last executing test programs: 2m16.166997246s ago: executing program 0 (id=2622): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) 2m16.098447852s ago: executing program 0 (id=2623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) 2m16.011450409s ago: executing program 0 (id=2624): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file1\x00', 0xc000, 0x1) renameat2(r1, &(0x7f0000000540)='./file1\x00', r1, &(0x7f0000000040)='./file0\x00', 0x5) unlinkat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x98) 2m15.84256124s ago: executing program 0 (id=2626): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x9) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 2m15.821590283s ago: executing program 0 (id=2627): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 2m14.832998354s ago: executing program 0 (id=2631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m14.598686001s ago: executing program 32 (id=2631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m11.718493008s ago: executing program 3 (id=2642): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) listen(r0, 0xfffffff7) 2m11.060004025s ago: executing program 3 (id=2645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) syz_open_dev$sg(0x0, 0x0, 0x8002) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2m10.875822076s ago: executing program 3 (id=2647): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback}, r2, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 2m10.766621835s ago: executing program 3 (id=2649): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000409000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x4, 0x1b9bb5, 0x11af75}) 2m10.71251352s ago: executing program 3 (id=2650): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r2, &(0x7f00000004c0)='./bus\x00', r0, &(0x7f0000000500)='./file0\x00', 0x0) 2m10.666627551s ago: executing program 3 (id=2652): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_destroy(r1) 1m54.962995288s ago: executing program 33 (id=2652): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_destroy(r1) 1m11.811105013s ago: executing program 4 (id=2707): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000010540)={0x2020}, 0x2020) 1m1.510387481s ago: executing program 2 (id=2156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 1m0.300848234s ago: executing program 4 (id=2707): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000010540)={0x2020}, 0x2020) 59.813223449s ago: executing program 1 (id=2471): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) 47.088504613s ago: executing program 2 (id=2156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 46.604964589s ago: executing program 1 (id=2471): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) 46.170274753s ago: executing program 4 (id=2707): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000010540)={0x2020}, 0x2020) 34.911754953s ago: executing program 2 (id=2156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 34.486186288s ago: executing program 1 (id=2471): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) 33.79155873s ago: executing program 4 (id=2707): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000010540)={0x2020}, 0x2020) 23.614716471s ago: executing program 2 (id=2156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 22.447197129s ago: executing program 1 (id=2471): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) 21.153157067s ago: executing program 4 (id=2707): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000010540)={0x2020}, 0x2020) 13.61492623s ago: executing program 2 (id=2156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 11.949352776s ago: executing program 1 (id=2471): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) 10.511579852s ago: executing program 4 (id=2707): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000010540)={0x2020}, 0x2020) 6.597601322s ago: executing program 5 (id=3175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f000000c640)="4dea2e9fc630f1670cf70c207e43667038bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27981ce35b449f192aec94239f56e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xdc}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b0600000000000000407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f000000c5c0)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cd0d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a4244625753", 0xd0}, {&(0x7f0000000600)="c88b24f13e46650376bd62b2a4a9e5529d9c1d28afea7a51dc9057907876a2b013890ed7000000000000000000", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3b", 0xe}, {&(0x7f00000003c0)="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", 0x12b}, {&(0x7f0000000800)="dfda34e3ee7dda93a0aeed729cd5cabedf707118f5cf8acfe7747fccf72b6612754caddf60baf2dbe649d3fe02595d224cf75c98174effb4bb82011113ff74b68dc8a2c49e31b3f9576f654b87b67e4e1599c5f0eaa01acb7e6aaf2ad51cb7b0cb2463d665daddf0bd903aa0e78c0912a84c1b3ff60a75dff896f3e8ef5ac614a8223484e5662ab03b927cb375820928976f3f6c4aba8ff8c5cd4671e8f46d1670f45379e9a15d4e27ec2b0a1fd6fbe11c482169b34525f89ced9acc31f6d22df3914597f296aa7b01efcd849bc089e84da99e84b07f22e5f2a4d557f7a7eb86dee45a986a87ba29447a33f15f62be723a5b", 0xf2}, {&(0x7f0000000900)="f42c4605c67ee384355f82157ab402915c2fd866cfdf099bae9615ccb82fb7fe2c1d4c029e39a419a1c9154d78f58959de0bbb5b723889036ba847e82ceb79a8e3af36d606342991573c1007497cdbaef91206abe5d049d3dfbf3ce22c700f7d42cc89c341a27aece9d4c83e5f0cc9a4699805b64c13f8542f57292d59b418726fd51c3cb145af26584af447ed6e6e6daa8d5d7d524f3e476d9f102e9ac53df371e7f53480f94d8fe8d781468796e26bbcf8738ef3f3bfd989013d33631161e70ded1bc8658f2bbdddc42f39eed27b574f5f3f5cac26cedd1fa1f45d99fa672198f6b8eb7e297f5540bf44ec1ada06844ad2562a897f973ca43d5e0560a88d5c7e6f3ebc21e22368a48975fbc0d9326e723a5eb36744aef17875e0fd63ca0d1860caa7d0e9aa407d1eb6cfc505c543a0c6b01ef7d818b178592d1740a3490748eb2a274ec110f045b2006e7e1e0eacbcddcb25d07bdda6623b5fe08fa70c6454aad9ec3b8ed34e2467806e2954c946d93b223dfadc367105bbd149470b57382fb6dee5b395adcdea2f15a1fc2c5c0d7694bbcd79d4c893afdb13ccf658016ee32437560041f080f140c40e757a227cbb418681bb246a9a675b664230705db2991c871cd66558ce9dca469177d34a9e6afab63937085b99a19cd55b2222dd2d416bf88274e0928cf88d5a3371110e7c714a2f65f758c9e40e4d068d8b5d02ce739bbbc6a9a37321f48bcb2989107f7f883e9bb76026d4274961407610c8f1cf059b65cba34a59da596d7965ae82fe8b9701ad7345549a2a6262105ba41dfc6d2e27a494788f43a06ca19ea84b3202acc5ba2586eb0e88840b7c43df9bbac3cda1e923d1ec4e5e61dbc2be745b43aa9dc083823fbc1a976efcba7d4c26590cc773f78725db34805013cfd11fc13c95b1173b713a58eb1eb1399377fecde7a504f125cb92d3aefe5aebebeb1b167234b068f52be33bd18bc460b17da73be6899fbe87cb4ac35d9f57833c23a5a23d39011c32223d69ea5eacfdf4f374eb2cecbd0d4017f2eb7cb782f1eb911c4891914bd8cfc975d4c31ed9f9979d89ce374e02ed593f64e5f1a559cce5ce4c1422406e8a6b0e4ab99d634daaf5c8ff8c9b71678c7559631def5292040d907a65e343481f64dbc178c91936fafa61d7fea8e91f248db998f26fd3ef6a22a7fd757e2381b8007dcf1ef8278044a900a408f3bf5f2a35f8e1a8cd32f12895f13f9f74ec313fdb47d63831fd50d951a3bcd82651c3fd8b2a5229665b158db38a4251ec9cac8e23157efdf4e6f9a940e711c20b44de9c4162bffc69dc64643902f51cdc9462e1bd4a9b0db05461954bcc7ac322d7885a41e166710e1faf2ce11fa7fb042c63dae1c4c626facfa41254856ab1f97669b7fb17d5d216b749dc1396f0a1473a6251c90d90c7b410675d05b887744aff746f0f25cab7c544101abea61303f0b3094374dbfb88508b0db43228ffbd72d5da8b1288e5b0126b0017f18740d2d73adc6142af916c7889f32fda68b29d431184b417e74fa20a5611c3542ed3e80d245b6954f3b1f1bb53e23c71af325a784d961c74c7277291191b0b10d38ab48772479dc5ed58087df57b52690b02079144f1cda5a7eb21910c56bd53b6513ed6b2e9c4aafe6fa7c390be779e0f2f5f4e5acad433b78e0e4194529b48e83243c5b70998c1c84dce84ede7e0a8189dafdfa9354b058e37ea6c11302354c028be6dbf980bdd819d81097d1b6aa92e460007cca05a6206a0faa74ae274e47447a747aa8ea429356fc1f1c8f1dc531163d7464c2b871d5ce03ec60efc534821cefaa8fa68699af3609b428aa5c19865e2f98d9072900ebe9e5827a70e4ad8d8ca3df773f10cad4ff2cf0ebe69f50b66726dbe94481c78359b0e23fa7bdec0f7b1442e8ee9547e8dbc13c1e450a961defc0a360f11b4a9b8d8a297151fc80bbdc4559be7d8022bbe80c4d5dec411d40f602626eeffbdf7290a485a0ffa89e2e471e54ada6356a8661fb43ac806501f2ab5f927f6d6767e43f1de7bb3fbe01f9b85ae82cf12cb5102d58635c1d8fc9becf1260324e23f91a3701b0075167dd2e7b8129c11e91193dbc668e7bceb82c710984e1030bd23362faa04dc1e0bcff4eb80329db45ac370e10494e0a0f4235bf53653eb2547d006e831d89d552c2ade492e406ca92ee9d1b869919327a4471fc3e4f0d13054a94b00656ebaf2b686e03f61e626f16b5355d4e59928ccba63d04389c3b3602bec2483220987579b7d8bfb07baa721e6122909fd4f1f8b588096476bfb43a2fdf97948458158d1ff0e4f74e2edbe4053858fa440292da5ca52f00a7b362a7572ea8b116e932fd6f6b59915e237610250426c899583d14d3ed5f19581b4f6cf8f7a3ef7092a0a4c8c5b7ef213c21d825f2a692f35ad325eef6c9052f6fdfb19ec8792787467a050cde9cf26a178984ac2a72ceaaced117cc88089d4ee49568ede8eb97efd58743e7a3f38184e6e00f9f56722a6d76e959a96a9de234ace8c67888d7bfeef4629333b3d0c8d39fb0bf5bd099854b7b6c68535d4427cf90eeaa1f5337709a3d6a2c34bf807488252b0693c322ae8826eecd65c5fb5264069b3c64ccd5af5cf8ce40b419ed718ead06e41055422944413d17933ef8eefd34d07d3a8036f0a48c35e1bdea1a2644214f6ac0c98ecd9e4880bfd939774316e707e30d062442dfd68d13cf0a22aba4772a91b821f3a7de17d5299cb011b0b82a1ccaa1fc9770797b97e4c2cffcca3d9b043df230d08fa0bca0e5af5ee397bfc4ad22f3709e242d2ccc25126fb2a55a791e4d41c1845133d4a456462a2f82f4cc8679807bad1373206fc0b05ab64fab93924bae586f5d93237217a8f996aee117665d77073ab13855321917bb64563d1cd9e9f33da8f50852408012fd629fdb43c20ed344ead086fb82bdc0208bcfa8e951fd3b3880f3e718b938e4512099f9692836d8c7362d5ed5e8df7a5504a3559dd1e0e89bcaf5e8ab02cd82e9c940e6bd6f6b5120b3d546de268fea31238bd2f3ff735bc7abcd99bdbea0362fd64865513454b55579951489e7ac18473d7d6189461e98326362ac726358b9fc0e5b47efbd3d508a6a25c8769d4ed1657fd22c62ac2b3bd49d37457b644d6cdc247389f1d5240d89d564d7c639c0d6945621c69ba8a25b5c6ad236c00728ca41705a68bd10756bea729b4a66d213b1afbb7db67aecbb8da744366bb04543be1f740e6aeb008b335237efe033d84add50d8b7db02ff9c401d9a2e0c0b7b111fd0c083b61cce68b26c55204b82575d5ebfefdcb764d87e395613859f68134f45c8bdcaa44e524fd626d060c97e5c90dce7e2a570e978c78d5ae19394482f924a184739504e645a69c04ba9ea4b3e367153b2ace0a76cbb3bfaa5ff40a33679ed3e58e32cb19e1ec69338360af3e9f36fb6a45e6d9057c827d803f1bc03575d6213a9a173fcc5badb7dd1c06b6ab31762a77d8d085ec3dd8292a3ae76f58e208dca546d070cdfd6bb62c541b38b6d222776f27894c95c95ed9c4763ad587612fa5de76d18ce7eb5b87faf4aa8b3d3c622fcfd14d1835ed8976f8250b31f806ec3d35073a7c3458ea81527cdb203950803bad9a1a96f1902cc13d1e8ac912987a9c0f8988c7835f30cee41c75ac8309d70c2861afcd46a102a46cd8904ffd89d777e42e4a94dee58f9d66996b60f38d3a9fc18696e3699f098457463944b86058a6386c3cce736ffceb80c19e8c661374dae6e84463a38578802c553fc3acb5123e3f38de0a2a63ff026cb3cfad36106aa68fe01dc8eaed95747872f4eb42cde548050adc795c7309f5df562d7a4e2c1a266c6ff4f45ddae469663ca6b6e3836013bf8543a67ba24fe3667fa8c9d856851a156275106702b9e57305eff722b93420dcf67d9c92e01fb67216bfd94f49e6a37cb48f66edd16f81be24bbd0c1c9db2314834f49eb0af52f1954ac7406e61c433a58cd643fe716", 0xb0e}], 0x6}}], 0x2, 0x8058) 5.641461873s ago: executing program 5 (id=3177): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) 5.514560292s ago: executing program 5 (id=3178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455941fccee46", 0x70}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/63, 0x69}, {&(0x7f0000000640)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) 4.627567798s ago: executing program 5 (id=3185): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.346870814s ago: executing program 5 (id=3187): ptrace(0x10, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582e0eb"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.188496418s ago: executing program 6 (id=3189): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 4.00433215s ago: executing program 6 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.953362207s ago: executing program 6 (id=3191): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) write(r0, &(0x7f0000000440)="9641a3", 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r0, r0, 0x0, 0x800000a1e) 3.875440694s ago: executing program 2 (id=2156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 1.820360661s ago: executing program 5 (id=3192): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 1.819043048s ago: executing program 6 (id=3193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.550199003s ago: executing program 6 (id=3194): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 104.275212ms ago: executing program 6 (id=3195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 0s ago: executing program 1 (id=2471): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 330.626706][T13493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.642460][ T5933] logitech-hidpp-device 0003:046D:C343.0024: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.6-1/input0 [ 330.823701][ T8699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.843625][ T8699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.854482][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.865437][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.881978][ T1719] usb 7-1: USB disconnect, device number 10 [ 330.921362][ T8739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.943419][ T8739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.020242][ T8699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.365236][ T8699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.481418][ T8699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.564666][ T8699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.610601][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.620820][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.629137][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.641356][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.653370][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.742742][ T8699] bridge_slave_1: left allmulticast mode [ 331.750379][ T8699] bridge_slave_1: left promiscuous mode [ 331.757605][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.771438][ T8699] bridge_slave_0: left allmulticast mode [ 331.778965][ T8699] bridge_slave_0: left promiscuous mode [ 331.784679][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.891033][T13743] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 331.899508][T13744] sctp: [Deprecated]: syz.6.3018 (pid 13744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.899508][T13744] Use struct