last executing test programs: 1m3.792997901s ago: executing program 1 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 54.079334255s ago: executing program 1 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 41.567919791s ago: executing program 1 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 30.235423546s ago: executing program 1 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 24.435445637s ago: executing program 3 (id=1143): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 24.318054503s ago: executing program 3 (id=1144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x5, 0x0) 24.250352165s ago: executing program 3 (id=1145): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 24.010145712s ago: executing program 3 (id=1147): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f0000000080)=[{r0, 0x8000}], 0x1, 0xe7f5) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x7, 0x0, "0001000000000000649300"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x81) 15.892770939s ago: executing program 1 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 14.242162626s ago: executing program 3 (id=1147): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f0000000080)=[{r0, 0x8000}], 0x1, 0xe7f5) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x7, 0x0, "0001000000000000649300"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x81) 5.428986497s ago: executing program 1 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 4.648970691s ago: executing program 3 (id=1147): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f0000000080)=[{r0, 0x8000}], 0x1, 0xe7f5) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x7, 0x0, "0001000000000000649300"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x81) 2.551302259s ago: executing program 2 (id=1301): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x2, 0x8c37c2b979564e6e) 2.305121129s ago: executing program 2 (id=1303): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 2.183167381s ago: executing program 2 (id=1304): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.986823846s ago: executing program 2 (id=1305): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffff, 0x2) getdents64(r0, 0x0, 0x0) 1.862095082s ago: executing program 2 (id=1306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) syncfs(0xffffffffffffffff) 1.7310405s ago: executing program 2 (id=1307): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x3, 0xffffffff, 0x2, 0x5, 0x400, 0x560}) 819.648585ms ago: executing program 0 (id=1314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) 754.374902ms ago: executing program 0 (id=1315): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 685.116703ms ago: executing program 4 (id=1316): r0 = io_uring_setup(0x479, &(0x7f00000002c0)={0x0, 0x3, 0x40, 0x2, 0x4000020}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 608.157558ms ago: executing program 4 (id=1317): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 544.271755ms ago: executing program 0 (id=1318): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0xffffffff, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0xfffe}, 0xe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 453.964691ms ago: executing program 4 (id=1319): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 357.208693ms ago: executing program 0 (id=1320): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000540)) 299.17953ms ago: executing program 4 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 263.829678ms ago: executing program 0 (id=1322): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 133.800683ms ago: executing program 0 (id=1323): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 76.642341ms ago: executing program 4 (id=1324): unshare(0x8000000) r0 = semget$private(0x0, 0x1, 0x334) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x1]) semtimedop(r0, &(0x7f0000000040)=[{0x2, 0x81, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 0s ago: executing program 4 (id=1325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) kernel console output (not intermixed with test programs): connect, device number 10 [ 136.311648][ T8006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.328655][ T8006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.340519][ T5969] appletouch 4-1:0.85: input: appletouch disconnected [ 136.349633][ T8070] comedi comedi3: fl512: a I/O base address must be specified [ 136.397093][ T8006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.414555][ T8006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.431169][ T8072] tipc: Started in network mode [ 136.438273][ T8072] tipc: Node identity 5, cluster identity 4711 [ 136.444473][ T8072] tipc: Node number set to 5 [ 136.488354][ T5847] Bluetooth: hci0: command tx timeout [ 136.570858][ T8006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.594520][ T8006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.606132][ T8006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.618704][ T8006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.645010][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 136.645552][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 136.773975][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.814564][ T8006] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.837560][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.844651][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.876886][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.884062][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.174350][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.199437][ T8103] loop6: detected capacity change from 0 to 524287999 [ 137.282706][ T8006] veth0_vlan: entered promiscuous mode [ 137.332935][ T8006] veth1_vlan: entered promiscuous mode [ 137.474703][ T8006] veth0_macvtap: entered promiscuous mode [ 137.522919][ T8006] veth1_macvtap: entered promiscuous mode [ 137.611474][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.649677][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.715514][ T8006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.744534][ T8006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.777080][ T8006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.795083][ T8006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.006954][ T7918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.014831][ T7918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.130601][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.178287][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.270116][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 138.555026][ T30] audit: type=1400 audit(1751699479.040:539): avc: denied { getopt } for pid=8145 comm="syz.4.833" lport=38100 faddr=::ffff:172.30.0.5 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.675102][ T48] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 138.848589][ T48] usb 3-1: config 0 has no interfaces? [ 138.854238][ T48] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 138.863314][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.874454][ T48] usb 3-1: config 0 descriptor?? [ 138.932563][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 138.945013][ T5969] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 139.103020][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.109101][ T5969] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 139.123310][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.128852][ T5969] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 61 [ 139.148477][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.152214][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.159931][ T5969] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 139.178309][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 139.186408][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.193225][ T5969] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 139.212569][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.237188][ T5969] usb 1-1: config 0 descriptor?? [ 139.249701][ T5969] usb-storage 1-1:0.0: USB Mass Storage device detected [ 139.268485][ T48] usb 3-1: USB disconnect, device number 14 [ 139.281614][ T5969] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 139.471201][ T5969] usb 1-1: USB disconnect, device number 17 [ 139.727868][ T5958] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 139.778363][ T7879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.887340][ T5958] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.905189][ T5958] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.924637][ T5958] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 139.925405][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.961859][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.961914][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.977390][ T5958] usb 3-1: Product: syz [ 139.981655][ T5958] usb 3-1: Manufacturer: syz [ 139.986810][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.987097][ T5958] usb 3-1: SerialNumber: syz [ 140.000227][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.015426][ T48] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.024183][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.177446][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 140.186951][ T48] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 140.215093][ T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.235107][ T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.245298][ T48] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.258848][ T48] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.268072][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.297664][ T5893] usb 3-1: USB disconnect, device number 15 [ 140.365068][ T30] audit: type=1400 audit(1751699480.850:540): avc: denied { ioctl } for pid=8179 comm="syz.0.845" path="pid:[4026532796]" dev="nsfs" ino=4026532796 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.449464][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 140.495423][ T48] usb 5-1: GET_CAPABILITIES returned 0 [ 140.510455][ T48] usbtmc 5-1:16.0: can't read capabilities [ 140.611044][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.627854][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.635699][ T8173] bridge_slave_0: entered allmulticast mode [ 140.643958][ T8173] bridge_slave_0: entered promiscuous mode [ 140.652571][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.660218][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.667669][ T8173] bridge_slave_1: entered allmulticast mode [ 140.675176][ T8173] bridge_slave_1: entered promiscuous mode [ 140.716253][ T5958] usb 5-1: USB disconnect, device number 12 [ 140.736965][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.759857][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.867457][ T8173] team0: Port device team_slave_0 added [ 140.976468][ T7879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.988607][ T30] audit: type=1400 audit(1751699481.480:541): avc: denied { name_bind } for pid=8204 comm="syz.0.854" src=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 141.021047][ T8173] team0: Port device team_slave_1 added [ 141.145658][ T7879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.191397][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.207762][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.240932][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.328643][ T7879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.352099][ T5958] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 141.360750][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.362496][ T5958] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.383566][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.423099][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.487288][ T8224] fido_id[8224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.558322][ T30] audit: type=1400 audit(1751699482.050:542): avc: denied { listen } for pid=8226 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 141.583589][ T30] audit: type=1400 audit(1751699482.070:543): avc: denied { accept } for pid=8226 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 141.681029][ T8173] hsr_slave_0: entered promiscuous mode [ 141.702008][ T8173] hsr_slave_1: entered promiscuous mode [ 141.721418][ T8173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.740231][ T8173] Cannot create hsr debugfs directory [ 142.091196][ T5836] Bluetooth: hci0: command tx timeout [ 142.178605][ T7879] bridge_slave_1: left allmulticast mode [ 142.184581][ T7879] bridge_slave_1: left promiscuous mode [ 142.205439][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.209940][ T7901] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.267973][ T30] audit: type=1400 audit(1751699482.750:544): avc: denied { connect } for pid=8249 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.289571][ T7879] bridge_slave_0: left allmulticast mode [ 142.305303][ T7879] bridge_slave_0: left promiscuous mode [ 142.321215][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.998503][ T7879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.009505][ T7879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.021061][ T7879] bond0 (unregistering): Released all slaves [ 143.786494][ T8309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.812471][ T7879] hsr_slave_0: left promiscuous mode [ 143.854957][ T7879] hsr_slave_1: left promiscuous mode [ 143.866139][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.887015][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.920927][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.959176][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.966728][ T30] audit: type=1400 audit(1751699484.460:545): avc: denied { create } for pid=8319 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.017051][ T30] audit: type=1400 audit(1751699484.460:546): avc: denied { write } for pid=8319 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.043734][ T7879] veth1_macvtap: left promiscuous mode [ 144.056543][ T7879] veth0_macvtap: left promiscuous mode [ 144.073003][ T7879] veth1_vlan: left promiscuous mode [ 144.078458][ T30] audit: type=1400 audit(1751699484.490:547): avc: denied { connect } for pid=8318 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 144.098204][ T5969] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.110687][ T7879] veth0_vlan: left promiscuous mode [ 144.167647][ T5847] Bluetooth: hci0: command tx timeout [ 144.245187][ T8248] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 144.251691][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 144.258177][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 144.290047][ T5969] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.309715][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.329912][ T5969] usb 4-1: Product: syz [ 144.334115][ T5969] usb 4-1: Manufacturer: syz [ 144.342930][ T5969] usb 4-1: SerialNumber: syz [ 144.353637][ T5969] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.385021][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.494421][ T30] audit: type=1400 audit(1751699484.980:548): avc: denied { setopt } for pid=8332 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.963540][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 144.993492][ T30] audit: type=1400 audit(1751699485.490:549): avc: denied { map } for pid=8346 comm="syz.4.897" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 145.174496][ T7879] team0 (unregistering): Port device team_slave_1 removed [ 145.205304][ T7879] team0 (unregistering): Port device team_slave_0 removed [ 145.438475][ T5958] usb 4-1: USB disconnect, device number 11 [ 145.525224][ T5969] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 145.685221][ T9] usb 4-1: Service connection timeout for: 256 [ 145.691744][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 145.709404][ T5969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.725816][ T9] ath9k_htc: Failed to initialize the device [ 145.750097][ T5969] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 145.760683][ T5958] usb 4-1: ath9k_htc: USB layer deinitialized [ 145.788563][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.823982][ T5969] usb 5-1: config 0 descriptor?? [ 145.847681][ T5969] pwc: Askey VC010 type 2 USB webcam detected. [ 146.199758][ T8173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.235193][ T8173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.248911][ T5969] pwc: recv_control_msg error -32 req 02 val 2b00 [ 146.255530][ T5836] Bluetooth: hci0: command 0x040f tx timeout [ 146.274120][ T5969] pwc: recv_control_msg error -32 req 02 val 2700 [ 146.274496][ T8173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.300201][ T8173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.369744][ T30] audit: type=1400 audit(1751699486.860:550): avc: denied { ioctl } for pid=8384 comm="syz.0.907" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.370899][ T8388] Trying to write to read-only block-device nullb0 [ 146.478988][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.498883][ T5969] pwc: recv_control_msg error -71 req 04 val 1000 [ 146.516714][ T5969] pwc: recv_control_msg error -71 req 04 val 1300 [ 146.529277][ T5969] pwc: recv_control_msg error -71 req 04 val 1400 [ 146.548503][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.559292][ T5969] pwc: recv_control_msg error -71 req 02 val 2000 [ 146.591004][ T5969] pwc: recv_control_msg error -71 req 02 val 2100 [ 146.601477][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.608657][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.621317][ T5969] pwc: recv_control_msg error -71 req 04 val 1500 [ 146.645092][ T5969] pwc: recv_control_msg error -71 req 02 val 2500 [ 146.662351][ T5969] pwc: recv_control_msg error -71 req 02 val 2400 [ 146.682370][ T5969] pwc: recv_control_msg error -71 req 02 val 2600 [ 146.693581][ T5969] pwc: recv_control_msg error -71 req 02 val 2900 [ 146.751580][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.756365][ T5969] pwc: recv_control_msg error -71 req 02 val 2800 [ 146.759647][ T7924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.766992][ T5969] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.801082][ T5969] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.848949][ T5969] pwc: Registered as video103. [ 146.872187][ T8404] team0: Device vlan2 is already an upper device of the team interface [ 146.875230][ T5969] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 146.935868][ T5969] usb 5-1: USB disconnect, device number 13 [ 146.967595][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 147.094516][ T8412] veth1_to_bond: entered allmulticast mode [ 147.105518][ T8412] veth1_to_bond: entered promiscuous mode [ 147.112305][ T8410] veth1_to_bond: left promiscuous mode [ 147.135243][ T8410] veth1_to_bond: left allmulticast mode [ 147.145115][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 147.152889][ T24] usb 1-1: config 0 has no interfaces? [ 147.164158][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 147.193623][ T24] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 147.213864][ T24] usb 1-1: Product: syz [ 147.230181][ T24] usb 1-1: Manufacturer: syz [ 147.254659][ T24] usb 1-1: SerialNumber: syz [ 147.267022][ T24] usb 1-1: config 0 descriptor?? [ 147.277822][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.323990][ T8420] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 147.396562][ T8173] veth0_vlan: entered promiscuous mode [ 147.419019][ T8173] veth1_vlan: entered promiscuous mode [ 147.498827][ T8173] veth0_macvtap: entered promiscuous mode [ 147.538106][ T8173] veth1_macvtap: entered promiscuous mode [ 147.566076][ T5958] usb 1-1: USB disconnect, device number 18 [ 147.580424][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 147.621125][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.660393][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.731621][ T8173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.750075][ T8173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.761418][ T8173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.773574][ T8173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.990880][ T7899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.018222][ T7899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.139594][ T7899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.180259][ T7899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.334057][ T5836] Bluetooth: hci0: command 0x040f tx timeout [ 149.510146][ T7918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.077961][ T7918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.122056][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.133892][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.143961][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.160875][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.173072][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.240248][ T7918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.325033][ T5958] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 150.337360][ T7918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.481779][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 150.517174][ T5958] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 150.547761][ T5958] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 150.585166][ T5958] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 150.624942][ T5958] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 150.700660][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.727882][ T7918] bridge_slave_1: left allmulticast mode [ 150.754420][ T5958] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 150.756036][ T7918] bridge_slave_1: left promiscuous mode [ 150.770467][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.780251][ T7918] bridge_slave_0: left allmulticast mode [ 150.780419][ T5958] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 150.787417][ T7918] bridge_slave_0: left promiscuous mode [ 150.801468][ T5958] usb 1-1: Product: syz [ 150.802531][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.811535][ T5958] usb 1-1: Manufacturer: syz [ 150.823911][ T5958] usb 1-1: SerialNumber: syz [ 150.841208][ T5958] usb 1-1: config 0 descriptor?? [ 150.861222][ T5958] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 150.899598][ T30] audit: type=1400 audit(1751699491.390:551): avc: denied { setopt } for pid=8525 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.929471][ T5958] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 151.158213][ T24] usb 1-1: USB disconnect, device number 19 [ 151.164176][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 151.181242][ T24] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 151.285987][ T5958] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 151.466705][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.488722][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.515093][ T5958] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 151.531918][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.555494][ T5958] usb 3-1: config 0 descriptor?? [ 151.585599][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.610170][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.632751][ T7918] bond0 (unregistering): Released all slaves [ 151.876299][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.891208][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 152.014391][ T5958] hid-generic 0003:04F3:0754.001A: failed to start in urb: -90 [ 152.034393][ T5958] hid-generic 0003:04F3:0754.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.2-1/input0 [ 152.054487][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.085001][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.132882][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.145834][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.201246][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.224054][ T10] usb 3-1: USB disconnect, device number 16 [ 152.228785][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.252369][ T5836] Bluetooth: hci0: command tx timeout [ 152.263879][ T24] usb 5-1: config 0 descriptor?? [ 152.362375][ T7918] hsr_slave_0: left promiscuous mode [ 152.374931][ T7918] hsr_slave_1: left promiscuous mode [ 152.380994][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.388508][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.415698][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.423175][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.480750][ T30] audit: type=1400 audit(1751699492.970:552): avc: denied { ioctl } for pid=8559 comm="syz.0.948" path="socket:[20686]" dev="sockfs" ino=20686 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.482027][ T7918] veth1_macvtap: left promiscuous mode [ 152.505307][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.540689][ T30] audit: type=1400 audit(1751699493.030:553): avc: denied { read } for pid=8559 comm="syz.0.