last executing test programs: 4m5.456650447s ago: executing program 0 (id=2404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 3m36.844902688s ago: executing program 0 (id=2404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 3m8.674632081s ago: executing program 0 (id=2404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 2m29.895248428s ago: executing program 0 (id=2404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 2m1.070964426s ago: executing program 0 (id=2404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 1m55.659450335s ago: executing program 1 (id=2935): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)='(', 0x10, 0x0, &(0x7f0000000040)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 1m55.055316372s ago: executing program 1 (id=2937): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x10000000000000) 1m54.585349471s ago: executing program 1 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x4002) 1m50.065523109s ago: executing program 1 (id=2954): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0x6) 1m49.503451879s ago: executing program 1 (id=2957): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f00000000c0)={0x8, r2}) 1m49.157383686s ago: executing program 1 (id=2960): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r1, 0x1) 1m40.070780411s ago: executing program 4 (id=2998): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x0) 1m38.563704295s ago: executing program 4 (id=3003): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080)=0xb3, 0x4) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000003840)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}], 0x1, 0x0) 1m37.605503397s ago: executing program 4 (id=3006): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x2, 0x7fb, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) setresuid(0xee01, 0xee00, 0xffffffffffffffff) setpriority(0x2, 0x0, 0x0) 1m37.213426368s ago: executing program 4 (id=3008): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 1m36.861107519s ago: executing program 4 (id=3009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "4c72c74590cd07156b723813e6d31ac4"}]}}}}}}}}, 0x0) 1m36.172288072s ago: executing program 0 (id=2404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 1m34.326399617s ago: executing program 4 (id=3012): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0xe3, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}, @mbim={0xc}, @mbim_extended={0x8}, @obex={0x5}, @acm={0x4}, @mdlm_detail={0x75, 0x24, 0x13, 0x0, "287d3c123aeac60053ad4e4102427a612f936b4ea2a0e23548bc0312c6915e9af7d8d43b7ac0ff735159d7d3b56e01866918ee059015e2540e92b262d27aec6ed0825a5339ad2379f84194f43f7cab1087bcfdfe94a96e015813e5689aaffd148dadf256c93cf46cf8e29ca178c8d53f67"}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m13.502190016s ago: executing program 2 (id=3054): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000008c0)={0x3, 0x200, 0x6, 0x1, 0x7, 0x6}) 1m10.44410078s ago: executing program 2 (id=3056): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 13.936449078s ago: executing program 3 (id=3100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000180), 0x5f, 0x0, 0x0) 13.15018622s ago: executing program 3 (id=3101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x200000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.909163237s ago: executing program 2 (id=3065): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000002680)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 3.907836495s ago: executing program 3 (id=3110): r0 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.203374054s ago: executing program 2 (id=3102): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 1.930262126s ago: executing program 2 (id=3103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0x625}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) 1.543354255s ago: executing program 2 (id=3104): syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) 1.317765317s ago: executing program 3 (id=3105): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) 576.52458ms ago: executing program 3 (id=3106): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) 0s ago: executing program 3 (id=3107): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): r on device batadv0 [ 651.917875][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 651.942075][ T5277] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 652.049446][T11418] veth0_vlan: entered promiscuous mode [ 652.163340][ T5277] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 652.169809][T11418] veth1_vlan: entered promiscuous mode [ 652.192684][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.278884][ T5277] usb 2-1: config 0 descriptor?? [ 652.538375][T11418] veth0_macvtap: entered promiscuous mode [ 652.671436][T11418] veth1_macvtap: entered promiscuous mode [ 652.829343][ T5277] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 652.831459][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.941349][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.040121][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.107921][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.163857][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.220764][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.250393][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.282270][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.318714][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.350548][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.363874][T11418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.619000][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.632530][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.764414][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.825948][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.861063][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.952260][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.984562][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.016105][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 654.024221][ T48] usb 2-1: USB disconnect, device number 25 [ 654.032295][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.032326][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.032352][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.054399][T11418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.217050][T11418] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.244150][T11418] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.257060][T11418] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.317448][T11418] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.326407][ T8] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 654.328102][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.328187][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.328236][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.329868][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.329953][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.329998][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.331671][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.331751][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.331797][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.349637][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.349764][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.349812][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.362355][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.541441][ T29] audit: type=1400 audit(1725012364.773:640): avc: denied { write } for pid=10525 comm="kworker/1:0" path="socket:[33461]" dev="sockfs" ino=33461 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 654.611578][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.650535][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.736653][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.839710][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.903990][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.928298][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.964001][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.009592][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 655.042332][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 655.102140][T10941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.102652][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.152858][T10941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.168828][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 655.205597][T11663] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 655.232897][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 655.242293][ T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 655.266648][ T8] usb 5-1: Product: syz [ 655.270980][ T8] usb 5-1: Manufacturer: syz [ 655.280940][ T8] usb 5-1: SerialNumber: syz [ 655.329642][ T8] usb 5-1: config 0 descriptor?? [ 655.349389][ T5361] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 655.371045][ T8] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 655.472979][ T3928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.484917][ T3928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.636933][ T5361] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 655.731568][ T5361] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.759934][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 655.822061][ T5361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 655.857624][ T5361] usb 2-1: SerialNumber: syz [ 655.899342][T10525] usb 5-1: USB disconnect, device number 17 [ 655.921862][T10525] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 656.794694][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.110809][ T5361] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 657.263485][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.608333][ T8] usb 2-1: USB disconnect, device number 26 [ 657.631535][ T8] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 657.766529][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.341276][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.570679][T11707] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.2647'. [ 659.829235][ T11] bridge_slave_1: left allmulticast mode [ 659.851702][ T11] bridge_slave_1: left promiscuous mode [ 659.876919][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.890648][ T4613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.926983][ T4613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.947480][ T4613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.972053][ T4613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 660.007817][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 660.010814][ T11] bridge_slave_0: left allmulticast mode [ 660.031445][ T4613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.080912][ T11] bridge_slave_0: left promiscuous mode [ 660.141323][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.882083][T10941] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 662.155052][ T4613] Bluetooth: hci3: command tx timeout [ 662.826397][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.871954][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.882042][T10525] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 662.912264][ T11] bond0 (unregistering): Released all slaves [ 663.051006][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 663.112338][T10525] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 663.238038][T10525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.280775][T10525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.298351][T10525] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 663.323509][T10525] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 663.335207][T10525] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 663.375415][T10525] usb 2-1: Manufacturer: syz [ 663.397561][T10525] usb 2-1: config 0 descriptor?? [ 663.545233][ T8] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 663.598871][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 663.630865][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 663.786582][ T8] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 663.814571][ T8] usb 3-1: config 0 has no interface number 0 [ 663.831533][ T8] usb 3-1: New USB device found, idVendor=093a, idProduct=2624, bcdDevice=94.5b [ 663.846338][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.877348][ T8] usb 3-1: Product: syz [ 663.894607][ T8] usb 3-1: Manufacturer: syz [ 663.899284][ T8] usb 3-1: SerialNumber: syz [ 663.939004][T10525] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 663.984310][T10525] appleir 0003:05AC:8243.0024: No inputs registered, leaving [ 663.985322][ T8] usb 3-1: config 0 descriptor?? [ 664.031717][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2624 [ 664.057166][T10525] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 664.238172][ T55] Bluetooth: hci3: command tx timeout [ 664.559102][ T941] usb 2-1: USB disconnect, device number 27 [ 664.568190][ T11] hsr_slave_0: left promiscuous mode [ 664.580802][ T11] hsr_slave_1: left promiscuous mode [ 664.669696][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.692809][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.712256][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.724722][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.806665][ T11] veth1_macvtap: left promiscuous mode [ 664.814524][ T11] veth0_macvtap: left promiscuous mode [ 664.820353][ T11] veth1_vlan: left promiscuous mode [ 664.831433][ T11] veth0_vlan: left promiscuous mode [ 664.937895][ T8] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 665.396597][ T48] usb 3-1: USB disconnect, device number 27 [ 666.330540][ T55] Bluetooth: hci3: command tx timeout [ 666.473675][T11777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 666.501517][T11777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 