sctp_sack_info instead [ 332.112050][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.129660][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.145970][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.161714][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.182221][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.231208][ T8699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.243032][ T8699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.252461][ T8699] bond0 (unregistering): Released all slaves [ 332.493113][ T8699] hsr_slave_0: left promiscuous mode [ 332.499332][ T8699] hsr_slave_1: left promiscuous mode [ 332.504985][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.512535][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.520165][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.527657][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.545274][ T8699] veth1_macvtap: left promiscuous mode [ 332.551370][ T8699] veth0_macvtap: left promiscuous mode [ 332.557039][ T8699] veth1_vlan: left promiscuous mode [ 332.563593][ T8699] veth0_vlan: left promiscuous mode [ 332.857128][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.868497][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.884808][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.892920][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.907138][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.095750][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3023'. [ 333.273149][ T8699] team0 (unregistering): Port device team_slave_1 removed [ 333.313394][ T8699] team0 (unregistering): Port device team_slave_0 removed [ 333.350734][ T24] kernel read not supported for file /467/oom_adj (pid: 24 comm: kworker/1:0) [ 333.400450][ T8681] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.746471][ T5824] Bluetooth: hci0: command tx timeout [ 333.913902][T13738] chnl_net:caif_netlink_parms(): no params data found [ 333.971344][T13745] chnl_net:caif_netlink_parms(): no params data found [ 334.055927][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 334.153421][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.160977][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.170276][T13738] bridge_slave_0: entered allmulticast mode [ 334.177197][T13738] bridge_slave_0: entered promiscuous mode [ 334.190128][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.197416][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.204586][T13738] bridge_slave_1: entered allmulticast mode [ 334.212004][T13738] bridge_slave_1: entered promiscuous mode [ 334.227597][ T5824] Bluetooth: hci1: command tx timeout [ 334.234983][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 334.245506][ T24] usb 6-1: config 0 has no interfaces? [ 334.256746][ T24] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 334.267683][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.275694][ T24] usb 6-1: Product: syz [ 334.279966][ T24] usb 6-1: Manufacturer: syz [ 334.284568][ T24] usb 6-1: SerialNumber: syz [ 334.298055][ T24] usb 6-1: config 0 descriptor?? [ 334.318540][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.328045][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.335110][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.344471][T13745] bridge_slave_0: entered allmulticast mode [ 334.351364][T13745] bridge_slave_0: entered promiscuous mode [ 334.358227][T13759] chnl_net:caif_netlink_parms(): no params data found [ 334.370738][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.380148][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.389398][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.396605][T13745] bridge_slave_1: entered allmulticast mode [ 334.403239][T13745] bridge_slave_1: entered promiscuous mode [ 334.463430][T13738] team0: Port device team_slave_0 added [ 334.471270][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.483908][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.512159][T13738] team0: Port device team_slave_1 added [ 334.585669][T13745] team0: Port device team_slave_0 added [ 334.607565][ T24] usb 6-1: USB disconnect, device number 14 [ 334.615464][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.626893][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.653385][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.667893][T13745] team0: Port device team_slave_1 added [ 334.673752][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.681309][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.688864][T13759] bridge_slave_0: entered allmulticast mode [ 334.695538][T13759] bridge_slave_0: entered promiscuous mode [ 334.704058][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.712740][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.739903][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.778734][ T8699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.794796][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.804340][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.811645][T13759] bridge_slave_1: entered allmulticast mode [ 334.823366][T13759] bridge_slave_1: entered promiscuous mode [ 334.846811][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.853752][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.889952][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.918603][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3030'. [ 334.929804][ T8699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.946344][ T5824] Bluetooth: hci4: command tx timeout [ 334.963013][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.970137][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.996319][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.044682][T13796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.088039][T13797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.094906][T13797] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 335.105763][T13797] bond0: (slave vcan1): Error -95 calling set_mac_address [ 335.130712][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.185380][T13738] hsr_slave_0: entered promiscuous mode [ 335.206774][T13738] hsr_slave_1: entered promiscuous mode [ 335.212911][T13738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.224137][T13738] Cannot create hsr debugfs directory [ 335.260708][ T8699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.291340][T13745] hsr_slave_0: entered promiscuous mode [ 335.297906][T13745] hsr_slave_1: entered promiscuous mode [ 335.303786][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.311578][T13745] Cannot create hsr debugfs directory [ 335.319674][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.362572][ T8699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.451800][T13759] team0: Port device team_slave_0 added [ 335.481955][T13759] team0: Port device team_slave_1 added [ 335.521246][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.528310][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.558119][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.576752][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.583788][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.612300][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.704653][T13759] hsr_slave_0: entered promiscuous mode [ 335.711329][T13759] hsr_slave_1: entered promiscuous mode [ 335.717589][T13759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.725145][T13759] Cannot create hsr debugfs directory [ 335.795223][ T8699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.836061][ T5824] Bluetooth: hci0: command tx timeout [ 335.861891][ T8699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.935455][ T8699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.988068][ T8699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.091397][ T8699] bridge_slave_1: left allmulticast mode [ 336.097220][ T8699] bridge_slave_1: left promiscuous mode [ 336.103023][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.118103][ T8699] bridge_slave_0: left allmulticast mode [ 336.123766][ T8699] bridge_slave_0: left promiscuous mode [ 336.129805][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.140993][ T8699] bridge_slave_1: left allmulticast mode [ 336.147220][ T8699] bridge_slave_1: left promiscuous mode [ 336.152908][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.162641][ T8699] bridge_slave_0: left allmulticast mode [ 336.168862][ T8699] bridge_slave_0: left promiscuous mode [ 336.174566][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.306120][ T5824] Bluetooth: hci1: command tx timeout [ 336.582425][ T8699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.592652][ T8699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.602320][ T8699] bond0 (unregistering): Released all slaves [ 336.616052][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 336.787678][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.797940][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 336.806555][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.815711][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 336.823997][ T24] usb 7-1: Product: syz [ 336.828290][ T24] usb 7-1: Manufacturer: syz [ 336.832895][ T24] usb 7-1: SerialNumber: syz [ 336.843250][ T24] usb 7-1: config 0 descriptor?? [ 336.848659][ T8699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.855225][ T24] usb 7-1: selecting invalid altsetting 0 [ 336.865800][ T8699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.876990][ T8699] bond0 (unregistering): Released all slaves [ 337.026070][ T5824] Bluetooth: hci4: command tx timeout [ 337.090276][T13822] kernel read not supported for file /eth0 (pid: 13822 comm: syz.5.3040) [ 337.103912][ T30] audit: type=1800 audit(1750970933.965:1365): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3040" name="eth0" dev="mqueue" ino=49174 res=0 errno=0 [ 337.134631][ T5963] usb 7-1: USB disconnect, device number 11 [ 337.275964][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3041'. [ 337.362027][T13745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.372420][T13745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.384001][ T8699] hsr_slave_0: left promiscuous mode [ 337.391913][ T8699] hsr_slave_1: left promiscuous mode [ 337.403926][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.411567][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.420242][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.427933][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.441084][ T8699] hsr_slave_0: left promiscuous mode [ 337.446881][ T8699] hsr_slave_1: left promiscuous mode [ 337.452493][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.460172][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.468794][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.476673][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.501292][ T8699] veth1_macvtap: left promiscuous mode [ 337.507563][ T8699] veth0_macvtap: left promiscuous mode [ 337.513119][ T8699] veth1_vlan: left promiscuous mode [ 337.518496][ T8699] veth0_vlan: left promiscuous mode [ 337.524826][ T8699] veth1_macvtap: left promiscuous mode [ 337.530500][ T8699] veth0_macvtap: left promiscuous mode [ 337.536106][ T8699] veth1_vlan: left promiscuous mode [ 337.541347][ T8699] veth0_vlan: left promiscuous mode [ 337.906006][ T5824] Bluetooth: hci0: command tx timeout [ 338.047657][ T8699] team0 (unregistering): Port device team_slave_1 removed [ 338.094699][ T8699] team0 (unregistering): Port device team_slave_0 removed [ 338.396040][ T5893] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 338.403677][ T5824] Bluetooth: hci1: command tx timeout [ 338.526356][ T1719] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 338.566139][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 338.575215][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 338.591125][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 338.602100][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 338.612096][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 338.623522][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 338.636535][ T5893] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 338.645598][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.658966][ T5893] usb 7-1: Product: syz [ 338.663180][ T5893] usb 7-1: Manufacturer: syz [ 338.668071][ T5893] usb 7-1: SerialNumber: syz [ 338.678316][ T5893] usb 7-1: config 0 descriptor?? [ 338.690336][ T1719] usb 6-1: Using ep0 maxpacket: 8 [ 338.712976][ T1719] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 338.722202][ T1719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.730470][ T1719] usb 6-1: Product: syz [ 338.734662][ T1719] usb 6-1: Manufacturer: syz [ 338.739339][ T1719] usb 6-1: SerialNumber: syz [ 338.747986][ T1719] usb 6-1: config 0 descriptor?? [ 338.755557][ T1719] gspca_main: sq930x-2.14.0 probing 2770:930c [ 338.815211][ T8699] team0 (unregistering): Port device team_slave_1 removed [ 338.859043][ T8699] team0 (unregistering): Port device team_slave_0 removed [ 339.111039][ T5824] Bluetooth: hci4: command tx timeout [ 339.117555][ T5893] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 339.123567][ T5893] input input49: Device does not respond to id packet M [ 339.149018][ T5893] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 339.155080][ T5893] input input49: Device does not respond to id packet P [ 339.174076][ T5893] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 339.185059][ T5893] input input49: Device does not respond to id packet B [ 339.271452][T13745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.282299][T13745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.399350][ T5893] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 339.410778][ T5893] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 339.419901][ T5893] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 339.423622][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.436190][ T5893] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 339.450153][ T5893] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input49 [ 339.468424][ T5893] usb 7-1: USB disconnect, device number 12 [ 339.482162][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.502566][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.509723][ T8707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.537769][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.544922][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.765299][T13738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.786361][T13738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.797502][T13738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.811581][T13738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.816609][ T1719] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 339.890907][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.979835][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.997920][ T5824] Bluetooth: hci0: command tx timeout [ 340.030563][T13745] veth0_vlan: entered promiscuous mode [ 340.056262][ T1719] gspca_sq930x: Sensor ov9630 not yet treated [ 340.066267][ T1719] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 340.078088][ T1719] usb 6-1: USB disconnect, device number 15 [ 340.092584][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.123467][T13745] veth1_vlan: entered promiscuous mode [ 340.137573][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.144711][ T8686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.238143][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.245286][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.299777][T13745] veth0_macvtap: entered promiscuous mode [ 340.332165][T13745] veth1_macvtap: entered promiscuous mode [ 340.349613][T13759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.381432][T13759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.435282][T13759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.466181][ T5824] Bluetooth: hci1: command tx timeout [ 340.467188][T13759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.529764][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.571332][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.600415][T13745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.623375][T13745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.640841][T13880] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 340.643085][T13745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.676548][ T30] audit: type=1400 audit(1750970937.505:1366): avc: denied { create } for pid=13879 comm="syz.5.3056" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 340.745286][ T30] audit: type=1400 audit(1750970937.535:1367): avc: denied { associate } for pid=13879 comm="syz.5.3056" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 340.843104][T13745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.939389][ T30] audit: type=1400 audit(1750970937.535:1368): avc: denied { mounton } for pid=13879 comm="syz.5.3056" path="/213/bus" dev="tmpfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 340.943814][ T30] audit: type=1400 audit(1750970937.535:1369): avc: denied { add_name } for pid=13879 comm="syz.5.3056" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 341.039317][ T30] audit: type=1400 audit(1750970937.535:1370): avc: denied { setattr } for pid=13879 comm="syz.5.3056" name="work" dev="tmpfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 341.138148][ T30] audit: type=1400 audit(1750970937.615:1371): avc: denied { write open } for pid=13879 comm="syz.5.3056" path=2F202864656C6574656429 dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 341.199228][ T5824] Bluetooth: hci4: command tx timeout [ 341.247591][ T30] audit: type=1400 audit(1750970937.615:1372): avc: denied { create } for pid=13879 comm="syz.5.3056" name="#1e" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 341.392056][ T30] audit: type=1400 audit(1750970937.615:1373): avc: denied { remove_name } for pid=13879 comm="syz.5.3056" name="#1e" dev="tmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.484141][T13885] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3058'. [ 341.586651][ T30] audit: type=1400 audit(1750970937.615:1374): avc: denied { rename } for pid=13879 comm="syz.5.3056" name="#1e" dev="tmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.591594][T13885] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3058'. [ 341.738512][T13759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.757051][ T5893] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 341.762875][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.788287][ T8695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.805118][ T8695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.808606][T13759] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.838686][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.845756][ T8695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.855222][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.862292][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.895384][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.907083][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.917276][ T5893] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 341.927594][ T5893] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 341.944873][ T5893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.962005][ T5893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 341.975459][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 341.985800][ T5893] usb 6-1: Product: syz [ 341.993767][ T5893] usb 6-1: Manufacturer: syz [ 342.002850][T13738] veth0_vlan: entered promiscuous mode [ 342.023198][T13738] veth1_vlan: entered promiscuous mode [ 342.032802][ T5893] usb 6-1: SerialNumber: syz [ 342.120568][T13738] veth0_macvtap: entered promiscuous mode [ 342.138896][T13738] veth1_macvtap: entered promiscuous mode [ 342.165027][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.181279][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.203996][T13759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.214625][T13738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.225246][T13738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.234130][T13738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.243158][T13738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.259215][ T5893] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 342.354320][ T8708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.366697][ T8708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.403995][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.413653][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.462327][ T5893] usb 6-1: USB disconnect, device number 16 [ 342.471239][ T5893] usblp0: removed [ 342.539544][T13759] veth0_vlan: entered promiscuous mode [ 342.550627][T13759] veth1_vlan: entered promiscuous mode [ 342.571253][T13759] veth0_macvtap: entered promiscuous mode [ 342.583697][T13759] veth1_macvtap: entered promiscuous mode [ 342.607894][T13759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.624867][T13759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.641822][T13759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.651803][T13759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.662053][T13759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.677037][T13759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.773802][ T8695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.781974][ T8695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.814462][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.829635][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.033445][T13912] netlink: 'syz.5.3065': attribute type 39 has an invalid length. [ 343.183875][ T8695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.626276][ T8695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.703651][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.713184][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.722696][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.730401][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.738155][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.850539][T13918] chnl_net:caif_netlink_parms(): no params data found [ 343.900327][T13918] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.908278][T13918] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.915415][T13918] bridge_slave_0: entered allmulticast mode [ 343.922134][T13918] bridge_slave_0: entered promiscuous mode [ 343.930848][T13918] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.937981][T13918] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.945099][T13918] bridge_slave_1: entered allmulticast mode [ 343.953503][T13918] bridge_slave_1: entered promiscuous mode [ 343.995031][ T8695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.011994][T13918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.024029][T13918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.060738][T13918] team0: Port device team_slave_0 added [ 344.070249][T13918] team0: Port device team_slave_1 added [ 344.115008][ T8695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.165599][T13918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.174249][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.207171][T13918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.222016][T13918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.241911][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.279944][T13918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.370718][T13918] hsr_slave_0: entered promiscuous mode [ 344.377497][T13918] hsr_slave_1: entered promiscuous mode [ 344.383606][T13918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.391590][T13918] Cannot create hsr debugfs directory [ 344.458043][ T8695] bridge_slave_1: left allmulticast mode [ 344.467860][ T8695] bridge_slave_1: left promiscuous mode [ 344.473563][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.483531][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.484303][ T8695] bridge_slave_0: left allmulticast mode [ 344.496941][ T8695] bridge_slave_0: left promiscuous mode [ 344.497337][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.502629][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.517431][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.532802][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.539962][ T5865] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 344.549901][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.707259][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 344.714145][ T5865] usb 6-1: config 2 has an invalid interface number: 4 but max is 0 [ 344.723129][ T5865] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 344.739854][ T5865] usb 6-1: config 2 has no interface number 0 [ 344.746392][ T5865] usb 6-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.762083][ T5865] usb 6-1: config 2 interface 4 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 344.778673][ T5865] usb 6-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.819221][ T5865] usb 6-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 344.833798][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.846957][ T5865] usb 6-1: Product: syz [ 344.851160][ T5865] usb 6-1: Manufacturer: syz [ 344.860767][ T5865] usb 6-1: SerialNumber: syz [ 344.871663][ T5865] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.905432][ T8695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.916561][ T5865] snd-usb-audio 6-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 344.931632][ T8695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.941213][ T8695] bond0 (unregistering): Released all slaves [ 345.090146][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 345.090163][ T30] audit: type=1400 audit(1750970941.955:1378): avc: denied { accept } for pid=13927 comm="syz.5.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.090825][ T5931] usb 6-1: USB disconnect, device number 17 [ 345.315462][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.328063][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.336023][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.345645][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.363319][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.402446][ T8695] hsr_slave_0: left promiscuous mode [ 345.408819][ T8695] hsr_slave_1: left promiscuous mode [ 345.414562][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.428454][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.437862][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.445276][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.461031][ T8695] veth1_macvtap: left promiscuous mode [ 345.466665][ T8695] veth0_macvtap: left promiscuous mode [ 345.472193][ T8695] veth1_vlan: left promiscuous mode [ 345.477519][ T8695] veth0_vlan: left promiscuous mode [ 345.828310][ T5824] Bluetooth: hci0: command tx timeout [ 345.901770][T13945] input: syz1 as /devices/virtual/input/input50 [ 345.950430][ T30] audit: type=1326 audit(1750970942.815:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b378e929 code=0x7fc00000 [ 345.990913][ T30] audit: type=1326 audit(1750970942.855:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27b37858e7 code=0x7fc00000 [ 346.037684][ T30] audit: type=1326 audit(1750970942.855:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27b372ab19 code=0x7fc00000 [ 346.062133][ T30] audit: type=1326 audit(1750970942.855:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f27b372abdf code=0x7fc00000 [ 346.104078][ T30] audit: type=1326 audit(1750970942.855:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f27b378e929 code=0x7fc00000 [ 346.139523][ T8695] team0 (unregistering): Port device team_slave_1 removed [ 346.183869][ T8695] team0 (unregistering): Port device team_slave_0 removed [ 346.589441][T13929] chnl_net:caif_netlink_parms(): no params data found [ 346.627744][ T5824] Bluetooth: hci1: command tx timeout [ 346.777649][T13954] syzkaller1: entered promiscuous mode [ 346.783158][T13954] syzkaller1: entered allmulticast mode [ 346.830228][T13959] syz.5.3076: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 346.847651][T13959] CPU: 0 UID: 0 PID: 13959 Comm: syz.5.3076 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 346.847681][T13959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.847693][T13959] Call Trace: [ 346.847700][T13959] [ 346.847709][T13959] dump_stack_lvl+0x16c/0x1f0 [ 