth: hci3: failed to register connection device [ 261.795485][ T30] audit: type=1400 audit(2000000025.210:661): avc: denied { mount } for pid=12977 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 261.890367][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.905583][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.917777][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.937613][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.956326][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.017523][ T30] audit: type=1400 audit(2000000025.680:662): avc: denied { execheap } for pid=13154 comm="syz.5.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 262.347836][ T30] audit: type=1326 audit(2000000027.610:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13169 comm="syz.6.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41d38e929 code=0x7fc00000 [ 263.160237][T13174] chnl_net:caif_netlink_parms(): no params data found [ 263.247054][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 263.781444][ T5937] usb 1-1: USB disconnect, device number 22 [ 263.991911][ T5816] Bluetooth: hci1: command tx timeout [ 264.068646][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.146339][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.214227][T13174] bridge_slave_0: entered allmulticast mode [ 264.265739][T13174] bridge_slave_0: entered promiscuous mode [ 264.371439][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.392402][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.440223][T13174] bridge_slave_1: entered allmulticast mode [ 264.529451][T13174] bridge_slave_1: entered promiscuous mode [ 264.667881][T13232] netlink: 'syz.5.3355': attribute type 10 has an invalid length. [ 264.731449][T13232] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3355'. [ 264.923906][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.020620][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.284653][T13243] Bluetooth: MGMT ver 1.23 [ 265.618924][T13174] team0: Port device team_slave_0 added [ 265.725569][T13174] team0: Port device team_slave_1 added [ 266.047842][ T30] audit: type=1400 audit(2000000031.310:664): avc: denied { wake_alarm } for pid=13259 comm="syz.0.3368" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.087580][ T5816] Bluetooth: hci1: command tx timeout [ 266.156164][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.211270][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.237217][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.525235][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.637830][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.711048][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.737012][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.959534][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.569094][T13174] hsr_slave_0: entered promiscuous mode [ 267.631796][T13174] hsr_slave_1: entered promiscuous mode [ 267.638037][T13174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.743165][T13174] Cannot create hsr debugfs directory [ 267.780959][ T5875] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 267.988898][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 268.056046][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.137958][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 268.153690][ T5816] Bluetooth: hci1: command tx timeout [ 268.194334][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.258536][ T5875] usb 1-1: config 0 descriptor?? [ 268.461041][ T974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 268.671119][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 268.691687][ T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 268.749464][ T974] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 268.777899][ T5875] apple 0003:05AC:024B.0020: item fetching failed at offset 2/69 [ 268.819995][ T974] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 268.864246][ T5875] apple 0003:05AC:024B.0020: parse failed [ 268.895579][ T974] usb 6-1: Product: syz [ 268.906443][ T5875] apple 0003:05AC:024B.0020: probe with driver apple failed with error -22 [ 268.923017][ T974] usb 6-1: Manufacturer: syz [ 268.960622][ T974] usb 6-1: SerialNumber: syz [ 269.061075][ T5875] usb 1-1: USB disconnect, device number 23 [ 269.337865][ T974] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 269.408387][ T974] usb 6-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 269.436208][T13174] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 269.498556][ T974] usb 6-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 269.550342][T13174] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 269.576901][ T974] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 269.607344][ T974] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 269.669370][ T974] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 269.740052][ T974] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 269.838611][ T974] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 269.953253][ T974] usb 6-1: USB disconnect, device number 2 [ 270.032376][ T974] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 270.137682][ T974] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 270.175609][T13174] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 270.222867][ T974] visor 6-1:1.0: device disconnected [ 270.231435][ T5816] Bluetooth: hci1: command tx timeout [ 270.275796][T13174] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 271.261995][T13174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.306827][T13174] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.326724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.334521][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.380652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.387850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.433503][ T974] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 271.613569][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 271.645804][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.680605][ T974] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.711035][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.745647][ T974] usb 1-1: config 0 descriptor?? [ 271.781171][ T974] hub 1-1:0.0: USB hub found [ 271.858034][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.994142][ T974] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 272.204391][ T974] usbhid 1-1:0.0: can't add hid device: -71 [ 272.224981][ T974] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 272.285598][ T974] usb 1-1: USB disconnect, device number 24 [ 272.420042][T13174] veth0_vlan: entered promiscuous mode [ 272.445108][T13174] veth1_vlan: entered promiscuous mode [ 272.493449][T13174] veth0_macvtap: entered promiscuous mode [ 272.510436][T13174] veth1_macvtap: entered promiscuous mode [ 272.550165][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.589444][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.648892][T13174] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.666791][T13174] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.676341][T13174] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.690708][T13174] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.970261][ T30] audit: type=1400 audit(2000000039.230:665): avc: denied { write } for pid=13363 comm="syz.6.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 278.731291][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.758769][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.801004][ T974] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 278.866455][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.896770][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.982783][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 279.021104][ T974] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 279.080844][ T974] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.115369][ T974] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.232126][ T974] usb 1-1: config 0 interface 0 has no altsetting 0 [ 279.238794][ T974] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 279.309770][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.378934][ T974] usb 1-1: config 0 descriptor?? [ 279.599410][ T30] audit: type=1400 audit(2000000044.860:666): avc: denied { bind } for pid=13385 comm="syz.6.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 279.673580][ T5937] IPVS: starting estimator thread 0... [ 279.781359][T13389] IPVS: using max 37 ests per chain, 88800 per kthread [ 279.844326][ T974] hid-alps 0003:044E:120B.0021: unknown main item tag 0x2 [ 279.899388][ T974] hid-alps 0003:044E:120B.0021: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 279.955383][T13391] mkiss: ax0: crc mode is auto. [ 280.141360][ T5889] usb 1-1: USB disconnect, device number 25 [ 280.189954][T13394] fido_id[13394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 281.060973][ T5889] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 281.241045][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 281.250224][ T5889] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.283814][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 281.298343][ T5889] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 281.324044][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 281.343869][ T5889] usb 1-1: Product: syz [ 281.369134][ T5889] usb 1-1: config 0 descriptor?? [ 281.548961][T13405] block nbd7: not configured, cannot reconfigure [ 281.817230][ T5889] waterforce 0003:1044:7A4D.0022: unknown main item tag 0x0 [ 281.852095][ T5889] waterforce 0003:1044:7A4D.0022: unknown main item tag 0x0 [ 281.870403][ T5889] waterforce 0003:1044:7A4D.0022: unknown main item tag 0x0 [ 281.887312][ T5889] waterforce 0003:1044:7A4D.0022: unknown main item tag 0x0 [ 281.939993][ T5889] waterforce 0003:1044:7A4D.0022: unknown main item tag 0x0 [ 281.978509][ T5889] waterforce 0003:1044:7A4D.0022: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.0-1/input0 [ 282.111529][ T5889] waterforce 0003:1044:7A4D.0022: fw version request failed with -38 [ 282.206033][ T5889] usb 1-1: USB disconnect, device number 26 [ 284.504300][T13427] bridge0: port 3(syz_tun) entered disabled state [ 284.527254][T13427] syz_tun: refused to change device tx_queue_len [ 285.846317][ T30] audit: type=1400 audit(2000000051.110:667): avc: denied { set_context_mgr } for pid=13445 comm="syz.0.