666.520153][T11777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 666.567315][T11777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 666.607379][T11777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 666.635865][T10971] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 666.690480][T11777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.613531][T11790] kernel read not supported for file /!selinuxselinux (pid: 11790 comm: syz.1.2684) [ 667.630975][ T29] audit: type=1800 audit(1725012377.853:641): pid=11790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2684" name="!selinuxselinux" dev="mqueue" ino=34287 res=0 errno=0 [ 667.748028][ T11] team0 (unregistering): Port device team_slave_1 removed [ 667.861983][ T11] team0 (unregistering): Port device team_slave_0 removed [ 668.074213][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 668.403021][ T4613] Bluetooth: hci3: command tx timeout [ 668.800773][ T4613] Bluetooth: hci2: command tx timeout [ 669.296109][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 670.317980][ T29] audit: type=1400 audit(1725012380.543:642): avc: denied { unmount } for pid=10277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 670.702035][T11710] chnl_net:caif_netlink_parms(): no params data found [ 670.879565][ T48] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 670.892519][ T4613] Bluetooth: hci2: command tx timeout [ 670.945907][T11815] netlink: 'syz.3.2694': attribute type 4 has an invalid length. [ 670.988000][T11815] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.2694'. [ 671.181780][ T48] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 671.274203][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.311097][ T48] usb 2-1: Product: syz [ 671.341100][ T48] usb 2-1: Manufacturer: syz [ 671.348749][ T48] usb 2-1: SerialNumber: syz [ 671.407563][ T48] usb 2-1: config 0 descriptor?? [ 671.755398][ T48] usb 2-1: USB disconnect, device number 28 [ 671.945240][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.954831][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.962139][T11710] bridge_slave_0: entered allmulticast mode [ 672.031429][T11710] bridge_slave_0: entered promiscuous mode [ 672.119753][T11775] chnl_net:caif_netlink_parms(): no params data found [ 672.165936][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.208633][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.230427][T11710] bridge_slave_1: entered allmulticast mode [ 672.292834][T11710] bridge_slave_1: entered promiscuous mode [ 672.406118][T10980] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 672.472084][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.952765][ T55] Bluetooth: hci2: command tx timeout [ 672.990944][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.138115][T11710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.327997][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.421539][T11710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.610640][ T29] audit: type=1400 audit(1725012383.823:643): avc: denied { setopt } for pid=11841 comm="syz.1.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 673.847646][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.268485][T11710] team0: Port device team_slave_0 added [ 674.285268][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 674.302284][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.367689][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.385461][T11775] bridge_slave_0: entered allmulticast mode [ 674.411918][T11775] bridge_slave_0: entered promiscuous mode [ 674.455767][T11710] team0: Port device team_slave_1 added [ 674.498726][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.521942][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.538293][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.548764][ T5279] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 674.548936][T11775] bridge_slave_1: entered allmulticast mode [ 674.575519][T11775] bridge_slave_1: entered promiscuous mode [ 674.579519][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 674.628006][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 674.672018][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.705734][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.741774][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.771116][T11710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.772006][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 674.778328][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.778376][T11710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.782144][T11710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.811811][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 674.844656][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.899488][ T8] usb 4-1: config 0 descriptor?? [ 674.911912][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 674.915268][T11710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.976292][T11856] fuse: Unknown parameter 'rootmod0000000000000000000000000000000000000000' [ 674.978003][ T5279] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 675.010094][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.033228][ T55] Bluetooth: hci2: command 0x0419 tx timeout [ 675.076601][ T5279] usb 3-1: Product: syz [ 675.080939][ T5279] usb 3-1: Manufacturer: syz [ 675.100224][ T5279] usb 3-1: SerialNumber: syz [ 675.129835][ T5279] usb 3-1: config 0 descriptor?? [ 675.170524][ T5279] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 675.189688][ T5279] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 675.239132][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.488072][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.536248][ T8] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 675.552040][ T8] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 675.582079][ T8] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 675.787073][ T5279] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 675.809797][ T5279] em28xx 3-1:0.0: Config register raw data: 0x3d [ 675.823549][ T11] bridge_slave_1: left allmulticast mode [ 675.829273][ T11] bridge_slave_1: left promiscuous mode [ 675.832062][ T5279] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 675.863790][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.871101][ T5279] em28xx 3-1:0.0: No AC97 audio processor [ 675.910371][ T11] bridge_slave_0: left allmulticast mode [ 675.922539][ T11] bridge_slave_0: left promiscuous mode [ 675.955098][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.026672][ T5277] usb 4-1: USB disconnect, device number 17 [ 676.034152][ T5279] usb 3-1: USB disconnect, device number 28 [ 677.162090][ T4613] Bluetooth: hci2: command 0x0419 tx timeout [ 677.728578][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.751259][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.785980][ T11] bond0 (unregistering): Released all slaves [ 677.830256][T11710] hsr_slave_0: entered promiscuous mode [ 677.840733][T11710] hsr_slave_1: entered promiscuous mode [ 677.879471][T11775] team0: Port device team_slave_0 added [ 678.069256][ T29] audit: type=1400 audit(1725012388.293:644): avc: denied { relabelfrom } for pid=11870 comm="syz.2.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 678.161960][ T29] audit: type=1400 audit(1725012388.293:645): avc: denied { relabelto } for pid=11870 comm="syz.2.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 678.195527][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 678.238680][T11775] team0: Port device team_slave_1 added [ 678.756348][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.763636][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.848128][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.982596][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 679.048523][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.059873][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.095610][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.225844][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.285902][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.316263][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 679.344822][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.388571][ T8] usb 4-1: SerialNumber: syz [ 679.490865][ T11] hsr_slave_0: left promiscuous mode [ 679.560842][ T11] hsr_slave_1: left promiscuous mode [ 679.586238][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.609699][T11894] loop2: detected capacity change from 0 to 7 [ 679.615314][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.647641][T11894] Dev loop2: unable to read RDB block 7 [ 679.665078][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.677517][ T8] usb 4-1: 0:2 : does not exist [ 679.677739][ T8] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 679.689296][T11894] loop2: unable to read partition table [ 679.703848][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.709539][T11894] loop2: partition table beyond EOD, truncated [ 679.730339][T11894] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 679.780693][ T8] usb 4-1: USB disconnect, device number 18 [ 679.932853][ T11] veth1_macvtap: left promiscuous mode [ 679.938611][ T11] veth0_macvtap: left promiscuous mode [ 679.944784][ T11] veth1_vlan: left promiscuous mode [ 679.950252][ T11] veth0_vlan: left promiscuous mode [ 681.700302][ T11] batadv_slave_0 (unregistering): left allmulticast mode [ 681.842223][ T11] team0 (unregistering): Port device team_slave_1 removed [ 681.920827][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'. [ 681.995995][ T11] team0 (unregistering): Port device team_slave_0 removed [ 683.276708][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 683.445743][T11917] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 683.646606][T11775] hsr_slave_0: entered promiscuous mode [ 683.698470][T11775] hsr_slave_1: entered promiscuous mode [ 683.721668][T11775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.748557][T11775] Cannot create hsr debugfs directory [ 683.905953][T10525] kernel write not supported for file /adsp1 (pid: 10525 comm: kworker/1:0) [ 685.064307][ T29] audit: type=1326 audit(1725012395.293:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.1.2743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598bf79ef9 code=0x0 [ 685.811982][T11710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 686.066210][T11710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 686.121740][T11710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 686.179163][T11710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 686.930295][ T29] audit: type=1400 audit(1725012397.153:647): avc: denied { nlmsg_write } for pid=11968 comm="syz.1.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 687.279175][T11710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.460297][T11710] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.723215][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.730498][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.816090][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.823528][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.888303][T11775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 687.951921][T11775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.991745][T11775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 688.030631][ T29] audit: type=1400 audit(1725012398.253:648): avc: denied { append } for pid=11982 comm="syz.1.2759" name="userio" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 688.107369][T11775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 689.046719][T10966] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 689.268495][T12001] fuse: Unknown parameter 'rootmod0000000000000000000000000000000000000000' [ 689.339488][T12000] netlink: 110828 bytes leftover after parsing attributes in process `syz.1.2764'. [ 689.392218][T12000] netlink: zone id is out of range [ 689.401996][T12000] netlink: zone id is out of range [ 689.410525][T12000] netlink: zone id is out of range [ 689.419983][T12000] netlink: zone id is out of range [ 689.429690][T12000] netlink: zone id is out of range [ 689.439435][T12000] netlink: zone id is out of range [ 689.448000][T12000] netlink: zone id is out of range [ 689.457234][T12000] netlink: zone id is out of range [ 689.462394][T12000] netlink: zone id is out of range [ 689.463373][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.628597][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.809553][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.816906][T11081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.905826][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.913333][T11081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.978080][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.086508][ T29] audit: type=1400 audit(1725012400.313:649): avc: denied { read } for pid=12003 comm="syz.1.