last executing test programs: 3m24.617001524s ago: executing program 4 (id=1123): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003640)={r0, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m24.526426203s ago: executing program 4 (id=1125): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m24.41777027s ago: executing program 4 (id=1128): r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xfffffffe, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) 3m24.202242527s ago: executing program 4 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 3m24.015071006s ago: executing program 4 (id=1139): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3m23.649118363s ago: executing program 4 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m23.429033971s ago: executing program 32 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.561088291s ago: executing program 2 (id=2680): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 45.003333636s ago: executing program 1 (id=3250): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 44.825528626s ago: executing program 1 (id=3252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@loopback, 0x1502, 0x4, 0x3, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 44.352494814s ago: executing program 2 (id=2680): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 35.505811496s ago: executing program 1 (id=3252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@loopback, 0x1502, 0x4, 0x3, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 34.737346098s ago: executing program 2 (id=2680): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 26.329435085s ago: executing program 1 (id=3252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@loopback, 0x1502, 0x4, 0x3, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 25.55886248s ago: executing program 2 (id=2680): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 16.38152538s ago: executing program 1 (id=3252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@loopback, 0x1502, 0x4, 0x3, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 13.835856488s ago: executing program 2 (id=2680): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 5.983296924s ago: executing program 0 (id=3576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x46, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e3"}}}}}, 0x54) 5.603603465s ago: executing program 0 (id=3579): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00006a2000/0x2000)=nil, 0x2000, 0x1000000001}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000180)={0x28, 0x3, r1, r1, 0x6, 0x4, 0x3fff}) 5.483227882s ago: executing program 0 (id=3580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0xa0400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800000a0100"]) 5.24776838s ago: executing program 0 (id=3583): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 5.127094367s ago: executing program 0 (id=3585): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 4.951482248s ago: executing program 0 (id=3587): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r2, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000140)=0x84) 4.848114187s ago: executing program 33 (id=3587): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r2, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000140)=0x84) 4.805631544s ago: executing program 2 (id=2680): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 4.352768708s ago: executing program 1 (id=3252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@loopback, 0x1502, 0x4, 0x3, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 3.626026285s ago: executing program 5 (id=3591): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x190, 0xa, 0x148, 0x190, 0x10, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2a8) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 3.489486483s ago: executing program 5 (id=3592): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.89102091s ago: executing program 3 (id=3594): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) close(r0) 2.829460728s ago: executing program 3 (id=3595): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 2.569653586s ago: executing program 5 (id=3596): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.42814908s ago: executing program 5 (id=3597): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.349002179s ago: executing program 5 (id=3598): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000010c0)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x30}) 2.258922278s ago: executing program 5 (id=3599): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) 1.270064979s ago: executing program 3 (id=3600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)="00000000844cfa", 0x7}, {&(0x7f0000000400)="454390136c734b4e", 0x8}], 0x3) 923.566837ms ago: executing program 3 (id=3601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 659.022758ms ago: executing program 3 (id=3602): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 0s ago: executing program 3 (id=3603): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) kernel console output (not intermixed with test programs): [ 273.487259][ T950] usb 6-1: config 0 has no interface number 0 [ 273.504935][ T950] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 273.516400][T13302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.523871][ T950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.538326][ T950] usb 6-1: Product: syz [ 273.546053][T13302] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.552709][ T950] usb 6-1: Manufacturer: syz [ 273.554352][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.557449][ T950] usb 6-1: SerialNumber: syz [ 273.576469][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.583649][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.594415][ T950] usb 6-1: config 0 descriptor?? [ 273.598587][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.603258][ T950] hub 6-1:0.31: bad descriptor, ignoring hub [ 273.620035][ T950] hub 6-1:0.31: probe with driver hub failed with error -5 [ 273.621123][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.634187][ T950] usb 6-1: Found UVC 0.00 device syz (046d:08c3) [ 273.634393][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.640582][ T950] usb 6-1: No valid video chain found. [ 273.657530][ T5889] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.666983][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.675570][ T5889] usb 1-1: SerialNumber: syz [ 273.894577][ T5889] usb 1-1: 0:2 : does not exist [ 273.917688][ T5889] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 273.964550][ T5889] usb 1-1: USB disconnect, device number 40 [ 273.985333][T13302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.002566][ T950] usb 6-1: USB disconnect, device number 13 [ 274.058939][T13302] veth0_vlan: entered promiscuous mode [ 274.084983][T13302] veth1_vlan: entered promiscuous mode [ 274.127039][T13302] veth0_macvtap: entered promiscuous mode [ 274.136465][T13302] veth1_macvtap: entered promiscuous mode [ 274.156835][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.167635][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.179132][T13302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.189659][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.201275][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.214126][T13302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.233805][T13302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.242682][T13302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.252220][T13302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.261709][T13302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.317178][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.325810][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.383611][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.397114][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.601655][T13547] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 275.165901][T13573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.880893][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.618937][ T30] audit: type=1400 audit(1746860908.492:633): avc: denied { name_bind } for pid=13616 comm="syz.3.3055" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 276.737016][T13621] 9pnet: p9_errstr2errno: server reported unknown error @΂(Q0x0000000000000004 [ 276.800465][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.810333][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.819109][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.831483][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.839587][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.299335][T13624] chnl_net:caif_netlink_parms(): no params data found [ 277.439043][T13624] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.446402][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.456302][T13624] bridge_slave_0: entered allmulticast mode [ 277.463457][T13624] bridge_slave_0: entered promiscuous mode [ 277.470831][T13624] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.478142][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.486914][T13624] bridge_slave_1: entered allmulticast mode [ 277.494508][T13624] bridge_slave_1: entered promiscuous mode [ 277.529701][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.555687][T13624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.569201][T13624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.601295][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.612909][ T910] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 277.655573][T13624] team0: Port device team_slave_0 added [ 277.667013][T13624] team0: Port device team_slave_1 added [ 277.692253][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.737256][T13624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.747817][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.764152][ T910] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.777682][T13624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.787126][ T910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.800375][T13624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.811625][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.812377][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.844086][T13624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.859986][T13671] batadv_slave_1: entered promiscuous mode [ 277.877404][ T910] usb 1-1: Product: syz [ 277.881597][ T910] usb 1-1: Manufacturer: syz [ 277.883819][T13670] batadv_slave_1: left promiscuous mode [ 277.895091][ T910] usb 1-1: SerialNumber: syz [ 277.980732][T13624] hsr_slave_0: entered promiscuous mode [ 277.991091][T13624] hsr_slave_1: entered promiscuous mode [ 278.002408][T13624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.010349][T13624] Cannot create hsr debugfs directory [ 278.210508][ T12] bridge_slave_1: left allmulticast mode [ 278.221384][ T12] bridge_slave_1: left promiscuous mode [ 278.233461][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.253709][ T12] bridge_slave_0: left allmulticast mode [ 278.259496][ T12] bridge_slave_0: left promiscuous mode [ 278.265580][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.569243][T13699] loop8: detected capacity change from 0 to 7 [ 278.581163][T13699] Dev loop8: unable to read RDB block 7 [ 278.592951][T13699] loop8: unable to read partition table [ 278.598770][T13699] loop8: partition table beyond EOD, truncated [ 278.611764][T13699] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 278.796048][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.823876][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.834295][ T12] bond0 (unregistering): Released all slaves [ 278.947219][ T910] cdc_ncm 1-1:1.0: bind() failure [ 278.953690][ T5810] Bluetooth: hci2: command tx timeout [ 278.955701][ T910] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 278.975124][ T910] cdc_ncm 1-1:1.1: bind() failure [ 278.994421][ T910] usb 1-1: USB disconnect, device number 41 [ 279.146544][ T12] hsr_slave_0: left promiscuous mode [ 279.153185][ T12] hsr_slave_1: left promiscuous mode [ 279.159090][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.167225][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.185086][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.192514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.204023][ T5889] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 279.221114][ T12] veth1_macvtap: left promiscuous mode [ 279.226871][ T12] veth0_macvtap: left promiscuous mode [ 279.232492][ T12] veth1_vlan: left promiscuous mode [ 279.241045][ T12] veth0_vlan: left promiscuous mode [ 279.380416][ T5889] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 279.387522][ T30] audit: type=1400 audit(1746860911.252:634): avc: denied { ioctl } for pid=13718 comm="syz.3.3098" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.390647][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 279.449917][ T5889] usb 6-1: Product: syz [ 279.464021][ T5889] usb 6-1: config 0 descriptor?? [ 279.494081][ T5889] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 279.502359][ T5889] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 279.806181][ T5889] usb 6-1: USB disconnect, device number 14 [ 279.813573][ T5889] ftdi_sio 6-1:0.0: device disconnected [ 280.067112][ T12] team0 (unregistering): Port device team_slave_1 removed [ 280.122073][ T12] team0 (unregistering): Port device team_slave_0 removed [ 280.523635][T13754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.912313][T13624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.927407][T13624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.957230][T13624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.969021][T13624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.033545][ T5810] Bluetooth: hci2: command tx timeout [ 281.047945][T13624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.064042][T13624] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.075826][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.082998][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.120057][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.127195][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.326113][T13624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.369644][T13624] veth0_vlan: entered promiscuous mode [ 281.400379][T13624] veth1_vlan: entered promiscuous mode [ 281.447036][T13624] veth0_macvtap: entered promiscuous mode [ 281.475306][T13624] veth1_macvtap: entered promiscuous mode [ 281.504779][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.516000][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.541090][T13624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.611505][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.630869][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 281.653176][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.670998][T13624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.707890][T13624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.707921][T13624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.707943][T13624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.707964][T13624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.906176][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.906196][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.948164][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.948185][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.261452][ T30] audit: type=1400 audit(1746860914.132:635): avc: denied { ioctl } for pid=13816 comm="syz.3.3137" path="socket:[47449]" dev="sockfs" ino=47449 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 282.286163][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.120145][T13860] input: syz1 as /devices/virtual/input/input48 [ 283.413233][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.172244][T13874] input: syz1 as /devices/virtual/input/input49 [ 284.213985][T13878] input: syz0 as /devices/virtual/input/input50 [ 284.225698][T13880] use of bytesused == 0 is deprecated and will be removed in the future, [ 284.243032][T13880] use the actual size instead. [ 284.265291][T13877] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 284.272257][ T5861] IPVS: starting estimator thread 0... [ 284.385094][T13882] IPVS: using max 49 ests per chain, 117600 per kthread [ 284.594971][T13904] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 284.609208][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.624564][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.634800][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.655489][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.673157][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.784360][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3174'. [ 285.005534][T13913] sctp: [Deprecated]: syz.0.3177 (pid 13913) Use of int in max_burst socket option. [ 285.005534][T13913] Use struct sctp_assoc_value instead [ 285.051932][T13903] chnl_net:caif_netlink_parms(): no params data found [ 285.093403][ T30] audit: type=1400 audit(1746860916.972:636): avc: denied { append } for pid=13923 comm="syz.5.3180" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.116435][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.236470][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.424810][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.470031][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.477319][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.484707][T13903] bridge_slave_0: entered allmulticast mode [ 285.491731][T13903] bridge_slave_0: entered promiscuous mode [ 285.499877][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.507117][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.513120][ T5859] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 285.514958][T13903] bridge_slave_1: entered allmulticast mode [ 285.546056][T13903] bridge_slave_1: entered promiscuous mode [ 285.605637][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.651256][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.666369][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.683265][ T910] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 285.690868][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 285.697973][ T5859] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.718807][ T5859] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.729761][ T5859] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 285.736741][T13903] team0: Port device team_slave_0 added [ 285.741659][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.759580][ T5859] usb 1-1: config 0 descriptor?? [ 285.763712][T13903] team0: Port device team_slave_1 added [ 285.807514][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.814712][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.842415][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.868343][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.875512][ T910] usb 6-1: Using ep0 maxpacket: 8 [ 285.880930][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.908166][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.923314][ T910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 285.934618][ T36] bridge_slave_1: left allmulticast mode [ 285.940851][ T910] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 285.948544][ T36] bridge_slave_1: left promiscuous mode [ 285.949901][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.954375][ T910] usb 6-1: can't read configurations, error -71 [ 285.975303][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 285.989432][ T36] bridge_slave_0: left allmulticast mode [ 285.996172][ T36] bridge_slave_0: left promiscuous mode [ 286.001983][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.146390][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 286.158289][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 286.177114][ T9] usb 4-1: config 0 has no interface number 0 [ 286.185806][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 286.188458][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.195061][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.210815][ T9] usb 4-1: Product: syz [ 286.215011][ T9] usb 4-1: Manufacturer: syz [ 286.219142][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.235849][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.235891][ T9] usb 4-1: SerialNumber: syz [ 286.248830][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.251271][ T9] usb 4-1: config 0 descriptor?? [ 286.260125][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.269577][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.273878][ T9] smsc95xx v2.0.0 [ 286.279384][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.289418][ T5859] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x0 [ 286.312338][ T5859] holtek_mouse 0003:04D9:A067.001F: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.0-1/input0 [ 286.411558][ T5859] usb 1-1: USB disconnect, device number 42 [ 286.580998][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.594524][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.605752][ T36] bond0 (unregistering): Released all slaves [ 286.673334][T13903] hsr_slave_0: entered promiscuous mode [ 286.684135][T13903] hsr_slave_1: entered promiscuous mode [ 286.714551][ T5822] Bluetooth: hci2: command tx timeout [ 286.920324][ T36] hsr_slave_0: left promiscuous mode [ 286.930892][ T36] hsr_slave_1: left promiscuous mode [ 286.944865][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.952303][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.005311][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.025143][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.078009][ T36] veth1_macvtap: left promiscuous mode [ 287.083050][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 287.087653][ T36] veth0_macvtap: left promiscuous mode [ 287.101686][ T36] veth1_vlan: left promiscuous mode [ 287.110779][ T36] veth0_vlan: left promiscuous mode [ 287.111382][ T30] audit: type=1400 audit(1746860918.982:637): avc: denied { write } for pid=13969 comm="syz.1.3198" path="socket:[47833]" dev="sockfs" ino=47833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 287.227601][T13972] IPVS: Scheduler module ip_vs_sip not found [ 287.262963][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 287.297258][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 287.316348][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 287.350289][ T9] usb 4-1: USB disconnect, device number 32 [ 287.414234][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.443497][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.472843][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.520977][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.541303][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.560605][ T10] usb 6-1: config 0 descriptor?? [ 287.589691][ T30] audit: type=1400 audit(1746860919.462:638): avc: denied { remount } for pid=13984 comm="syz.1.3203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 287.839556][ T30] audit: type=1400 audit(1746860919.712:639): avc: denied { getopt } for pid=13991 comm="syz.0.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 287.980629][ T10] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 288.014539][ T10] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 288.063370][ T36] team0 (unregistering): Port device team_slave_1 removed [ 288.124203][ T36] team0 (unregistering): Port device team_slave_0 removed [ 288.256103][ T10] usb 6-1: USB disconnect, device number 17 [ 288.690617][T14025] sctp: [Deprecated]: syz.3.3222 (pid 14025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.690617][T14025] Use struct sctp_sack_info instead [ 288.792943][ T5822] Bluetooth: hci2: command tx timeout [ 289.100381][ T910] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 289.132416][T13903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.142405][T13903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.153456][T13903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.164038][T13903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.241461][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.252815][ T910] usb 6-1: Using ep0 maxpacket: 8 [ 289.267050][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.274458][ T910] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 289.289864][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.292965][ T910] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 289.297068][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.307031][ T910] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.324264][ T910] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.337895][ T910] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.366263][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.373456][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.380246][ T910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.539612][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.579166][T13903] veth0_vlan: entered promiscuous mode [ 289.589654][T13903] veth1_vlan: entered promiscuous mode [ 289.617706][T13903] veth0_macvtap: entered promiscuous mode [ 289.625969][ T910] usb 6-1: GET_CAPABILITIES returned 0 [ 289.628606][T13903] veth1_macvtap: entered promiscuous mode [ 289.635928][ T910] usbtmc 6-1:16.0: can't read capabilities [ 289.648938][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.660081][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.678572][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.694945][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.706979][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.718974][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.736472][T13903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.747092][T13903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.756067][T13903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.764919][T13903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.856092][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.865197][ T30] audit: type=1400 audit(1746860921.742:640): avc: denied { read } for pid=14045 comm="syz.3.3229" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.886539][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.916323][ T910] usb 6-1: USB disconnect, device number 18 [ 289.937885][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.947674][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.208289][T14057] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3233'. [ 290.945255][T14094] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3251'. [ 290.954535][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 291.516243][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.526638][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.535235][ T1071] bridge_slave_1: left allmulticast mode [ 291.544177][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.551131][ T1071] bridge_slave_1: left promiscuous mode [ 291.559595][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.567529][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.578468][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.592230][ T1071] bridge_slave_0: left allmulticast mode [ 291.616256][ T1071] bridge_slave_0: left promiscuous mode [ 291.631964][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.662982][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 291.822917][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 291.839644][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.852648][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 291.861731][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.872959][ T10] usb 1-1: config 0 descriptor?? [ 291.985526][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.995316][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.005445][ T1071] bond0 (unregistering): Released all slaves [ 292.253899][ T1071] hsr_slave_0: left promiscuous mode [ 292.264045][ T1071] hsr_slave_1: left promiscuous mode [ 292.269850][ T1071] batman_adv: batadv0: Removing interface: dummy0 [ 292.291117][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.296006][ T10] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 292.311297][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.530245][ T30] audit: type=1400 audit(1746860924.402:641): avc: denied { lock } for pid=14127 comm="syz.3.3261" path="socket:[48938]" dev="sockfs" ino=48938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 292.554086][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.729077][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.753962][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.774857][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.776941][ T10] usb 1-1: USB disconnect, device number 43 [ 292.799275][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.817383][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.857412][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 292.897584][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 293.251023][T14111] chnl_net:caif_netlink_parms(): no params data found [ 293.341727][ T30] audit: type=1400 audit(1746860925.212:642): avc: denied { getopt } for pid=14136 comm="syz.5.