346.847741][T13959] warn_alloc+0x248/0x3a0 [ 346.847769][T13959] ? __pfx_warn_alloc+0x10/0x10 [ 346.847791][T13959] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 346.847816][T13959] ? stack_depot_save_flags+0x3e0/0xa40 [ 346.847850][T13959] ? kasan_save_stack+0x42/0x60 [ 346.847872][T13959] ? kasan_save_stack+0x33/0x60 [ 346.847894][T13959] ? kasan_save_track+0x14/0x30 [ 346.847916][T13959] ? xskq_create+0x52/0x1d0 [ 346.847937][T13959] ? xsk_setsockopt+0x640/0x840 [ 346.847956][T13959] ? do_sock_setsockopt+0x224/0x470 [ 346.847988][T13959] ? xskq_create+0xfb/0x1d0 [ 346.848011][T13959] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 346.848041][T13959] ? xskq_create+0xfb/0x1d0 [ 346.848069][T13959] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.848099][T13959] ? xskq_create+0xfb/0x1d0 [ 346.848121][T13959] vmalloc_user_noprof+0x9e/0xe0 [ 346.848139][T13959] ? xskq_create+0xfb/0x1d0 [ 346.848160][T13959] xskq_create+0xfb/0x1d0 [ 346.848182][T13959] xsk_setsockopt+0x640/0x840 [ 346.848204][T13959] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.848222][T13959] ? __lock_acquire+0x622/0x1c90 [ 346.848253][T13959] ? selinux_socket_setsockopt+0x6a/0x80 [ 346.848275][T13959] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.848295][T13959] do_sock_setsockopt+0x224/0x470 [ 346.848323][T13959] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 346.848366][T13959] __sys_setsockopt+0x1a0/0x230 [ 346.848392][T13959] __x64_sys_setsockopt+0xbd/0x160 [ 346.848412][T13959] ? do_syscall_64+0x91/0x4c0 [ 346.848446][T13959] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.848471][T13959] do_syscall_64+0xcd/0x4c0 [ 346.848497][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.848515][T13959] RIP: 0033:0x7f27b378e929 [ 346.848531][T13959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.848548][T13959] RSP: 002b:00007f27b4518038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 346.848565][T13959] RAX: ffffffffffffffda RBX: 00007f27b39b5fa0 RCX: 00007f27b378e929 [ 346.848576][T13959] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 346.848587][T13959] RBP: 00007f27b3810b39 R08: 0000000000000004 R09: 0000000000000000 [ 346.848597][T13959] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.848608][T13959] R13: 0000000000000000 R14: 00007f27b39b5fa0 R15: 00007ffd92e3eb88 [ 346.848632][T13959] [ 346.848638][T13959] Mem-Info: [ 347.127209][T13959] active_anon:5901 inactive_anon:0 isolated_anon:0 [ 347.127209][T13959] active_file:7742 inactive_file:51035 isolated_file:0 [ 347.127209][T13959] unevictable:768 dirty:303 writeback:0 [ 347.127209][T13959] slab_reclaimable:11339 slab_unreclaimable:102748 [ 347.127209][T13959] mapped:29448 shmem:1370 pagetables:1074 [ 347.127209][T13959] sec_pagetables:0 bounce:0 [ 347.127209][T13959] kernel_misc_reclaimable:0 [ 347.127209][T13959] free:1294501 free_pcp:16661 free_cma:0 [ 347.172652][T13959] Node 0 active_anon:23604kB inactive_anon:0kB active_file:30968kB inactive_file:203940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117792kB dirty:1208kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14052kB pagetables:4136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 347.217760][T13959] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 347.250915][T13959] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.281137][T13959] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 347.305538][T13959] Node 0 DMA32 free:1257232kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23596kB inactive_anon:0kB active_file:30968kB inactive_file:202612kB unevictable:1536kB writepending:1204kB present:3129332kB managed:2540596kB mlocked:0kB bounce:0kB free_pcp:50020kB local_pcp:30660kB free_cma:0kB [ 347.357328][T13959] lowmem_reserve[]: 0 0 1 1 1 [ 347.363480][T13929] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.375353][T13929] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.380650][T13959] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 347.386088][T13929] bridge_slave_0: entered allmulticast mode [ 347.420403][T13929] bridge_slave_0: entered promiscuous mode [ 347.421377][T13959] lowmem_reserve[]: [ 347.433652][ T5824] Bluetooth: hci4: command tx timeout [ 347.436576][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3077'. [ 347.456560][T13959] 0 0 0 0 0 [ 347.459823][T13959] Node 1 Normal free:3905268kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16288kB local_pcp:7712kB free_cma:0kB [ 347.514182][T13959] lowmem_reserve[]: 0 0 0 0 0 [ 347.534039][T13929] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.537011][T13959] Node 0 DMA: 0*4kB [ 347.541498][T13929] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.541502][T13959] 0*8kB [ 347.541653][T13929] bridge_slave_1: entered allmulticast mode [ 347.545439][T13959] 0*16kB [ 347.556943][T13929] bridge_slave_1: entered promiscuous mode [ 347.570089][T13959] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.570175][T13959] Node 0 DMA32: 1288*4kB (UME) 616*8kB (UME) 499*16kB (ME) 302*32kB (UME) 133*64kB (UME) 138*128kB (UME) 96*256kB (UM) 41*512kB (UME) 25*1024kB (UM) 3*2048kB (UM) 275*4096kB (UM) = 1257616kB [ 347.605088][T13959] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 347.620537][T13959] Node 1 Normal: 173*4kB (UME) 48*8kB (UME) 48*16kB (UME) 222*32kB (UME) 78*64kB (UME) 11*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3905268kB [ 347.639659][T13959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.649254][T13959] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 347.658653][T13959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.668375][T13959] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 347.677894][T13959] 60145 total pagecache pages [ 347.682569][T13959] 0 pages in swap cache [ 347.686755][T13959] Free swap = 124996kB [ 347.693370][T13959] Total swap = 124996kB [ 347.699594][T13959] 2097051 pages RAM [ 347.703478][T13959] 0 pages HighMem/MovableOnly [ 347.705456][T13918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.715097][T13959] 429924 pages reserved [ 347.715108][T13959] 0 pages cma reserved [ 347.727197][ T30] audit: type=1400 audit(1750970944.595:1384): avc: denied { accept } for pid=13969 comm="syz.6.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.765946][T13918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.777907][T13918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.798637][T13933] chnl_net:caif_netlink_parms(): no params data found [ 347.822321][T13929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.844325][T13918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.862939][T13929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.901953][T13929] team0: Port device team_slave_0 added [ 347.907949][ T5824] Bluetooth: hci0: command tx timeout [ 347.999751][ T8681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.018984][T13929] team0: Port device team_slave_1 added [ 348.057321][T13929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.064362][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.093532][T13929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.122709][ T8681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.138968][T13929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.147490][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.173721][T13929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.194632][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.203202][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.210874][T13933] bridge_slave_0: entered allmulticast mode [ 348.218516][T13933] bridge_slave_0: entered promiscuous mode [ 348.226431][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.233504][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.235923][ T5879] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 348.244011][T13933] bridge_slave_1: entered allmulticast mode [ 348.256091][T13933] bridge_slave_1: entered promiscuous mode [ 348.276677][ T8681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.314212][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.348292][ T8681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.363528][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.397277][ T5879] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 348.406526][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.424379][ T5879] usb 6-1: config 0 descriptor?? [ 348.438127][ T5879] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 348.440357][T13929] hsr_slave_0: entered promiscuous mode [ 348.456782][T13929] hsr_slave_1: entered promiscuous mode [ 348.462789][T13929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.471124][T13929] Cannot create hsr debugfs directory [ 348.482133][T13933] team0: Port device team_slave_0 added [ 348.499952][T13933] team0: Port device team_slave_1 added [ 348.571563][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.578607][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.605613][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.618102][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.625170][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.660311][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.715979][ T5824] Bluetooth: hci1: command tx timeout [ 348.834039][T13933] hsr_slave_0: entered promiscuous mode [ 348.850528][T13933] hsr_slave_1: entered promiscuous mode [ 348.862494][T13933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.864832][ T5879] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 348.880713][T13933] Cannot create hsr debugfs directory [ 348.946816][ T8681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.019753][ T8681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.037279][T13918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.160865][ T8681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.224122][T13918] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.268850][ T5879] gspca_cpia1: usb_control_msg 02, error -71 [ 349.276666][ T5879] gspca_cpia1: usb_control_msg 05, error -71 [ 349.289011][ T5879] cpia1 6-1:0.0: unexpected systemstate: 00 [ 349.295230][ T8681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.308036][ T5879] usb 6-1: USB disconnect, device number 18 [ 349.324618][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.331728][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.348715][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.355862][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.493697][ T8681] bridge_slave_1: left allmulticast mode [ 349.500228][ T8681] bridge_slave_1: left promiscuous mode [ 349.508508][ T5824] Bluetooth: hci4: command tx timeout [ 349.522174][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.531190][ T8681] bridge_slave_0: left allmulticast mode [ 349.537999][ T8681] bridge_slave_0: left promiscuous mode [ 349.543636][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.552781][ T8681] bridge_slave_1: left allmulticast mode [ 349.558594][ T8681] bridge_slave_1: left promiscuous mode [ 349.564225][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.573659][ T8681] bridge_slave_0: left allmulticast mode [ 349.581086][ T8681] bridge_slave_0: left promiscuous mode [ 349.586919][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.864816][ T8681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.883266][ T8681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.894397][ T8681] bond0 (unregistering): Released all slaves [ 349.986319][ T5824] Bluetooth: hci0: command tx timeout [ 350.230826][ T8681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.240907][ T8681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.250617][ T8681] bond0 (unregistering): Released all slaves [ 350.417739][ T30] audit: type=1400 audit(1750970947.285:1385): avc: denied { setattr } for pid=14014 comm="syz.5.3092" name="ptype" dev="proc" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 350.487800][T13918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.592329][T13918] veth0_vlan: entered promiscuous mode [ 350.626061][ T5963] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 350.681461][T13918] veth1_vlan: entered promiscuous mode [ 350.748691][T13929] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.761316][T13929] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.770260][T13929] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.777264][ T5963] usb 7-1: Using ep0 maxpacket: 16 [ 350.783779][ T5963] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 350.795299][ T5963] usb 7-1: config 0 has no interface number 0 [ 350.796317][ T5824] Bluetooth: hci1: command tx timeout [ 350.803610][ T5963] usb 7-1: New USB device found, idVendor=1164, idProduct=1e8c, bcdDevice=c9.10 [ 350.825099][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.833289][ T8681] hsr_slave_0: left promiscuous mode [ 350.833304][ T5963] usb 7-1: Product: syz [ 350.843107][ T5963] usb 7-1: Manufacturer: syz [ 350.847900][ T8681] hsr_slave_1: left promiscuous mode [ 350.848222][ T5963] usb 7-1: SerialNumber: syz [ 350.853715][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.866724][ T5963] usb 7-1: config 0 descriptor?? [ 350.871877][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.884468][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.892195][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.904884][ T8681] hsr_slave_0: left promiscuous mode [ 350.910552][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 350.919196][ T8681] hsr_slave_1: left promiscuous mode [ 350.924865][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.932417][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.940159][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.947740][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.973375][ T8681] veth1_macvtap: left promiscuous mode [ 350.979032][ T8681] veth0_macvtap: left promiscuous mode [ 350.984557][ T8681] veth1_vlan: left promiscuous mode [ 350.990372][ T8681] veth0_vlan: left promiscuous mode [ 350.997088][ T8681] veth1_macvtap: left promiscuous mode [ 351.002590][ T8681] veth0_macvtap: left promiscuous mode [ 351.008164][ T8681] veth1_vlan: left promiscuous mode [ 351.013454][ T8681] veth0_vlan: left promiscuous mode [ 351.065909][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 