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 690.830111][T11710] veth0_vlan: entered promiscuous mode [ 691.510499][T11710] veth1_vlan: entered promiscuous mode [ 691.631637][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.891910][T11710] veth0_macvtap: entered promiscuous mode [ 692.026556][T11710] veth1_macvtap: entered promiscuous mode [ 692.141114][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.236739][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.281197][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.328519][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.365920][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.387324][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.417320][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.451746][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.548425][T11710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.787710][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.851020][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.918890][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.932216][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.961349][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.972062][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.993456][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.003979][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.028036][T11710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.048001][T11710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.135132][T11710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.151194][T11710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.166342][T11710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.253003][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.955843][T11081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.966586][T11081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.247594][T10980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.298074][T10980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.802396][ T11] net_ratelimit: 395 callbacks suppressed [ 694.808278][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 694.951774][T10525] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 695.212687][T10525] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 695.225845][T10525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 695.249988][T10525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 695.309254][T10525] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.397981][T10525] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.419708][ T5289] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 695.472520][T10525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.528957][T10983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.562501][T10525] usb 2-1: config 0 descriptor?? [ 695.568811][T12059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.665371][ T5289] usb 4-1: config 0 has an invalid interface number: 62 but max is 0 [ 695.702519][ T5289] usb 4-1: config 0 has no interface number 0 [ 695.740531][T11775] veth0_vlan: entered promiscuous mode [ 695.789758][ T5289] usb 4-1: New USB device found, idVendor=093a, idProduct=2624, bcdDevice=94.5b [ 695.829931][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.862138][T10983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.902731][ T5289] usb 4-1: Product: syz [ 695.907020][ T5289] usb 4-1: Manufacturer: syz [ 695.911686][ T5289] usb 4-1: SerialNumber: syz [ 695.983324][ T5289] usb 4-1: config 0 descriptor?? [ 696.017168][ T5289] gspca_main: gspca_pac7302-2.14.0 probing 093a:2624 [ 696.172147][T10983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.207138][T10525] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 696.227443][T10525] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 696.291665][T11775] veth1_vlan: entered promiscuous mode [ 696.313041][T10525] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 696.511817][T10983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.627113][ T5279] usb 2-1: USB disconnect, device number 29 [ 696.716290][T11775] veth0_macvtap: entered promiscuous mode [ 696.802676][T11775] veth1_macvtap: entered promiscuous mode [ 696.865902][ T5289] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 696.925601][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.982182][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.042875][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.132644][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.196851][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.249510][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.299186][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.321504][ T8] usb 4-1: USB disconnect, device number 19 [ 697.347165][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.378250][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.411958][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.446931][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.565014][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.605046][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.664763][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.741092][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.770792][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.842297][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.878613][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.931300][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.963415][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.021375][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.055732][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.162376][T11775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.221876][T11775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.237560][T11775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.308620][T11775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.628743][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 698.681718][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 698.706096][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 698.729850][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 698.741697][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 698.760811][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 698.921347][T10983] bridge_slave_1: left allmulticast mode [ 698.950568][T10983] bridge_slave_1: left promiscuous mode [ 698.961624][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.027641][T10983] bridge_slave_0: left allmulticast mode [ 699.057062][T12086] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 699.072072][T10983] bridge_slave_0: left promiscuous mode [ 699.072412][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.118144][T12086] overlayfs: conflicting lowerdir path [ 700.555514][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 700.607611][T10983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.621838][T10983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.647899][T10983] bond0 (unregistering): Released all slaves [ 700.771770][T12100] veth1_macvtap: left promiscuous mode [ 700.899258][ T4613] Bluetooth: hci3: command tx timeout [ 701.941954][T10983] hsr_slave_0: left promiscuous mode [ 701.959262][T10983] hsr_slave_1: left promiscuous mode [ 701.967801][T10983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.996828][T10983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.022087][T10983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.030079][T10983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.111520][T10983] veth1_macvtap: left promiscuous mode [ 702.130340][T10983] veth0_macvtap: left promiscuous mode [ 702.136300][T10983] veth1_vlan: left promiscuous mode [ 702.141845][T10983] veth0_vlan: left promiscuous mode [ 702.959294][ T4613] Bluetooth: hci3: command tx timeout [ 704.307939][T10983] team0 (unregistering): Port device team_slave_1 removed [ 704.426553][T10983] team0 (unregistering): Port device team_slave_0 removed [ 705.040086][ T4613] Bluetooth: hci3: command tx timeout [ 705.674534][T10941] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 705.710670][T10980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.734074][T10980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.950763][T10966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.976511][T10966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.829917][T12079] chnl_net:caif_netlink_parms(): no params data found [ 707.115760][ T4613] Bluetooth: hci3: command tx timeout [ 708.585504][T12079] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.638123][T12079] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.689111][T12079] bridge_slave_0: entered allmulticast mode [ 708.709165][T12079] bridge_slave_0: entered promiscuous mode [ 708.860111][T12079] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.946141][T12079] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.986766][T12079] bridge_slave_1: entered allmulticast mode [ 709.007681][T12079] bridge_slave_1: entered promiscuous mode [ 709.492987][T12079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.510532][T12079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.995097][ T5289] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 710.010421][T12079] team0: Port device team_slave_0 added [ 710.026397][T12197] netlink: 'syz.2.2836': attribute type 21 has an invalid length. [ 710.056947][T12197] netlink: 'syz.2.2836': attribute type 4 has an invalid length. [ 710.116613][T12079] team0: Port device team_slave_1 added [ 710.218183][ T5289] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 710.278450][ T5289] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 710.317604][ T5289] usb 2-1: Manufacturer: syz [ 710.326192][ T5289] usb 2-1: config 0 descriptor?? [ 710.390395][T12079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.431025][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.506347][T12079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.580513][T12201] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 710.624067][T12079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.651477][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.767121][T12079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.808465][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 710.882229][ T5289] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 711.147113][ T29] audit: type=1400 audit(1725012421.373:650): avc: denied { mounton } for pid=12210 comm="syz.3.2843" path="/proc/1022" dev="proc" ino=37731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 711.237505][T12079] hsr_slave_0: entered promiscuous mode [ 711.272019][T12079] hsr_slave_1: entered promiscuous mode [ 711.521759][ T5289] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 711.559046][ T5289] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 711.693686][ T5289] usb 2-1: USB disconnect, device number 30 [ 713.379013][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2854'. [ 713.611264][ T29] audit: type=1400 audit(1725012423.843:651): avc: denied { ioctl } for pid=12241 comm="syz.3.2857" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 714.076896][ T5209] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 714.205854][ T29] audit: type=1400 audit(1725012424.433:652): avc: denied { write } for pid=12254 comm="syz.2.2862" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 714.265435][ T5209] usb 2-1: Using ep0 maxpacket: 32 [ 714.278247][ T5209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.325940][ T5209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.357155][ T5209] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 714.397387][ T5209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.422385][ T5209] usb 2-1: config 0 descriptor?? [ 714.450596][T12079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 714.531267][T12079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 714.622370][T12079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 714.749682][T12079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 714.970602][ T5209] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 715.169801][ T5209] ft260 0003:0403:6030.0027: chip code: 5e81 abf2 [ 715.377388][ T5209] ft260 0003:0403:6030.0027: uart interface is not supported [ 715.659082][T12079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.815873][T12079] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.914293][T10966] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 715.930395][ T5209] usb 2-1: USB disconnect, device number 31 [ 715.977334][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.984677][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.123634][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.130921][T11081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.317675][ T29] audit: type=1400 audit(1725012426.503:653): avc: denied { setattr } for pid=12273 comm="syz.3.2870" name="bus" dev="tmpfs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 717.504953][ T29] audit: type=1400 audit(1725012427.713:654): avc: denied { read } for pid=12292 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 718.080988][T12079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.119621][ T29] audit: type=1400 audit(1725012428.343:655): avc: denied { unmount } for pid=11775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 718.376321][T12305] netlink: 'syz.1.2880': attribute type 29 has an invalid length. [ 718.491103][T12079] veth0_vlan: entered promiscuous mode [ 718.562174][T12079] veth1_vlan: entered promiscuous mode [ 718.684004][ T5289] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 718.900563][ T5289] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 718.922033][ T5289] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 718.940018][ T5289] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.948128][T12079] veth0_macvtap: entered promiscuous mode [ 719.047103][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 719.058236][ T5289] usb 5-1: SerialNumber: syz [ 719.089284][T12308] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 719.098919][T12079] veth1_macvtap: entered promiscuous mode [ 719.251707][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.332012][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.349211][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.417424][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.460949][ T5289] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 719.470756][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.508953][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.549784][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.550267][ T5289] usb 5-1: USB disconnect, device number 18 [ 719.575473][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.575502][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.575529][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.578775][T12079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.763034][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.797765][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.910125][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.958985][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.997673][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.010065][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.071880][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.111195][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.140792][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.162300][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.190903][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'. [ 720.196053][T12079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.260055][T12079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.300613][T12079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.323491][T12079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.335607][T12079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.588306][ T29] audit: type=1400 audit(1725012430.803:656): avc: denied { open } for pid=12331 comm="syz.3.2892" path="/dev/ptyqa" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 720.721917][ T29] audit: type=1400 audit(1725012430.813:657): avc: denied { ioctl } for pid=12331 comm="syz.3.2892" path="/dev/ptyqa" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 720.881391][ T29] audit: type=1400 audit(1725012431.053:658): avc: denied { setopt } for pid=12333 comm="syz.1.2893" lport=48199 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 720.909626][T12329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.029224][ T29] audit: type=1400 audit(1725012431.193:659): avc: denied { write } for pid=12335 comm="syz.4.