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 293.505914][T14111] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.528710][T14111] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.555766][T14111] bridge_slave_0: entered allmulticast mode [ 293.582909][ T5860] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 293.592014][T14111] bridge_slave_0: entered promiscuous mode [ 293.636998][T14111] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.649676][T14111] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.663463][T14111] bridge_slave_1: entered allmulticast mode [ 293.675830][ T5810] Bluetooth: hci2: command tx timeout [ 293.697140][T14111] bridge_slave_1: entered promiscuous mode [ 293.742927][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 293.743548][T14111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.751400][ T5860] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 293.767076][ T30] audit: type=1400 audit(1746860925.642:643): avc: denied { write } for pid=14161 comm="syz.5.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 293.786652][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.794838][ T5860] usb 1-1: Product: syz [ 293.794853][ T5860] usb 1-1: Manufacturer: syz [ 293.801652][ T1071] IPVS: stop unused estimator thread 0... [ 293.803947][ T5860] usb 1-1: SerialNumber: syz [ 293.805918][ T5860] usb 1-1: config 0 descriptor?? [ 293.820554][T14111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.822185][ T5860] gspca_main: sq930x-2.14.0 probing 2770:930c [ 293.919355][T14111] team0: Port device team_slave_0 added [ 293.932452][T14111] team0: Port device team_slave_1 added [ 293.973073][ T910] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 294.006448][T14111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.014770][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.049662][T14111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.066136][T14133] chnl_net:caif_netlink_parms(): no params data found [ 294.080918][T14111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.090543][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.122040][T14111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.132900][ T5859] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 294.142412][ T910] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 294.152859][ T910] usb 4-1: config 0 has no interface number 0 [ 294.159062][ T910] usb 4-1: config 0 interface 41 has no altsetting 0 [ 294.178751][ T910] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 294.190267][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.213442][ T910] usb 4-1: Product: syz [ 294.217662][ T910] usb 4-1: Manufacturer: syz [ 294.222259][ T910] usb 4-1: SerialNumber: syz [ 294.242234][T14111] hsr_slave_0: entered promiscuous mode [ 294.244655][ T910] usb 4-1: config 0 descriptor?? [ 294.248730][T14111] hsr_slave_1: entered promiscuous mode [ 294.264502][T14111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.272147][T14111] Cannot create hsr debugfs directory [ 294.304234][ T5859] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 294.322804][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.338640][ T5859] usb 6-1: config 0 descriptor?? [ 294.348371][T14133] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.359295][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.360981][ T5859] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 294.367276][T14133] bridge_slave_0: entered allmulticast mode [ 294.384782][T14133] bridge_slave_0: entered promiscuous mode [ 294.401376][T14133] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.408890][T14133] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.420089][T14133] bridge_slave_1: entered allmulticast mode [ 294.428074][T14133] bridge_slave_1: entered promiscuous mode [ 294.490117][T14133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.517630][T14133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.578537][T14133] team0: Port device team_slave_0 added [ 294.592416][T14133] team0: Port device team_slave_1 added [ 294.632568][T14133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.639796][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.666879][T14133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.702312][ T1071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.737490][T14133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.744956][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.771028][T14133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.782316][ T5859] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 294.810811][ T1071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.866028][T14133] hsr_slave_0: entered promiscuous mode [ 294.872390][T14133] hsr_slave_1: entered promiscuous mode [ 294.879722][T14133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.883304][ T5860] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 294.887390][T14133] Cannot create hsr debugfs directory [ 294.892990][ T5810] Bluetooth: hci4: command tx timeout [ 294.897918][ T5860] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 294.924430][ T1071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.925467][ T5860] usb 1-1: USB disconnect, device number 44 [ 294.998064][ T1071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.119551][ T1071] bridge_slave_1: left allmulticast mode [ 295.125609][ T1071] bridge_slave_1: left promiscuous mode [ 295.131313][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.140103][ T1071] bridge_slave_0: left allmulticast mode [ 295.146333][ T1071] bridge_slave_0: left promiscuous mode [ 295.152040][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.186946][ T5859] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 295.273774][ T910] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 295.300391][ T910] usb 4-1: USB disconnect, device number 33 [ 295.410356][ T5859] usb 6-1: USB disconnect, device number 19 [ 295.526777][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.536888][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.551127][ T1071] bond0 (unregistering): Released all slaves [ 295.753009][ T5810] Bluetooth: hci2: command tx timeout [ 295.759794][T14111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.803935][T14111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.885727][T14111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.911534][T14111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.009305][ T1071] hsr_slave_0: left promiscuous mode [ 296.024095][ T1071] hsr_slave_1: left promiscuous mode [ 296.030010][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.039667][ T30] audit: type=1400 audit(1746860927.912:644): avc: denied { listen } for pid=14181 comm="syz.3.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.058817][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.069442][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.085275][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.124828][ T1071] veth1_macvtap: left promiscuous mode [ 296.130383][ T1071] veth0_macvtap: left promiscuous mode [ 296.138286][ T1071] veth1_vlan: left promiscuous mode [ 296.144607][ T1071] veth0_vlan: left promiscuous mode [ 296.695577][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 296.736672][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 296.952964][ T5810] Bluetooth: hci4: command tx timeout [ 297.481020][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 297.592351][T14111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.661087][T14111] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.694226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.694294][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.695555][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.715906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.837229][ T5810] Bluetooth: hci2: command tx timeout [ 297.942530][T14133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.995029][T14133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.017767][T14133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.061395][T14133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.219817][T14133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.411884][ T5889] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 298.437770][T14111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.501262][T14133] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.534654][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.541818][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.583200][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 298.585839][T14247] syzkaller1: entered promiscuous mode [ 298.594923][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.603098][T14247] syzkaller1: entered allmulticast mode [ 298.616470][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.623615][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.634013][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.647767][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.662827][ T5889] usb 6-1: New USB device found, idVendor=0400, idProduct=07da, bcdDevice= 0.00 [ 298.675642][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.691056][ T5889] usb 6-1: config 0 descriptor?? [ 298.739500][T14111] veth0_vlan: entered promiscuous mode [ 298.790164][T14111] veth1_vlan: entered promiscuous mode [ 298.875482][T14111] veth0_macvtap: entered promiscuous mode [ 298.896711][T14111] veth1_macvtap: entered promiscuous mode [ 298.941662][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.963394][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.980539][T14111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.991825][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.018370][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.034088][T14111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.035977][ T5810] Bluetooth: hci4: command tx timeout [ 299.071526][T14111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.100447][T14111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.127171][ T5889] hid-generic 0003:0400:07DA.0022: unknown main item tag 0x0 [ 299.135012][ T5889] hid-generic 0003:0400:07DA.0022: unbalanced collection at end of report description [ 299.148181][T14111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.167129][T14111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.184212][ T5889] hid-generic 0003:0400:07DA.0022: probe with driver hid-generic failed with error -22 [ 299.289878][T14133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.322887][ T5910] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 299.365485][ T5889] usb 6-1: USB disconnect, device number 20 [ 299.407115][T14133] veth0_vlan: entered promiscuous mode [ 299.431062][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.440537][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.450804][T14133] veth1_vlan: entered promiscuous mode [ 299.482246][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.493702][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 299.500975][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.505116][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 299.512558][T14133] veth0_macvtap: entered promiscuous mode [ 299.534772][T14133] veth1_macvtap: entered promiscuous mode [ 299.539801][ T5910] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 299.549752][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.557615][ T5910] usb 4-1: Product: syz [ 299.566125][ T5910] usb 4-1: Manufacturer: syz [ 299.566820][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.570869][ T5910] usb 4-1: SerialNumber: syz [ 299.589468][ T5910] usb 4-1: config 0 descriptor?? [ 299.590275][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.597945][ T5910] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 