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.560704][ T7918] veth0_macvtap: left promiscuous mode [ 152.566832][ T7918] veth1_vlan: left promiscuous mode [ 152.585136][ T7918] veth0_vlan: left promiscuous mode [ 152.740723][ T24] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 152.758698][ T24] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 153.557344][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 153.656080][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 153.683508][ T8434] Set syz1 is full, maxelem 65536 reached [ 153.788787][ C1] sd 0:0:1:0: [sda] tag#2008 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.799206][ C1] sd 0:0:1:0: [sda] tag#2008 CDB: Read(6) 08 00 9f d1 fe de [ 153.806759][ C1] sd 0:0:1:0: [sda] tag#2010 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.817115][ C1] sd 0:0:1:0: [sda] tag#2010 CDB: Read(6) 08 00 9f d1 fe de [ 153.824651][ C1] sd 0:0:1:0: [sda] tag#2011 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.835047][ C1] sd 0:0:1:0: [sda] tag#2011 CDB: Read(6) 08 00 9f d1 fe de [ 153.842386][ C1] sd 0:0:1:0: [sda] tag#2016 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.852785][ C1] sd 0:0:1:0: [sda] tag#2016 CDB: Read(6) 08 00 9f d1 fe de [ 153.860663][ C1] sd 0:0:1:0: [sda] tag#2017 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.871070][ C1] sd 0:0:1:0: [sda] tag#2017 CDB: Read(6) 08 00 9f d1 fe de [ 153.878448][ C1] sd 0:0:1:0: [sda] tag#2022 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.888832][ C1] sd 0:0:1:0: [sda] tag#2022 CDB: Read(6) 08 00 9f d1 fe de [ 153.896166][ C1] sd 0:0:1:0: [sda] tag#2026 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.906558][ C1] sd 0:0:1:0: [sda] tag#2026 CDB: Read(6) 08 00 9f d1 fe de [ 153.913894][ C1] sd 0:0:1:0: [sda] tag#2035 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.924285][ C1] sd 0:0:1:0: [sda] tag#2035 CDB: Read(6) 08 00 9f d1 fe de [ 153.931919][ C1] sd 0:0:1:0: [sda] tag#2036 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.942316][ C1] sd 0:0:1:0: [sda] tag#2036 CDB: Read(6) 08 00 9f d1 fe de [ 153.949697][ C1] sd 0:0:1:0: [sda] tag#2037 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.960086][ C1] sd 0:0:1:0: [sda] tag#2037 CDB: Read(6) 08 00 9f d1 fe de [ 153.960103][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 154.140189][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 154.155666][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.174588][ T9] usb 3-1: config 0 descriptor?? [ 154.270635][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.951'. [ 154.328704][ T5836] Bluetooth: hci0: command tx timeout [ 154.411105][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.423088][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.441448][ T8509] bridge_slave_0: entered allmulticast mode [ 154.459426][ T8509] bridge_slave_0: entered promiscuous mode [ 154.497512][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.520611][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.538527][ T8509] bridge_slave_1: entered allmulticast mode [ 154.556877][ T8509] bridge_slave_1: entered promiscuous mode [ 154.603548][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 154.611163][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 154.619166][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 154.638962][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 154.642808][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.680637][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 154.694581][ T9] [drm] Initialized udl on minor 2 [ 154.706824][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.721993][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 154.732107][ T5969] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.739958][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.742527][ T9] usb 3-1: USB disconnect, device number 17 [ 154.756576][ T5969] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 154.892453][ T24] usb 5-1: USB disconnect, device number 14 [ 154.940317][ T30] audit: type=1400 audit(1751699495.420:554): avc: denied { bind } for pid=8601 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.123551][ T8509] team0: Port device team_slave_0 added [ 155.160873][ T8509] team0: Port device team_slave_1 added [ 155.329927][ T30] audit: type=1400 audit(1751699495.820:555): avc: denied { read } for pid=8611 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.508077][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.525758][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.637979][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.713921][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.725075][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.768731][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.876598][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.975'. [ 155.999504][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.098064][ T8509] hsr_slave_0: entered promiscuous mode [ 156.104724][ T8509] hsr_slave_1: entered promiscuous mode [ 156.138887][ T8509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.148322][ T8509] Cannot create hsr debugfs directory [ 156.166413][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 156.195707][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 156.228039][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.257181][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.289877][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.302603][ T9] usb 4-1: Product: syz [ 156.308835][ T9] usb 4-1: Manufacturer: syz [ 156.314053][ T9] usb 4-1: SerialNumber: syz [ 156.340568][ T9] usb 4-1: config 0 descriptor?? [ 156.380656][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.405234][ T5836] Bluetooth: hci0: command tx timeout [ 156.413286][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 156.659291][ T30] audit: type=1326 audit(1751699497.150:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 156.698047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 156.711656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 156.720480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 156.729290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 156.785063][ T30] audit: type=1326 audit(1751699497.180:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 156.975032][ T30] audit: type=1326 audit(1751699497.180:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 157.064471][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 157.075471][ T9] em28xx 4-1:0.0: Config register raw data: 0x56 [ 157.112150][ T30] audit: type=1326 audit(1751699497.180:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 157.268706][ T30] audit: type=1326 audit(1751699497.180:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 157.293648][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 157.321047][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 157.367720][ T9] usb 4-1: USB disconnect, device number 12 [ 157.391502][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 157.406114][ T30] audit: type=1326 audit(1751699497.180:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 157.458928][ T9] em28xx 4-1:0.0: Freeing device [ 157.577120][ T30] audit: type=1326 audit(1751699497.180:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1179b2ab19 code=0x7ffc0000 [ 157.720550][ T30] audit: type=1326 audit(1751699497.180:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 157.819786][ T30] audit: type=1326 audit(1751699497.180:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1179b2ab19 code=0x7ffc0000 [ 157.945091][ T30] audit: type=1326 audit(1751699497.180:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1179b2ab19 code=0x7ffc0000 [ 158.064981][ T30] audit: type=1326 audit(1751699497.180:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1179b2ab19 code=0x7ffc0000 [ 158.202163][ T30] audit: type=1326 audit(1751699497.180:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1179b2ab19 code=0x7ffc0000 [ 158.257665][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 158.352594][ T30] audit: type=1326 audit(1751699497.180:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1179b2ab19 code=0x7ffc0000 [ 158.394183][ T30] audit: type=1326 audit(1751699497.180:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 158.484978][ T5836] Bluetooth: hci0: command tx timeout [ 158.490673][ T30] audit: type=1326 audit(1751699497.180:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1179b2ab19 code=0x7ffc0000 [ 158.534962][ T30] audit: type=1326 audit(1751699497.180:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1179b8e929 code=0x7ffc0000 [ 158.558165][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.791287][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 158.832931][ T8509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.862349][ T8509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.881784][ T8509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.907086][ T8509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.970783][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.015396][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.077143][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.114450][ T10] usb 3-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 159.164409][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.191895][ T10] usb 3-1: Product: syz [ 159.214456][ T10] usb 3-1: Manufacturer: syz [ 159.233188][ T10] usb 3-1: SerialNumber: syz [ 159.254772][ T10] cdc_ncm 3-1:1.0: skipping garbage [ 159.255447][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.358947][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.422564][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.429744][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.469164][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.476342][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.526383][ T8732] erofs (device nbd4): cannot find valid erofs superblock [ 160.049141][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.190007][ T8509] veth0_vlan: entered promiscuous mode [ 160.269550][ T10] cdc_ncm 3-1:1.0: bind() failure [ 160.271336][ T8509] veth1_vlan: entered promiscuous mode [ 160.306652][ T10] usb 3-1: USB disconnect, device number 18 [ 160.486703][ T8509] veth0_macvtap: entered promiscuous mode [ 160.527108][ T8509] veth1_macvtap: entered promiscuous mode [ 160.641656][ T8773] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.656887][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.707645][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.730630][ T8509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.746967][ T8509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.769018][ T8509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.785552][ T8509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.915481][ T5893] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.068452][ T7933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.081807][ T7933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.090734][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 161.107962][ T5893] usb 4-1: config 0 has no interfaces? [ 161.135354][ T5893] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.153397][ T7918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.159836][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.165139][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 161.175306][ T5893] usb 4-1: Product: syz [ 161.190310][ T7918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.198274][ T5893] usb 4-1: Manufacturer: syz [ 161.219685][ T5893] usb 4-1: SerialNumber: syz [ 161.239749][ T5893] usb 4-1: config 0 descriptor?? [ 161.350916][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 161.361411][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.389324][ T10] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 161.405098][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.423328][ T10] usb 3-1: Product: syz [ 161.433435][ T10] usb 3-1: Manufacturer: syz [ 161.443552][ T10] usb 3-1: SerialNumber: syz [ 161.680873][ T10] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 161.700546][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.707680][ T2334] pvrusb2: Invalid write control endpoint [ 161.730759][ T10] usb 3-1: USB disconnect, device number 19 [ 161.738702][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.778460][ T5893] usb 4-1: USB disconnect, device number 13 [ 161.880643][ T2334] pvrusb2: Invalid write control endpoint [ 161.887684][ T7918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.901790][ T2334] pvrusb2: Invalid write control endpoint [ 161.919591][ T2334] pvrusb2: Invalid write control endpoint [ 161.931306][ T2334] pvrusb2: Invalid write control endpoint [ 161.941362][ T2334] pvrusb2: Invalid write control endpoint [ 161.947334][ T2334] pvrusb2: Invalid write control endpoint [ 161.953135][ T2334] pvrusb2: Invalid write control endpoint [ 161.962409][ T2334] pvrusb2: Invalid write control endpoint [ 161.977969][ T2334] pvrusb2: Invalid write control endpoint [ 161.986239][ T2334] pvrusb2: Invalid write control endpoint [ 161.992550][ T2334] pvrusb2: Invalid write control endpoint [ 162.003508][ T2334] pvrusb2: Invalid write control endpoint [ 162.012830][ T2334] pvrusb2: Invalid write control endpoint [ 162.021955][ T2334] pvrusb2: Invalid write control endpoint [ 162.029757][ T2334] pvrusb2: Invalid write control endpoint [ 162.038817][ T2334] pvrusb2: Invalid write control endpoint [ 162.044548][ T2334] pvrusb2: Invalid write control endpoint [ 162.051770][ T2334] pvrusb2: Invalid write control endpoint [ 162.057750][ T5958] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 162.068385][ T2334] pvrusb2: Invalid write control endpoint [ 162.074139][ T2334] pvrusb2: Invalid write control endpoint [ 162.080117][ T2334] pvrusb2: Invalid write control endpoint [ 162.088167][ T2334] pvrusb2: Invalid write control endpoint [ 162.097730][ T2334] pvrusb2: Invalid write control endpoint [ 162.103469][ T2334] pvrusb2: Invalid write control endpoint [ 162.109930][ T2334] pvrusb2: Invalid write control endpoint [ 162.116303][ T2334] pvrusb2: Invalid write control endpoint [ 162.122160][ T2334] pvrusb2: Invalid write control endpoint [ 162.128065][ T2334] pvrusb2: Invalid write control endpoint [ 162.133955][ T2334] pvrusb2: Invalid write control endpoint [ 162.139922][ T2334] pvrusb2: Invalid write control endpoint [ 162.145861][ T2334] pvrusb2: Invalid write control endpoint [ 162.151647][ T2334] pvrusb2: Invalid write control endpoint [ 162.154058][ T7918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.159775][ T2334] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 162.225192][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 162.231743][ T2334] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 162.244225][ T2334] pvrusb2: Invalid write control endpoint [ 162.251069][ T5958] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 