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 721.275690][ T5279] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 721.390412][T12329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.476756][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 721.492336][ T5279] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 721.516357][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.608598][ T5279] usb 4-1: Product: syz [ 721.613854][ T5279] usb 4-1: Manufacturer: syz [ 721.618607][ T5279] usb 4-1: SerialNumber: syz [ 721.697901][T10971] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 721.767910][ T5279] usb 4-1: config 0 descriptor?? [ 721.770103][T12329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.788334][ T5279] gspca_main: sq905-2.14.0 probing 2770:9120 [ 722.119456][T12329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.462805][T10980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.499023][T10980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.742099][T10980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.766549][T10980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.939146][ T5279] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 722.952394][T12329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.960221][ T5279] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 723.067128][ T5279] usb 4-1: USB disconnect, device number 20 [ 723.080937][T12329] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.241858][T12329] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.358039][ T5277] kernel write not supported for file /snd/seq (pid: 5277 comm: kworker/1:3) [ 723.425368][T12329] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.498473][T10971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.567001][T12372] syzkaller1: entered promiscuous mode [ 724.592396][T12372] syzkaller1: entered allmulticast mode [ 724.785846][T10971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.110915][T10971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.282058][T10971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.532682][T10971] bridge_slave_1: left allmulticast mode [ 725.538397][T10971] bridge_slave_1: left promiscuous mode [ 725.556419][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.765702][T10971] bridge_slave_0: left allmulticast mode [ 725.771659][T10971] bridge_slave_0: left promiscuous mode [ 725.829749][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.325149][T12401] loop4: detected capacity change from 0 to 2 [ 727.460995][T10966] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 728.067727][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 728.098508][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 728.111571][T11777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 728.144497][T11777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 728.164896][T11777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 728.174637][T11777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 728.539604][T10971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.559756][T10971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.590825][T10971] bond0 (unregistering): Released all slaves [ 728.624774][T12385] tipc: Started in network mode [ 728.629726][T12385] tipc: Node identity 7f000001, cluster identity 4711 [ 728.655614][T12385] tipc: Enabled bearer , priority 10 [ 729.672746][ T5289] tipc: Node number set to 2130706433 [ 729.946194][T10971] hsr_slave_0: left promiscuous mode [ 730.042808][T10971] hsr_slave_1: left promiscuous mode [ 730.081479][T10971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.159263][T10971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.216715][T10971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.224298][T10971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.325837][T11777] Bluetooth: hci3: command tx timeout [ 730.410132][T10971] veth1_macvtap: left promiscuous mode [ 730.427763][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 730.451775][T10971] veth0_macvtap: left promiscuous mode [ 730.462068][T10971] veth1_vlan: left promiscuous mode [ 730.488401][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 730.499819][T10971] veth0_vlan: left promiscuous mode [ 731.214387][ T5277] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 731.414977][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 731.536783][ T5277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 731.553969][ T5277] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 731.561664][ T5277] usb 4-1: can't read configurations, error -71 [ 732.398012][T11777] Bluetooth: hci3: command tx timeout [ 732.746444][T10971] team0 (unregistering): Port device team_slave_1 removed [ 732.850319][T10971] team0 (unregistering): Port device team_slave_0 removed [ 733.208584][T11081] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 733.863681][T12474] Trying to write to read-only block-device nullb0 [ 734.473606][T11777] Bluetooth: hci3: command tx timeout [ 734.691565][T12440] geneve0: entered promiscuous mode [ 734.749227][T12440] geneve0: left promiscuous mode [ 735.617799][T12409] chnl_net:caif_netlink_parms(): no params data found [ 736.149280][ T29] audit: type=1400 audit(1725012446.373:660): avc: denied { ioctl } for pid=12503 comm="syz.3.2959" path="socket:[38681]" dev="sockfs" ino=38681 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 736.243512][T12409] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.271673][T12409] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.308941][T12409] bridge_slave_0: entered allmulticast mode [ 736.350806][T12409] bridge_slave_0: entered promiscuous mode [ 736.372210][T12409] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.465426][T12409] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.500370][T12409] bridge_slave_1: entered allmulticast mode [ 736.534100][T12409] bridge_slave_1: entered promiscuous mode [ 736.570531][T11777] Bluetooth: hci3: command tx timeout [ 736.913530][T12409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.999398][T12409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.372044][T12409] team0: Port device team_slave_0 added [ 737.450248][T12409] team0: Port device team_slave_1 added [ 737.492318][ T29] audit: type=1400 audit(1725012447.703:661): avc: denied { getopt } for pid=12517 comm="syz.3.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 737.740349][T12409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.764268][T12409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.802234][T12409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.821082][T12409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.839221][T12409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.877815][T12409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.984525][ T5289] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 738.123543][T12409] hsr_slave_0: entered promiscuous mode [ 738.138187][T12409] hsr_slave_1: entered promiscuous mode [ 738.227881][ T5289] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 738.236674][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 738.266273][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 738.288933][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 738.357257][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 738.370873][ T5289] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 738.477003][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.584414][ T5289] usb 4-1: config 0 descriptor?? [ 738.591600][T12522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.956117][T11081] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 739.159734][ T5289] plantronics 0003:047F:FFFF.0028: unknown main item tag 0xd [ 739.189401][ T5289] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 739.223519][ T5289] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 739.750347][ T5289] usb 4-1: USB disconnect, device number 23 [ 740.705964][T12409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 740.830989][T12409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 740.923600][T12409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 741.003872][T12409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 742.063205][T12409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.257511][T12409] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.399856][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.407226][T10980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.560608][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.567977][T10966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.983163][ T29] audit: type=1400 audit(1725012454.203:662): avc: denied { ioctl } for pid=12580 comm="syz.2.2991" path="socket:[38799]" dev="sockfs" ino=38799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 744.068834][T12409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.450469][T12409] veth0_vlan: entered promiscuous mode [ 744.538786][T12409] veth1_vlan: entered promiscuous mode [ 744.720363][T11081] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 744.962362][T12409] veth0_macvtap: entered promiscuous mode [ 745.061882][T12409] veth1_macvtap: entered promiscuous mode [ 745.245156][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.364784][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.404174][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.441204][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.472511][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.530214][ T29] audit: type=1400 audit(1725012455.733:663): avc: denied { read } for pid=12597 comm="syz.2.2999" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 745.575208][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.609779][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.628611][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.656503][ T29] audit: type=1400 audit(1725012455.753:664): avc: denied { open } for pid=12597 comm="syz.2.2999" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 745.705946][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.736130][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.825015][T12409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.877885][ T48] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 745.960268][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.991218][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.025198][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.058520][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.089925][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.095308][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 746.111161][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.122361][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.122386][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.123824][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.123846][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.123870][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.126534][T12409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.312252][T12409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.402877][T12409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.415406][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.436088][T12409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.436146][T12409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.499302][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.656642][ T48] usb 4-1: Product: syz [ 746.660886][ T48] usb 4-1: Manufacturer: syz [ 746.741654][ T48] usb 4-1: SerialNumber: syz [ 747.291680][T10980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.301475][T10980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.720032][T10971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.728412][T10971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.072745][ T48] cdc_ncm 4-1:1.0: failed to get mac address [ 748.120694][ T48] cdc_ncm 4-1:1.0: bind() failure [ 748.199264][ T48] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 748.368016][ T48] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 748.417058][ T48] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 748.507482][ T48] usb 4-1: USB disconnect, device number 24 [ 749.184446][ T4613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 749.203970][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 749.214047][ T4613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 749.241747][ T4613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 749.260580][ T4613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 749.306061][ T4613] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 749.330789][ T4613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 749.395026][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 749.477769][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 749.500419][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.509954][ T8] usb 3-1: Product: syz [ 749.531022][ T8] usb 3-1: Manufacturer: syz [ 749.537128][ T8] usb 3-1: SerialNumber: syz [ 749.575225][ T8] usb 3-1: config 0 descriptor?? [ 749.606969][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 749.831320][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.047615][ T8] gspca_zc3xx: reg_r err -71 [ 750.053841][ T8] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 750.141651][ T8] usb 3-1: USB disconnect, device number 29 [ 750.425677][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.915589][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.444606][T11777] Bluetooth: hci2: command tx timeout [ 751.587588][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.693872][ T4613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 752.708314][ T4613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 752.729553][ T4613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 752.739368][ T29] audit: type=1400 audit(1725012462.953:665): avc: denied { read } for pid=12638 comm="syz.2.