299.614877][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.629364][T14133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.665001][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.691048][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.701624][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.712449][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.729265][T14133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.755925][T14133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.765495][T14133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.774242][T14133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.783138][T14133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.861083][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.871066][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.897524][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.906213][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.965396][T14273] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3318'. [ 300.214061][ T5910] gspca_zc3xx: reg_w_i err -71 [ 300.219481][ T5910] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 300.231328][ T5910] usb 4-1: USB disconnect, device number 34 [ 300.276647][T14287] vcan0: tx address claim with different name [ 300.397227][ T1129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.913465][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.923237][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.932271][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.945554][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.964995][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.002827][ T5910] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 301.005524][ T1129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.132798][ T5889] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 301.168475][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.214924][ T5910] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 301.248593][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.289530][ T5910] usb 6-1: Product: syz [ 301.299633][ T5910] usb 6-1: Manufacturer: syz [ 301.308774][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.309365][ T5910] usb 6-1: SerialNumber: syz [ 301.323823][ T1129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.334984][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.349109][ T5889] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 301.350208][ T5910] usb 6-1: config 0 descriptor?? [ 301.360763][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.378364][ T5889] usb 1-1: config 0 descriptor?? [ 301.388907][ T5910] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 301.430375][ T1129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.448265][T14305] chnl_net:caif_netlink_parms(): no params data found [ 301.534795][T14305] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.542034][T14305] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.550054][T14305] bridge_slave_0: entered allmulticast mode [ 301.557540][T14305] bridge_slave_0: entered promiscuous mode [ 301.565618][T14305] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.583054][T14305] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.593031][T14305] bridge_slave_1: entered allmulticast mode [ 301.600630][T14305] bridge_slave_1: entered promiscuous mode [ 301.616259][ T5910] usb 6-1: USB disconnect, device number 21 [ 301.651023][T14305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.667246][T14305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.701401][T14305] team0: Port device team_slave_0 added [ 301.715387][T14305] team0: Port device team_slave_1 added [ 301.735843][ T1129] bridge_slave_1: left allmulticast mode [ 301.741517][ T1129] bridge_slave_1: left promiscuous mode [ 301.750837][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.759775][ T1129] bridge_slave_0: left allmulticast mode [ 301.765903][ T1129] bridge_slave_0: left promiscuous mode [ 301.771661][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.825506][ T5889] elan 0003:04F3:0755.0023: failed to start in urb: -90 [ 301.844175][ T5889] elan 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 302.047317][ T10] usb 1-1: USB disconnect, device number 45 [ 302.075050][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.090597][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.100378][ T1129] bond0 (unregistering): Released all slaves [ 302.176523][T14305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.200937][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.271746][T14305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.381632][T14305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.400145][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.450982][T14305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.470656][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.481276][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.493073][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.505327][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.521770][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.681074][T14305] hsr_slave_0: entered promiscuous mode [ 302.706448][T14305] hsr_slave_1: entered promiscuous mode [ 302.739766][ T1129] hsr_slave_0: left promiscuous mode [ 302.756444][ T1129] hsr_slave_1: left promiscuous mode [ 302.772638][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.798727][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.809261][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.820460][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.850825][ T1129] veth1_macvtap: left promiscuous mode [ 302.869524][ T1129] veth0_macvtap: left promiscuous mode [ 302.887323][ T1129] veth1_vlan: left promiscuous mode [ 302.892679][ T1129] veth0_vlan: left promiscuous mode [ 303.033134][ T5822] Bluetooth: hci2: command tx timeout [ 303.179361][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 303.331653][ T30] audit: type=1326 audit(1746860935.202:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d118e969 code=0x0 [ 303.355303][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 303.362004][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.373144][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.382982][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.400798][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 303.412567][ T10] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 303.421028][ T10] usb 6-1: Product: syz [ 303.425241][ T10] usb 6-1: Manufacturer: syz [ 303.429864][ T10] usb 6-1: SerialNumber: syz [ 303.442181][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input53 [ 303.562093][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 303.599780][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 303.674532][ T10] usb 6-1: USB disconnect, device number 22 [ 303.701897][ T10] appletouch 6-1:1.0: input: appletouch disconnected [ 304.113286][T14372] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.3354'. [ 304.139108][T14372] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 304.375988][T14385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.439429][T14331] chnl_net:caif_netlink_parms(): no params data found [ 304.554072][ T5822] Bluetooth: hci4: command tx timeout [ 304.651373][T14331] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.659389][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.666712][T14331] bridge_slave_0: entered allmulticast mode [ 304.676339][T14331] bridge_slave_0: entered promiscuous mode [ 304.686645][T14331] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.713574][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.721329][T14331] bridge_slave_1: entered allmulticast mode [ 304.728767][T14331] bridge_slave_1: entered promiscuous mode [ 304.817318][ T950] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 304.828487][ T1129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.841568][ T950] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 304.997485][ T1129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.013620][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 305.038073][T14331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.050675][T14331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.092832][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 305.114992][ T5810] Bluetooth: hci2: command tx timeout [ 305.139688][ T1129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.159571][T14331] team0: Port device team_slave_0 added [ 305.179084][T14331] team0: Port device team_slave_1 added [ 305.237485][T14331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.244591][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.257473][ T10] usb 4-1: config 0 has no interfaces? [ 305.271452][T14331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.298966][ T10] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 305.308282][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.319860][ T10] usb 4-1: Product: syz [ 305.324194][ T10] usb 4-1: Manufacturer: syz [ 305.325421][ T1129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.328818][ T10] usb 4-1: SerialNumber: syz [ 305.352246][ T10] usb 4-1: config 0 descriptor?? [ 305.367999][T14305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.383203][T14305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.395769][T14331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.403467][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.433121][T14331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.445466][T14305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.466498][T14305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.541600][T14331] hsr_slave_0: entered promiscuous mode [ 305.548236][T14331] hsr_slave_1: entered promiscuous mode [ 305.557377][T14331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.572994][T14331] Cannot create hsr debugfs directory [ 305.613970][ T5889] usb 4-1: USB disconnect, device number 35 [ 305.728710][ T1129] bridge_slave_1: left allmulticast mode [ 305.737252][ T1129] bridge_slave_1: left promiscuous mode [ 305.745947][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.763196][ T1129] bridge_slave_0: left allmulticast mode [ 305.768866][ T1129] bridge_slave_0: left promiscuous mode [ 305.783016][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.058699][T14430] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.156243][T14432] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 306.181969][T14432] qnx6: wrong signature (magic) in superblock #1. [ 306.190030][T14432] qnx6: unable to read the first superblock [ 306.228362][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.246503][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.256748][ T1129] bond0 (unregistering): Released all slaves [ 306.273262][ T30] audit: type=1800 audit(1746860938.142:646): pid=14436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3382" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 306.349890][T14438] netlink: 'syz.0.3383': attribute type 3 has an invalid length. [ 306.421731][T14440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.446544][T14440] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 306.475499][ T30] audit: type=1326 audit(1746860938.342:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.0.3385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38a978e969 code=0x0 [ 306.549020][T14305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.591625][T14305] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.602418][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.609567][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.631185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.638338][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.646330][ T5810] Bluetooth: hci4: command tx timeout [ 306.670333][ T1129] hsr_slave_0: left promiscuous mode [ 306.677576][ T1129] hsr_slave_1: left promiscuous mode [ 306.684297][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.691750][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.701228][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.712145][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.727891][ T1129] veth1_macvtap: left promiscuous mode [ 306.733738][ T1129] veth0_macvtap: left promiscuous mode [ 306.739269][ T1129] veth1_vlan: left promiscuous mode [ 306.744529][ T1129] veth0_vlan: left promiscuous mode [ 306.772992][ T950] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 306.923069][ T950] usb 4-1: Using ep0 maxpacket: 32 [ 306.931299][ T950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 306.942632][ T950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 306.954963][ T950] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.964206][ T950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.974574][ T950] usb 4-1: config 0 descriptor?? [ 306.983182][T14445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 306.991995][ T950] hub 4-1:0.0: USB hub found [ 307.033064][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 307.033186][ T5810] Bluetooth: hci5: command 0x1003 tx timeout [ 307.193444][ T5822] Bluetooth: hci2: command tx timeout [ 307.193599][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 307.206363][ T950] hub 4-1:0.0: 1 port detected [ 307.246608][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 307.353033][ T5910] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 307.415790][ T950] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 307.427293][ T950] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 307.441795][ T950] usbhid 4-1:0.0: can't add hid device: -71 [ 307.448180][ T950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.474455][ T950] usb 4-1: USB disconnect, device number 36 [ 307.515331][ T5910] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.529441][ T5910] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.540399][ T5910] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.562138][ T5910] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 307.574419][ T5910] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 307.587593][ T5910] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.597465][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.605623][ T5910] usb 6-1: Product: syz [ 307.609861][ T5910] usb 6-1: Manufacturer: syz [ 307.619154][ T5910] cdc_wdm 6-1:1.0: skipping garbage [ 307.624554][ T5910] cdc_wdm 6-1:1.0: skipping garbage [ 307.646234][ T5910] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 307.652290][ T5910] cdc_wdm 6-1:1.0: Unknown control protocol [ 307.825207][T14305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.864693][ T950] usb 6-1: USB disconnect, device number 23 [ 308.006940][T14331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.035470][T14331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.058812][T14331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.087685][T14331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.126024][T14305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.210270][T14305] veth0_vlan: entered promiscuous mode [ 308.240099][T14331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.258940][T14305] veth1_vlan: entered promiscuous mode [ 308.286399][T14331] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.319415][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.326608][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.358213][T14305] veth0_macvtap: entered promiscuous mode [ 308.376727][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.383866][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.409517][T14305] veth1_macvtap: entered promiscuous mode [ 308.442326][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.455278][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.466591][T14305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.479076][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.490035][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.500785][T14305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.517631][T14305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.526508][T14305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.536820][T14305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.545890][T14305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.622230][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.657057][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.713410][ T5822] Bluetooth: hci4: command tx timeout [ 308.746356][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.779051][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.896403][T14331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.018771][T14331] veth0_vlan: entered promiscuous mode [ 309.031585][T14331] veth1_vlan: entered promiscuous mode [ 309.059940][T14331] veth0_macvtap: entered promiscuous mode [ 309.069809][T14331] veth1_macvtap: entered promiscuous mode [ 309.087321][T14331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.097988][T14331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.109168][T14331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.125316][T14331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.138628][T14331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.158661][T14331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.169810][T14331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.183679][T14331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.196338][T14331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.208558][T14331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.228753][T14331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.238830][T14331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.251503][T14331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.262948][T14331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.337296][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.356308][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.401347][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.412536][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.519352][T14506] rdma_op ffff88803255b1f0 conn xmit_rdma 0000000000000000 [ 309.569473][T14508] random: crng reseeded on system resumption [ 309.602391][ T1129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.801484][ T30] audit: type=1326 audit(1746860941.672:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14485 comm="syz.5.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a038e969 code=0x7fc00000 [ 309.858932][ T1129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.950404][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.974032][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.986057][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.011464][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.021087][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.232255][ T1129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.271330][T14515] chnl_net:caif_netlink_parms(): no params data found [ 310.487844][T14515] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.513370][T14515] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.520560][T14515] bridge_slave_0: entered allmulticast mode [ 310.535204][T14515] bridge_slave_0: entered promiscuous mode [ 310.554309][T14515] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.561601][T14515] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.578578][T14515] bridge_slave_1: entered allmulticast mode [ 310.585384][T14515] bridge_slave_1: entered promiscuous mode [ 310.611665][T14515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.624108][T14515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.656167][T14515] team0: Port device team_slave_0 added [ 310.667190][T14515] team0: Port device team_slave_1 added [ 310.691197][T14515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.698613][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.725367][T14515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.737431][T14515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.747352][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.773765][T14515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.813390][ T1129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.852386][T14515] hsr_slave_0: entered promiscuous mode [ 310.859793][T14515] hsr_slave_1: entered promiscuous mode [ 310.866805][T14515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.874480][T14515] Cannot create hsr debugfs directory [ 310.972607][ T1129] bridge_slave_1: left allmulticast mode [ 310.979181][ T1129] bridge_slave_1: left promiscuous mode [ 310.986086][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.995602][ T1129] bridge_slave_0: left allmulticast mode [ 311.001289][ T1129] bridge_slave_0: left promiscuous mode [ 311.009036][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.277776][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.288059][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.297567][ T1129] bond0 (unregistering): Released all slaves [ 311.533049][ T1129] hsr_slave_0: left promiscuous mode [ 311.564658][ T1129] hsr_slave_1: left promiscuous mode [ 311.571375][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.599544][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.655503][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.666213][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.715479][ T30] audit: type=1400 audit(1746860943.592:649): avc: denied { listen } for pid=14554 comm="syz.0.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 311.745328][ T1129] veth1_macvtap: left promiscuous mode [ 311.750895][ T1129] veth0_macvtap: left promiscuous mode [ 311.775755][ T1129] veth1_vlan: left promiscuous mode [ 311.781097][ T1129] veth0_vlan: left promiscuous mode [ 311.925621][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.936286][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.946672][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.957939][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.971018][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.995529][ T30] audit: type=1400 audit(1746860943.872:650): avc: denied { execmod } for pid=14564 comm="syz.3.3429" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 312.042073][ T30] audit: type=1400 audit(1746860943.872:651): avc: denied { execute } for pid=14564 comm="syz.3.3429" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 312.074384][ T5810] Bluetooth: hci2: command tx timeout [ 312.102936][ T5889] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 312.262886][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 312.285620][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 312.311772][ T5889] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 312.329424][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.343721][ T5889] usb 1-1: Product: syz [ 312.356383][ T5889] usb 1-1: Manufacturer: syz [ 312.361018][ T5889] usb 1-1: SerialNumber: syz [ 312.381131][ T5889] usb 1-1: config 0 descriptor?? [ 312.386203][ T5859] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 312.410689][ T5889] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 312.439083][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 312.479812][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 312.602028][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.627569][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.643581][ T10] usb 1-1: USB disconnect, device number 46 [ 312.645404][ T5859] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 312.659113][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.685106][ T5859] usb 4-1: config 0 descriptor?? [ 313.114183][ T5859] isku 0003:1E7D:319C.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 313.241705][T14515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.266976][T14515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.298656][T14515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.339246][T14515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.384487][T14563] chnl_net:caif_netlink_parms(): no params data found [ 313.552007][ T5889] usb 4-1: USB disconnect, device number 37 [ 313.670660][ T1129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.723660][T14563] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.736596][T14563] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.749517][T14563] bridge_slave_0: entered allmulticast mode [ 313.758615][T14563] bridge_slave_0: entered promiscuous mode [ 313.792391][ T1129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.811834][T14563] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.819317][T14563] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.827021][T14563] bridge_slave_1: entered allmulticast mode [ 313.835020][T14563] bridge_slave_1: entered promiscuous mode [ 313.859631][ T1129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.931411][ T1129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.947271][T14563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.959086][T14563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.982842][ T5860] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 313.991376][T14515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.073795][ T5810] Bluetooth: hci4: command tx timeout [ 314.152950][ T5810] Bluetooth: hci2: command tx timeout [ 314.170086][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 314.181095][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.190999][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 314.202260][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 314.214147][ T5860] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 314.223496][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.231521][ T5860] usb 1-1: Product: syz [ 314.235851][ T5860] usb 1-1: Manufacturer: syz [ 314.240473][ T5860] usb 1-1: SerialNumber: syz [ 314.248022][ T5860] usb 1-1: config 0 descriptor?? [ 314.431843][T14563] team0: Port device team_slave_0 added [ 314.455537][T14563] team0: Port device team_slave_1 added [ 314.468553][ T5860] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 314.682202][ T5860] usb 1-1: USB disconnect, device number 47 [ 314.854884][T14563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.861863][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.888033][T14563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.904843][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3443'. [ 314.930082][T14515] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.937695][T14563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.947723][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.973605][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.982397][T14563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.078257][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.085434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.102111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.109237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.156349][T14563] hsr_slave_0: entered promiscuous mode [ 315.162422][T14563] hsr_slave_1: entered promiscuous mode [ 315.228247][ T1129] bridge_slave_1: left allmulticast mode [ 315.236307][ T1129] bridge_slave_1: left promiscuous mode [ 315.242014][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.255328][T14614] syz.5.3448: attempt to access beyond end of device [ 315.255328][T14614] loop11: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 315.271200][ T1129] bridge_slave_0: left allmulticast mode [ 315.271254][T14614] EXT4-fs (loop11): unable to read superblock [ 315.281314][ T1129] bridge_slave_0: left promiscuous mode [ 315.289195][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.767722][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.779577][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.789989][ T1129] bond0 (unregistering): Released all slaves [ 316.028666][T14636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3456'. [ 316.043047][T14636] netlink: 'syz.3.3456': attribute type 7 has an invalid length. [ 316.050950][T14636] netlink: 'syz.3.3456': attribute type 8 has an invalid length. [ 316.059557][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 316.143344][T14636] gretap0: entered promiscuous mode [ 316.157617][ T5810] Bluetooth: hci4: command tx timeout [ 316.165008][T14636] gretap0: left promiscuous mode [ 316.236408][ T5810] Bluetooth: hci2: command tx timeout [ 316.363281][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3459'. [ 316.391824][T14515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.456519][ T1129] hsr_slave_0: left promiscuous mode [ 316.463589][ T30] audit: type=1326 audit(1746860948.332:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.493062][ T1129] hsr_slave_1: left promiscuous mode [ 316.500401][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.510798][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.519658][ T30] audit: type=1326 audit(1746860948.332:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.544022][ T30] audit: type=1326 audit(1746860948.332:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.568999][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.577219][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.588462][ T30] audit: type=1326 audit(1746860948.332:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.626537][ T30] audit: type=1326 audit(1746860948.332:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.649946][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.669030][ T1129] veth1_macvtap: left promiscuous mode [ 316.676302][ T30] audit: type=1326 audit(1746860948.332:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.690174][ T1129] veth0_macvtap: left promiscuous mode [ 316.699724][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.711429][ T30] audit: type=1326 audit(1746860948.332:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.723107][ T1129] veth1_vlan: left promiscuous mode [ 316.734811][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.735926][ T30] audit: type=1326 audit(1746860948.332:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.757078][ T1129] veth0_vlan: left promiscuous mode [ 316.769658][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.770859][ T30] audit: type=1326 audit(1746860948.332:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.804293][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.811008][ T30] audit: type=1326 audit(1746860948.332:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a978e969 code=0x7ffc0000 [ 316.834387][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.335349][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 317.382987][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 317.980248][T14515] veth0_vlan: entered promiscuous mode [ 318.048408][T14515] veth1_vlan: entered promiscuous mode [ 318.070413][T14692] syzkaller1: entered promiscuous mode [ 318.079968][T14692] syzkaller1: entered allmulticast mode [ 318.200853][T14515] veth0_macvtap: entered promiscuous mode [ 318.219368][T14515] veth1_macvtap: entered promiscuous mode [ 318.233134][ T5810] Bluetooth: hci4: command tx timeout [ 318.246183][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.266816][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.283725][T14515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.312980][ T5810] Bluetooth: hci2: command tx timeout [ 318.327060][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.342206][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.353604][T14515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.375686][T14515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.384884][T14515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.393785][T14515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.404827][T14515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.465215][T14704] pim6reg: entered allmulticast mode [ 318.631784][T14563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.653630][T14563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.678401][T14563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.696950][T14563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.722193][ T7947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.736770][ T7947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.788963][ T7947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.811996][ T7947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.835881][T14721] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 318.853427][ T5860] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 318.896513][T14563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.007627][ T5859] kernel write not supported for file /snd/pcmC0D0p (pid: 5859 comm: kworker/1:3) [ 319.024544][T14563] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.036524][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.043692][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.059863][ T5860] usb 4-1: config 6 has an invalid interface number: 108 but max is 0 [ 319.068608][ T5860] usb 4-1: config 6 has no interface number 0 [ 319.075551][ T5860] usb 4-1: config 6 interface 108 has no altsetting 0 [ 319.088693][ T5860] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 319.104343][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.111489][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.125130][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.133258][ T5860] usb 4-1: Product: syz [ 319.137487][ T5860] usb 4-1: Manufacturer: syz [ 319.142082][ T5860] usb 4-1: SerialNumber: syz [ 319.256969][T14563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.554622][ T1098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.567689][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.576696][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.603259][T14563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.604935][ T5860] mos7840 4-1:6.108: required endpoints missing [ 319.636428][ T5860] usb 4-1: USB disconnect, device number 38 [ 319.660223][ T1098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.820491][ T1098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.837642][T14563] veth0_vlan: entered promiscuous mode [ 319.849854][T14563] veth1_vlan: entered promiscuous mode [ 319.870525][T14563] veth0_macvtap: entered promiscuous mode [ 319.879423][T14563] veth1_macvtap: entered promiscuous mode [ 319.891918][T14563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.902479][T14563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.918446][T14563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.928907][T14563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.939864][T14563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.952168][T14563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.962829][T14563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.972650][T14563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.983765][T14563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.995511][T14563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.006121][T14563] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.014904][T14563] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.024121][T14563] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.032879][T14563] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.058268][ T1098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.140811][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.157264][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.180726][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.190081][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.303801][T14742] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 320.306031][ T1098] bridge_slave_1: left allmulticast mode [ 320.320435][ T5810] Bluetooth: hci4: command tx timeout [ 320.342884][ T1098] bridge_slave_1: left promiscuous mode [ 320.348691][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.398964][ T1098] bridge_slave_0: left allmulticast mode [ 320.431745][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3505'. [ 320.444253][ T1098] bridge_slave_0: left promiscuous mode [ 320.450110][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.623868][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.643745][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.654778][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.668310][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.676254][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.683898][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.707712][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.721904][ T1098] bond0 (unregistering): Released all slaves [ 322.123586][ T78] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 322.290755][ T1098] hsr_slave_0: left promiscuous mode [ 322.305349][ T1098] hsr_slave_1: left promiscuous mode [ 322.312624][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.322191][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.332834][ T78] usb 4-1: Using ep0 maxpacket: 32 [ 322.338798][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.348179][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.361301][ T78] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 322.369788][ T1098] veth1_macvtap: left promiscuous mode [ 322.376412][ T1098] veth0_macvtap: left promiscuous mode [ 322.382125][ T1098] veth1_vlan: left promiscuous mode [ 322.382769][ T78] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 322.389151][ T1098] veth0_vlan: left promiscuous mode [ 322.423312][ T78] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 322.463992][ T78] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 322.502880][ T78] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.540312][ T78] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 322.558799][ T78] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 322.580886][ T78] usb 4-1: Product: syz [ 322.585125][ T78] usb 4-1: Manufacturer: syz [ 322.589722][ T78] usb 4-1: SerialNumber: syz [ 322.616930][ T78] usb 4-1: config 0 descriptor?? [ 322.625458][ T78] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 322.652001][ T78] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 322.712916][ T5822] Bluetooth: hci2: command tx timeout [ 323.020776][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 323.064972][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 323.573369][T14778] bond0: (slave vlan2): Opening slave failed [ 323.580226][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.593694][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.611156][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.620700][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.628488][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.708493][T14756] chnl_net:caif_netlink_parms(): no params data found [ 323.936287][T14756] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.952945][T14756] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.960181][T14756] bridge_slave_0: entered allmulticast mode [ 323.971755][T14756] bridge_slave_0: entered promiscuous mode [ 324.016737][T14756] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.025619][T14756] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.032972][T14756] bridge_slave_1: entered allmulticast mode [ 324.045399][T14756] bridge_slave_1: entered promiscuous mode [ 324.151071][T14756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.201285][T14756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.322646][T14756] team0: Port device team_slave_0 added [ 324.345769][T14756] team0: Port device team_slave_1 added [ 324.386407][T14756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.393959][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.420683][ T950] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 324.428640][T14756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.457447][T14782] chnl_net:caif_netlink_parms(): no params data found [ 324.480072][T14756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.488375][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.488630][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 324.488640][ T30] audit: type=1400 audit(1746860956.362:688): avc: denied { name_bind } for pid=14813 comm="syz.0.3527" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 324.514357][T14756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.585019][ T1098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.633573][ T950] usb 6-1: Using ep0 maxpacket: 16 [ 324.640136][ T950] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 324.652790][ T950] usb 6-1: config 0 has no interface number 0 [ 324.658904][ T950] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 324.682985][ T950] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 324.695901][ T950] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 324.705202][ T950] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 324.713525][ T950] usb 6-1: Product: syz [ 324.717797][ T950] usb 6-1: SerialNumber: syz [ 324.727494][ T950] usb 6-1: config 0 descriptor?? [ 324.735158][ T950] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 324.746648][ T950] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input55 [ 324.768706][ T1098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.793139][ T5810] Bluetooth: hci2: command tx timeout [ 324.830760][T14756] hsr_slave_0: entered promiscuous mode [ 324.837234][T14756] hsr_slave_1: entered promiscuous mode [ 324.843906][T14756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.851467][T14756] Cannot create hsr debugfs directory [ 324.870776][ T950] usb 4-1: USB disconnect, device number 39 [ 324.895761][ T950] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 324.928172][ T1098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.978077][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 324.990150][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.998196][T14782] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.006366][T14782] bridge_slave_0: entered allmulticast mode [ 325.014034][T14782] bridge_slave_0: entered promiscuous mode [ 325.040281][ T1098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.052517][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.061349][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.068651][T14782] bridge_slave_1: entered allmulticast mode [ 325.075876][T14782] bridge_slave_1: entered promiscuous mode [ 325.112336][T14782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.129567][T14782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.171817][T14782] team0: Port device team_slave_0 added [ 325.195636][T14782] team0: Port device team_slave_1 added [ 325.229662][T14782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.238044][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.266050][T14782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.286579][T14782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.293694][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.319907][T14782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.320098][ T950] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 325.357445][ T1098] bridge_slave_1: left allmulticast mode [ 325.363999][ T1098] bridge_slave_1: left promiscuous mode [ 325.369671][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.378015][ T1098] bridge_slave_0: left allmulticast mode [ 325.383981][ T1098] bridge_slave_0: left promiscuous mode [ 325.389747][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.398522][ T9] usb 6-1: USB disconnect, device number 24 [ 325.406883][ T9] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 325.496089][ T950] usb 4-1: Using ep0 maxpacket: 8 [ 325.677125][ T5810] Bluetooth: hci4: command tx timeout [ 325.741714][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.752504][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.762997][ T1098] bond0 (unregistering): Released all slaves [ 325.804582][ T950] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.821995][ T950] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 325.844866][ T950] usb 4-1: can't read configurations, error -71 [ 325.950791][T14782] hsr_slave_0: entered promiscuous mode [ 325.963671][T14782] hsr_slave_1: entered promiscuous mode [ 325.969907][T14782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.993309][T14782] Cannot create hsr debugfs directory [ 326.233079][ T1098] hsr_slave_0: left promiscuous mode [ 326.244855][ T1098] hsr_slave_1: left promiscuous mode [ 326.263039][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.270508][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.295383][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.325136][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.386116][ T1098] veth1_macvtap: left promiscuous mode [ 326.391674][ T1098] veth0_macvtap: left promiscuous mode [ 326.416609][ T1098] veth1_vlan: left promiscuous mode [ 326.421933][ T1098] veth0_vlan: left promiscuous mode [ 326.873191][ T5810] Bluetooth: hci2: command tx timeout [ 327.002178][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 327.017991][ T5889] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 327.055833][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 327.187403][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.200170][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 327.211418][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.230701][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.243737][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.252852][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.262945][ T5889] usb 1-1: config 0 descriptor?? [ 327.268667][T14852] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 327.708547][T14858] /dev/nullb0: Can't open blockdev [ 327.709592][ T5889] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 327.743764][ T5889] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 327.756263][ T5810] Bluetooth: hci4: command tx timeout [ 327.768692][ T5889] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 328.015802][ T5889] usb 1-1: USB disconnect, device number 48 [ 328.202346][T14756] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.212005][T14756] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.222114][T14756] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.244628][T14756] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.344236][T14879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.381317][T14782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.399692][T14782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.415819][T14782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.428377][T14782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.489340][T14756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.556072][T14756] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.598386][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.605547][ T7947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.646718][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.653905][ T7947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.776230][T14756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.789952][T14756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.878432][T14782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.923547][T14782] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.947048][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.954171][ T5810] Bluetooth: hci2: command tx timeout [ 328.954211][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.998611][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.005754][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.075022][T14756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.188161][T14756] veth0_vlan: entered promiscuous mode [ 329.238952][T14756] veth1_vlan: entered promiscuous mode [ 329.272143][ T950] hid-generic 0000:0004:0009.0027: unknown main item tag 0x0 [ 329.296711][ T950] hid-generic 0000:0004:0009.0027: unknown main item tag 0x0 [ 329.298998][T14756] veth0_macvtap: entered promiscuous mode [ 329.313661][ T950] hid-generic 0000:0004:0009.0027: unknown main item tag 0x0 [ 329.351203][T14756] veth1_macvtap: entered promiscuous mode [ 329.353807][ T950] hid-generic 0000:0004:0009.0027: hidraw0: HID v0.04 Device [syz0] on syz1 [ 329.396275][T14782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.417814][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.429265][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.441175][T14756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.458891][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.470516][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.483409][ T5861] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 329.483658][T14756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.509958][T14756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.519770][T14756] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.530570][T14756] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.540256][T14756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.576562][T14782] veth0_vlan: entered promiscuous mode [ 329.605554][T14782] veth1_vlan: entered promiscuous mode [ 329.653054][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 329.660414][T14782] veth0_macvtap: entered promiscuous mode [ 329.663367][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 329.684282][ T7947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.684643][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.695997][T14782] veth1_macvtap: entered promiscuous mode [ 329.702401][ T5861] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.710119][ T7947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.752000][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 329.760349][ T7947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.775922][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.782522][ T5861] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 329.787541][ T7947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.805702][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.815786][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.816051][ T5861] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 329.831694][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.843816][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.850857][ T5810] Bluetooth: hci4: command tx timeout [ 329.861603][T14782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.897301][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.917681][ T5861] usb 6-1: config 0 descriptor?? [ 329.924003][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.935770][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.946344][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.946661][T14912] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 329.957364][T14782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.061749][T14782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.078790][T14782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.087962][T14782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.108650][T14782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.148278][ T30] audit: type=1400 audit(1746860962.022:689): avc: denied { bind } for pid=14935 comm="syz.3.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.267680][ T7947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.282095][ T7947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.346378][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.362484][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.719539][ T78] usb 6-1: USB disconnect, device number 25 [ 330.736490][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 330.942402][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.043344][ T5861] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 331.097220][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.214040][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.226163][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.233707][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 331.249177][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.257921][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.265729][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.275499][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.285611][ T5861] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 331.303000][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.322192][ T5861] usb 4-1: config 0 descriptor?? [ 331.333479][ T5861] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 331.378605][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.636400][T14956] chnl_net:caif_netlink_parms(): no params data found [ 331.656656][ T61] bridge_slave_1: left allmulticast mode [ 331.662361][ T61] bridge_slave_1: left promiscuous mode [ 331.668253][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.680264][ T61] bridge_slave_0: left allmulticast mode [ 331.686300][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.786242][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.799266][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.812006][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.826287][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.837575][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.238426][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.274259][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.281668][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.292490][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.302956][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.310503][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.330083][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.340759][ T61] bond0 (unregistering): Released all slaves [ 332.376603][ T5860] usb 4-1: USB disconnect, device number 42 [ 332.558406][T14956] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.568260][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.576764][T14956] bridge_slave_0: entered allmulticast mode [ 332.585258][T14956] bridge_slave_0: entered promiscuous mode [ 332.618087][T14956] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.625573][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.634826][T14956] bridge_slave_1: entered allmulticast mode [ 332.641618][T14956] bridge_slave_1: entered promiscuous mode [ 332.702646][ T61] hsr_slave_0: left promiscuous mode [ 332.709862][ T61] hsr_slave_1: left promiscuous mode [ 332.722678][ T61] veth1_to_batadv: left promiscuous mode [ 332.728638][ T61] veth1_macvtap: left promiscuous mode [ 332.734386][ T61] veth0_macvtap: left promiscuous mode [ 333.058666][ T61] team0 (unregistering): Port device team_slave_1 removed [ 333.097576][ T61] team0 (unregistering): Port device team_slave_0 removed [ 