162.277225][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.290247][ T2334] pvrusb2: Invalid write control endpoint [ 162.309275][ T2334] pvrusb2: Invalid write control endpoint [ 162.318962][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.331488][ T2334] pvrusb2: Invalid write control endpoint [ 162.338647][ T2334] pvrusb2: Invalid write control endpoint [ 162.344516][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 162.355935][ T2334] pvrusb2: Invalid write control endpoint [ 162.361675][ T2334] pvrusb2: Invalid write control endpoint [ 162.371785][ T5958] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 162.379204][ T2334] pvrusb2: Invalid write control endpoint [ 162.388297][ T2334] pvrusb2: Invalid write control endpoint [ 162.393599][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.394270][ T2334] pvrusb2: Invalid write control endpoint [ 162.412567][ T5958] usb 5-1: Product: syz [ 162.422673][ T5958] usb 5-1: Manufacturer: syz [ 162.428524][ T2334] pvrusb2: Invalid write control endpoint [ 162.434379][ T2334] pvrusb2: Invalid write control endpoint [ 162.439897][ T5958] usb 5-1: SerialNumber: syz [ 162.440646][ T2334] pvrusb2: Invalid write control endpoint [ 162.450750][ T2334] pvrusb2: Invalid write control endpoint [ 162.456768][ T2334] pvrusb2: Invalid write control endpoint [ 162.462761][ T2334] pvrusb2: Invalid write control endpoint [ 162.464011][ T5958] usb 5-1: config 0 descriptor?? [ 162.485037][ T2334] pvrusb2: Invalid write control endpoint [ 162.490791][ T2334] pvrusb2: Invalid write control endpoint [ 162.492026][ T7918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.519261][ T8816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.523887][ T2334] pvrusb2: Invalid write control endpoint [ 162.543079][ T2334] pvrusb2: Invalid write control endpoint [ 162.570137][ T2334] pvrusb2: Invalid write control endpoint [ 162.597061][ T2334] pvrusb2: Attached sub-driver cs53l32a [ 162.646859][ T5847] Bluetooth: hci5: command 0xfc11 tx timeout [ 162.653884][ T5836] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 162.690892][ T2334] pvrusb2: Invalid write control endpoint [ 162.712117][ T2334] pvrusb2: Invalid write control endpoint [ 162.741632][ T2334] pvrusb2: Invalid write control endpoint [ 162.744141][ T5958] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 162.768395][ T5958] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 162.771670][ T2334] pvrusb2: Invalid write control endpoint [ 162.807942][ T7918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.841109][ T2334] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 162.913965][ T2334] pvrusb2: Device being rendered inoperable [ 162.944158][ T2334] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 162.982010][ T2334] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 163.197790][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.211165][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.219698][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.230451][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.240378][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.286464][ C1] powermate: config urb returned -71 [ 163.290121][ T10] usb 5-1: USB disconnect, device number 15 [ 163.291797][ C1] powermate: usb_submit_urb(config) failed [ 163.298171][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 163.505318][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 163.505334][ T30] audit: type=1326 audit(1751699503.990:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.2.1026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9c978e929 code=0x0 [ 163.574740][ T7918] bridge_slave_1: left allmulticast mode [ 163.601142][ T7918] bridge_slave_1: left promiscuous mode [ 163.611289][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.629439][ T7918] bridge_slave_0: left allmulticast mode [ 163.645941][ T7918] bridge_slave_0: left promiscuous mode [ 163.652228][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.088662][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.099312][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.108986][ T7918] bond0 (unregistering): Released all slaves [ 164.122103][ T8874] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 164.133590][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 164.482031][ T30] audit: type=1326 audit(1751699504.960:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.565303][ T30] audit: type=1326 audit(1751699504.960:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.634282][ T30] audit: type=1326 audit(1751699504.960:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.662977][ T30] audit: type=1326 audit(1751699504.960:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.687062][ T5958] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 164.704006][ T30] audit: type=1326 audit(1751699504.960:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.729593][ T7918] hsr_slave_0: left promiscuous mode [ 164.729897][ T30] audit: type=1326 audit(1751699504.960:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.761326][ T7918] hsr_slave_1: left promiscuous mode [ 164.782246][ T30] audit: type=1326 audit(1751699504.960:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.800047][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.835245][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.856624][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.864748][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.874142][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 164.888955][ T5958] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 164.909708][ T30] audit: type=1326 audit(1751699504.960:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 164.938043][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.957514][ T5958] usb 3-1: config 0 descriptor?? [ 164.982106][ T8893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.996511][ T7918] veth1_macvtap: left promiscuous mode [ 165.023105][ T7918] veth0_macvtap: left promiscuous mode [ 165.063764][ T7918] veth1_vlan: left promiscuous mode [ 165.085301][ T7918] veth0_vlan: left promiscuous mode [ 165.147308][ T30] audit: type=1400 audit(1751699505.630:657): avc: denied { mount } for pid=8913 comm="syz.0.1039" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 165.303644][ T5836] Bluetooth: hci0: command tx timeout [ 165.443734][ T5958] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 165.638305][ T8928] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[8928] [ 165.646760][ T5969] usb 3-1: USB disconnect, device number 20 [ 166.061220][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 166.089366][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 166.470297][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 166.932145][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.956561][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.981986][ T8849] bridge_slave_0: entered allmulticast mode [ 167.025706][ T8849] bridge_slave_0: entered promiscuous mode [ 167.096446][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.125206][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.152110][ T8849] bridge_slave_1: entered allmulticast mode [ 167.176592][ T8849] bridge_slave_1: entered promiscuous mode [ 167.369559][ T5836] Bluetooth: hci0: command tx timeout [ 167.379906][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.392058][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.494062][ T8849] team0: Port device team_slave_0 added [ 167.635102][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.676427][ T8849] team0: Port device team_slave_1 added [ 167.777551][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.784532][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.814640][ T8849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.832653][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.839827][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.888082][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 167.900526][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.903466][ T8849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.912220][ T10] usb 5-1: config 0 has no interface number 0 [ 167.940305][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.973318][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 167.983312][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 167.995131][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.006212][ T10] usb 5-1: Product: syz [ 168.010893][ T10] usb 5-1: Manufacturer: syz [ 168.016477][ T10] usb 5-1: SerialNumber: syz [ 168.057723][ T10] usb 5-1: config 0 descriptor?? [ 168.151021][ T8849] hsr_slave_0: entered promiscuous mode [ 168.184040][ T8849] hsr_slave_1: entered promiscuous mode [ 168.196873][ T8849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.206802][ T8849] Cannot create hsr debugfs directory [ 168.207917][ T5893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5893 comm=kworker/1:5 [ 168.258968][ T9013] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 168.690769][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 168.708469][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input30 [ 168.932454][ T9037] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1075'. [ 168.981255][ T48] usb 5-1: USB disconnect, device number 16 [ 169.017803][ T48] appletouch 5-1:0.85: input: appletouch disconnected [ 169.368248][ T8849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.405677][ T8849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.443275][ T8849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.455554][ T5836] Bluetooth: hci0: command tx timeout [ 169.468685][ T8849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.503866][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 169.503881][ T30] audit: type=1326 audit(1751699509.990:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.1078" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9c978e929 code=0x0 [ 169.596125][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 169.747317][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.760009][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.763954][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.804668][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.810691][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.865164][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.875809][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.882886][ T7879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.920730][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.958767][ T10] usb 4-1: config 0 descriptor?? [ 170.223923][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.231120][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.394194][ T10] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xe [ 170.431638][ T10] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 170.483092][ T10] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 170.565101][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 170.742524][ T5969] usb 4-1: USB disconnect, device number 14 [ 170.748678][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 170.791976][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 170.835938][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.865298][ T9] usb 3-1: Product: syz [ 170.869340][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.869479][ T9] usb 3-1: Manufacturer: syz [ 170.918038][ T9] usb 3-1: SerialNumber: syz [ 170.936048][ T9] usb 3-1: config 0 descriptor?? [ 170.947822][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 171.019679][ T8849] veth0_vlan: entered promiscuous mode [ 171.044208][ T8849] veth1_vlan: entered promiscuous mode [ 171.114524][ T8849] veth0_macvtap: entered promiscuous mode [ 171.115679][ T9105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.147865][ T8849] veth1_macvtap: entered promiscuous mode [ 171.189937][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.221243][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.231856][ T9] gp8psk: usb in 128 operation failed. [ 171.268438][ T8849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.283936][ T9] gp8psk: usb in 137 operation failed. [ 171.295756][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.300435][ T8849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.355351][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 171.364625][ T9] usb 3-1: media controller created [ 171.372258][ T8849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.395662][ T8849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.434714][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.528147][ T5836] Bluetooth: hci0: command tx timeout [ 171.551714][ T9] gp8psk_fe: Frontend revision 1 attached [ 171.599501][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 171.647507][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 171.721404][ T7899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.733063][ T9119] syzkaller1: entered promiscuous mode [ 171.741738][ T9119] syzkaller1: entered allmulticast mode [ 171.754771][ T7899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.775212][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 171.860035][ T7901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.881963][ T7901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.912959][ T30] audit: type=1400 audit(1751699512.400:664): avc: denied { mounton } for pid=8849 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 171.970056][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.994115][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.032681][ T24] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 172.042034][ T5958] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 172.045601][ T9] gp8psk: usb in 138 operation failed. [ 172.060719][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.068851][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 172.068867][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 172.071916][ T9] usb 3-1: USB disconnect, device number 21 [ 172.120955][ T24] usb 1-1: config 0 descriptor?? [ 172.210618][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 172.231180][ T5958] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 172.236253][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 172.243609][ T5958] usb 4-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 172.289423][ T5958] usb 4-1: Product: syz [ 172.299576][ T5958] usb 4-1: Manufacturer: syz [ 172.304229][ T5958] usb 4-1: SerialNumber: syz [ 172.319919][ T5958] usb 4-1: config 0 descriptor?? [ 172.415180][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 172.431480][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 172.442090][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.455258][ T10] usb 5-1: config 0 descriptor?? [ 172.470712][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 172.955215][ T5958] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 173.168144][ T7899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.207574][ T1203] usb 1-1: USB disconnect, device number 20 [ 173.367904][ T5958] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 173.388287][ T5958] asix 4-1:0.0: probe with driver asix failed with error -71 [ 173.419950][ T5958] usb 4-1: USB disconnect, device number 15 [ 173.480644][ T10] gspca_nw80x: reg_w err -71 [ 173.490826][ T10] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 173.521337][ T10] usb 5-1: USB disconnect, device number 17 [ 173.953379][ T7899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.118579][ T7899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.155425][ T9195] binder: 9194:9195 ioctl c0306201 200000000080 returned -14 [ 174.237223][ T7899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.298659][ T30] audit: type=1400 audit(1751699514.790:665): avc: denied { read } for pid=9196 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.332371][ T9202] TCP: TCP_TX_DELAY enabled [ 174.558104][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.569521][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.581822][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.590214][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.599042][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.609549][ T7899] bridge_slave_1: left allmulticast mode [ 174.616795][ T7899] bridge_slave_1: left promiscuous mode [ 174.622579][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.663134][ T7899] bridge_slave_0: left allmulticast mode [ 174.670770][ T7899] bridge_slave_0: left promiscuous mode [ 174.680659][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.709479][ T30] audit: type=1400 audit(1751699515.200:666): avc: denied { read write } for pid=9213 comm="syz.4.1112" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.755173][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 174.779356][ T30] audit: type=1400 audit(1751699515.230:667): avc: denied { open } for pid=9213 comm="syz.4.1112" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.867784][ T9191] orangefs_mount: mount request failed with -4 [ 174.969724][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.982756][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.013254][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 175.032264][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.047442][ T30] audit: type=1400 audit(1751699515.540:668): avc: denied { override_creds } for pid=9227 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 175.076016][ T9] usb 1-1: config 0 descriptor?? [ 175.455414][ T30] audit: type=1400 audit(1751699515.940:669): avc: denied { create } for pid=9242 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 175.482646][ T30] audit: type=1400 audit(1751699515.950:670): avc: denied { write } for pid=9242 comm="syz.2.1120" path="socket:[24342]" dev="sockfs" ino=24342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 175.506967][ T7899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.527011][ T9] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 175.538490][ T9] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 175.541562][ T7899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.555309][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.001F/input/input31 [ 175.572692][ T7899] bond0 (unregistering): Released all slaves [ 175.587757][ T9] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 175.830260][ T9] usb 1-1: USB disconnect, device number 21 [ 176.052786][ T9260] random: crng reseeded on system resumption [ 176.068141][ T30] audit: type=1400 audit(1751699516.560:671): avc: denied { ioctl } for pid=9259 comm="syz.4.1126" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.092948][ T5958] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 176.250138][ T5958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.273887][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.299319][ T5958] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.315925][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.343911][ T5958] usb 4-1: SerialNumber: syz [ 176.383042][ T7899] hsr_slave_0: left promiscuous mode [ 176.494998][ T7899] hsr_slave_1: left promiscuous mode [ 176.509922][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.531249][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.553822][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1128'. [ 176.566275][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.585974][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.609195][ T5958] usb 4-1: 0:2 : does not exist [ 176.632708][ T7899] veth1_macvtap: left promiscuous mode [ 176.638656][ T7899] veth0_macvtap: left promiscuous mode [ 176.644360][ T7899] veth1_vlan: left promiscuous mode [ 176.653288][ T7899] veth0_vlan: left promiscuous mode [ 176.658725][ T5958] usb 4-1: USB disconnect, device number 16 [ 176.726528][ T5836] Bluetooth: hci0: command tx timeout [ 177.114384][ T7899] team0 (unregistering): Port device team_slave_1 removed [ 177.148960][ T7899] team0 (unregistering): Port device team_slave_0 removed [ 177.674080][ T9291] unknown channel width for channel at 909000KHz? [ 177.688194][ T9291] unknown channel width for channel at 909000KHz? [ 177.700498][ T9291] unknown channel width for channel at 909000KHz? [ 177.845270][ T48] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 177.871209][ T9209] chnl_net:caif_netlink_parms(): no params data found [ 178.027375][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.062676][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.098544][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 178.113288][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=4d.40 [ 178.134720][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.157178][ T48] usb 5-1: Product: syz [ 178.171490][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.185328][ T1203] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 178.190511][ T48] usb 5-1: Manufacturer: syz [ 178.205096][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.212051][ T48] usb 5-1: SerialNumber: syz [ 178.212277][ T9209] bridge_slave_0: entered allmulticast mode [ 178.236723][ T9293] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.250465][ T9209] bridge_slave_0: entered promiscuous mode [ 178.271627][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.301642][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.335206][ T9209] bridge_slave_1: entered allmulticast mode [ 178.353020][ T9209] bridge_slave_1: entered promiscuous mode [ 178.383230][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'. [ 178.396231][ T1203] usb 3-1: Using ep0 maxpacket: 32 [ 178.403365][ T1203] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 178.414839][ T1203] usb 3-1: config 0 has no interface number 0 [ 178.427242][ T1203] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 178.436755][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.445883][ T1203] usb 3-1: Product: syz [ 178.450139][ T1203] usb 3-1: Manufacturer: syz [ 178.455576][ T1203] usb 3-1: SerialNumber: syz [ 178.463226][ T1203] usb 3-1: config 0 descriptor?? [ 178.477598][ T1203] smsc95xx v2.0.0 [ 178.507373][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.548299][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.611270][ T9209] team0: Port device team_slave_0 added [ 178.638287][ T9209] team0: Port device team_slave_1 added [ 178.796904][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.803915][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.838868][ T5836] Bluetooth: hci0: command tx timeout [ 178.876187][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.919918][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.934275][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.007937][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.259138][ T9209] hsr_slave_0: entered promiscuous mode [ 179.281204][ T9209] hsr_slave_1: entered promiscuous mode [ 179.291032][ T48] cdc_ncm 5-1:1.0: bind() failure [ 179.313282][ T9209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.322106][ T48] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 179.332790][ T9209] Cannot create hsr debugfs directory [ 179.339762][ T48] cdc_ncm 5-1:1.1: bind() failure [ 179.358253][ T48] usb 5-1: USB disconnect, device number 18 [ 179.480425][ T7901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.491669][ T1203] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 179.512883][ T1203] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 179.532265][ T1203] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 179.543867][ T1203] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 179.574727][ T1203] usb 3-1: USB disconnect, device number 22 [ 179.667070][ T7901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.741919][ T7901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.859318][ T7901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.050999][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.063565][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.075025][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.084527][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.093236][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.322456][ T9374] input: syz1 as /devices/virtual/input/input32 [ 180.365417][ T9374] input: failed to attach handler leds to device input32, error: -6 [ 180.374499][ T9366] syzkaller1: entered promiscuous mode [ 180.384971][ T9366] syzkaller1: entered allmulticast mode [ 180.464491][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1152'. [ 180.541660][ T9383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1152'. [ 180.820800][ T30] audit: type=1326 audit(1751699521.310:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 180.855603][ T30] audit: type=1326 audit(1751699521.310:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 180.880846][ T30] audit: type=1326 audit(1751699521.320:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 180.918705][ T5847] Bluetooth: hci0: command tx timeout [ 180.922242][ T30] audit: type=1326 audit(1751699521.320:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 180.976115][ T30] audit: type=1326 audit(1751699521.320:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 181.001002][ T30] audit: type=1326 audit(1751699521.320:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 181.028439][ T30] audit: type=1326 audit(1751699521.320:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 181.068943][ T30] audit: type=1326 audit(1751699521.320:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 181.137409][ T7901] bridge_slave_1: left allmulticast mode [ 181.143190][ T30] audit: type=1326 audit(1751699521.320:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 181.143937][ T7901] bridge_slave_1: left promiscuous mode [ 181.190264][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.208390][ T7901] bridge_slave_0: left allmulticast mode [ 181.214064][ T7901] bridge_slave_0: left promiscuous mode [ 181.220099][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.232167][ T30] audit: type=1326 audit(1751699521.320:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435f98e929 code=0x7ffc0000 [ 181.265536][ T1203] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 181.415598][ T1203] usb 5-1: Using ep0 maxpacket: 32 [ 181.436302][ T1203] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.466067][ T1203] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 181.486587][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.494613][ T1203] usb 5-1: Product: syz [ 181.518128][ T1203] usb 5-1: Manufacturer: syz [ 181.522762][ T1203] usb 5-1: SerialNumber: syz [ 181.539669][ T1203] usb 5-1: config 