351.088808][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.101023][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.111582][ T9] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 351.120921][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.131834][ T9] usb 6-1: config 0 descriptor?? [ 351.285704][ T5963] dvb-usb: found a 'YUAN High-Tech DiBcom STK7700D' in cold state, will try to load a firmware [ 351.323368][ T5963] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 351.325891][ T30] audit: type=1400 audit(1750970948.185:1386): avc: denied { firmware_load } for pid=5963 comm="kworker/0:7" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 351.334411][ T5963] dib0700: firmware download failed at 7 with -22 [ 351.374018][ T5963] usb 7-1: USB disconnect, device number 13 [ 351.559151][ T8681] team0 (unregistering): Port device team_slave_1 removed [ 351.586981][ T9] zydacron 0003:13EC:0006.0025: unknown main item tag 0x4 [ 351.588161][ T5824] Bluetooth: hci4: command tx timeout [ 351.599048][ T9] zydacron 0003:13EC:0006.0025: unexpected long global item [ 351.607579][ T9] zydacron 0003:13EC:0006.0025: parse failed [ 351.613765][ T9] zydacron 0003:13EC:0006.0025: probe with driver zydacron failed with error -22 [ 351.624249][ T8681] team0 (unregistering): Port device team_slave_0 removed [ 351.822724][ T9] usb 6-1: USB disconnect, device number 19 [ 352.066704][ T5824] Bluetooth: hci0: command tx timeout [ 352.280951][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3101'. [ 352.351824][ T30] audit: type=1400 audit(1750970949.215:1387): avc: denied { write } for pid=14035 comm="syz.6.3102" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 352.429411][ T8681] team0 (unregistering): Port device team_slave_1 removed [ 352.451858][ T30] audit: type=1400 audit(1750970949.315:1388): avc: granted { setsecparam } for pid=14037 comm="syz.5.3103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 352.501848][ T8681] team0 (unregistering): Port device team_slave_0 removed [ 352.847664][T13918] veth0_macvtap: entered promiscuous mode [ 352.867379][ T5824] Bluetooth: hci1: command tx timeout [ 352.882702][T13929] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.907157][T13918] veth1_macvtap: entered promiscuous mode [ 352.975157][T13918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.003074][T13918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.018573][T13918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.031486][T13918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.040710][T13918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.064982][T13918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.296545][ T8695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.313324][ T8695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.380952][ T8739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.389282][ T8739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.408637][T13929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.498135][T13929] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.555503][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.562629][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.601627][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.608808][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.619249][T14073] Invalid ELF header len 8 [ 353.628004][T13933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.645252][T13933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.661711][T13933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.672460][T13933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.676386][ T5824] Bluetooth: hci4: command tx timeout [ 353.820322][T13933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.857205][T13933] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.875294][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.882420][ T8686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.910314][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.917487][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.943027][T13933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.974818][T13929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.040883][T13929] veth0_vlan: entered promiscuous mode [ 354.053961][T13929] veth1_vlan: entered promiscuous mode [ 354.102268][T13929] veth0_macvtap: entered promiscuous mode [ 354.113429][T13929] veth1_macvtap: entered promiscuous mode [ 354.143434][T13929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.184798][T13929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.229459][T13929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.250094][T13929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.263171][T13929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.272416][T13929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.315700][T13933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.531840][ T8695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.587906][ T8711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.612111][ T8711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.673895][ T8695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.701490][ T8681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.721908][ T8681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.771320][ T8695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.841399][T13933] veth0_vlan: entered promiscuous mode [ 354.852276][T13933] veth1_vlan: entered promiscuous mode [ 354.873127][ T8695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.900891][T13933] veth0_macvtap: entered promiscuous mode [ 354.910421][T13933] veth1_macvtap: entered promiscuous mode [ 354.929131][T13933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.939882][T13933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.961475][T13933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.972253][T13933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.981018][T13933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.989743][T13933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.041597][ T8695] bridge_slave_1: left allmulticast mode [ 355.047339][ T8695] bridge_slave_1: left promiscuous mode [ 355.052955][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.061168][ T8695] bridge_slave_0: left allmulticast mode [ 355.066924][ T8695] bridge_slave_0: left promiscuous mode [ 355.072558][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.297640][ T8695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.309582][ T8695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.320465][ T8695] bond0 (unregistering): Released all slaves [ 355.495084][ T8681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.515612][ T8681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.543074][ T8697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.551608][ T8697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.686771][ T8695] hsr_slave_0: left promiscuous mode [ 355.695891][ T8695] hsr_slave_1: left promiscuous mode [ 355.701726][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.725957][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.747167][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.754562][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.791431][ T8695] veth1_macvtap: left promiscuous mode [ 355.797895][ T8695] veth0_macvtap: left promiscuous mode [ 355.803499][ T8695] veth1_vlan: left promiscuous mode [ 355.812448][ T8695] veth0_vlan: left promiscuous mode [ 355.829889][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.839334][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.847480][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.855216][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.864127][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.129384][ T8695] team0 (unregistering): Port device team_slave_1 removed [ 356.165497][ T8695] team0 (unregistering): Port device team_slave_0 removed [ 356.227156][ T5820] Bluetooth: hci4: command 0x0405 tx timeout [ 356.641292][T14114] chnl_net:caif_netlink_parms(): no params data found [ 356.723634][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.732227][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.743620][T14114] bridge_slave_0: entered allmulticast mode [ 356.752756][T14114] bridge_slave_0: entered promiscuous mode [ 356.763845][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.771044][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.782783][T14114] bridge_slave_1: entered allmulticast mode [ 356.790089][T14114] bridge_slave_1: entered promiscuous mode [ 356.828813][T14114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.844575][T14114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.955637][T14114] team0: Port device team_slave_0 added [ 356.979158][T14114] team0: Port device team_slave_1 added [ 357.020956][T14114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.031897][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.060064][T14114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.074302][T14114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.084810][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.106444][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.112184][T14114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.124833][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.136472][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.144285][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.152394][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.179804][ T8695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.220905][T14114] hsr_slave_0: entered promiscuous mode [ 357.227873][T14114] hsr_slave_1: entered promiscuous mode [ 357.233762][T14114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.241963][T14114] Cannot create hsr debugfs directory [ 357.430858][T14127] chnl_net:caif_netlink_parms(): no params data found [ 357.511480][T14127] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.524436][T14127] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.531796][T14127] bridge_slave_0: entered allmulticast mode [ 357.539491][T14127] bridge_slave_0: entered promiscuous mode [ 357.554509][T14127] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.562043][T14127] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.569913][T14127] bridge_slave_1: entered allmulticast mode [ 357.577405][T14127] bridge_slave_1: entered promiscuous mode [ 357.605060][T14127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.618924][T14127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.656532][ T8695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.678459][T14127] team0: Port device team_slave_0 added [ 357.688354][T14127] team0: Port device team_slave_1 added [ 357.718483][T14127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.725447][T14127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.766367][T14127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.779574][T14127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.805144][T14127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.836806][T14127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.847352][ T30] audit: type=1400 audit(1750970954.705:1389): avc: denied { mount } for pid=14138 comm="syz.6.3126" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 357.906884][ T5824] Bluetooth: hci0: command tx timeout [ 358.073690][ T8695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.118009][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.133797][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.144875][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.157847][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.166493][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.208646][ T8695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.252812][T14127] hsr_slave_0: entered promiscuous mode [ 358.261142][T14127] hsr_slave_1: entered promiscuous mode [ 358.267695][T14127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.275337][T14127] Cannot create hsr debugfs directory [ 358.392313][T14114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.410447][T14151] SELinux: failed to load policy [ 358.428398][T14114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.466982][T14114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.480057][T14114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.534998][T14154] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 358.575735][ T8695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.673452][ T8695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.854020][ T8695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.891372][T14144] chnl_net:caif_netlink_parms(): no params data found [ 358.967026][ T8695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.018739][T14114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.124353][T14114] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.150640][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.157786][ T8681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.186493][ T5824] Bluetooth: hci1: command tx timeout [ 359.245152][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.252273][ T8681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.375777][T14114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.385520][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3137'. [ 359.386998][T14114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.406037][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 359.420673][T14144] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.429065][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.438950][T14144] bridge_slave_0: entered allmulticast mode [ 359.445717][T14144] bridge_slave_0: entered promiscuous mode [ 359.453401][T14144] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.461065][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.468336][T14144] bridge_slave_1: entered allmulticast mode [ 359.474990][T14144] bridge_slave_1: entered promiscuous mode [ 359.543836][T14144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.582346][ T24] usb 7-1: config 0 has an invalid interface number: 7 but max is 0 [ 359.591559][ T24] usb 7-1: config 0 has no interface number 0 [ 359.602833][ T8695] bridge_slave_1: left allmulticast mode [ 359.607652][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.626215][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.635530][ T8695] bridge_slave_1: left promiscuous mode [ 359.646556][ T24] usb 7-1: config 0 descriptor?? [ 359.654311][ T24] cp210x 7-1:0.7: cp210x converter detected [ 359.656149][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.685673][ T8695] bridge_slave_0: left allmulticast mode [ 359.695356][ T8695] bridge_slave_0: left promiscuous mode [ 359.702952][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.718309][ T8695] bridge_slave_1: left allmulticast mode [ 359.723979][ T8695] bridge_slave_1: left promiscuous mode [ 359.729979][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.742027][ T8695] bridge_slave_0: left allmulticast mode [ 359.749118][ T8695] bridge_slave_0: left promiscuous mode [ 359.754818][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.986065][ T5824] Bluetooth: hci0: command tx timeout [ 360.073275][ T24] cp210x 7-1:0.7: failed to get vendor val 0x000e size 3: -32 [ 360.121543][ T8695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.132569][ T8695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.142338][ T8695] bond0 (unregistering): Released all slaves [ 360.226327][ T5824] Bluetooth: hci4: command tx timeout [ 360.284232][ T24] cp210x 7-1:0.7: GPIO initialisation failed: -19 [ 360.294748][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 360.398938][ T8695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.409711][ T8695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.419223][ T8695] bond0 (unregistering): Released all slaves [ 360.433861][T14144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.460799][T14193] ipvlan2: entered promiscuous mode [ 360.540743][ T24] usb 7-1: USB disconnect, device number 14 [ 360.570124][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 360.578616][ T24] cp210x 7-1:0.7: device disconnected [ 360.639268][T14144] team0: Port device team_slave_0 added [ 360.656966][T14144] team0: Port device team_slave_1 added [ 360.718712][T14144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.725730][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.752571][T14144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.765305][T14144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.772351][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.799606][T14144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.865669][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.925945][ T5920] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 360.937872][T14144] hsr_slave_0: entered promiscuous mode [ 360.943903][T14144] hsr_slave_1: entered promiscuous mode [ 360.960752][T14144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.968542][T14144] Cannot create hsr debugfs directory [ 360.993693][ T8695] hsr_slave_0: left promiscuous mode [ 360.999991][ T8695] hsr_slave_1: left promiscuous mode [ 361.005674][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.013725][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.022532][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.030461][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.042038][ T8695] hsr_slave_0: left promiscuous mode [ 361.047990][ T8695] hsr_slave_1: left promiscuous mode [ 361.053574][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.061313][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.075671][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.085737][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.095307][ T5920] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 361.112837][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.127943][ T5920] usb 6-1: config 0 descriptor?? [ 361.148447][ T8695] veth1_macvtap: left promiscuous mode [ 361.154390][ T8695] veth0_macvtap: left promiscuous mode [ 361.160597][ T8695] veth1_vlan: left promiscuous mode [ 361.166405][ T8695] veth0_vlan: left promiscuous mode [ 361.172756][ T8695] veth1_macvtap: left promiscuous mode [ 361.178438][ T8695] veth0_macvtap: left promiscuous mode [ 361.184566][ T8695] veth1_vlan: left promiscuous mode [ 361.190721][ T8695] veth0_vlan: left promiscuous mode [ 361.268724][ T5824] Bluetooth: hci1: command tx timeout [ 361.633172][ T8695] team0 (unregistering): Port device team_slave_1 removed [ 361.670835][ T8695] team0 (unregistering): Port device team_slave_0 removed [ 361.676234][ T5933] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 361.846109][ T5933] usb 7-1: Using ep0 maxpacket: 16 [ 361.854229][ T5933] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 361.865683][ T5933] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 361.879501][ T5933] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 361.887927][ T5933] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 361.896229][ T5933] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.905117][ T5933] usb 7-1: config 0 has no interface number 0 [ 361.911482][ T5933] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 361.922622][ T5933] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 361.932583][ T5933] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 361.942498][ T5933] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.959441][ T5933] usb 7-1: config 0 interface 125 has no altsetting 0 [ 361.975879][ T5933] usb 7-1: config 0 interface 125 has no altsetting 2 [ 361.984653][ T5933] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 362.001355][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.009680][ T5933] usb 7-1: Product: syz [ 362.013857][ T5933] usb 7-1: Manufacturer: syz [ 362.018496][ T5933] usb 7-1: SerialNumber: syz [ 362.025161][ T5933] usb 7-1: config 0 descriptor?? [ 362.032912][ T5933] usb 7-1: selecting invalid altsetting 2 [ 362.065951][ T5824] Bluetooth: hci0: command tx timeout [ 362.174420][ T5920] usb 6-1: Cannot set autoneg [ 362.179584][ T5920] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 362.306194][ T5824] Bluetooth: hci4: command tx timeout [ 362.361492][ T8695] team0 (unregistering): Port device team_slave_1 removed [ 362.390999][ T5920] usb 6-1: USB disconnect, device number 20 [ 362.404512][ T8695] team0 (unregistering): Port device team_slave_0 removed [ 362.905291][T14127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.930705][T14127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.957286][T14127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.980172][T14127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.000776][T14114] veth0_vlan: entered promiscuous mode [ 363.065427][ T5933] usb 7-1: USB disconnect, device number 15 [ 363.107087][T14114] veth1_vlan: entered promiscuous mode [ 363.204208][T14114] veth0_macvtap: entered promiscuous mode [ 363.227666][T14114] veth1_macvtap: entered promiscuous mode [ 363.259556][T14114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.283118][T14114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.301427][T14127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.313010][T14114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.323111][T14114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.334732][T14114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.343556][T14114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.346167][ T5824] Bluetooth: hci1: command tx timeout [ 363.377098][T14127] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.396342][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.403459][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.471806][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.478992][ T8697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.542392][T14144] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.558966][T14144] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.572929][T14127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.590925][T14144] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.636696][T14144] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.690554][ T8686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.695015][T14232] Set syz0 is full, maxelem 0 reached [ 363.731128][ T8686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.863050][ T8695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.899086][ T8695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.969282][ T8711] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 363.990611][T14144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.079665][T14144] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.094256][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.101412][ T8695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.117334][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.124479][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.142726][T14127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.260255][T14127] veth0_vlan: entered promiscuous mode [ 364.283276][T14127] veth1_vlan: entered promiscuous mode [ 364.361457][T14127] veth0_macvtap: entered promiscuous mode [ 364.387496][ T5824] Bluetooth: hci4: command tx timeout [ 364.401461][T14127] veth1_macvtap: entered promiscuous mode [ 364.524240][ T8697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.587114][T14127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.650904][ T8697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.694895][T14144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.715688][T14127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.775392][ T8697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.803527][T14127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.826275][T14127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.835296][T14127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.844372][T14127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.947727][ T8697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.967040][ T8686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.975047][ T8686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.021098][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.032259][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.159148][ T8697] bridge_slave_1: left allmulticast mode [ 365.164809][ T8697] bridge_slave_1: left promiscuous mode [ 365.171940][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.180324][ T8697] bridge_slave_0: left allmulticast mode [ 365.187055][ T8697] bridge_slave_0: left promiscuous mode [ 365.192686][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.420649][ T8697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.432190][ T8697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.442340][ T8697] bond0 (unregistering): Released all slaves [ 365.468875][T14144] veth0_vlan: entered promiscuous mode [ 365.481449][T14144] veth1_vlan: entered promiscuous mode [ 365.516708][T14144] veth0_macvtap: entered promiscuous mode [ 365.530434][T14144] veth1_macvtap: entered promiscuous mode [ 365.567834][T14144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.582294][T14144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.619652][T14144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.628433][T14144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.638180][T14144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.646987][T14144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.713750][ T8697] hsr_slave_0: left promiscuous mode [ 365.719528][ T8697] hsr_slave_1: left promiscuous mode [ 365.725115][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.735554][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.743170][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.751687][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.768310][ T8697] veth1_macvtap: left promiscuous mode [ 365.773793][ T8697] veth0_macvtap: left promiscuous mode [ 365.779374][ T8697] veth1_vlan: left promiscuous mode [ 365.784587][ T8697] veth0_vlan: left promiscuous mode [ 366.275427][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 366.315852][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 366.327912][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.344422][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.356964][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.365891][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.375767][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.466211][ T5824] Bluetooth: hci4: command tx timeout [ 366.640723][ T8708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.662779][ T8708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.731093][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.739131][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.888198][T14271] chnl_net:caif_netlink_parms(): no params data found [ 366.939521][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.947586][T14271] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.954701][T14271] bridge_slave_0: entered allmulticast mode [ 366.962729][T14271] bridge_slave_0: entered promiscuous mode [ 366.970482][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.978074][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.985192][T14271] bridge_slave_1: entered allmulticast mode [ 366.993013][T14271] bridge_slave_1: entered promiscuous mode [ 367.018136][T14271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.030089][T14271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.059709][T14271] team0: Port device team_slave_0 added [ 367.067423][T14271] team0: Port device team_slave_1 added [ 367.087669][T14271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.095605][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.121948][T14271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.134074][T14271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.142562][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.169909][T14271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.201029][ T8697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.238116][T14271] hsr_slave_0: entered promiscuous mode [ 367.244132][T14271] hsr_slave_1: entered promiscuous mode [ 367.250123][T14271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.257865][T14271] Cannot create hsr debugfs directory [ 367.354401][ T8697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.421044][ T8697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.528641][T14282] netlink: 'syz.6.3160': attribute type 1 has an invalid length. [ 367.577318][ T8697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.661593][T14282] bond1: entered promiscuous mode [ 367.667626][T14282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.683386][T14284] bond1: (slave bridge1): making interface the new active one [ 367.699412][T14284] bridge1: entered promiscuous mode [ 367.710942][T14284] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 367.893689][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.904586][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.905214][ T8697] bridge_slave_1: left allmulticast mode [ 367.921234][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.938631][ T8697] bridge_slave_1: left promiscuous mode [ 367.944345][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.951733][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.962163][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.970531][ T8697] bridge_slave_0: left allmulticast mode [ 367.976314][ T8697] bridge_slave_0: left promiscuous mode [ 367.982018][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.229323][ T8697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.239693][ T8697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.249455][ T8697] bond0 (unregistering): Released all slaves [ 368.277952][T14271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.299817][T14271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.329721][T14271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.353587][T14271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.466329][ T5824] Bluetooth: hci0: command tx timeout [ 368.498834][ T8697] hsr_slave_0: left promiscuous mode [ 368.504632][ T8697] hsr_slave_1: left promiscuous mode [ 368.511825][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.519571][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.528119][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.535515][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.550723][ T8697] veth1_macvtap: left promiscuous mode [ 368.556321][ T8697] veth0_macvtap: left promiscuous mode [ 368.561868][ T8697] veth1_vlan: left promiscuous mode [ 368.567186][ T8697] veth0_vlan: left promiscuous mode [ 369.011053][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.025527][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.034711][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.046535][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.054061][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.093915][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 369.132138][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 369.287699][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 369.437951][T14286] chnl_net:caif_netlink_parms(): no params data found [ 369.464641][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.492692][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.508303][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.519706][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.532203][T14306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 369.535507][T14271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.541968][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.720767][T14271] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.731899][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.733420][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3166'. [ 369.740071][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.759767][T14286] bridge_slave_0: entered allmulticast mode [ 369.768598][T14286] bridge_slave_0: entered promiscuous mode [ 369.805585][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.812982][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.822004][ T24] usb 7-1: USB disconnect, device number 16 [ 369.823150][T14286] bridge_slave_1: entered allmulticast mode [ 369.839808][T14286] bridge_slave_1: entered promiscuous mode [ 369.854018][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.861175][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.943686][T14304] chnl_net:caif_netlink_parms(): no params data found [ 369.959088][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.966263][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.980047][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.989816][ T5824] Bluetooth: hci1: command tx timeout [ 369.989828][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 370.016472][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.036950][ T30] audit: type=1400 audit(1750970966.905:1390): avc: denied { map } for pid=14305 comm="syz.6.3165" path=2F6465762F6D69646933202864656C6574656429 dev="devtmpfs" ino=3482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.077990][ T30] audit: type=1400 audit(1750970966.905:1391): avc: denied { execute } for pid=14305 comm="syz.6.3165" path=2F6465762F6D69646933202864656C6574656429 dev="devtmpfs" ino=3482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.168513][T14286] team0: Port device team_slave_0 added [ 370.199175][T14286] team0: Port device team_slave_1 added [ 370.242030][ T8697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.382447][ T8697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.412288][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.419902][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.427196][T14304] bridge_slave_0: entered allmulticast mode [ 370.434524][T14304] bridge_slave_0: entered promiscuous mode [ 370.451292][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.465839][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.497059][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.530037][ T8697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.545041][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.552574][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.560129][ T5820] Bluetooth: hci0: command tx timeout [ 370.568299][T14304] bridge_slave_1: entered allmulticast mode [ 370.576266][T14304] bridge_slave_1: entered promiscuous mode [ 370.641476][T14304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.670995][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.686212][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.718005][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.743573][ T8697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.762642][T14304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.873094][T14286] hsr_slave_0: entered promiscuous mode [ 370.880260][T14286] hsr_slave_1: entered promiscuous mode [ 370.887266][T14286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.894873][T14286] Cannot create hsr debugfs directory [ 370.906501][T14304] team0: Port device team_slave_0 added [ 370.926234][ T24] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 370.983199][T14304] team0: Port device team_slave_1 added [ 371.020159][ T30] audit: type=1400 audit(1750970967.885:1392): avc: denied { unmount } for pid=12321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 371.100034][ T24] usb 7-1: config 8 has an invalid interface number: 22 but max is 0 [ 371.115890][ T24] usb 7-1: config 8 has no interface number 0 [ 371.122026][ T5820] Bluetooth: hci4: command tx timeout [ 371.128497][ T24] usb 7-1: config 8 interface 22 has no altsetting 0 [ 371.137209][T14304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.137834][ T24] usb 7-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 371.144148][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.153374][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.189456][ T24] usb 7-1: Product: syz [ 371.193630][ T24] usb 7-1: Manufacturer: syz [ 371.198279][ T24] usb 7-1: SerialNumber: syz [ 371.205293][T14304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.274110][T14304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.283641][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.369943][T14304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.434702][ T24] usb 7-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 371.461952][ T24] usb 7-1: USB disconnect, device number 17 [ 371.550596][T14304] hsr_slave_0: entered promiscuous mode [ 371.566992][T14304] hsr_slave_1: entered promiscuous mode [ 371.573133][T14304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.590914][T14304] Cannot create hsr debugfs directory [ 371.601573][ T8697] bridge_slave_1: left allmulticast mode [ 371.611071][ T8697] bridge_slave_1: left promiscuous mode [ 371.626032][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.638861][ T8697] bridge_slave_0: left allmulticast mode [ 371.654596][ T8697] bridge_slave_0: left promiscuous mode [ 371.664773][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.063802][ T8697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.074604][ T8697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.083245][ T5820] Bluetooth: hci1: command tx timeout [ 372.089932][ T8697] bond0 (unregistering): Released all slaves [ 372.166804][T14271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.328042][T14271] veth0_vlan: entered promiscuous mode [ 372.340988][T14271] veth1_vlan: entered promiscuous mode [ 372.390695][ T8697] hsr_slave_0: left promiscuous mode [ 372.403248][ T8697] hsr_slave_1: left promiscuous mode [ 372.409931][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.418633][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.427332][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.434708][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.451362][ T8697] veth1_macvtap: left promiscuous mode [ 372.457028][ T8697] veth0_macvtap: left promiscuous mode [ 372.462583][ T8697] veth1_vlan: left promiscuous mode [ 372.468161][ T8697] veth0_vlan: left promiscuous mode [ 372.628482][ T5820] Bluetooth: hci0: command tx timeout [ 372.790009][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 372.822632][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 373.187249][ T5820] Bluetooth: hci4: command tx timeout [ 373.290850][T14271] veth0_macvtap: entered promiscuous mode [ 373.309801][T14271] veth1_macvtap: entered promiscuous mode [ 373.405415][T14271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.439431][T14271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.471556][T14375] overlayfs: overlapping lowerdir path [ 373.474467][T14271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.506237][T14271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.514976][T14271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.529030][T14377] overlayfs: failed to verify upper root origin [ 373.546001][T14271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.803632][ T8708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.825729][ T8708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.883734][ T8711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.892481][ T8711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.945985][T14385] nbd6: detected capacity change from 0 to 4294967296 [ 373.971584][T14386] block nbd6: shutting down sockets [ 373.982070][ T5963] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 374.097517][T14286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.129015][T14286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.146904][ T5820] Bluetooth: hci1: command tx timeout [ 374.157791][ T5963] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.182575][ T5963] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.200587][ T5963] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 235, setting to 64 [ 374.211649][ T5963] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.228825][ T5963] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.238665][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.246778][ T5963] usb 6-1: Product: syz [ 374.251003][ T5963] usb 6-1: Manufacturer: syz [ 374.255672][ T5963] usb 6-1: SerialNumber: syz [ 374.264320][ T8711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.287477][T14286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.302508][T14286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.371239][ T8711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.403207][T14304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.413232][T14304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.422548][T14304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.436717][T14304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.506821][T14286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.538799][T14286] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.556398][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.563487][ T8707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.582399][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.589518][ T8697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.603719][T14304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.644826][ T8711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.669530][T14304] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.685698][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.692817][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.709188][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.716324][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.745020][ T8711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.908168][ T8711] bridge_slave_1: left allmulticast mode [ 374.913913][ T8711] bridge_slave_1: left promiscuous mode [ 374.923245][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.943951][ T8711] bridge_slave_0: left allmulticast mode [ 374.953781][ T8711] bridge_slave_0: left promiscuous mode [ 374.963935][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.254129][ T8711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.264769][ T8711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.273345][ T5820] Bluetooth: hci4: command tx timeout [ 375.280970][ T8711] bond0 (unregistering): Released all slaves [ 375.287177][ T5963] cdc_ncm 6-1:1.0: bind() failure [ 375.295876][ T5963] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 375.307236][ T5963] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 375.319715][ T5963] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 375.332256][ T5963] usb 6-1: USB disconnect, device number 21 [ 375.345102][T14286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.464252][T14286] veth0_vlan: entered promiscuous mode [ 375.477004][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.495444][T14286] veth1_vlan: entered promiscuous mode [ 375.559835][T14286] veth0_macvtap: entered promiscuous mode [ 375.569238][T14286] veth1_macvtap: entered promiscuous mode [ 375.602025][ T8711] hsr_slave_0: left promiscuous mode [ 375.608374][ T8711] hsr_slave_1: left promiscuous mode [ 375.614306][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.627981][ T8711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.635655][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.644949][ T8711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.661795][ T8711] veth1_macvtap: left promiscuous mode [ 375.670306][ T8711] veth0_macvtap: left promiscuous mode [ 375.676149][ T8711] veth1_vlan: left promiscuous mode [ 375.681405][ T8711] veth0_vlan: left promiscuous mode [ 375.981018][ T8711] team0 (unregistering): Port device team_slave_1 removed [ 376.014779][ T8711] team0 (unregistering): Port device team_slave_0 removed [ 376.226182][ T5820] Bluetooth: hci1: command tx timeout [ 376.446419][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.455767][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.465663][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.476044][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.483508][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.516879][ T5933] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 376.603238][T14286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.659253][T14286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.689119][T14286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.699601][T14286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.709262][T14286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.721463][T14286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.721540][ T5933] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 376.740554][ T5933] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.752560][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.755964][ T5865] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 376.760731][ T5933] usb 6-1: Product: syz [ 376.772960][ T5933] usb 6-1: Manufacturer: syz [ 376.777731][ T5933] usb 6-1: SerialNumber: syz [ 376.789565][ T5933] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 376.808284][ T1719] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.874290][T14304] veth0_vlan: entered promiscuous mode [ 376.911419][T14304] veth1_vlan: entered promiscuous mode [ 376.965937][ T5865] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 376.974475][ T8695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.985385][ T5865] usb 7-1: config 0 has no interface number 0 [ 376.988423][ T8695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.992216][ T5865] usb 7-1: config 0 interface 98 has no altsetting 0 [ 377.023378][T14420] chnl_net:caif_netlink_parms(): no params data found [ 377.034923][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.044254][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.055633][ T5865] usb 7-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 377.060832][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.075621][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.089000][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.092782][T14304] veth0_macvtap: entered promiscuous mode [ 377.102708][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.112969][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.113899][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.122011][ T5865] usb 7-1: Product: syz [ 377.130561][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.142111][ T5865] usb 7-1: Manufacturer: syz [ 377.147308][ T5865] usb 7-1: SerialNumber: syz [ 377.160305][ T5865] usb 7-1: config 0 descriptor?? [ 377.231350][T14304] veth1_macvtap: entered promiscuous mode [ 377.237562][ T5933] usb 6-1: USB disconnect, device number 22 [ 377.319191][T14304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.345362][T14420] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.352632][ T5820] Bluetooth: hci4: command tx timeout [ 377.358862][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.367181][T14420] bridge_slave_0: entered allmulticast mode [ 377.374742][T14420] bridge_slave_0: entered promiscuous mode [ 377.382224][ T5865] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 377.387393][T14420] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.401356][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.408577][T14420] bridge_slave_1: entered allmulticast mode [ 377.415247][T14420] bridge_slave_1: entered promiscuous mode [ 377.425192][T14304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.456893][T14420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.470535][T14420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.480426][T14304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.489506][T14304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.498452][T14304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.508470][T14304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.553329][T14420] team0: Port device team_slave_0 added [ 377.564820][T14420] team0: Port device team_slave_1 added [ 377.606710][T14420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.613736][T14420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.640899][T14420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.656453][T14420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.663425][T14420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.690489][T14420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.738984][T14420] hsr_slave_0: entered promiscuous mode [ 377.745160][T14420] hsr_slave_1: entered promiscuous mode [ 377.755355][T14420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.763132][T14420] Cannot create hsr debugfs directory [ 377.772054][ T8707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.780892][ T8707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.833768][ T8711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.844955][ T8711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.906707][ T1719] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 377.913756][ T1719] ath9k_htc: Failed to initialize the device [ 377.946854][ T5933] usb 6-1: ath9k_htc: USB layer deinitialized [ 378.091250][ T8697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.155781][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.174924][ T5865] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 378.183320][ T5865] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 378.192198][ T24] usb 7-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 378.205024][ T30] audit: type=1400 audit(1750970975.075:1393): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 378.225458][ T24] usb 7-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 378.237012][ T5865] usb 7-1: USB disconnect, device number 18 [ 378.248209][ T24] ------------[ cut here ]------------ [ 378.254806][ T24] WARNING: CPU: 1 PID: 24 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 378.263791][ T24] Modules linked in: [ 378.266299][ T5933] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 378.268103][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 378.287430][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.297509][ T24] Workqueue: events request_firmware_work_func [ 378.303669][ T24] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 378.309467][ T24] Code: 48 a2 5a ff 85 ed 74 1c e8 ff a6 5a ff be 04 00 00 00 48 89 df e8 c2 8c c1 ff f0 ff 03 5b 5d e9 18 09 22 09 e8 e3 a6 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 a5 84 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 378.329236][ T24] RSP: 0018:ffffc900001e7790 EFLAGS: 00010293 [ 378.335282][ T24] RAX: 0000000000000000 RBX: ffff88805e5faa50 RCX: ffffffff82617968 [ 378.343261][ T24] RDX: ffff88801ea88000 RSI: ffffffff8261798d RDI: 0000000000000005 [ 378.351260][ T24] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 378.359909][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880548740b0 [ 378.368427][ T24] R13: ffff888049f65ab0 R14: 0000000000000000 R15: ffff888049f65aa8 [ 378.376800][ T24] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 378.385737][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.392572][ T24] CR2: 00007fe2fbfc3f98 CR3: 0000000067a4e000 CR4: 00000000003526f0 [ 378.400553][ T24] Call Trace: [ 378.403813][ T24] [ 378.406756][ T24] kernfs_get+0x1f/0x30 [ 378.410897][ T24] kobject_add_internal+0x353/0x9b0 [ 378.416113][ T24] kobject_add+0x16e/0x240 [ 378.420521][ T24] ? __pfx_kobject_add+0x10/0x10 [ 378.425455][ T24] get_device_parent+0x399/0x4e0 [ 378.426186][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 378.430439][ T24] device_add+0x1ad/0x1a70 [ 378.436979][ T5933] usb 6-1: config index 0 descriptor too short (expected 241, got 72) [ 378.439902][ T24] ? __pfx_device_add+0x10/0x10 [ 378.451641][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 378.452854][ T24] ? __init_waitqueue_head+0xca/0x150 [ 378.465118][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 378.471379][ T24] firmware_fallback_sysfs+0x2ec/0xbe0 [ 378.489078][ T24] _request_firmware+0xfe9/0x1470 [ 378.489449][ T5933] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 378.494110][ T24] ? __pfx__request_firmware+0x10/0x10 [ 378.508647][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 378.514463][ T24] ? debug_object_deactivate+0x1ec/0x3a0 [ 378.514507][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.520124][ T24] ? finish_task_switch.isra.0+0x221/0xc10 [ 378.520155][ T24] request_firmware_work_func+0xea/0x250 [ 378.520186][ T24] ? __pfx_request_firmware_work_func+0x10/0x10 [ 378.520211][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.520236][ T24] process_one_work+0x9cc/0x1b70 [ 378.520265][ T24] ? __pfx_process_one_work+0x10/0x10 [ 378.556410][ T5820] Bluetooth: hci0: command tx timeout [ 378.561639][ T24] ? assign_work+0x1a0/0x250 [ 378.568688][ T5933] usb 6-1: config 0 descriptor?? [ 378.572053][ T24] worker_thread+0x6c8/0xf10 [ 378.581625][ T24] ? __pfx_worker_thread+0x10/0x10 [ 378.583744][ T5933] mos7840 6-1:0.0: missing endpoints [ 378.586781][ T24] kthread+0x3c2/0x780 [ 378.596112][ T24] ? __pfx_kthread+0x10/0x10 [ 378.601140][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.605981][ T24] ? __pfx_kthread+0x10/0x10 [ 378.610561][ T24] ret_from_fork+0x5d4/0x6f0 [ 378.615135][ T24] ? __pfx_kthread+0x10/0x10 [ 378.619728][ T24] ret_from_fork_asm+0x1a/0x30 [ 378.624477][ T24] [ 378.627916][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 378.635190][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 378.647075][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.657119][ T24] Workqueue: events request_firmware_work_func [ 378.663258][ T24] Call Trace: [ 378.666516][ T24] [ 378.669610][ T24] dump_stack_lvl+0x3d/0x1f0 [ 378.674195][ T24] panic+0x71c/0x800 [ 378.678083][ T24] ? __pfx_panic+0x10/0x10 [ 378.682477][ T24] ? show_trace_log_lvl+0x29b/0x3e0 [ 378.687672][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 378.692780][ T24] ? kernfs_get.part.0+0x6e/0x80 [ 378.697710][ T24] check_panic_on_warn+0xab/0xb0 [ 378.702641][ T24] __warn+0xf6/0x3c0 [ 378.706527][ T24] ? kernfs_get.part.0+0x6e/0x80 [ 378.711457][ T24] report_bug+0x3c3/0x580 [ 378.715782][ T24] ? kernfs_get.part.0+0x6e/0x80 [ 378.720727][ T24] handle_bug+0x184/0x210 [ 378.725048][ T24] exc_invalid_op+0x17/0x50 [ 378.729533][ T24] asm_exc_invalid_op+0x1a/0x20 [ 378.734367][ T24] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 378.739917][ T24] Code: 48 a2 5a ff 85 ed 74 1c e8 ff a6 5a ff be 04 00 00 00 48 89 df e8 c2 8c c1 ff f0 ff 03 5b 5d e9 18 09 22 09 e8 e3 a6 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 a5 84 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 378.759513][ T24] RSP: 0018:ffffc900001e7790 EFLAGS: 00010293 [ 378.765566][ T24] RAX: 0000000000000000 RBX: ffff88805e5faa50 RCX: ffffffff82617968 [ 378.773523][ T24] RDX: ffff88801ea88000 RSI: ffffffff8261798d RDI: 0000000000000005 [ 378.781477][ T24] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 378.789432][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880548740b0 [ 378.797398][ T24] R13: ffff888049f65ab0 R14: 0000000000000000 R15: ffff888049f65aa8 [ 378.805361][ T24] ? kernfs_get.part.0+0x48/0x80 [ 378.810292][ T24] ? kernfs_get.part.0+0x6d/0x80 [ 378.815225][ T24] kernfs_get+0x1f/0x30 [ 378.819372][ T24] kobject_add_internal+0x353/0x9b0 [ 378.824567][ T24] kobject_add+0x16e/0x240 [ 378.828968][ T24] ? __pfx_kobject_add+0x10/0x10 [ 378.833914][ T24] get_device_parent+0x399/0x4e0 [ 378.838847][ T24] device_add+0x1ad/0x1a70 [ 378.843258][ T24] ? __pfx_device_add+0x10/0x10 [ 378.848100][ T24] ? __init_waitqueue_head+0xca/0x150 [ 378.853467][ T24] firmware_fallback_sysfs+0x2ec/0xbe0 [ 378.858920][ T24] _request_firmware+0xfe9/0x1470 [ 378.863940][ T24] ? __pfx__request_firmware+0x10/0x10 [ 378.869389][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 378.875187][ T24] ? debug_object_deactivate+0x1ec/0x3a0 [ 378.880811][ T24] ? finish_task_switch.isra.0+0x221/0xc10 [ 378.886612][ T24] request_firmware_work_func+0xea/0x250 [ 378.892251][ T24] ? __pfx_request_firmware_work_func+0x10/0x10 [ 378.898483][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.903237][ T24] process_one_work+0x9cc/0x1b70 [ 378.908168][ T24] ? __pfx_process_one_work+0x10/0x10 [ 378.913535][ T24] ? assign_work+0x1a0/0x250 [ 378.918122][ T24] worker_thread+0x6c8/0xf10 [ 378.922709][ T24] ? __pfx_worker_thread+0x10/0x10 [ 378.927816][ T24] kthread+0x3c2/0x780 [ 378.931872][ T24] ? __pfx_kthread+0x10/0x10 [ 378.936447][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.941212][ T24] ? __pfx_kthread+0x10/0x10 [ 378.945796][ T24] ret_from_fork+0x5d4/0x6f0 [ 378.950394][ T24] ? __pfx_kthread+0x10/0x10 [ 378.954978][ T24] ret_from_fork_asm+0x1a/0x30 [ 378.959745][ T24] [ 378.962947][ T24] Kernel Offset: disabled [ 378.967252][ T24] Rebooting in 86400 seconds..