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 286.192219][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3446'. [ 286.261022][T13450] netlink: 'syz.7.3446': attribute type 2 has an invalid length. [ 286.312335][T13450] netlink: 'syz.7.3446': attribute type 1 has an invalid length. [ 286.370969][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3446'. [ 286.782713][ T30] audit: type=1400 audit(2000000052.050:668): avc: denied { watch watch_reads } for pid=13455 comm="syz.7.3450" path="pipe:[33219]" dev="pipefs" ino=33219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 286.941375][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.950500][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.961373][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.970117][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.980998][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.520183][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.535845][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.547026][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.560610][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.571637][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.123258][T13459] chnl_net:caif_netlink_parms(): no params data found [ 288.541724][ T30] audit: type=1400 audit(2000000053.810:669): avc: denied { bind } for pid=13485 comm="syz.0.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.724641][T13459] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.760888][T13459] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.799502][T13459] bridge_slave_0: entered allmulticast mode [ 288.839890][T13459] bridge_slave_0: entered promiscuous mode [ 288.887571][T13459] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.924084][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.950508][T13459] bridge_slave_1: entered allmulticast mode [ 288.979780][T13459] bridge_slave_1: entered promiscuous mode [ 288.995977][ T30] audit: type=1400 audit(2000000054.250:670): avc: denied { map } for pid=13490 comm="syz.0.3460" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 289.053116][T13468] chnl_net:caif_netlink_parms(): no params data found [ 289.111427][ T5816] Bluetooth: hci0: command tx timeout [ 289.141007][ T30] audit: type=1400 audit(2000000054.250:671): avc: denied { execute } for pid=13490 comm="syz.0.3460" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 289.307615][T13459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.377108][T13459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.540069][T13459] team0: Port device team_slave_0 added [ 289.566529][T13459] team0: Port device team_slave_1 added [ 289.671488][ T5816] Bluetooth: hci4: command tx timeout [ 289.784219][T13459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.798314][T13459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.839318][T13459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.858519][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.869722][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.882316][T13468] bridge_slave_0: entered allmulticast mode [ 289.897875][T13468] bridge_slave_0: entered promiscuous mode [ 289.908548][T13459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.928709][T13459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.964682][T13459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.987858][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.005111][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.014341][T13468] bridge_slave_1: entered allmulticast mode [ 290.022579][T13468] bridge_slave_1: entered promiscuous mode [ 290.430912][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 290.524839][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.568976][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.610258][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.640866][ T10] usb 1-1: config 0 has no interface number 0 [ 290.676871][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 290.734468][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.752827][T13459] hsr_slave_0: entered promiscuous mode [ 290.781883][T13459] hsr_slave_1: entered promiscuous mode [ 290.789426][ T10] usb 1-1: config 0 descriptor?? [ 290.816528][T13459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.828019][ T10] usb 1-1: selecting invalid altsetting 1 [ 290.853228][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 290.859618][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 290.869178][T13459] Cannot create hsr debugfs directory [ 291.146102][ T10] DVB: Unable to find symbol cx22700_attach() [ 291.193949][ T5816] Bluetooth: hci0: command tx timeout [ 291.285589][ T10] DVB: Unable to find symbol tda10046_attach() [ 291.309937][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 291.381740][ T10] usb 1-1: USB disconnect, device number 27 [ 291.668962][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.756772][ T5816] Bluetooth: hci4: command tx timeout [ 291.822616][T13468] team0: Port device team_slave_0 added [ 292.073096][T13468] team0: Port device team_slave_1 added [ 292.332596][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.339582][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.468015][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.038082][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.058644][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.093508][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.271383][ T5816] Bluetooth: hci0: command tx timeout [ 293.328234][T13468] hsr_slave_0: entered promiscuous mode [ 293.340466][T13468] hsr_slave_1: entered promiscuous mode [ 293.349529][T13468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.371096][T13468] Cannot create hsr debugfs directory [ 293.708561][T13459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 293.784097][T13459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 293.824214][T13459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 293.832062][ T5816] Bluetooth: hci4: command tx timeout [ 293.882121][T13459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 294.149120][T13468] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 294.174152][T13468] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 294.302783][T13468] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 294.348815][T13468] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 294.489075][T13459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.560464][T13459] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.591176][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.598318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.659279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.666446][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.768564][T13468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.853126][T13468] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.927667][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.934892][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.988864][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.996048][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.361698][ T5816] Bluetooth: hci0: command tx timeout [ 295.618323][T13459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.919817][ T5816] Bluetooth: hci4: command tx timeout [ 296.045181][T13468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.262507][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.275528][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.284106][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.292402][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.299965][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.866823][T13459] veth0_vlan: entered promiscuous mode [ 296.953384][T13459] veth1_vlan: entered promiscuous mode [ 297.181569][T13459] veth0_macvtap: entered promiscuous mode [ 297.237180][T13459] veth1_macvtap: entered promiscuous mode [ 297.280032][T13551] chnl_net:caif_netlink_parms(): no params data found [ 297.326202][T13468] veth0_vlan: entered promiscuous mode [ 297.445298][T13459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.496494][T13459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.518129][T13468] veth1_vlan: entered promiscuous mode [ 297.555836][T13459] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.570805][T13459] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.602623][T13459] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.619282][T13459] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.391809][ T5823] Bluetooth: hci7: command tx timeout [ 299.646350][T13551] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.665598][T13551] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.677872][T13551] bridge_slave_0: entered allmulticast mode [ 299.690670][T13551] bridge_slave_0: entered promiscuous mode [ 299.723611][T13468] veth0_macvtap: entered promiscuous mode [ 299.756421][T13551] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.778025][T13551] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.785994][T13551] bridge_slave_1: entered allmulticast mode [ 299.799435][T13551] bridge_slave_1: entered promiscuous mode [ 299.978242][T13468] veth1_macvtap: entered promiscuous mode [ 300.005098][T13551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.042934][T13551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.207629][T13551] team0: Port device team_slave_0 added [ 300.226765][T13468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.250127][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.287641][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.342694][T13551] team0: Port device team_slave_1 added [ 300.481739][ T5823] Bluetooth: hci7: command tx timeout [ 300.506768][T13468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.540225][T13551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.557374][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.599938][T13551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.627961][T13551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.640995][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.677406][T13551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.691400][T13468] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.700127][T13468] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.716596][T13468] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.747658][T13468] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.803476][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.821257][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.964539][T13551] hsr_slave_0: entered promiscuous mode [ 300.978384][T13551] hsr_slave_1: entered promiscuous mode [ 300.988173][T13551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.003781][T13551] Cannot create hsr debugfs directory [ 302.551387][ T5823] Bluetooth: hci7: command tx timeout [ 304.632023][ T5823] Bluetooth: hci7: command tx timeout [ 307.516478][ T5816] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 307.544263][ T5816] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 307.554764][ T5816] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 307.563237][ T5816] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 307.571915][ T5816] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 308.093680][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 308.109504][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 308.118803][ T5823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 308.135264][ T5823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 308.143322][ T5823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 309.671245][ T5823] Bluetooth: hci8: command tx timeout [ 310.042031][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.049883][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.237629][ T5823] Bluetooth: hci9: command tx timeout [ 310.367617][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.388048][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.027425][T13575] chnl_net:caif_netlink_parms(): no params data found [ 311.059734][ T30] audit: type=1400 audit(2000000076.310:672): avc: denied { connect } for pid=13584 comm="syz.9.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 311.312054][T13570] chnl_net:caif_netlink_parms(): no params data found [ 311.754566][ T5823] Bluetooth: hci8: command tx timeout [ 311.804432][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.830140][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.863823][T13575] bridge_slave_0: entered allmulticast mode [ 311.896580][T13575] bridge_slave_0: entered promiscuous mode [ 311.966606][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.985044][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.010308][T13575] bridge_slave_1: entered allmulticast mode [ 312.049294][T13575] bridge_slave_1: entered promiscuous mode [ 312.139703][ T30] audit: type=1400 audit(2000000077.400:673): avc: denied { unmount } for pid=13468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 312.315482][ T5823] Bluetooth: hci9: command tx timeout [ 312.413080][T13575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.482937][T13575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.892884][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.931490][T13608] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3481'. [ 312.962477][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.003167][T13570] bridge_slave_0: entered allmulticast mode [ 313.011604][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3481'. [ 313.069257][T13570] bridge_slave_0: entered promiscuous mode [ 313.514259][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.581828][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.589144][T13570] bridge_slave_1: entered allmulticast mode [ 313.708688][T13570] bridge_slave_1: entered promiscuous mode [ 313.770905][ T5937] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 313.831068][ T5823] Bluetooth: hci8: command tx timeout [ 313.890487][T13575] team0: Port device team_slave_0 added [ 313.971212][ T5937] usb 10-1: Using ep0 maxpacket: 16 [ 313.980018][ T5937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.009472][ T5937] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 314.028552][ T5937] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.056274][ T5937] usb 10-1: config 0 descriptor?? [ 314.098911][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.150586][T13575] team0: Port device team_slave_1 added [ 314.392168][ T5823] Bluetooth: hci9: command tx timeout [ 314.522900][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.572937][ T5937] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.0023/input/input23 [ 314.711721][ T5937] appleir 0003:05AC:8241.0023: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 314.815981][ T5937] usb 10-1: USB disconnect, device number 2 [ 315.024203][T13613] fido_id[13613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 315.245751][T13575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.259280][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.300090][T13575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.397326][T13570] team0: Port device team_slave_0 added [ 315.488019][T13575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.519704][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.648715][T13575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.679206][T13570] team0: Port device team_slave_1 added [ 315.913132][ T5823] Bluetooth: hci8: command tx timeout [ 316.005692][T13620] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3485'. [ 316.030424][T13620] bridge: RTM_NEWNEIGH with invalid ether address [ 316.043755][T13570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.057472][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.108081][T13570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.156320][T13570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.181227][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.286061][T13570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.426445][T13575] hsr_slave_0: entered promiscuous mode [ 316.458070][T13575] hsr_slave_1: entered promiscuous mode [ 316.471426][ T5823] Bluetooth: hci9: command tx timeout [ 316.488524][T13575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.540186][T13575] Cannot create hsr debugfs directory [ 316.820363][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.831138][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.206472][T13570] hsr_slave_0: entered promiscuous mode [ 317.232050][T13570] hsr_slave_1: entered promiscuous mode [ 317.270628][T13570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.291986][T13570] Cannot create hsr debugfs directory [ 317.400812][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 317.575109][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.593728][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.604486][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.615192][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.623794][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.631845][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.709486][ T10] usb 10-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 317.719655][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.755803][ T10] usb 10-1: config 0 descriptor?? [ 318.229651][ T10] uclogic 0003:5543:0003.0024: unknown main item tag 0x0 [ 318.271184][ T10] uclogic 0003:5543:0003.0024: unknown main item tag 0x0 [ 318.278353][ T10] uclogic 0003:5543:0003.0024: unknown main item tag 0x0 [ 318.319490][ T10] uclogic 0003:5543:0003.0024: unknown main item tag 0x0 [ 318.344661][ T10] uclogic 0003:5543:0003.0024: unknown main item tag 0x0 [ 318.396566][ T10] uclogic 0003:5543:0003.0024: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.9-1/input0 [ 318.484083][ T10] usb 10-1: USB disconnect, device number 3 [ 318.620170][T13636] fido_id[13636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 318.720266][T13632] chnl_net:caif_netlink_parms(): no params data found [ 319.052697][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.071160][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.091304][T13632] bridge_slave_0: entered allmulticast mode [ 319.118408][T13632] bridge_slave_0: entered promiscuous mode [ 319.145892][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.174962][T13642] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3492'. [ 319.191616][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.210970][T13632] bridge_slave_1: entered allmulticast mode [ 319.228880][T13632] bridge_slave_1: entered promiscuous mode [ 319.436807][T13632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.493606][T13632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.751455][ T5823] Bluetooth: hci3: command tx timeout [ 319.804807][T13632] team0: Port device team_slave_0 added [ 319.857218][T13632] team0: Port device team_slave_1 added [ 320.219163][T13632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.257199][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.363322][T13632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.386494][T13632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.401104][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.436097][T13632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.589757][T13632] hsr_slave_0: entered promiscuous mode [ 320.595799][ T974] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 320.610414][T13632] hsr_slave_1: entered promiscuous mode [ 320.634987][T13632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.650816][T13632] Cannot create hsr debugfs directory [ 320.762667][ T974] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.785204][ T974] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 320.824868][ T974] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.852483][ T974] usb 10-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 320.893978][ T974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.921585][ T974] usb 10-1: config 0 descriptor?? [ 320.955705][T13656] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 321.422544][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.429573][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.453932][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.471910][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.478910][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.497526][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.508280][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.530264][ T974] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 321.568606][ T974] lenovo 0003:04B3:3100.0025: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.9-1/input0 [ 321.650688][ T974] usb 10-1: USB disconnect, device number 4 [ 321.717232][T13658] fido_id[13658]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 321.831966][ T5823] Bluetooth: hci3: command tx timeout [ 323.026615][ T30] audit: type=1400 audit(2000000088.290:674): avc: denied { create } for pid=13666 comm="syz.9.