0 descriptor?? [ 181.772413][ T7901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.792792][ T7901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.825578][ T7901] bond0 (unregistering): Released all slaves [ 181.841363][ T7901] bond1 (unregistering): Released all slaves [ 181.959599][ T1203] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 182.157949][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 182.166229][ T5847] Bluetooth: hci4: command tx timeout [ 182.183538][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1162'. [ 182.257136][ T9209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.331941][ T9209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.410876][ T24] usb 5-1: USB disconnect, device number 19 [ 182.476635][ T9209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.538632][ T9209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.677045][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.684163][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.692001][ T9363] bridge_slave_0: entered allmulticast mode [ 182.706332][ T9363] bridge_slave_0: entered promiscuous mode [ 182.714543][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.721965][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.729503][ T9363] bridge_slave_1: entered allmulticast mode [ 182.737213][ T9363] bridge_slave_1: entered promiscuous mode [ 182.819382][ T7901] hsr_slave_0: left promiscuous mode [ 182.829127][ T7901] hsr_slave_1: left promiscuous mode [ 182.835517][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.843051][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.854484][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.865437][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.902072][ T7901] veth1_macvtap: left promiscuous mode [ 182.907748][ T7901] veth0_macvtap: left promiscuous mode [ 182.933048][ T7901] veth1_vlan: left promiscuous mode [ 182.940921][ T7901] veth0_vlan: left promiscuous mode [ 182.965406][ T5847] Bluetooth: hci0: command tx timeout [ 183.236037][ T48] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 183.395004][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 183.409502][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.447698][ T48] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 183.475539][ T48] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 183.486008][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.503846][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.516437][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.530737][ T48] usb 5-1: Product: syz [ 183.535822][ T48] usb 5-1: Manufacturer: syz [ 183.543075][ T48] usb 5-1: SerialNumber: syz [ 183.569896][ T7901] team0 (unregistering): Port device team_slave_1 removed [ 183.641062][ T7901] team0 (unregistering): Port device team_slave_0 removed [ 183.935226][ T9457] unknown channel width for channel at 909000KHz? [ 183.955870][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.996733][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.025356][ T48] usb 5-1: 0:2 : does not exist [ 184.168897][ T9363] team0: Port device team_slave_0 added [ 184.220912][ T9363] team0: Port device team_slave_1 added [ 184.247530][ T5847] Bluetooth: hci4: command tx timeout [ 184.271676][ T5958] usb 5-1: USB disconnect, device number 20 [ 184.320320][ T9468] vivid-000: disconnect [ 184.326855][ T9468] vivid-000: reconnect [ 184.366270][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.393526][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.424618][ T9363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.442552][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.478410][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.509992][ T9363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.571956][ T7901] IPVS: stop unused estimator thread 0... [ 184.626592][ T9363] hsr_slave_0: entered promiscuous mode [ 184.653094][ T9363] hsr_slave_1: entered promiscuous mode [ 184.675508][ T9363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.708220][ T9363] Cannot create hsr debugfs directory [ 184.730958][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.813236][ T9209] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.911832][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.919004][ T7879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.954976][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 185.000849][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.007985][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.119707][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.156911][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.183334][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 185.214401][ T9] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 185.247745][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.275617][ T9] usb 1-1: config 0 descriptor?? [ 185.295197][ T9209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.707600][ T9] sony 0003:12BA:0100.0020: unknown main item tag 0x0 [ 185.736280][ T9504] loop5: detected capacity change from 0 to 4807 [ 185.750359][ T9] sony 0003:12BA:0100.0020: hidraw0: USB HID v0.00 Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0 [ 185.780097][ T9505] loop5: detected capacity change from 4807 to 7887 [ 185.787675][ T9] sony 0003:12BA:0100.0020: failed to claim input [ 185.819672][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.865187][ T6284] buffer_io_error: 58 callbacks suppressed [ 185.865204][ T6284] Buffer I/O error on dev loop5, logical block 985, async page read [ 185.899100][ T9209] veth0_vlan: entered promiscuous mode [ 185.938879][ T9363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.948999][ T5940] usb 1-1: USB disconnect, device number 22 [ 185.959506][ T6284] Buffer I/O error on dev loop5, logical block 985, async page read [ 185.973585][ T9363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.004437][ T9363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.038952][ T9363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.072090][ T9209] veth1_vlan: entered promiscuous mode [ 186.129671][ T9209] veth0_macvtap: entered promiscuous mode [ 186.153957][ T9209] veth1_macvtap: entered promiscuous mode [ 186.214431][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.249169][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.270305][ T9363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.300519][ T9209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.314959][ T9209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.323696][ T9209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.338236][ T5847] Bluetooth: hci4: command tx timeout [ 186.344045][ T9209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.376572][ T9363] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.400245][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.407413][ T7899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.491448][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.498664][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.594102][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 186.594119][ T30] audit: type=1400 audit(1751699527.080:687): avc: denied { accept } for pid=9519 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.682803][ T7901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.698015][ T7901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.780317][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.793979][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.203020][ T9363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.314266][ T9363] veth0_vlan: entered promiscuous mode [ 187.332748][ T9363] veth1_vlan: entered promiscuous mode [ 187.371836][ T9363] veth0_macvtap: entered promiscuous mode [ 187.384287][ T9363] veth1_macvtap: entered promiscuous mode [ 187.518320][ T7901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.539593][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.558831][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.593044][ T9363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.601850][ T9363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.625177][ T9363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.633905][ T9363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.744807][ T7899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.763291][ T7899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.802854][ T7901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.849443][ T7924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.859154][ T7924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.880088][ T7901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.247628][ T7901] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.599764][ T7901] bridge_slave_1: left allmulticast mode [ 188.609733][ T7901] bridge_slave_1: left promiscuous mode [ 188.626699][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.678466][ T7901] bridge_slave_0: left allmulticast mode [ 188.684158][ T7901] bridge_slave_0: left promiscuous mode [ 188.705639][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.705694][ T1203] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 188.764063][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.778278][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.786365][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.794741][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.812624][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.898948][ T1203] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 188.911255][ T1203] usb 3-1: config 0 has no interface number 0 [ 188.917700][ T1203] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 188.928014][ T1203] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.942956][ T1203] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 188.954228][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.963326][ T1203] usb 3-1: Product: syz [ 188.967654][ T1203] usb 3-1: Manufacturer: syz [ 188.972315][ T1203] usb 3-1: SerialNumber: syz [ 188.983217][ T1203] usb 3-1: config 0 descriptor?? [ 188.992148][ T9556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.006113][ T1203] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 189.033885][ T1203] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 189.241804][ T7901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.257134][ T7901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.276655][ T7901] bond0 (unregistering): Released all slaves [ 189.458592][ T1546] usb 3-1: USB disconnect, device number 23 [ 189.493402][ T1546] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 189.536310][ T1546] cyberjack 3-1:0.69: device disconnected [ 189.557137][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.568528][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.578194][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.587160][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.594727][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.660910][ T7901] hsr_slave_0: left promiscuous mode [ 189.666914][ T7901] hsr_slave_1: left promiscuous mode [ 189.672538][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.680396][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.692824][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.705326][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.729565][ T7901] veth1_macvtap: left promiscuous mode [ 189.735501][ T7901] veth0_macvtap: left promiscuous mode [ 189.741233][ T7901] veth1_vlan: left promiscuous mode [ 189.746882][ T7901] veth0_vlan: left promiscuous mode [ 189.930884][ T9588] input: syz1 as /devices/virtual/input/input33 [ 190.104329][ T30] audit: type=1400 audit(1751699530.590:688): avc: denied { append } for pid=9594 comm="syz.2.1225" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.125350][ T9595] loop6: detected capacity change from 0 to 63 [ 190.139842][ T30] audit: type=1400 audit(1751699530.630:689): avc: denied { map } for pid=9594 comm="syz.2.1225" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.144765][ T6284] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.169101][ T30] audit: type=1400 audit(1751699530.630:690): avc: denied { execute } for pid=9594 comm="syz.2.1225" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.177880][ T9595] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.204130][ T5940] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 190.226291][ T6284] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.234406][ T6284] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.260741][ T6284] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.273439][ T9595] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.290604][ T6284] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.354934][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 190.361361][ T5940] usb 5-1: config 0 has no interfaces? [ 190.369906][ T5940] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 190.397233][ T7901] team0 (unregistering): Port device team_slave_1 removed [ 190.404576][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.415225][ T5940] usb 5-1: Product: syz [ 190.424779][ T5940] usb 5-1: Manufacturer: syz [ 190.434412][ T5940] usb 5-1: SerialNumber: syz [ 190.441705][ T5940] usb 5-1: config 0 descriptor?? [ 190.460838][ T7901] team0 (unregistering): Port device team_slave_0 removed [ 190.651749][ T5940] usb 5-1: USB disconnect, device number 21 [ 190.772107][ T9568] chnl_net:caif_netlink_parms(): no params data found [ 190.884967][ T5847] Bluetooth: hci0: command tx timeout [ 191.114234][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.137596][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.146385][ T9568] bridge_slave_0: entered allmulticast mode [ 191.157246][ T9568] bridge_slave_0: entered promiscuous mode [ 191.186541][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.193686][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.219806][ T9568] bridge_slave_1: entered allmulticast mode [ 191.234698][ T9568] bridge_slave_1: entered promiscuous mode [ 191.326976][ T30] audit: type=1400 audit(1751699531.820:691): avc: denied { ioctl } for pid=9624 comm="syz.4.1236" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 191.372841][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.412179][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 191.412875][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.454934][ T5940] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.619172][ T9568] team0: Port device team_slave_0 added [ 191.627018][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 191.636880][ T9581] chnl_net:caif_netlink_parms(): no params data found [ 191.643920][ T5940] usb 3-1: config 1 has an invalid interface number: 230 but max is 0 [ 191.654323][ T9568] team0: Port device team_slave_1 added [ 191.671753][ T5940] usb 3-1: config 1 has no interface number 0 [ 191.685422][ T5847] Bluetooth: hci4: command tx timeout [ 191.688710][ T5940] usb 3-1: config 1 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.729024][ T5940] usb 3-1: config 1 interface 230 has no altsetting 0 [ 191.738317][ T5940] usb 3-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d0 [ 191.752656][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.761085][ T5940] usb 3-1: Product: syz [ 191.779092][ T5940] usb 3-1: Manufacturer: syz [ 191.784360][ T5940] usb 3-1: SerialNumber: syz [ 191.791110][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.802491][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.836334][ T9621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.845835][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.890942][ T5940] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 191.909181][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.916366][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.942764][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.975317][ T1546] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 191.999071][ T7901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.033950][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.041220][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.054016][ T9581] bridge_slave_0: entered allmulticast mode [ 192.061399][ T9581] bridge_slave_0: entered promiscuous mode [ 192.071044][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.078197][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.085733][ T9581] bridge_slave_1: entered allmulticast mode [ 192.092623][ T9581] bridge_slave_1: entered promiscuous mode [ 192.125139][ T5958] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 192.143854][ T7901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.157948][ T1546] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.176381][ T9568] hsr_slave_0: entered promiscuous mode [ 192.176986][ T1546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.182767][ T9568] hsr_slave_1: entered promiscuous mode [ 192.196771][ T1546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 192.200415][ T9568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.211357][ T1546] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.218121][ T9568] Cannot create hsr debugfs directory [ 192.238370][ T1546] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.248717][ T1546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.262516][ T1546] usb 5-1: config 0 descriptor?? [ 192.287852][ T5958] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 192.301351][ T7901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.303029][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 192.331482][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.332270][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 192.357345][ T5958] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 192.363290][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.366666][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.383959][ T5958] usb 1-1: Product: syz [ 192.388322][ T5958] usb 1-1: Manufacturer: syz [ 192.392963][ T5958] usb 1-1: SerialNumber: syz [ 192.401124][ T5958] usb 1-1: config 0 descriptor?? [ 192.401724][ T7901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.414334][ T5958] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 192.489302][ T9581] team0: Port device team_slave_0 added [ 192.518608][ T9581] team0: Port device team_slave_1 added [ 192.578306][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.585788][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.612268][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.658663][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.673074][ T5940] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 192.676380][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.735242][ T24] usb 1-1: USB disconnect, device number 23 [ 192.761511][ T1546] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 192.783791][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.922299][ T1546] usb 3-1: USB disconnect, device number 24 [ 192.967479][ T5847] Bluetooth: hci0: command tx timeout [ 193.002699][ T7901] bridge_slave_1: left allmulticast mode [ 193.009397][ T7901] bridge_slave_1: left promiscuous mode [ 193.015614][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.024155][ T48] usb 5-1: USB disconnect, device number 22 [ 193.048062][ T7901] bridge_slave_0: left allmulticast mode [ 193.059642][ T7901] bridge_slave_0: left promiscuous mode [ 193.066817][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.332855][ T7901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.344497][ T7901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.371666][ T7901] bond0 (unregistering): Released all slaves [ 193.393691][ T9581] hsr_slave_0: entered promiscuous mode [ 193.400580][ T9581] hsr_slave_1: entered promiscuous mode [ 193.410112][ T9581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.418599][ T9581] Cannot create hsr debugfs directory [ 193.559281][ T30] audit: type=1400 audit(1751699534.050:692): avc: denied { write } for pid=9651 comm="syz.2.1244" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 193.706074][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 193.776991][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.783323][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.792044][ T5847] Bluetooth: hci4: command tx timeout [ 193.888327][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.913746][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.943378][ T7901] hsr_slave_0: left promiscuous mode [ 193.944962][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.959764][ T7901] hsr_slave_1: left promiscuous mode [ 193.960700][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.979811][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.996823][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 194.004982][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.006831][ T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 194.024320][ T24] usb 1-1: Manufacturer: syz [ 194.024970][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.032000][ T24] usb 1-1: config 0 descriptor?? [ 194.044718][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.067895][ T7901] veth1_macvtap: left promiscuous mode [ 194.074526][ T7901] veth0_macvtap: left promiscuous mode [ 194.084135][ T7901] veth1_vlan: left promiscuous mode [ 194.123488][ T7901] veth0_vlan: left promiscuous mode [ 194.128920][ T5940] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 194.291307][ T5940] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 194.300525][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.308654][ T5940] usb 5-1: Product: syz [ 194.312851][ T5940] usb 5-1: Manufacturer: syz [ 194.318564][ T5940] usb 5-1: SerialNumber: syz [ 194.325967][ T5940] usb 5-1: config 0 descriptor?? [ 194.458332][ T24] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 194.480301][ T24] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 194.505252][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 194.588896][ T7901] team0 (unregistering): Port device team_slave_1 removed [ 194.622836][ T7901] team0 (unregistering): Port device team_slave_0 removed [ 194.685024][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 194.701957][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 194.711191][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.723604][ T9] usb 3-1: Product: syz [ 194.724825][ T48] usb 1-1: USB disconnect, device number 24 [ 194.748654][ T9] usb 3-1: Manufacturer: syz [ 194.753290][ T9] usb 3-1: SerialNumber: syz [ 194.766645][ T9] usb 3-1: config 0 descriptor?? [ 195.022105][ T9568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.039098][ T9568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.059136][ T5847] Bluetooth: hci0: command tx timeout [ 195.072298][ T9568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.089329][ T9568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.157120][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.190100][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.201114][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.208195][ T7924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.224329][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.225391][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 195.231483][ T7924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.257645][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.268179][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 195.276572][ T9] usb 3-1: media controller created [ 195.333903][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.358319][ T5940] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.389527][ T5940] asix 5-1:0.0: probe with driver asix failed with error -71 [ 195.451170][ T5940] usb 5-1: USB disconnect, device number 23 [ 195.514499][ T9686] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.644126][ T9690] pim6reg1: entered promiscuous mode [ 195.650495][ T9690] pim6reg1: entered allmulticast mode [ 195.664285][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.753966][ T9581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.791363][ T9581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.809261][ T9581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.823046][ T9581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.850122][ T5847] Bluetooth: hci4: command tx timeout [ 195.874321][ T9568] veth0_vlan: entered promiscuous mode [ 195.889425][ T9568] veth1_vlan: entered promiscuous mode [ 195.921952][ T9568] veth0_macvtap: entered promiscuous mode [ 195.939230][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 195.941452][ T9568] veth1_macvtap: entered promiscuous mode [ 195.946571][ T9673] dtv5100: wlen = 0, aborting. [ 195.979502][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 195.992278][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.000090][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 196.002486][ T9] usb 3-1: USB disconnect, device number 25 [ 196.035123][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 196.056955][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.076391][ T9568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.099210][ T9568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.105932][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 196.126558][ T9568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.136936][ T9568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.176189][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.208133][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.220847][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.228873][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.235064][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.251079][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.265150][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.272328][ T7924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.287994][ T9692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.327268][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.327311][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.341382][ T7924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.443566][ T7933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.474109][ T7933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.532152][ T7924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.552015][ T7924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.581145][ T24] usb 1-1: USB disconnect, device number 25 [ 196.862725][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.918309][ T9581] veth0_vlan: entered promiscuous mode [ 