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 752.787277][ T4613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.816956][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 752.832641][ T4613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.038814][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.336779][T11777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 753.416508][T11777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 753.448778][T11777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 753.472123][T11777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 753.515300][T11777] Bluetooth: hci2: command tx timeout [ 753.521301][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 753.538295][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 753.843707][T12621] chnl_net:caif_netlink_parms(): no params data found [ 753.936799][ T62] bridge_slave_1: left allmulticast mode [ 753.966071][ T62] bridge_slave_1: left promiscuous mode [ 754.015015][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.107785][ T62] bridge_slave_0: left allmulticast mode [ 754.134553][ T62] bridge_slave_0: left promiscuous mode [ 754.140516][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.035468][ T55] Bluetooth: hci3: command tx timeout [ 755.502778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 755.602337][ T55] Bluetooth: hci2: command tx timeout [ 755.608031][ T55] Bluetooth: hci4: command tx timeout [ 755.919512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 756.872830][ T29] audit: type=1400 audit(1725012467.083:666): avc: denied { mounton } for pid=12663 comm="syz.2.3025" path="/690/file0" dev="configfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.026243][ T29] audit: type=1400 audit(1725012467.203:667): avc: denied { open } for pid=12663 comm="syz.2.3025" path="/690/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.122349][ T55] Bluetooth: hci3: command tx timeout [ 757.135578][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.171242][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.272256][ T62] bond0 (unregistering): Released all slaves [ 757.477120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 757.552578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 757.582751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 757.676288][ T55] Bluetooth: hci4: command tx timeout [ 757.684949][ T55] Bluetooth: hci2: command tx timeout [ 758.162885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 759.101095][T12621] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.179421][T12621] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.194475][ T4613] Bluetooth: hci3: command tx timeout [ 759.210804][T12621] bridge_slave_0: entered allmulticast mode [ 759.222646][T12621] bridge_slave_0: entered promiscuous mode [ 759.241761][T12621] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.251451][T12621] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.258826][T12621] bridge_slave_1: entered allmulticast mode [ 759.278824][T12621] bridge_slave_1: entered promiscuous mode [ 759.435653][ T62] hsr_slave_0: left promiscuous mode [ 759.475646][ T62] hsr_slave_1: left promiscuous mode [ 759.482379][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.521577][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.572368][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.584894][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.764364][ T4613] Bluetooth: hci4: command tx timeout [ 759.946495][ T62] veth1_macvtap: left promiscuous mode [ 759.959435][ T62] veth0_macvtap: left promiscuous mode [ 759.968660][ T62] veth1_vlan: left promiscuous mode [ 759.989784][ T62] veth0_vlan: left promiscuous mode [ 761.280976][ T4613] Bluetooth: hci3: command tx timeout [ 761.662279][ T5277] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 761.839672][ T4613] Bluetooth: hci4: command tx timeout [ 761.872766][ T5277] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 761.882251][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.903291][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 761.920834][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 761.943370][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.956575][ T5277] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.975057][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.032387][ T5277] usb 3-1: config 0 descriptor?? [ 762.038619][T12692] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 762.546845][ T62] team0 (unregistering): Port device team_slave_1 removed [ 762.620810][ T5277] plantronics 0003:047F:FFFF.0029: unknown main item tag 0xd [ 762.657818][ T5277] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 762.684482][ T5277] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 762.791052][ T62] team0 (unregistering): Port device team_slave_0 removed [ 763.258412][ T8] usb 3-1: USB disconnect, device number 30 [ 763.928775][T11081] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 764.251734][ T29] audit: type=1400 audit(1725012474.443:668): avc: denied { mount } for pid=12693 comm="syz.2.3036" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 765.463028][T12621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.716057][T12621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.192487][ T5361] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 766.359610][T12621] team0: Port device team_slave_0 added [ 766.428451][ T5361] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 766.462469][ T5361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.537193][ T5361] usb 3-1: config 0 descriptor?? [ 766.558614][T12621] team0: Port device team_slave_1 added [ 766.595046][ T5361] cp210x 3-1:0.0: cp210x converter detected [ 766.908384][T12621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.929830][T12621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.969442][T12621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.062224][ T5361] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 767.103930][T12640] chnl_net:caif_netlink_parms(): no params data found [ 767.130846][ T5361] usb 3-1: cp210x converter now attached to ttyUSB0 [ 767.207661][T12621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.236760][T12621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.285790][T12621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.618692][ T5308] usb 3-1: USB disconnect, device number 31 [ 767.673843][ T5308] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 767.701622][ T5308] cp210x 3-1:0.0: device disconnected [ 768.556346][T10980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.958563][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 769.057643][T12644] chnl_net:caif_netlink_parms(): no params data found [ 769.628046][T10980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.794997][T12621] hsr_slave_0: entered promiscuous mode [ 769.850292][T12621] hsr_slave_1: entered promiscuous mode [ 770.217160][T10980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.317417][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.331099][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.351978][T12640] bridge_slave_0: entered allmulticast mode [ 770.373741][T12640] bridge_slave_0: entered promiscuous mode [ 770.386451][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.404421][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.412099][T12640] bridge_slave_1: entered allmulticast mode [ 770.421309][T12640] bridge_slave_1: entered promiscuous mode [ 770.781924][T10980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.190260][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.264980][T12737] bridge0: entered allmulticast mode [ 771.624708][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.633942][ T5277] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 771.855372][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 771.900809][ T5277] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 771.959903][ T5277] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.974219][ T5277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.996871][ T5277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 772.033143][ T5277] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.065502][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.117798][ T5277] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.127084][ T48] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 772.142486][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.257601][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.290832][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.351624][T12644] bridge_slave_0: entered allmulticast mode [ 772.380122][ T48] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 772.389551][T12644] bridge_slave_0: entered promiscuous mode [ 772.432711][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.521922][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.547502][ T5277] usb 4-1: usb_control_msg returned -32 [ 772.602501][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 772.633302][ T5277] usbtmc 4-1:16.0: can't read capabilities [ 772.668088][ T48] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 772.718853][ T48] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 772.727107][ T48] usb 3-1: Manufacturer: syz [ 772.749725][ T48] usb 3-1: config 0 descriptor?? [ 772.769834][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.790120][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.822447][T12644] bridge_slave_1: entered allmulticast mode [ 772.831910][T12644] bridge_slave_1: entered promiscuous mode [ 773.227103][ T48] appleir 0003:05AC:8243.002A: unknown main item tag 0x0 [ 773.229910][T12640] team0: Port device team_slave_0 added [ 773.287813][ T48] appleir 0003:05AC:8243.002A: No inputs registered, leaving [ 773.371585][T12644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.382248][ T48] appleir 0003:05AC:8243.002A: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 773.669548][T12640] team0: Port device team_slave_1 added [ 773.723999][ T5279] usb 3-1: USB disconnect, device number 32 [ 774.080717][T12644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.153107][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 774.246203][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.290462][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.351436][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.505613][ T5361] usb 4-1: USB disconnect, device number 25 [ 774.599958][T12644] team0: Port device team_slave_0 added [ 774.779995][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.819570][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.908651][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.946755][T10980] bridge_slave_1: left allmulticast mode [ 774.961298][T10980] bridge_slave_1: left promiscuous mode [ 774.980221][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.011305][T12752] sock: sock_set_timeout: `syz.3.3055' (pid 12752) tries to set negative timeout [ 775.079810][T10980] bridge_slave_0: left allmulticast mode [ 775.119631][T10980] bridge_slave_0: left promiscuous mode [ 775.130170][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.022248][T10980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.162243][T10980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.304321][T10980] bond0 (unregistering): Released all slaves [ 778.416807][T12644] team0: Port device team_slave_1 added [ 778.785166][T10980] tipc: Disabling bearer [ 778.828673][T10980] tipc: Left network mode [ 779.000887][T12644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.017762][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.087161][T12644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.311013][T12621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.827875][T12644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.903385][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.941789][T10966] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 