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 323.912912][ T5823] Bluetooth: hci3: command tx timeout [ 325.991145][ T5823] Bluetooth: hci3: command tx timeout [ 336.187495][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.376799][T13512] syz_tun (unregistering): left allmulticast mode [ 337.429231][T13512] syz_tun (unregistering): left promiscuous mode [ 337.482772][T13512] bridge0: port 3(syz_tun) entered disabled state [ 339.052485][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.079299][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.088658][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.096610][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.104569][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.435524][T13678] chnl_net:caif_netlink_parms(): no params data found [ 339.686613][T13678] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.705195][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.716030][T13678] bridge_slave_0: entered allmulticast mode [ 339.728492][T13678] bridge_slave_0: entered promiscuous mode [ 339.758529][T13678] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.776871][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.788516][T13678] bridge_slave_1: entered allmulticast mode [ 339.814383][T13678] bridge_slave_1: entered promiscuous mode [ 339.981949][T13678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.006633][T13678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.149034][T13678] team0: Port device team_slave_0 added [ 340.158807][T13678] team0: Port device team_slave_1 added [ 340.291084][T13678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.298067][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.340216][T13678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.364030][T13678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.381740][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.424207][T13678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.641153][T13678] hsr_slave_0: entered promiscuous mode [ 340.655454][T13678] hsr_slave_1: entered promiscuous mode [ 340.669127][T13678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.677413][T13678] Cannot create hsr debugfs directory [ 341.191183][ T5823] Bluetooth: hci0: command tx timeout [ 343.271055][ T5823] Bluetooth: hci0: command tx timeout [ 345.351039][ T5823] Bluetooth: hci0: command tx timeout [ 347.431049][ T5823] Bluetooth: hci0: command tx timeout [ 356.697849][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.714063][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.722725][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.732522][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.740075][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.206357][T13689] chnl_net:caif_netlink_parms(): no params data found [ 357.505980][T13689] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.529839][T13689] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.551987][T13689] bridge_slave_0: entered allmulticast mode [ 357.575696][T13689] bridge_slave_0: entered promiscuous mode [ 357.598102][T13689] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.614317][T13689] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.637513][T13689] bridge_slave_1: entered allmulticast mode [ 357.656523][T13689] bridge_slave_1: entered promiscuous mode [ 357.796345][T13689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.826845][T13689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.000446][T13689] team0: Port device team_slave_0 added [ 358.024311][T13689] team0: Port device team_slave_1 added [ 358.184507][T13689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.202006][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.247585][T13689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.370128][T13689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.386213][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.438402][T13689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.612301][T13689] hsr_slave_0: entered promiscuous mode [ 358.640682][T13689] hsr_slave_1: entered promiscuous mode [ 358.657381][T13689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.679549][T13689] Cannot create hsr debugfs directory [ 358.791417][ T5823] Bluetooth: hci1: command tx timeout [ 359.078005][ T30] audit: type=1400 audit(2000000124.340:675): avc: denied { recv } for pid=48 comm="kworker/1:1" saddr=10.128.0.169 src=45676 daddr=10.128.0.240 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 360.871280][ T5823] Bluetooth: hci1: command tx timeout [ 362.951085][ T5823] Bluetooth: hci1: command tx timeout [ 365.031270][ T5823] Bluetooth: hci1: command tx timeout [ 368.479574][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.492330][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.500670][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.511599][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.519225][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.041353][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.055936][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.064507][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.074339][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.084177][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.356975][T13707] chnl_net:caif_netlink_parms(): no params data found [ 369.809223][T13707] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.825561][T13707] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.845870][T13707] bridge_slave_0: entered allmulticast mode [ 369.865826][T13707] bridge_slave_0: entered promiscuous mode [ 369.900218][T13714] chnl_net:caif_netlink_parms(): no params data found [ 369.919087][T13707] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.945946][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.961516][T13707] bridge_slave_1: entered allmulticast mode [ 369.970384][T13707] bridge_slave_1: entered promiscuous mode [ 370.215135][T13707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.269003][T13707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.548310][T13707] team0: Port device team_slave_0 added [ 370.555188][ T5823] Bluetooth: hci2: command tx timeout [ 370.582422][T13707] team0: Port device team_slave_1 added [ 370.601527][T13714] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.608756][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.628586][T13714] bridge_slave_0: entered allmulticast mode [ 370.644183][T13714] bridge_slave_0: entered promiscuous mode [ 370.663018][T13714] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.670160][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.688024][T13714] bridge_slave_1: entered allmulticast mode [ 370.703621][T13714] bridge_slave_1: entered promiscuous mode [ 370.949664][T13707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.972850][T13707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.022810][T13707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.059393][T13714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.078676][T13714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.093439][T13707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.111231][T13707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.160513][T13707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.204490][ T5823] Bluetooth: hci4: command tx timeout [ 371.515545][T13714] team0: Port device team_slave_0 added [ 371.589726][T13707] hsr_slave_0: entered promiscuous mode [ 371.609190][T13707] hsr_slave_1: entered promiscuous mode [ 371.626408][T13707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.641541][T13707] Cannot create hsr debugfs directory [ 371.654535][T13714] team0: Port device team_slave_1 added [ 371.961232][T13714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.968222][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.017453][T13714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.059857][T13714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.079908][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.124145][T13714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.523629][T13714] hsr_slave_0: entered promiscuous mode [ 372.544742][T13714] hsr_slave_1: entered promiscuous mode [ 372.558681][T13714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.577209][T13714] Cannot create hsr debugfs directory [ 372.641692][ T5823] Bluetooth: hci2: command tx timeout [ 373.271310][ T5823] Bluetooth: hci4: command tx timeout [ 374.721691][ T5823] Bluetooth: hci2: command tx timeout [ 375.361814][ T5823] Bluetooth: hci4: command tx timeout [ 376.791472][ T5823] Bluetooth: hci2: command tx timeout [ 377.251138][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.260597][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.269645][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.279763][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.292571][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.435303][ T5816] Bluetooth: hci4: command tx timeout [ 377.758353][T13730] chnl_net:caif_netlink_parms(): no params data found [ 378.038325][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.050602][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.063477][T13730] bridge_slave_0: entered allmulticast mode [ 378.085028][T13730] bridge_slave_0: entered promiscuous mode [ 378.105078][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.127481][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.140460][T13730] bridge_slave_1: entered allmulticast mode [ 378.155688][T13730] bridge_slave_1: entered promiscuous mode [ 378.246284][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.252768][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.330063][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.352991][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.523977][T13730] team0: Port device team_slave_0 added [ 378.537391][T13730] team0: Port device team_slave_1 added [ 