196.930323][ T9581] veth1_vlan: entered promiscuous mode [ 196.966109][ T9581] veth0_macvtap: entered promiscuous mode [ 196.988598][ T9581] veth1_macvtap: entered promiscuous mode [ 197.012943][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.026240][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.040016][ T9581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.046962][ T9715] input: syz1 as /devices/virtual/input/input37 [ 197.065291][ T9581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.074007][ T9581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.104933][ T9581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.271647][ T7924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.289672][ T7924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.375548][ T7918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.398172][ T7918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.709057][ T30] audit: type=1400 audit(1751699538.200:693): avc: denied { ioctl } for pid=9729 comm="syz.2.1269" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 197.955151][ T7918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.727023][ T9745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.963755][ T7918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.015737][ T30] audit: type=1400 audit(1751699539.510:694): avc: denied { write } for pid=9747 comm="syz.4.1275" path="socket:[28594]" dev="sockfs" ino=28594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 199.217071][ T7918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.340044][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.353045][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.362456][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.375020][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.382541][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.400681][ T9759] ref_ctr_offset mismatch. inode: 0x56a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa04 [ 199.463766][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.483551][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.500845][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.519722][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.529040][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.591115][ T7918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.778078][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 200.074266][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 200.155298][ T7918] bridge_slave_1: left allmulticast mode [ 200.171180][ T7918] bridge_slave_1: left promiscuous mode [ 200.205280][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.228556][ T7918] bridge_slave_0: left allmulticast mode [ 200.234235][ T7918] bridge_slave_0: left promiscuous mode [ 200.258638][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.325022][ T5940] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.505169][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 200.515136][ T5940] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 200.524541][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.533696][ T5940] usb 5-1: Product: syz [ 200.561112][ T5940] usb 5-1: Manufacturer: syz [ 200.573119][ T5940] usb 5-1: SerialNumber: syz [ 200.599054][ T5940] usb 5-1: config 0 descriptor?? [ 200.630428][ T5940] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 200.631115][ T9806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.862487][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.873786][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.883698][ T7918] bond0 (unregistering): Released all slaves [ 200.950295][ T9764] chnl_net:caif_netlink_parms(): no params data found [ 201.059074][ T30] audit: type=1400 audit(1751699541.550:695): avc: denied { watch watch_reads } for pid=9820 comm="syz.2.1303" path="pipe:[4491]" dev="pipefs" ino=4491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 201.083243][ T30] audit: type=1400 audit(1751699541.550:696): avc: denied { relabelfrom } for pid=9820 comm="syz.2.1303" name="" dev="pipefs" ino=29844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 201.154758][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.163625][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.170906][ T9760] bridge_slave_0: entered allmulticast mode [ 201.180057][ T9823] IPv6: addrconf: prefix option has invalid lifetime [ 201.181089][ T9760] bridge_slave_0: entered promiscuous mode [ 201.248413][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.265096][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.272294][ T9760] bridge_slave_1: entered allmulticast mode [ 201.287118][ T9760] bridge_slave_1: entered promiscuous mode [ 201.359281][ T30] audit: type=1326 audit(1751699541.850:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c978e929 code=0x7ffc0000 [ 201.383103][ T30] audit: type=1326 audit(1751699541.850:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c978e929 code=0x7ffc0000 [ 201.407096][ T30] audit: type=1326 audit(1751699541.850:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd9c978e929 code=0x7ffc0000 [ 201.431541][ T30] audit: type=1326 audit(1751699541.850:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c978e929 code=0x7ffc0000 [ 201.455191][ T5836] Bluetooth: hci0: command tx timeout [ 201.455898][ T30] audit: type=1326 audit(1751699541.850:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c978e929 code=0x7ffc0000 [ 201.488796][ T30] audit: type=1326 audit(1751699541.850:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9c978e929 code=0x7ffc0000 [ 201.517082][ T30] audit: type=1326 audit(1751699541.850:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c978e929 code=0x7ffc0000 [ 201.562984][ T7918] hsr_slave_0: left promiscuous mode [ 201.581071][ T7918] hsr_slave_1: left promiscuous mode [ 201.591989][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.605152][ T5836] Bluetooth: hci4: command tx timeout [ 201.613419][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.622236][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.629788][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.649279][ T7918] veth1_macvtap: left promiscuous mode [ 201.655161][ T7918] veth0_macvtap: left promiscuous mode [ 201.660817][ T7918] veth1_vlan: left promiscuous mode [ 201.666212][ T7918] veth0_vlan: left promiscuous mode [ 201.689525][ T5940] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 201.705094][ T5940] usb 5-1: USB disconnect, device number 24 [ 201.828364][ T1546] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 201.987788][ T1546] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.008681][ T1546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.019802][ T1546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.035938][ T1546] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.072139][ T1546] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.082371][ T1546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.099199][ T1546] usb 3-1: config 0 descriptor?? [ 202.218320][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 202.269513][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 202.522221][ T1546] plantronics 0003:047F:FFFF.0023: ignoring exceeding usage max [ 202.589751][ T1546] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 202.909615][ T9860] mmap: syz.4.1319 (9860) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.035649][ T9865] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1321'. [ 203.142178][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.163235][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.190511][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.200777][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.209686][ T9764] bridge_slave_0: entered allmulticast mode [ 203.219809][ T9764] bridge_slave_0: entered promiscuous mode [ 203.227797][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.234978][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.243055][ T9764] bridge_slave_1: entered allmulticast mode [ 203.250548][ T9764] bridge_slave_1: entered promiscuous mode [ 203.301534][ T9871] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 203.313705][ T9871] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 203.322109][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.0.1323 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 203.334070][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.344111][ T9871] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 203.351045][ T9871] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 203.370652][ T9871] RSP: 0018:ffffc9000435f2e8 EFLAGS: 00010202 [ 203.376707][ T9871] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000df06000 [ 203.384664][ T9871] RDX: 000000000000000b RSI: ffffffff8993596c RDI: 0000000000000058 [ 203.392617][ T9871] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 203.400574][ T9871] R10: 00000000000a0000 R11: 0000000000000001 R12: ffffffff8ce8d220 [ 203.408529][ T9871] R13: 0000000000000058 R14: ffffffff8ce8d200 R15: ffff88807d374000 [ 203.416494][ T9871] FS: 00007f43607756c0(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 203.425428][ T9871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.432011][ T9871] CR2: 00007ffe9d5c4ff8 CR3: 0000000067189000 CR4: 00000000003526f0 [ 203.439977][ T9871] Call Trace: [ 203.443243][ T9871] [ 203.446163][ T9871] drr_qlen_notify+0x24/0x150 [ 203.450835][ T9871] qdisc_tree_reduce_backlog+0x224/0x500 [ 203.456458][ T9871] pie_change+0x86e/0xe70 [ 203.460783][ T9871] ? __debug_object_init+0x2de/0x3d0 [ 203.466059][ T9871] ? __pfx___debug_object_init+0x10/0x10 [ 203.471678][ T9871] ? __pfx_pie_change+0x10/0x10 [ 203.476546][ T9871] ? __pfx_pie_timer+0x10/0x10 [ 203.481316][ T9871] ? lockdep_init_map_type+0x5c/0x280 [ 203.486674][ T9871] pie_init+0x364/0x470 [ 203.490818][ T9871] ? __pfx_pie_init+0x10/0x10 [ 203.495486][ T9871] qdisc_create+0x457/0xfc0 [ 203.499981][ T9871] tc_modify_qdisc+0x12bb/0x2130 [ 203.504909][ T9871] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 203.510207][ T9871] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 203.515481][ T9871] rtnetlink_rcv_msg+0x3c9/0xe90 [ 203.520413][ T9871] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.525865][ T9871] ? ref_tracker_free+0x37c/0x830 [ 203.530881][ T9871] netlink_rcv_skb+0x158/0x420 [ 203.535632][ T9871] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.541079][ T9871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.546353][ T9871] ? netlink_deliver_tap+0x1ae/0xd30 [ 203.551633][ T9871] netlink_unicast+0x53a/0x7f0 [ 203.556379][ T9871] ? __pfx_netlink_unicast+0x10/0x10 [ 203.561648][ T9871] netlink_sendmsg+0x8d1/0xdd0 [ 203.566398][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.571671][ T9871] ____sys_sendmsg+0xa95/0xc70 [ 203.576417][ T9871] ? copy_msghdr_from_user+0x10a/0x160 [ 203.581863][ T9871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.587133][ T9871] ? page_table_check_set+0x631/0x750 [ 203.592501][ T9871] ___sys_sendmsg+0x134/0x1d0 [ 203.597165][ T9871] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.602349][ T9871] ? __lock_acquire+0x622/0x1c90 [ 203.607278][ T9871] __sys_sendmsg+0x16d/0x220 [ 203.611857][ T9871] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.616957][ T9871] ? find_held_lock+0x2b/0x80 [ 203.621630][ T9871] ? do_user_addr_fault+0x843/0x1370 [ 203.626908][ T9871] do_syscall_64+0xcd/0x4c0 [ 203.631401][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.637277][ T9871] RIP: 0033:0x7f435f98e929 [ 203.641673][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.661263][ T9871] RSP: 002b:00007f4360775038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.669662][ T9871] RAX: ffffffffffffffda RBX: 00007f435fbb6080 RCX: 00007f435f98e929 [ 203.677621][ T9871] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 203.685575][ T9871] RBP: 00007f435fa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 203.693528][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.701482][ T9871] R13: 0000000000000001 R14: 00007f435fbb6080 R15: 00007ffddd245e88 [ 203.709440][ T9871] [ 203.712441][ T9871] Modules linked in: [ 203.716396][ T9871] ---[ end trace 0000000000000000 ]--- [ 203.719998][ T5847] Bluetooth: hci0: command tx timeout [ 203.721835][ T9871] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 203.727290][ T5847] Bluetooth: hci4: command tx timeout [ 203.734132][ T9871] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 203.734152][ T9871] RSP: 0018:ffffc9000435f2e8 EFLAGS: 00010202 [ 203.765221][ T9871] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000df06000 [ 203.773200][ T9871] RDX: 000000000000000b RSI: ffffffff8993596c RDI: 0000000000000058 [ 203.781195][ T9871] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 203.789193][ T9871] R10: 00000000000a0000 R11: 0000000000000001 R12: ffffffff8ce8d220 [ 203.797184][ T9871] R13: 0000000000000058 R14: ffffffff8ce8d200 R15: ffff88807d374000 [ 203.805170][ T9871] FS: 00007f43607756c0(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 203.814098][ T9871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.820695][ T9871] CR2: 00007ffe9d5c4ff8 CR3: 0000000067189000 CR4: 00000000003526f0 [ 203.828683][ T9871] Kernel panic - not syncing: Fatal exception in interrupt [ 203.836066][ T9871] Kernel Offset: disabled [ 203.840369][ T9871] Rebooting in 86400 seconds..