780.014459][T12644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.470547][T12621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.856579][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'. [ 781.901962][T12621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.121306][T10980] hsr_slave_0: left promiscuous mode [ 782.154253][T10980] hsr_slave_1: left promiscuous mode [ 782.185024][T10980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.220779][T10980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.318231][T10980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.332971][T10980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.573748][T10980] veth1_macvtap: left promiscuous mode [ 782.579410][T10980] veth0_macvtap: left promiscuous mode [ 782.599636][T10980] veth1_vlan: left promiscuous mode [ 782.605311][T10980] veth0_vlan: left promiscuous mode [ 785.043039][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 786.035899][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 786.060394][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 786.091520][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 786.155369][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 786.179635][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 786.188228][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 786.443822][T10980] team0 (unregistering): Port device team_slave_1 removed [ 786.675737][T10980] team0 (unregistering): Port device team_slave_0 removed [ 788.324114][ T4613] Bluetooth: hci5: command tx timeout [ 788.710994][T12640] hsr_slave_0: entered promiscuous mode [ 788.742340][T12640] hsr_slave_1: entered promiscuous mode [ 788.777211][T12640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.809824][T12640] Cannot create hsr debugfs directory [ 789.004693][T12621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.517698][T12644] hsr_slave_0: entered promiscuous mode [ 789.559102][T12644] hsr_slave_1: entered promiscuous mode [ 789.572527][T12644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.580140][T12644] Cannot create hsr debugfs directory [ 790.403655][ T4613] Bluetooth: hci5: command tx timeout [ 790.794697][T11081] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 791.628879][T12621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 791.829512][T12621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 791.856811][T12621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 791.867974][T12795] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 792.088631][T12621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 792.482507][ T4613] Bluetooth: hci5: command tx timeout [ 793.039601][T12780] chnl_net:caif_netlink_parms(): no params data found [ 793.957121][T12621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.970258][T12640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 794.177630][T12780] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.196046][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.208893][T12780] bridge_slave_0: entered allmulticast mode [ 794.241219][T12780] bridge_slave_0: entered promiscuous mode [ 794.335264][T12640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 794.359244][T12640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 794.395806][T12780] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.418244][T12780] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.436620][T12780] bridge_slave_1: entered allmulticast mode [ 794.516026][T12780] bridge_slave_1: entered promiscuous mode [ 794.553841][ T4613] Bluetooth: hci5: command tx timeout [ 794.744063][T12640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 794.849205][T12780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.917244][T12621] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.030595][ T48] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 795.049840][T12780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.249104][T12780] team0: Port device team_slave_0 added [ 795.251908][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 795.291444][ T48] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 795.305987][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.351871][T12780] team0: Port device team_slave_1 added [ 795.361112][ T48] usb 4-1: Product: syz [ 795.395138][ T48] usb 4-1: Manufacturer: syz [ 795.399809][ T48] usb 4-1: SerialNumber: syz [ 795.479874][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.487210][T10983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.510770][ T48] usb 4-1: config 0 descriptor?? [ 795.521492][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.528942][T10983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.552000][ T48] redrat3 4-1:0.0: Couldn't find all endpoints [ 795.681035][T12780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.709703][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.802307][T12780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.850124][T12780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.879192][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.937987][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 795.980021][T12780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.281119][ T5209] usb 4-1: USB disconnect, device number 26 [ 796.469619][T12780] hsr_slave_0: entered promiscuous mode [ 796.500254][T12780] hsr_slave_1: entered promiscuous mode [ 796.540136][T12780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.562099][T12780] Cannot create hsr debugfs directory [ 797.231756][T12644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 797.256477][T12644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 797.390538][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.427024][T12644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 797.436660][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.436766][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.436804][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.436842][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.436879][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.436918][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.436955][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.436992][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437030][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437068][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437106][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437144][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437181][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437219][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437257][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437294][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437332][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437369][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437407][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.437444][ T5209] hid-generic 0000:1000000:0000.002B: unknown main item tag 0x0 [ 797.485970][ T5209] hid-generic 0000:1000000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 797.617483][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 797.768936][T12644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 797.820435][ T8] usb 4-1: config 0 has no interfaces? [ 797.857189][ T8] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 797.946665][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.991642][ T8] usb 4-1: config 0 descriptor?? [ 798.416473][T12780] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.551506][ T5279] usb 4-1: USB disconnect, device number 27 [ 798.699338][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.799673][T12780] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.000581][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.032362][T12780] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.196242][T12780] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.321298][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.328628][T11081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.396580][T12621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.471300][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.478625][T11081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.882831][ T48] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 800.075687][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 800.088116][ T48] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 800.146202][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.180039][ T48] usb 4-1: Product: syz [ 800.190305][ T48] usb 4-1: Manufacturer: syz [ 800.200301][ T48] usb 4-1: SerialNumber: syz [ 800.258646][ T48] usb 4-1: config 0 descriptor?? [ 800.290426][ T48] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 800.407073][T12644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.686676][T12621] veth0_vlan: entered promiscuous mode [ 800.972060][ T48] usb 4-1: USB disconnect, device number 28 [ 801.125947][T12780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 801.218970][T12621] veth1_vlan: entered promiscuous mode [ 801.254568][T12780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 801.323768][T12780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 801.395363][T12644] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.502279][T12780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 801.598169][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.605534][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.685424][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 801.785320][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.792639][T10983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.079716][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.450296][T12621] veth0_macvtap: entered promiscuous mode [ 802.539757][T12621] veth1_macvtap: entered promiscuous mode [ 803.188490][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.248864][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.271502][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.359948][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.381722][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.429759][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.459977][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.509257][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.578566][T12621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.707440][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.800537][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.809304][ T29] audit: type=1400 audit(1725012514.003:669): avc: denied { map } for pid=12834 comm="syz.3.3077" path="socket:[43179]" dev="sockfs" ino=43179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 803.832465][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.931679][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.953205][ T29] audit: type=1400 audit(1725012514.003:670): avc: denied { read accept } for pid=12834 comm="syz.3.3077" path="socket:[43179]" dev="sockfs" ino=43179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 804.029319][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.051115][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.159535][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.218740][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.260323][T12621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.418198][T12621] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.459294][T12621] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.493361][T12621] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.502168][T12621] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.909984][T12780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.051508][T12644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.341655][T12780] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.661204][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.668534][T10983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.051368][T12640] veth0_vlan: entered promiscuous mode [ 806.212117][T11081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.269986][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.275183][T11081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.277406][T10966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.839809][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.907827][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.073132][T12640] veth1_vlan: entered promiscuous mode [ 807.441163][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 807.746012][T12644] veth0_vlan: entered promiscuous mode [ 807.821074][T12644] veth1_vlan: entered promiscuous mode [ 808.122159][T12640] veth0_macvtap: entered promiscuous mode [ 808.137679][T12640] veth1_macvtap: entered promiscuous mode [ 808.579251][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.671261][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.738346][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.840433][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.859679][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.882628][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.908891][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.920240][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.943546][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.957376][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.983935][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.248863][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 809.302032][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 