378.772096][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.789590][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.841525][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.864614][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.882756][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.922669][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.090626][T13730] hsr_slave_0: entered promiscuous mode [ 379.105387][T13730] hsr_slave_1: entered promiscuous mode [ 379.127115][T13730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.142187][T13730] Cannot create hsr debugfs directory [ 379.362633][ T5816] Bluetooth: hci5: command tx timeout [ 381.431595][ T5816] Bluetooth: hci5: command tx timeout [ 383.511781][ T5816] Bluetooth: hci5: command tx timeout [ 385.591475][ T5816] Bluetooth: hci5: command tx timeout [ 399.043952][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.090216][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.099951][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.123369][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.132972][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 400.147927][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 400.608522][T13741] chnl_net:caif_netlink_parms(): no params data found [ 400.950510][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.971035][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.991563][T13741] bridge_slave_0: entered allmulticast mode [ 401.008833][T13741] bridge_slave_0: entered promiscuous mode [ 401.033395][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.042097][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.049451][T13741] bridge_slave_1: entered allmulticast mode [ 401.072965][T13741] bridge_slave_1: entered promiscuous mode [ 401.224967][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.263202][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.441659][T13741] team0: Port device team_slave_0 added [ 401.477247][T13741] team0: Port device team_slave_1 added [ 401.747967][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.767380][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.813802][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.840106][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.865084][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.907500][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.112566][T13741] hsr_slave_0: entered promiscuous mode [ 402.134220][T13741] hsr_slave_1: entered promiscuous mode [ 402.158932][T13741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.180893][T13741] Cannot create hsr debugfs directory [ 402.231570][ T5823] Bluetooth: hci6: command tx timeout [ 404.311189][ T5823] Bluetooth: hci6: command tx timeout [ 406.391586][ T5816] Bluetooth: hci6: command tx timeout [ 408.471428][ T5823] Bluetooth: hci6: command tx timeout [ 417.543804][ T5816] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 417.559557][ T5816] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 417.574224][ T5816] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 417.586853][ T5816] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 417.596661][ T5816] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 418.066266][T13753] chnl_net:caif_netlink_parms(): no params data found [ 418.377012][T13753] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.397610][T13753] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.422059][T13753] bridge_slave_0: entered allmulticast mode [ 418.438581][T13753] bridge_slave_0: entered promiscuous mode [ 418.453370][T13753] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.471096][T13753] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.479594][T13753] bridge_slave_1: entered allmulticast mode [ 418.502187][T13753] bridge_slave_1: entered promiscuous mode [ 418.669941][T13753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.698232][T13753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.887277][T13753] team0: Port device team_slave_0 added [ 418.909292][T13753] team0: Port device team_slave_1 added [ 419.030535][T13753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.052857][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.096196][T13753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.228287][T13753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.246249][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.297838][T13753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.468042][T13753] hsr_slave_0: entered promiscuous mode [ 419.489023][T13753] hsr_slave_1: entered promiscuous mode [ 419.512409][T13753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.520026][T13753] Cannot create hsr debugfs directory [ 419.678589][ T5823] Bluetooth: hci10: command tx timeout [ 421.272753][ T5823] Bluetooth: hci7: command 0x0406 tx timeout [ 421.751441][ T5823] Bluetooth: hci10: command tx timeout [ 423.831584][ T5816] Bluetooth: hci10: command tx timeout [ 425.930743][ T5816] Bluetooth: hci10: command tx timeout [ 429.097680][ T5823] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 429.107523][ T5823] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 429.117611][ T5823] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 429.131426][ T5823] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 429.141362][ T5823] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 429.276820][ T5823] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 429.297578][ T5823] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 429.306684][ T5823] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 429.315784][ T5823] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 429.325576][ T5823] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 430.003676][T13772] chnl_net:caif_netlink_parms(): no params data found [ 430.178528][T13775] chnl_net:caif_netlink_parms(): no params data found [ 430.469583][T13772] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.490022][T13772] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.505942][T13772] bridge_slave_0: entered allmulticast mode [ 430.523674][T13772] bridge_slave_0: entered promiscuous mode [ 430.542221][T13772] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.549346][T13772] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.579088][T13772] bridge_slave_1: entered allmulticast mode [ 430.599188][T13772] bridge_slave_1: entered promiscuous mode [ 430.789154][T13772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.853530][T13772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.128217][T13775] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.148529][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.164774][T13775] bridge_slave_0: entered allmulticast mode [ 431.181858][T13775] bridge_slave_0: entered promiscuous mode [ 431.191404][ T5829] Bluetooth: hci11: command tx timeout [ 431.214945][T13772] team0: Port device team_slave_0 added [ 431.228821][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.248276][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.263379][T13775] bridge_slave_1: entered allmulticast mode [ 431.293951][T13775] bridge_slave_1: entered promiscuous mode [ 431.309059][T13772] team0: Port device team_slave_1 added [ 431.431286][ T5829] Bluetooth: hci12: command tx timeout [ 431.524622][ T5829] Bluetooth: hci8: command 0x0406 tx timeout [ 431.531120][ T5139] Bluetooth: hci9: command 0x0406 tx timeout [ 431.641752][T13775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.672343][T13772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.679325][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.729905][T13772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.770576][T13775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.923048][T13772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.940992][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.992752][T13772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.117879][T13775] team0: Port device team_slave_0 added [ 432.139250][T13775] team0: Port device team_slave_1 added [ 432.405462][T13775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.420777][T13775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.471048][T13775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.499608][T13772] hsr_slave_0: entered promiscuous mode [ 432.527923][T13772] hsr_slave_1: entered promiscuous mode [ 432.543216][T13772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.561057][T13772] Cannot create hsr debugfs directory [ 432.581870][T13775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.588870][T13775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.635672][T13775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.022388][T13775] hsr_slave_0: entered promiscuous mode [ 433.047943][T13775] hsr_slave_1: entered promiscuous mode [ 433.061760][T13775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.070067][T13775] Cannot create hsr debugfs directory [ 433.272310][ T5816] Bluetooth: hci11: command tx timeout [ 433.521867][ T5816] Bluetooth: hci12: command tx timeout [ 435.351737][ T5816] Bluetooth: hci11: command tx timeout [ 435.592167][ T5816] Bluetooth: hci12: command tx timeout [ 437.432151][ T5816] Bluetooth: hci11: command tx timeout [ 437.671682][ T5816] Bluetooth: hci12: command tx timeout [ 437.929661][ T5823] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 437.939682][ T5823] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 437.948765][ T5823] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 437.957594][ T5823] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 437.966765][ T5823] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 438.446446][T13792] chnl_net:caif_netlink_parms(): no params data found [ 439.701227][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.709177][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.991584][ T5829] Bluetooth: hci13: command tx timeout [ 441.761940][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 442.081660][ T5829] Bluetooth: hci13: command tx timeout [ 444.162369][ T5829] Bluetooth: hci13: command tx timeout [ 446.231650][ T5829] Bluetooth: hci13: command tx timeout [ 450.343637][T13792] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.351424][T13792] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.371711][T13792] bridge_slave_0: entered allmulticast mode [ 450.381215][T13792] bridge_slave_0: entered promiscuous mode [ 