333.292815][ T78] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 333.352926][ T5810] Bluetooth: hci0: command tx timeout [ 333.459728][ T78] usb 4-1: Using ep0 maxpacket: 32 [ 333.475076][ T78] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 333.497186][ T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.512185][ T78] usb 4-1: config 0 descriptor?? [ 333.544223][T14956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.557159][T14993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.567544][T14956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.655949][T14956] team0: Port device team_slave_0 added [ 333.701398][T14956] team0: Port device team_slave_1 added [ 333.725074][ T78] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 333.749505][ T78] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.765658][ T78] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 333.775379][ T78] usb 4-1: media controller created [ 333.793542][ T78] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.811902][T14956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.826755][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.852656][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.859547][T14956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.862835][ T5860] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 333.870637][T14962] chnl_net:caif_netlink_parms(): no params data found [ 333.902525][T14956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.913143][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.916092][ T5810] Bluetooth: hci2: command tx timeout [ 333.943640][T14956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.956157][ T78] az6027: usb out operation failed. (-71) [ 333.967963][ T78] az6027: usb out operation failed. (-71) [ 333.974062][ T78] stb0899_attach: Driver disabled by Kconfig [ 333.980027][ T78] az6027: no front-end attached [ 333.980027][ T78] [ 334.000848][ T78] az6027: usb out operation failed. (-71) [ 334.017797][ T78] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 334.038405][ T5860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.049557][ T78] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 334.063606][ T5860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.097180][ T78] dvb-usb: schedule remote query interval to 400 msecs. [ 334.104417][ T5860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.114005][ T78] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 334.118297][T14956] hsr_slave_0: entered promiscuous mode [ 334.122013][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.136734][T14956] hsr_slave_1: entered promiscuous mode [ 334.144263][T14969] chnl_net:caif_netlink_parms(): no params data found [ 334.144380][ T78] usb 4-1: USB disconnect, device number 43 [ 334.220157][ T61] IPVS: stop unused estimator thread 0... [ 334.223932][ T78] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 334.339788][T14962] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.347048][T14962] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.354823][T14962] bridge_slave_0: entered allmulticast mode [ 334.361608][T14962] bridge_slave_0: entered promiscuous mode [ 334.376895][ T5860] usb 6-1: usb_control_msg returned -32 [ 334.382536][ T5860] usbtmc 6-1:16.0: can't read capabilities [ 334.393769][ T5810] Bluetooth: hci4: command tx timeout [ 334.398735][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.406887][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.415213][T14969] bridge_slave_0: entered allmulticast mode [ 334.421963][T14969] bridge_slave_0: entered promiscuous mode [ 334.428680][T14962] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.436146][T14962] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.443425][T14962] bridge_slave_1: entered allmulticast mode [ 334.450797][T14962] bridge_slave_1: entered promiscuous mode [ 334.461824][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.471513][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.479928][T14969] bridge_slave_1: entered allmulticast mode [ 334.486634][T14969] bridge_slave_1: entered promiscuous mode [ 334.548702][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.571226][T14962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.618821][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.630872][T14962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.661529][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.696506][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.775112][T14962] team0: Port device team_slave_0 added [ 334.785015][T14962] team0: Port device team_slave_1 added [ 334.809389][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.840448][T14969] team0: Port device team_slave_0 added [ 334.850699][T14969] team0: Port device team_slave_1 added [ 334.915893][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.947983][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.958048][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.968016][T15011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3601'. [ 334.988164][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.997633][T15011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3601'. [ 335.015709][T14962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.022657][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.052303][T14962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.066266][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.075793][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.102017][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.118753][T15011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3601'. [ 335.136637][T14962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.146137][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.177469][T14962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.281290][T14962] hsr_slave_0: entered promiscuous mode [ 335.287802][T14962] hsr_slave_1: entered promiscuous mode [ 335.293951][T14962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.302759][T14962] Cannot create hsr debugfs directory [ 335.314054][T14969] hsr_slave_0: entered promiscuous mode [ 335.320093][T14969] hsr_slave_1: entered promiscuous mode [ 335.332679][T14969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.340910][T14969] Cannot create hsr debugfs directory [ 335.346969][T14956] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.362015][T14956] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.418664][T14956] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.430017][T14956] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 335.433620][ T5810] Bluetooth: hci0: command tx timeout [ 335.592016][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.701659][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.807419][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.892677][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 440.899648][ C1] rcu: 0-...!: (0 ticks this GP) idle=c8f4/1/0x4000000000000000 softirq=89312/89312 fqs=0 [ 440.910606][ C1] rcu: (detected by 1, t=10502 jiffies, g=63841, q=320 ncpus=2) [ 440.918320][ C1] Sending NMI from CPU 1 to CPUs 0: [ 440.918347][ C0] NMI backtrace for cpu 0 [ 440.918359][ C0] CPU: 0 UID: 0 PID: 15016 Comm: syz.3.3603 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 440.918375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.918382][ C0] RIP: 0010:rb_next+0x4f/0x130 [ 440.918402][ C0] Code: 85 f8 00 00 00 48 8b 2b 48 39 eb 0f 84 ae 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 c3 00 00 00 49 bc 00 00 00 00 00 fc ff df 48 8b 43 08 48 85 [ 440.918414][ C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00000046 [ 440.918426][ C0] RAX: dffffc0000000000 RBX: ffff888029914340 RCX: ffffffff8b68ede0 [ 440.918434][ C0] RDX: 1ffff11005322869 RSI: ffffffff8b68ee70 RDI: ffff888029914348 [ 440.918442][ C0] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000001 [ 440.918449][ C0] R10: ffff888029914340 R11: 0000000000000000 R12: ffff8880b8427998 [ 440.918457][ C0] R13: 0000000000000000 R14: ffff8880b8427840 R15: 0000000000000000 [ 440.918465][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 440.918477][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.918486][ C0] CR2: 0000001b2ef1cff8 CR3: 0000000026a8b000 CR4: 00000000003526f0 [ 440.918494][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.918501][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.918508][ C0] Call Trace: [ 440.918514][ C0] [ 440.918521][ C0] timerqueue_del+0xd8/0x150 [ 440.918540][ C0] __remove_hrtimer+0x99/0x290 [ 440.918554][ C0] __hrtimer_run_queues+0x4f9/0xad0 [ 440.918569][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 440.918582][ C0] ? read_tsc+0x9/0x20 [ 440.918601][ C0] hrtimer_interrupt+0x397/0x8e0 [ 440.918618][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 440.918633][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 440.918649][ C0] [ 440.918653][ C0] [ 440.918657][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.918671][ C0] RIP: 0010:_raw_write_unlock_irq+0x29/0x50 [ 440.918687][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 da 96 28 f6 48 89 df e8 a2 f4 28 f6 e8 bd 82 53 f6 fb bf 01 00 00 00 e2 56 19 f6 65 8b 05 2b 8c 34 08 85 c0 74 06 5b c3 cc cc cc cc [ 440.918698][ C0] RSP: 0018:ffffc900032d7a58 EFLAGS: 00000206 [ 440.918708][ C0] RAX: 00000000000000e7 RBX: ffffffff8e00c080 RCX: ffffffff81c2e5af [ 440.918716][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe13ef RDI: 0000000000000001 [ 440.918724][ C0] RBP: ffff888061668000 R08: 0000000000000001 R09: 0000000000000001 [ 440.918732][ C0] R10: ffffffff9084f017 R11: 0000000000000000 R12: 0000000000000000 [ 440.918740][ C0] R13: ffff8880353ba440 R14: dffffc0000000000 R15: 0000000000000000 [ 440.918750][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 440.918765][ C0] ? _raw_write_unlock_irq+0x23/0x50 [ 440.918779][ C0] release_task+0xe3f/0x1c70 [ 440.918800][ C0] ? __pfx_release_task+0x10/0x10 [ 440.918816][ C0] ? find_held_lock+0x2b/0x80 [ 440.918831][ C0] ? __wake_up+0x3f/0x60 [ 440.918847][ C0] ? rcu_is_watching+0x12/0xc0 [ 440.918862][ C0] do_exit+0x1506/0x2c30 [ 440.918881][ C0] ? __pfx_do_exit+0x10/0x10 [ 440.918897][ C0] ? find_held_lock+0x2b/0x80 [ 440.918911][ C0] do_group_exit+0xd3/0x2a0 [ 440.918928][ C0] get_signal+0x2673/0x26d0 [ 440.918947][ C0] ? __pfx_get_signal+0x10/0x10 [ 440.918961][ C0] ? do_futex+0x122/0x350 [ 440.918976][ C0] ? __pfx_do_futex+0x10/0x10 [ 440.918996][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 440.919014][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 440.919033][ C0] ? rcu_is_watching+0x12/0xc0 [ 440.919047][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 440.919064][ C0] do_syscall_64+0xda/0x260 [ 440.919080][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.919092][ C0] RIP: 0033:0x7fe4d118e969 [ 440.919102][ C0] Code: Unable to access opcode bytes at 0x7fe4d118e93f. [ 440.919107][ C0] RSP: 002b:00007fe4d1fa80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 440.919118][ C0] RAX: fffffffffffffe00 RBX: 00007fe4d13b5fa8 RCX: 00007fe4d118e969 [ 440.919126][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe4d13b5fa8 [ 440.919133][ C0] RBP: 00007fe4d13b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 440.919141][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe4d13b5fac [ 440.919148][ C0] R13: 0000000000000000 R14: 00007ffe2b88bd20 R15: 00007ffe2b88be08 [ 440.919160][ C0] [ 440.919340][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g63841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 441.367771][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=24864 [ 441.375649][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g63841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 441.387002][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 441.396958][ C1] rcu: RCU grace-period kthread stack dump: [ 441.402833][ C1] task:rcu_preempt state:I stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 441.414744][ C1] Call Trace: [ 441.418033][ C1] [ 441.420963][ C1] __schedule+0x116f/0x5de0 [ 441.425471][ C1] ? find_held_lock+0x2b/0x80 [ 441.430146][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 441.435087][ C1] ? __pfx___schedule+0x10/0x10 [ 441.439937][ C1] ? find_held_lock+0x2b/0x80 [ 441.444609][ C1] ? schedule+0x2d7/0x3a0 [ 441.448936][ C1] schedule+0xe7/0x3a0 [ 441.452999][ C1] schedule_timeout+0x123/0x290 [ 441.457844][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 441.463212][ C1] ? __pfx_process_timeout+0x10/0x10 [ 441.468503][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 441.474308][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 441.479771][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 441.484537][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 441.489821][ C1] ? rcu_gp_init+0xc76/0x15a0 [ 441.494500][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 441.499352][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 441.505154][ C1] rcu_gp_kthread+0x270/0x380 [ 441.509831][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 441.515026][ C1] ? rcu_is_watching+0x12/0xc0 [ 441.519785][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 441.524979][ C1] ? __kthread_parkme+0x19e/0x250 [ 441.530006][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 441.535205][ C1] kthread+0x3c2/0x780 [ 441.539270][ C1] ? __pfx_kthread+0x10/0x10 [ 441.543852][ C1] ? __pfx_kthread+0x10/0x10 [ 441.548433][ C1] ? __pfx_kthread+0x10/0x10 [ 441.553016][ C1] ? __pfx_kthread+0x10/0x10 [ 441.557595][ C1] ? rcu_is_watching+0x12/0xc0 [ 441.562357][ C1] ? __pfx_kthread+0x10/0x10 [ 441.566942][ C1] ret_from_fork+0x45/0x80 [ 441.571352][ C1] ? __pfx_kthread+0x10/0x10 [ 441.575935][ C1] ret_from_fork_asm+0x1a/0x30 [ 441.580711][ C1]