809.310744][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.310777][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.310796][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.310820][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.310838][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.310862][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.310880][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.310903][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.310921][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.310945][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.338031][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.438808][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 809.440757][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 809.441984][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 809.450723][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 809.532054][T12644] veth0_macvtap: entered promiscuous mode [ 809.847413][T12640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.897747][T12640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.009606][T12640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.118166][T12640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.280120][T12644] veth1_macvtap: entered promiscuous mode [ 811.181941][T10980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.182737][T10525] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 811.485674][T10525] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 811.520034][T10525] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 811.581324][T10525] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 811.678642][ T55] Bluetooth: hci0: command tx timeout [ 811.688261][T10525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 811.759178][T10525] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 811.818224][T10525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.826345][T10525] usb 4-1: Product: И [ 811.832466][T10525] usb 4-1: Manufacturer: à “ [ 811.868648][T10980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.062351][T10525] usb 4-1: config 0 descriptor?? [ 812.109634][T12862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.119070][T10525] hub 4-1:0.0: bad descriptor, ignoring hub [ 812.221840][T10525] hub 4-1:0.0: probe with driver hub failed with error -5 [ 812.305779][T10525] input: à “ И as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 812.543742][T10525] usb 4-1: USB disconnect, device number 29 [ 812.543939][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 812.580202][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 813.171464][T10980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.776087][ T55] Bluetooth: hci0: command tx timeout [ 814.337048][T10980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.514580][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.604139][ T4613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 814.638192][ T4613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 814.701049][ T4613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 814.762172][ T4613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 814.800609][ T4613] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 814.829377][ T4613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 815.228040][ T4613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 815.292332][ T4613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 815.368067][ T4613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 815.421905][ T4613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 815.527767][ T4613] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 815.558727][ T4613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 815.669751][T12780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.841540][ T55] Bluetooth: hci0: command tx timeout [ 817.053385][ T55] Bluetooth: hci2: command tx timeout [ 817.681305][T12851] chnl_net:caif_netlink_parms(): no params data found [ 817.696666][ T55] Bluetooth: hci4: command tx timeout [ 817.931597][ T55] Bluetooth: hci0: command tx timeout [ 818.331573][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 818.681984][T10980] bridge_slave_1: left allmulticast mode [ 818.731668][T10980] bridge_slave_1: left promiscuous mode [ 818.742243][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.788038][T10980] bridge_slave_0: left allmulticast mode [ 818.822188][T10980] bridge_slave_0: left promiscuous mode [ 818.860356][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.136879][ T55] Bluetooth: hci2: command tx timeout [ 819.757198][ T55] Bluetooth: hci4: command tx timeout [ 821.194969][ T55] Bluetooth: hci2: command tx timeout [ 821.256560][T10980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.295111][T10980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.337395][T10980] bond0 (unregistering): Released all slaves [ 821.786317][T12780] veth0_vlan: entered promiscuous mode [ 821.845477][ T55] Bluetooth: hci4: command tx timeout [ 821.967321][T12851] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.976044][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.037881][T12851] bridge_slave_0: entered allmulticast mode [ 822.087949][T12851] bridge_slave_0: entered promiscuous mode [ 822.515241][T12851] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.581304][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.618588][T12851] bridge_slave_1: entered allmulticast mode [ 822.648419][T12851] bridge_slave_1: entered promiscuous mode [ 822.948634][T12851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.291862][ T55] Bluetooth: hci2: command tx timeout [ 823.435541][T10966] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 823.469606][T12780] veth1_vlan: entered promiscuous mode [ 823.621283][T12851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.865478][T10980] hsr_slave_0: left promiscuous mode [ 823.872168][T10980] hsr_slave_1: left promiscuous mode [ 823.919506][ T55] Bluetooth: hci4: command tx timeout [ 823.961740][T10980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.059413][T10980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.127713][ T29] audit: type=1400 audit(1725012534.333:671): avc: denied { execstack } for pid=12904 comm="syz.3.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 824.173639][T10980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.181115][T10980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.405862][T10980] veth1_macvtap: left promiscuous mode [ 824.411508][T10980] veth0_macvtap: left promiscuous mode [ 824.468997][T10980] veth1_vlan: left promiscuous mode [ 824.488409][T10980] veth0_vlan: left promiscuous mode [ 824.554265][T12909] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3097'. [ 827.537220][T10980] team0 (unregistering): Port device team_slave_1 removed [ 827.712049][T10980] team0 (unregistering): Port device team_slave_0 removed [ 829.194891][T11081] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 831.170712][T12851] team0: Port device team_slave_0 added [ 831.410606][T12866] chnl_net:caif_netlink_parms(): no params data found [ 831.598787][T12851] team0: Port device team_slave_1 added [ 832.210916][T12871] chnl_net:caif_netlink_parms(): no params data found [ 832.385085][T12851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.392093][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.500316][T12851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.543637][T12780] veth0_macvtap: entered promiscuous mode [ 832.979438][T12851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.030482][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.092993][T12851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.408623][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.441509][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.481658][T12866] bridge_slave_0: entered allmulticast mode [ 833.501719][T12866] bridge_slave_0: entered promiscuous mode [ 833.656767][T12780] veth1_macvtap: entered promiscuous mode [ 833.721378][T12866] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.779590][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.790419][T12866] bridge_slave_1: entered allmulticast mode [ 833.817552][T12866] bridge_slave_1: entered promiscuous mode [ 833.936983][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.004905][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.014972][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.036970][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.075624][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.092417][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.102280][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.152029][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.181671][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.192503][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.260554][T12780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.322099][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 834.488588][T12851] hsr_slave_0: entered promiscuous mode [ 834.526626][T12851] hsr_slave_1: entered promiscuous mode [ 834.709387][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.732770][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.744577][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.771289][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.790388][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.804352][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.850618][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.864691][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.909871][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.921814][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.964986][T12780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.049294][T12866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.209326][T12866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.440705][T12871] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.476024][T12871] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.490357][T12871] bridge_slave_0: entered allmulticast mode [ 835.508810][T12871] bridge_slave_0: entered promiscuous mode [ 835.545579][T12871] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.556209][T12871] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.602796][T12871] bridge_slave_1: entered allmulticast mode [ 835.612132][T12871] bridge_slave_1: entered promiscuous mode [ 835.827549][T12866] team0: Port device team_slave_0 added [ 835.870353][T12780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.911674][T12780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.938753][T12780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.949057][T12780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.227353][T12866] team0: Port device team_slave_1 added [ 836.528522][T10980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.712041][T12871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.988339][T10980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.087081][T12871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.281290][T12866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.292417][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.360648][T12866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.578901][T10980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.752311][T12871] team0: Port device team_slave_0 added [ 837.839436][T12866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.897310][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.965771][T12866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.125474][T10980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.211131][T12871] team0: Port device team_slave_1 added [ 838.746770][T12871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.759299][T11081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.809875][T12871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.849010][T11081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.890614][T12871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.924472][T12871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.931491][T12871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.970435][T12871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.506052][T12866] hsr_slave_0: entered promiscuous mode [ 839.521806][T12866] hsr_slave_1: entered promiscuous mode [ 839.540320][T12866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 839.562051][T12866] Cannot create hsr debugfs directory [ 839.851820][T12871] hsr_slave_0: entered promiscuous mode [ 839.890390][T12871] hsr_slave_1: entered promiscuous mode [ 839.917262][T12871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 839.931238][T12871] Cannot create hsr debugfs directory [ 840.088673][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 840.359289][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.370198][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.460797][T12940] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 841.674505][T10525] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 841.865254][T10525] usb 4-1: Using ep0 maxpacket: 32 [ 841.878185][T10525] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 841.971606][T10525] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 842.006709][T10525] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 842.046086][T10525] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 842.062315][T10525] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 842.080068][T10525] usb 4-1: Product: syz [ 842.101667][T10525] usb 4-1: Manufacturer: syz [ 842.111775][T10525] usb 4-1: SerialNumber: syz [ 842.146494][T12939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 842.177241][T10525] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input34 [ 842.329983][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 842.350765][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 842.961360][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 842.986525][ T5308] usb 4-1: USB