450.412604][T13792] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.431193][T13792] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.438532][T13792] bridge_slave_1: entered allmulticast mode [ 450.461907][T13792] bridge_slave_1: entered promiscuous mode [ 451.417131][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.528197][T13792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.575441][T13792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.743110][T13792] team0: Port device team_slave_0 added [ 451.768380][T13792] team0: Port device team_slave_1 added [ 452.661001][T13792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.668009][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.734200][T13792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.767356][T13792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.780948][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.835421][T13792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.007557][T13792] hsr_slave_0: entered promiscuous mode [ 453.021976][T13792] hsr_slave_1: entered promiscuous mode [ 453.043751][T13792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.069582][T13792] Cannot create hsr debugfs directory [ 460.698266][ T5816] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 460.715066][ T5816] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 460.723896][ T5816] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 460.737875][ T5816] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 460.746580][ T5816] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 461.258953][T13804] chnl_net:caif_netlink_parms(): no params data found [ 461.597388][T13804] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.617406][T13804] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.632230][T13804] bridge_slave_0: entered allmulticast mode [ 461.651822][T13804] bridge_slave_0: entered promiscuous mode [ 461.679662][T13804] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.701269][T13804] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.708608][T13804] bridge_slave_1: entered allmulticast mode [ 461.731347][T13804] bridge_slave_1: entered promiscuous mode [ 461.896838][T13804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.933279][T13804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.105799][T13804] team0: Port device team_slave_0 added [ 462.133880][T13804] team0: Port device team_slave_1 added [ 462.233440][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 462.432105][T13804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.439097][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.499494][T13804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.520336][T13804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.545970][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.599381][T13804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.791796][ T5829] Bluetooth: hci14: command tx timeout [ 462.799868][T13804] hsr_slave_0: entered promiscuous mode [ 462.822081][T13804] hsr_slave_1: entered promiscuous mode [ 462.832173][T13804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.839754][T13804] Cannot create hsr debugfs directory [ 464.871303][ T5829] Bluetooth: hci14: command tx timeout [ 466.951264][ T5829] Bluetooth: hci14: command tx timeout [ 469.031312][ T5829] Bluetooth: hci14: command tx timeout [ 469.111622][ T31] INFO: task syz-executor:13551 blocked for more than 143 seconds. [ 469.119567][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 469.156901][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.193543][ T30] audit: type=1400 audit(2000000234.430:676): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[3830]" dev="pipefs" ino=3830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 469.237353][ T31] task:syz-executor state:D stack:24536 pid:13551 tgid:13551 ppid:1 task_flags:0x400140 flags:0x00004004 [ 469.322586][ T31] Call Trace: [ 469.325917][ T31] [ 469.396671][ T31] __schedule+0x116a/0x5de0 [ 469.440853][ T31] ? __lock_acquire+0x622/0x1c90 [ 469.445877][ T31] ? __pfx___schedule+0x10/0x10 [ 469.506798][ T31] ? find_held_lock+0x2b/0x80 [ 469.530894][ T31] ? schedule+0x2d7/0x3a0 [ 469.560873][ T31] schedule+0xe7/0x3a0 [ 469.565031][ T31] schedule_preempt_disabled+0x13/0x30 [ 469.570516][ T31] __mutex_lock+0x6c7/0xb90 [ 469.601263][ T31] ? device_del+0xa0/0x9f0 [ 469.605750][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 469.634573][ T31] ? mark_held_locks+0x49/0x80 [ 469.653707][ T31] ? device_del+0xa0/0x9f0 [ 469.658186][ T31] device_del+0xa0/0x9f0 [ 469.691182][ T31] ? __pfx_ida_free+0x10/0x10 [ 469.695926][ T31] ? __pfx_device_del+0x10/0x10 [ 469.720984][ T31] device_unregister+0x1d/0xc0 [ 469.725820][ T31] del_device_store+0x355/0x4a0 [ 469.743459][ T31] ? __pfx_del_device_store+0x10/0x10 [ 469.748893][ T31] ? find_held_lock+0x2b/0x80 [ 469.770926][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 469.781303][ T31] ? __pfx_del_device_store+0x10/0x10 [ 469.786743][ T31] bus_attr_store+0x71/0xb0 [ 469.806047][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 469.821034][ T31] sysfs_kf_write+0xef/0x150 [ 469.825693][ T31] kernfs_fop_write_iter+0x354/0x510 [ 469.846483][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 469.864282][ T31] vfs_write+0x6c4/0x1150 [ 469.868681][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 469.889027][ T31] ? __pfx_vfs_write+0x10/0x10 [ 469.894725][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.899986][ T31] ksys_write+0x12a/0x250 [ 469.921226][ T31] ? __pfx_ksys_write+0x10/0x10 [ 469.926161][ T31] do_syscall_64+0xcd/0x4c0 [ 469.940932][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.959296][ T31] RIP: 0033:0x7fc06f78d3df [ 469.970955][ T31] RSP: 002b:00007fff5b484130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 469.979419][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc06f78d3df [ 470.004713][ T31] RDX: 0000000000000001 RSI: 00007fff5b484180 RDI: 0000000000000005 [ 470.031271][ T31] RBP: 00007fc06f811d8d R08: 0000000000000000 R09: 00007fff5b483f87 [ 470.039297][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 470.066824][ T31] R13: 00007fff5b484180 R14: 00007fc0704e4620 R15: 0000000000000003 [ 470.092536][ T31] [ 470.096266][ T31] INFO: task syz-executor:13570 blocked for more than 144 seconds. [ 470.114159][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 470.131102][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.139811][ T31] task:syz-executor state:D stack:24728 pid:13570 tgid:13570 ppid:1 task_flags:0x400140 flags:0x00004004 [ 470.170057][ T31] Call Trace: [ 470.183331][ T31] [ 470.186311][ T31] __schedule+0x116a/0x5de0 [ 470.208285][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 470.221032][ T31] ? kernel_text_address+0x8d/0x100 [ 470.232362][ T31] ? __lock_acquire+0x622/0x1c90 [ 470.237364][ T31] ? __pfx___schedule+0x10/0x10 [ 470.253338][ T31] ? find_held_lock+0x2b/0x80 [ 470.258080][ T31] ? schedule+0x2d7/0x3a0 [ 470.275694][ T31] schedule+0xe7/0x3a0 [ 470.279826][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.301059][ T31] __mutex_lock+0x6c7/0xb90 [ 470.305624][ T31] ? del_device_store+0xd1/0x4a0 [ 470.320957][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.341784][ T31] ? __pfx_sscanf+0x10/0x10 [ 470.346362][ T31] ? __lock_acquire+0x622/0x1c90 [ 470.360851][ T31] ? del_device_store+0xd1/0x4a0 [ 470.365856][ T31] del_device_store+0xd1/0x4a0 [ 470.370642][ T31] ? __pfx_del_device_store+0x10/0x10 [ 470.387996][ T31] ? find_held_lock+0x2b/0x80 [ 470.422593][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 470.429241][ T31] ? __pfx_del_device_store+0x10/0x10 [ 470.451743][ T31] bus_attr_store+0x71/0xb0 [ 470.461682][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 470.466923][ T31] sysfs_kf_write+0xef/0x150 [ 470.490012][ T31] kernfs_fop_write_iter+0x354/0x510 [ 470.496251][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 470.513237][ T31] vfs_write+0x6c4/0x1150 [ 470.517631][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 470.541064][ T31] ? __pfx_vfs_write+0x10/0x10 [ 470.545989][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.565453][ T31] ? find_held_lock+0x2b/0x80 [ 470.570205][ T31] ksys_write+0x12a/0x250 [ 470.589646][ T31] ? __pfx_ksys_write+0x10/0x10 [ 470.598308][ T31] do_syscall_64+0xcd/0x4c0 [ 470.619469][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.632856][ T31] RIP: 0033:0x7f3f00f8d3df [ 470.637331][ T31] RSP: 002b:00007fff9a467550 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 470.662692][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3f00f8d3df [ 470.681446][ T31] RDX: 0000000000000001 RSI: 00007fff9a4675a0 RDI: 0000000000000005 [ 470.689468][ T31] RBP: 00007f3f01011d8d R08: 0000000000000000 R09: 00007fff9a4673a7 [ 470.716164][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 470.733411][ T31] R13: 00007fff9a4675a0 R14: 00007f3f01ce4620 R15: 0000000000000003 [ 470.760036][ T31] [ 470.771070][ T31] INFO: task syz-executor:13575 blocked for more than 145 seconds. [ 470.778999][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 470.862432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.880895][ T31] task:syz-executor state:D stack:24248 pid:13575 tgid:13575 ppid:1 task_flags:0x400140 flags:0x00004004 [ 470.906360][ T31] Call Trace: [ 470.909682][ T31] [ 470.926737][ T31] __schedule+0x116a/0x5de0 [ 470.946874][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 470.960896][ T31] ? kernel_text_address+0x8d/0x100 [ 470.966157][ T31] ? __lock_acquire+0x622/0x1c90 [ 470.990869][ T31] ? __pfx___schedule+0x10/0x10 [ 470.995802][ T31] ? find_held_lock+0x2b/0x80 [ 471.010876][ T31] ? schedule+0x2d7/0x3a0 [ 471.015283][ T31] schedule+0xe7/0x3a0 [ 471.019364][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.043861][ T31] __mutex_lock+0x6c7/0xb90 [ 471.048442][ T31] ? del_device_store+0xd1/0x4a0 [ 471.072113][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.077209][ T31] ? __pfx_sscanf+0x10/0x10 [ 471.092307][ T31] ? __lock_acquire+0x622/0x1c90 [ 471.097361][ T31] ? del_device_store+0xd1/0x4a0 [ 471.115247][ T31] del_device_store+0xd1/0x4a0 [ 471.120099][ T31] ? __pfx_del_device_store+0x10/0x10 [ 471.140141][ T31] ? find_held_lock+0x2b/0x80 [ 471.152200][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 471.157118][ T31] ? __pfx_del_device_store+0x10/0x10 [ 471.181108][ T31] bus_attr_store+0x71/0xb0 [ 471.185677][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 471.201172][ T31] sysfs_kf_write+0xef/0x150 [ 471.205820][ T31] kernfs_fop_write_iter+0x354/0x510 [ 471.225915][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 471.239033][ T31] vfs_write+0x6c4/0x1150 [ 471.243987][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 471.261981][ T31] ? __pfx_vfs_write+0x10/0x10 [ 471.266827][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.290986][ T31] ? find_held_lock+0x2b/0x80 [ 471.295731][ T31] ksys_write+0x12a/0x250 [ 471.300082][ T31] ? __pfx_ksys_write+0x10/0x10 [ 471.320014][ T31] do_syscall_64+0xcd/0x4c0 [ 471.329381][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.340934][ T31] RIP: 0033:0x7f4a9098d3df [ 471.345384][ T31] RSP: 002b:00007ffc684886b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 471.371953][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4a9098d3df [ 471.400923][ T31] RDX: 0000000000000001 RSI: 00007ffc68488700 RDI: 0000000000000005 [ 471.408942][ T31] RBP: 00007f4a90a11d8d R08: 0000000000000000 R09: 00007ffc68488507 [ 471.438300][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 471.460931][ T31] R13: 00007ffc68488700 R14: 00007f4a916e4620 R15: 0000000000000003 [ 471.468968][ T31] [ 471.484482][ T31] INFO: task syz-executor:13632 blocked for more than 145 seconds. [ 471.503121][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 471.524477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.546058][ T31] task:syz-executor state:D stack:24168 pid:13632 tgid:13632 ppid:1 task_flags:0x400140 flags:0x00004004 [ 471.578932][ T31] Call Trace: [ 471.590244][ T31] [ 471.603084][ T31] __schedule+0x116a/0x5de0 [ 471.607675][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 471.632684][ T31] ? kernel_text_address+0x8d/0x100 [ 471.638667][ T31] ? __lock_acquire+0x622/0x1c90 [ 471.650857][ T31] ? __pfx___schedule+0x10/0x10 [ 471.657632][ T31] ? find_held_lock+0x2b/0x80 [ 471.672334][ T31] ? schedule+0x2d7/0x3a0 [ 471.676747][ T31] schedule+0xe7/0x3a0 [ 471.690769][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.696298][ T31] __mutex_lock+0x6c7/0xb90 [ 471.715788][ T31] ? del_device_store+0xd1/0x4a0 [ 471.731100][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.736173][ T31] ? __pfx_sscanf+0x10/0x10 [ 471.759280][ T31] ? __lock_acquire+0x622/0x1c90 [ 471.765037][ T31] ? del_device_store+0xd1/0x4a0 [ 471.770009][ T31] del_device_store+0xd1/0x4a0 [ 471.788792][ T31] ? __pfx_del_device_store+0x10/0x10 [ 471.801086][ T31] ? find_held_lock+0x2b/0x80 [ 471.805821][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 471.824528][ T31] ? __pfx_del_device_store+0x10/0x10 [ 471.829959][ T31] bus_attr_store+0x71/0xb0 [ 471.856028][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 471.870989][ T31] sysfs_kf_write+0xef/0x150 [ 471.875651][ T31] kernfs_fop_write_iter+0x354/0x510 [ 471.891539][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 471.896810][ T31] vfs_write+0x6c4/0x1150 [ 471.912343][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 471.918226][ T31] ? __pfx_vfs_write+0x10/0x10 [ 471.943000][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.948271][ T31] ksys_write+0x12a/0x250 [ 471.970235][ T31] ? __pfx_ksys_write+0x10/0x10 [ 471.981064][ T31] do_syscall_64+0xcd/0x4c0 [ 471.985624][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.010976][ T31] RIP: 0033:0x7f868438d3df [ 472.015455][ T31] RSP: 002b:00007ffcc00fb060 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 472.039470][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f868438d3df [ 472.060914][ T31] RDX: 0000000000000001 RSI: 00007ffcc00fb0b0 RDI: 0000000000000005 [ 472.080905][ T31] RBP: 00007f8684411d8d R08: 0000000000000000 R09: 00007ffcc00faeb7 [ 472.088942][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 472.115886][ T31] R13: 00007ffcc00fb0b0 R14: 00007f86850e4620 R15: 0000000000000003 [ 472.131129][ T31] [ 472.142380][ T31] [ 472.142380][ T31] Showing all locks held in the system: [ 472.162998][ T31] 6 locks held by kworker/1:0/24: [ 472.169849][ T31] 1 lock held by khungtaskd/31: [ 472.180455][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 472.209544][ T31] 6 locks held by kworker/u8:4/64: [ 472.219309][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 472.237500][ T31] #1: ffffc9000211fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 472.263472][ T31] #2: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 472.290802][ T31] #3: ffff888058f000e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 472.321075][ T31] #4: ffff888058f01250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 [ 472.340959][ T31] #5: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 472.362016][ T31] 3 locks held by kworker/u8:9/3477: [ 472.367337][ T31] 2 locks held by getty/5577: [ 472.393521][ T31] #0: ffff8880327e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 472.420976][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 472.447667][ T31] 3 locks held by kworker/1:8/13156: [ 472.458341][ T31] 5 locks held by syz-executor/13551: [ 472.472441][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 472.501182][ T31] #1: ffff8880261da488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 472.522539][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 472.546309][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 472.570765][ T31] #4: ffff888058f000e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 [ 472.593343][ T31] 4 locks held by syz-executor/13570: [ 472.598752][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 472.628675][ T31] #1: ffff8880267a4088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 472.650905][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 472.670887][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 472.697319][ T31] 4 locks held by syz-executor/13575: [ 472.710342][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 472.732116][ T31] #1: ffff88803a05cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 472.758113][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 472.780940][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 472.798065][ T31] 4 locks held by syz-executor/13632: [ 472.815270][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 472.841061][ T31] #1: ffff88805e099c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 472.861647][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 472.890444][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 472.911887][ T31] 4 locks held by syz-executor/13678: [ 472.930835][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 472.954225][ T31] #1: ffff8880816f1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 472.969607][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.000943][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.017933][ T31] 4 locks held by syz-executor/13689: [ 473.033288][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.061101][ T31] #1: ffff888084658488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.078948][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.106307][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.131991][ T31] 4 locks held by syz-executor/13707: [ 473.137398][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.166981][ T31] #1: ffff888067450c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.181768][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.208723][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.228956][ T31] 4 locks held by syz-executor/13714: [ 473.242159][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.266212][ T31] #1: ffff888041761088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.293095][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.319184][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.338348][ T31] 4 locks held by syz-executor/13730: [ 473.352389][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.378650][ T31] #1: ffff88803fc2e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.398126][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.421655][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.450852][ T31] 4 locks held by syz-executor/13741: [ 473.457010][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.481136][ T31] #1: ffff8880885efc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.509168][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.531570][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.550854][ T31] 4 locks held by syz-executor/13753: [ 473.556265][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.580425][ T31] #1: ffff88804145fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.605858][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.633092][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.650886][ T31] 4 locks held by syz-executor/13772: [ 473.656308][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.687756][ T31] #1: ffff8880840be488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.703001][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.731004][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.761033][ T31] 4 locks held by syz-executor/13775: [ 473.766445][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.792009][ T31] #1: ffff888074237c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.818990][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.844380][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.871098][ T31] 4 locks held by syz-executor/13792: [ 473.876506][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 473.899737][ T31] #1: ffff888087bbe888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 473.916997][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 473.951148][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 473.971651][ T31] 4 locks held by syz-executor/13804: [ 473.977068][ T31] #0: ffff888037148428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 474.000462][ T31] #1: ffff88808dd10888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 474.021988][ T31] #2: ffff888143faa4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 474.053079][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 474.081761][ T31] [ 474.084126][ T31] ============================================= [ 474.084126][ T31] [ 474.100212][ T31] NMI backtrace for cpu 0 [ 474.100231][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 474.100255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.100266][ T31] Call Trace: [ 474.100272][ T31] [ 474.100280][ T31] dump_stack_lvl+0x116/0x1f0 [ 474.100311][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 474.100334][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.100360][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 474.100381][ T31] watchdog+0xf70/0x12c0 [ 474.100408][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.100425][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.100451][ T31] ? __kthread_parkme+0x19e/0x250 [ 474.100476][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.100494][ T31] kthread+0x3c2/0x780 [ 474.100510][ T31] ? __pfx_kthread+0x10/0x10 [ 474.100527][ T31] ? rcu_is_watching+0x12/0xc0 [ 474.100549][ T31] ? __pfx_kthread+0x10/0x10 [ 474.100565][ T31] ret_from_fork+0x5d4/0x6f0 [ 474.100589][ T31] ? __pfx_kthread+0x10/0x10 [ 474.100605][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.100635][ T31] [ 474.100641][ T31] Sending NMI from CPU 0 to CPUs 1: [ 474.224854][ C1] NMI backtrace for cpu 1 [ 474.224870][ C1] CPU: 1 UID: 0 PID: 13320 Comm: kworker/1:12 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 474.224890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.224900][ C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 474.224924][ C1] RIP: 0010:unwind_next_frame+0xc42/0x20a0 [ 474.224948][ C1] Code: 00 00 4c 89 c0 49 c7 45 58 00 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 34 10 49 8d 40 01 48 89 c7 48 c1 ef 03 <0f> b6 14 17 4c 89 c7 83 e7 07 40 38 fe 40 0f 9e c7 40 84 f6 40 0f [ 474.224962][ C1] RSP: 0018:ffffc90000a07ca8 EFLAGS: 00000a07 [ 474.224973][ C1] RAX: ffffffff913e60ef RBX: 0000000000000001 RCX: ffffffff913e60ea [ 474.224982][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 1ffffffff227cc1d [ 474.224992][ C1] RBP: ffffc90000a07d60 R08: ffffffff913e60ee R09: 0000000000000000 [ 474.225001][ C1] R10: 0000000000000000 R11: 0000000000008385 R12: ffffc90000a07d68 [ 474.225009][ C1] R13: ffffc90000a07d18 R14: ffffc90004ae7db8 R15: ffffc90000a07d4c [ 474.225019][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 474.225034][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.225044][ C1] CR2: 0000555591693588 CR3: 000000000e382000 CR4: 00000000003526f0 [ 474.225053][ C1] Call Trace: [ 474.225058][ C1] [ 474.225064][ C1] ? process_one_work+0x9cf/0x1b70 [ 474.225081][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 474.225099][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 474.225117][ C1] arch_stack_walk+0x94/0x100 [ 474.225138][ C1] ? worker_thread+0x6c8/0xf10 [ 474.225154][ C1] stack_trace_save+0x8e/0xc0 [ 474.225170][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 474.225188][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 474.225210][ C1] kasan_save_stack+0x33/0x60 [ 474.225227][ C1] ? kasan_save_stack+0x33/0x60 [ 474.225243][ C1] ? kasan_save_track+0x14/0x30 [ 474.225258][ C1] ? kasan_save_free_info+0x3b/0x60 [ 474.225271][ C1] ? __kasan_slab_free+0x51/0x70 [ 474.225288][ C1] ? kfree+0x2b4/0x4d0 [ 474.225302][ C1] ? nf_conntrack_free+0x104/0x460 [ 474.225316][ C1] ? nf_ct_destroy+0x18b/0x2a0 [ 474.225329][ C1] ? nf_conntrack_in+0x392/0x1950 [ 474.225343][ C1] ? ipv4_conntrack_local+0x160/0x250 [ 474.225362][ C1] ? nf_hook_slow+0xbb/0x200 [ 474.225381][ C1] ? nf_hook+0x370/0x680 [ 474.225393][ C1] ? __ip_local_out+0x339/0x7c0 [ 474.225406][ C1] ? ip_local_out+0x2a/0x4a0 [ 474.225419][ C1] ? synproxy_send_tcp.isra.0+0x439/0x630 [ 474.225433][ C1] ? synproxy_send_client_synack+0x6f6/0x8f0 [ 474.225446][ C1] ? nft_synproxy_do_eval+0xa63/0xd80 [ 474.225462][ C1] ? nft_do_chain+0x2e6/0x1920 [ 474.225475][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 474.225489][ C1] ? nf_hook_slow+0xbb/0x200 [ 474.225506][ C1] ? nf_hook.constprop.0+0x422/0x750 [ 474.225525][ C1] ? ip_local_deliver+0x169/0x1f0 [ 474.225544][ C1] ? ip_rcv+0x2c3/0x5d0 [ 474.225561][ C1] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 474.225579][ C1] ? __netif_receive_skb+0x1d/0x160 [ 474.225594][ C1] ? process_backlog+0x442/0x15e0 [ 474.225610][ C1] ? __napi_poll.constprop.0+0xba/0x550 [ 474.225627][ C1] ? net_rx_action+0xa9f/0xfe0 [ 474.225643][ C1] ? handle_softirqs+0x219/0x8e0 [ 474.225657][ C1] ? do_softirq+0xb2/0xf0 [ 474.225671][ C1] ? __local_bh_enable_ip+0x100/0x120 [ 474.225686][ C1] ? wg_packet_decrypt_worker+0x14b/0x540 [ 474.225701][ C1] ? process_one_work+0x9cf/0x1b70 [ 474.225722][ C1] kasan_save_track+0x14/0x30 [ 474.225738][ C1] kasan_save_free_info+0x3b/0x60 [ 474.225751][ C1] __kasan_slab_free+0x51/0x70 [ 474.225769][ C1] kfree+0x2b4/0x4d0 [ 474.225782][ C1] ? nf_conntrack_free+0x104/0x460 [ 474.225798][ C1] nf_conntrack_free+0x104/0x460 [ 474.225813][ C1] nf_ct_destroy+0x18b/0x2a0 [ 474.225826][ C1] nf_conntrack_in+0x392/0x1950 [ 474.225845][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 474.225860][ C1] ? __pfx_selinux_netlbl_skbuff_setsid+0x10/0x10 [ 474.225881][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 474.225901][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 474.225920][ C1] ipv4_conntrack_local+0x160/0x250 [ 474.225940][ C1] nf_hook_slow+0xbb/0x200 [ 474.225960][ C1] nf_hook+0x370/0x680 [ 474.225973][ C1] ? __pfx_dst_output+0x10/0x10 [ 474.225988][ C1] ? __pfx_nf_hook+0x10/0x10 [ 474.226000][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 474.226014][ C1] ? __pfx_dst_output+0x10/0x10 [ 474.226029][ C1] ? do_csum+0x26f/0x2d0 [ 474.226051][ C1] __ip_local_out+0x339/0x7c0 [ 474.226065][ C1] ? __pfx_dst_output+0x10/0x10 [ 474.226080][ C1] ip_local_out+0x2a/0x4a0 [ 474.226095][ C1] synproxy_send_tcp.isra.0+0x439/0x630 [ 474.226110][ C1] synproxy_send_client_synack+0x6f6/0x8f0 [ 474.226130][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 474.226144][ C1] ? nft_redir_eval+0x258/0x470 [ 474.226168][ C1] nft_synproxy_do_eval+0xa63/0xd80 [ 474.226184][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 474.226200][ C1] ? ip_vs_conn_out_get+0x67f/0xb20 [ 474.226220][ C1] ? ip_vs_service_find+0x19d/0x1020 [ 474.226239][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 474.226256][ C1] nft_do_chain+0x2e6/0x1920 [ 474.226273][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 474.226289][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.226310][ C1] ? ip_vs_in_hook+0xe10/0x27a0 [ 474.226329][ C1] ? ip_vs_in_hook+0x329/0x27a0 [ 474.226355][ C1] nft_do_chain_inet+0x18a/0x340 [ 474.226369][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 474.226386][ C1] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 474.226403][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 474.226423][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 474.226436][ C1] nf_hook_slow+0xbb/0x200 [ 474.226456][ C1] nf_hook.constprop.0+0x422/0x750 [ 474.226474][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 474.226495][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 474.226514][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 474.226535][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 474.226558][ C1] ip_local_deliver+0x169/0x1f0 [ 474.226577][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 474.226597][ C1] ip_rcv+0x2c3/0x5d0 [ 474.226615][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 474.226633][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 474.226650][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 474.226668][ C1] ? lock_acquire+0x179/0x350 [ 474.226691][ C1] ? process_backlog+0x3f0/0x15e0 [ 474.226707][ C1] __netif_receive_skb+0x1d/0x160 [ 474.226723][ C1] process_backlog+0x442/0x15e0 [ 474.226743][ C1] __napi_poll.constprop.0+0xba/0x550 [ 474.226761][ C1] net_rx_action+0xa9f/0xfe0 [ 474.226782][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 474.226799][ C1] ? mark_held_locks+0x49/0x80 [ 474.226819][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.226838][ C1] ? tmigr_handle_remote+0x132/0x380 [ 474.226857][ C1] ? run_timer_base+0x121/0x190 [ 474.226876][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 474.226897][ C1] handle_softirqs+0x219/0x8e0 [ 474.226914][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 474.226930][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 474.226950][ C1] ? wg_packet_decrypt_worker+0x14b/0x540 [ 474.226966][ C1] do_softirq+0xb2/0xf0 [ 474.226980][ C1] [ 474.226985][ C1] [ 474.226990][ C1] __local_bh_enable_ip+0x100/0x120 [ 474.227006][ C1] wg_packet_decrypt_worker+0x14b/0x540 [ 474.227024][ C1] process_one_work+0x9cf/0x1b70 [ 474.227041][ C1] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 474.227056][ C1] ? __pfx_process_one_work+0x10/0x10 [ 474.227073][ C1] ? assign_work+0x1a0/0x250 [ 474.227095][ C1] worker_thread+0x6c8/0xf10 [ 474.227113][ C1] ? __pfx_worker_thread+0x10/0x10 [ 474.227133][ C1] kthread+0x3c2/0x780 [ 474.227145][ C1] ? __pfx_kthread+0x10/0x10 [ 474.227158][ C1] ? rcu_is_watching+0x12/0xc0 [ 474.227175][ C1] ? __pfx_kthread+0x10/0x10 [ 474.227188][ C1] ret_from_fork+0x5d4/0x6f0 [ 474.227207][ C1] ? __pfx_kthread+0x10/0x10 [ 474.227219][ C1] ret_from_fork_asm+0x1a/0x30 [ 474.227239][ C1] [ 475.103094][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 475.109994][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 475.121822][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.131888][ T31] Call Trace: [ 475.135173][ T31] [ 475.138104][ T31] dump_stack_lvl+0x3d/0x1f0 [ 475.142708][ T31] panic+0x71c/0x800 [ 475.146611][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 475.152517][ T31] ? __pfx_panic+0x10/0x10 [ 475.156946][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 475.162360][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.168359][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 475.173748][ T31] ? watchdog+0xdda/0x12c0 [ 475.178173][ T31] ? watchdog+0xdcd/0x12c0 [ 475.182597][ T31] watchdog+0xdeb/0x12c0 [ 475.186852][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.191532][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.196751][ T31] ? __kthread_parkme+0x19e/0x250 [ 475.201788][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.206475][ T31] kthread+0x3c2/0x780 [ 475.210544][ T31] ? __pfx_kthread+0x10/0x10 [ 475.215130][ T31] ? rcu_is_watching+0x12/0xc0 [ 475.219899][ T31] ? __pfx_kthread+0x10/0x10 [ 475.224504][ T31] ret_from_fork+0x5d4/0x6f0 [ 475.229109][ T31] ? __pfx_kthread+0x10/0x10 [ 475.233703][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.238485][ T31] [ 475.241734][ T31] Kernel Offset: disabled [ 475.246040][ T31] Rebooting in 86400 seconds..