disconnect, device number 30 [ 843.198695][ T5308] appletouch 4-1:1.0: input: appletouch disconnected [ 843.831779][T12851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 843.871320][T12851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 843.969409][T12851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 844.038199][T12851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 844.071224][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 844.321107][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 844.352147][T10980] bridge_slave_1: left allmulticast mode [ 844.360719][T10980] bridge_slave_1: left promiscuous mode [ 844.419890][ T9] usb 3-1: config 179 has no interface number 0 [ 844.446449][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 844.480242][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.531344][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 844.563546][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 844.591304][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 844.602788][T10980] bridge_slave_0: left allmulticast mode [ 844.602822][T10980] bridge_slave_0: left promiscuous mode [ 844.603224][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.728163][T10980] bridge_slave_1: left allmulticast mode [ 844.757336][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 844.768720][T10980] bridge_slave_1: left promiscuous mode [ 844.787408][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 844.799870][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.827219][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.841700][T12948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 844.871064][T12948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 845.838595][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 850.968866][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 856.715095][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 861.437202][ T4613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.450608][ T4613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.472039][ T4613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.500056][ T4613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.519883][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 861.535025][ T4613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 862.027445][ T4613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 862.041734][ T4613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 862.065102][ T4613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 862.079945][ T4613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 862.096390][ T4613] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 862.107564][ T4613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 862.498348][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 863.602791][ T4613] Bluetooth: hci3: command tx timeout [ 864.244879][ T4613] Bluetooth: hci6: command tx timeout [ 865.702568][ T4613] Bluetooth: hci3: command tx timeout [ 866.331693][ T4613] Bluetooth: hci6: command tx timeout [ 867.752676][ T4613] Bluetooth: hci3: command tx timeout [ 868.247878][T10983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 868.401233][ T4613] Bluetooth: hci6: command tx timeout [ 869.838730][ T4613] Bluetooth: hci3: command tx timeout [ 870.475645][T11777] Bluetooth: hci6: command tx timeout [ 870.832255][T11777] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 870.878677][T11777] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 870.921640][T11777] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 870.937863][T11777] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 870.957561][T11777] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 870.967314][T11777] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 872.096872][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2673 jiffies s: 28349 root: 0x1/. [ 872.112422][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 872.119632][ T19] Sending NMI from CPU 1 to CPUs 0: [ 872.136577][ C0] NMI backtrace for cpu 0 [ 872.136595][ C0] CPU: 0 UID: 0 PID: 12823 Comm: kworker/0:4 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 872.136628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 872.136645][ C0] Workqueue: events nsim_dev_trap_report_work [ 872.136684][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 872.136731][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 04 1b 78 7e 65 8b 05 05 1b 78 7e a9 00 01 ff 00 <48> 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 [ 872.136757][ C0] RSP: 0018:ffffc90000007200 EFLAGS: 00000006 [ 872.136776][ C0] RAX: 0000000000010104 RBX: ffffc900000072d0 RCX: ffffffff813cdd16 [ 872.136794][ C0] RDX: ffff88802b621e00 RSI: ffffffff813cdd20 RDI: 0000000000000005 [ 872.136811][ C0] RBP: ffffc90000007d28 R08: 0000000000000005 R09: 0000000000000000 [ 872.136828][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc900000072d8 [ 872.136845][ C0] R13: ffffc900000072e0 R14: ffffc90000000000 R15: 0000000000000002 [ 872.136862][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 872.136889][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 872.136907][ C0] CR2: 00007f0a0bc456c0 CR3: 0000000059e9e000 CR4: 00000000003506f0 [ 872.136924][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 872.136940][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 872.136956][ C0] Call Trace: [ 872.136964][ C0] [ 872.136974][ C0] ? show_regs+0x8c/0xa0 [ 872.137014][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 872.137051][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 872.137089][ C0] ? nmi_handle+0x1a9/0x5c0 [ 872.137115][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 872.137158][ C0] ? default_do_nmi+0x6a/0x160 [ 872.137183][ C0] ? exc_nmi+0x170/0x1e0 [ 872.137207][ C0] ? end_repeat_nmi+0xf/0x53 [ 872.137237][ C0] ? stack_access_ok+0x96/0x270 [ 872.137262][ C0] ? stack_access_ok+0xa0/0x270 [ 872.137287][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 872.137330][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 872.137374][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 872.137416][ C0] [ 872.137424][ C0] [ 872.137432][ C0] stack_access_ok+0x1c9/0x270 [ 872.137462][ C0] unwind_next_frame+0x1b94/0x23a0 [ 872.137490][ C0] ? call_timer_fn+0x1a0/0x610 [ 872.137530][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 872.137566][ C0] arch_stack_walk+0x100/0x170 [ 872.137599][ C0] ? __run_timers+0x74b/0xaf0 [ 872.137638][ C0] ? dummy_timer+0x1750/0x38d0 [ 872.137669][ C0] stack_trace_save+0x95/0xd0 [ 872.137706][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 872.137746][ C0] kasan_save_stack+0x33/0x60 [ 872.137785][ C0] ? kasan_save_stack+0x33/0x60 [ 872.137822][ C0] ? kasan_save_track+0x14/0x30 [ 872.137859][ C0] ? kasan_save_free_info+0x3b/0x60 [ 872.137891][ C0] ? poison_slab_object+0xf7/0x160 [ 872.137928][ C0] ? __kasan_slab_free+0x32/0x50 [ 872.137967][ C0] ? kfree+0x12a/0x3b0 [ 872.137999][ C0] ? dummy_timer+0x1750/0x38d0 [ 872.138028][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 872.138055][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 872.138084][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 872.138110][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 872.138141][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.138184][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 872.138223][ C0] ? pie_calculate_probability+0x236/0x850 [ 872.138265][ C0] ? fq_pie_timer+0x215/0x5a0 [ 872.138288][ C0] ? call_timer_fn+0x1a0/0x610 [ 872.138351][ C0] kasan_save_track+0x14/0x30 [ 872.138389][ C0] kasan_save_free_info+0x3b/0x60 [ 872.138422][ C0] poison_slab_object+0xf7/0x160 [ 872.138464][ C0] __kasan_slab_free+0x32/0x50 [ 872.138505][ C0] kfree+0x12a/0x3b0 [ 872.138538][ C0] ? dummy_timer+0x1750/0x38d0 [ 872.138571][ C0] dummy_timer+0x1750/0x38d0 [ 872.138606][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 872.138649][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 872.138702][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 872.138730][ C0] ? __pfx_lock_release+0x10/0x10 [ 872.138770][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 872.138801][ C0] ? timerqueue_del+0x83/0x150 [ 872.138835][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 872.138864][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 872.138899][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 872.138929][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 872.138974][ C0] hrtimer_interrupt+0x31b/0x800 [ 872.139013][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 872.139043][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 872.139075][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.139119][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 872.139159][ C0] Code: 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 7f 1a 78 7e 65 8b 05 80 1a [ 872.139185][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00000206 [ 872.139203][ C0] RAX: 0000000000000000 RBX: ffff88805e0f24b0 RCX: ffffffff892450f6 [ 872.139221][ C0] RDX: 0000000000000000 RSI: 00028f5c28f5c28e RDI: 0000000000000007 [ 872.139238][ C0] RBP: ffff88802c40e300 R08: 0000000000000007 R09: 0019999999999998 [ 872.139255][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00028f5c28f5c28e [ 872.139271][ C0] R13: 0000000000000000 R14: 00000000112e0be8 R15: 0000000000000000 [ 872.139294][ C0] ? pie_calculate_probability+0x236/0x850 [ 872.139341][ C0] pie_calculate_probability+0x236/0x850 [ 872.139391][ C0] fq_pie_timer+0x215/0x5a0 [ 872.139421][ C0] call_timer_fn+0x1a0/0x610 [ 872.139459][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 872.139484][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 872.139521][ C0] ? __pfx_lock_release+0x10/0x10 [ 872.139562][ C0] ? mark_held_locks+0x9f/0xe0 [ 872.139599][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 872.139625][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 872.139663][ C0] __run_timers+0x74b/0xaf0 [ 872.139710][ C0] ? __pfx___run_timers+0x10/0x10 [ 872.139748][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 872.139791][ C0] ? irqentry_exit+0x3b/0x90 [ 872.139846][ C0] run_timer_base+0x111/0x190 [ 872.139885][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 872.139927][ C0] run_timer_softirq+0x1a/0x40 [ 872.139965][ C0] handle_softirqs+0x216/0x8f0 [ 872.139999][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 872.140032][ C0] irq_exit_rcu+0xbb/0x120 [ 872.140060][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 872.140092][ C0] [ 872.140099][ C0] [ 872.140108][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.140152][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 872.140198][ C0] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 872.140223][ C0] RSP: 0018:ffffc900037ef740 EFLAGS: 00000246 [ 872.140241][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff813cf0ff [ 872.140258][ C0] RDX: ffff88802b621e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 872.140275][ C0] RBP: ffffc900037ef7e0 R08: 0000000000000005 R09: 0000000000000000 [ 872.140291][ C0] R10: 0000000080000001 R11: 0000000000000000 R12: ffffc900037ef750 [ 872.140308][ C0] R13: ffffffff81775bb0 R14: ffffc900037ef810 R15: ffff88802b621e00 [ 872.140328][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 872.140366][ C0] ? unwind_next_frame+0x11ff/0x23a0 [ 872.140396][ C0] arch_stack_walk+0x10f/0x170 [ 872.140429][ C0] ? __pfx_kthread+0x10/0x10 [ 872.140458][ C0] ? ret_from_fork+0x45/0x80 [ 872.140500][ C0] ? skb_free_head+0x108/0x1d0 [ 872.140533][ C0] stack_trace_save+0x95/0xd0 [ 872.140565][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 872.140600][ C0] ? __pfx_mark_lock+0x10/0x10 [ 872.140636][ C0] ? chacha_permute+0x5bf/0x750 [ 872.140681][ C0] kasan_save_stack+0x33/0x60 [ 872.140719][ C0] ? kasan_save_stack+0x33/0x60 [ 872.140756][ C0] ? kasan_save_track+0x14/0x30 [ 872.140794][ C0] ? kasan_save_free_info+0x3b/0x60 [ 872.140825][ C0] ? poison_slab_object+0xf7/0x160 [ 872.140862][ C0] ? __kasan_slab_free+0x32/0x50 [ 872.140901][ C0] ? kfree+0x12a/0x3b0 [ 872.140933][ C0] ? skb_free_head+0x108/0x1d0 [ 872.140963][ C0] ? skb_release_data+0x75c/0x980 [ 872.140998][ C0] ? consume_skb+0xd0/0x160 [ 872.141035][ C0] ? nsim_dev_trap_report_work+0x878/0xc80 [ 872.141062][ C0] ? process_one_work+0x9c5/0x1b40 [ 872.141103][ C0] ? worker_thread+0x6c8/0xed0 [ 872.141142][ C0] ? kthread+0x2c1/0x3a0 [ 872.141198][ C0] kasan_save_track+0x14/0x30 [ 872.141237][ C0] kasan_save_free_info+0x3b/0x60 [ 872.141269][ C0] poison_slab_object+0xf7/0x160 [ 872.141309][ C0] __kasan_slab_free+0x32/0x50 [ 872.141349][ C0] kfree+0x12a/0x3b0 [ 872.141383][ C0] ? skb_free_head+0x108/0x1d0 [ 872.141417][ C0] skb_free_head+0x108/0x1d0 [ 872.141451][ C0] skb_release_data+0x75c/0x980 [ 872.141489][ C0] ? nsim_dev_trap_report_work+0x878/0xc80 [ 872.141516][ C0] ? rcu_is_watching+0x12/0xc0 [ 872.141560][ C0] consume_skb+0xd0/0x160 [ 872.141598][ C0] nsim_dev_trap_report_work+0x878/0xc80 [ 872.141637][ C0] process_one_work+0x9c5/0x1b40 [ 872.141691][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 872.141729][ C0] ? __pfx_process_one_work+0x10/0x10 [ 872.141777][ C0] ? assign_work+0x1a0/0x250 [ 872.141817][ C0] worker_thread+0x6c8/0xed0 [ 872.141865][ C0] ? __kthread_parkme+0x148/0x220 [ 872.141897][ C0] ? __pfx_worker_thread+0x10/0x10 [ 872.141939][ C0] kthread+0x2c1/0x3a0 [ 872.141967][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 872.141997][ C0] ? __pfx_kthread+0x10/0x10 [ 872.142028][ C0] ret_from_fork+0x45/0x80 [ 872.142067][ C0] ? __pfx_kthread+0x10/0x10 [ 872.142097][ C0] ret_from_fork_asm+0x1a/0x30 [ 872.142146][ C0] [ 873.229100][ T4613] Bluetooth: hci8: command tx timeout [ 875.277731][T11777] Bluetooth: hci8: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 875.936262][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.364665][T11777] Bluetooth: hci8: command tx timeout [ 879.447971][T11777] Bluetooth: hci8: command tx timeout