last executing test programs: 7m43.470171761s ago: executing program 0 (id=6227): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 7m43.364504451s ago: executing program 0 (id=6230): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x8000, 0x0, @mcast1, 0x46}, 0x1c) 7m43.345867551s ago: executing program 0 (id=6231): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)={0x800000000000244, 0x0, [{0xeeee8000, 0x0, &(0x7f0000001100)=""/55}, {0xdddd1000, 0x0, &(0x7f0000001180)=""/23}, {0x8000000, 0x0, &(0x7f0000001500)=""/80}, {0xdddd3004, 0x0, &(0x7f0000001240)=""/24}, {0x2, 0x0, &(0x7f00000011c0)=""/69}, {0x80a0000, 0x1e, &(0x7f00000012c0)=""/24}, {0xfffd6004, 0x0, &(0x7f0000001300)=""/237}]}) 7m43.28255002s ago: executing program 0 (id=6234): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) 7m43.211187396s ago: executing program 0 (id=6237): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m43.048556699s ago: executing program 0 (id=6241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 7m28.054236074s ago: executing program 32 (id=6241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 5m10.524609248s ago: executing program 3 (id=9320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xdd65, @local, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='7', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x130a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000200)='7', 0x1}], 0x1}}], 0x2, 0xd8) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101, 0x2}, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 5m9.603449242s ago: executing program 3 (id=9342): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 5m9.504625185s ago: executing program 3 (id=9344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newtclass={0x38, 0x28, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0xfff2, 0x7}, {0x9, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 5m9.084352343s ago: executing program 3 (id=9350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095000000"], &(0x7f0000000580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x88800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000005c0)={0xa29fc7bb, 0x4, 0x0, 'queue0\x00', 0x9}) 5m8.901537188s ago: executing program 3 (id=9356): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m8.843995685s ago: executing program 3 (id=9359): r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x3, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4m53.762218487s ago: executing program 33 (id=9359): r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x3, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3m23.074660028s ago: executing program 2 (id=11054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001100)={0x1, 0x0, [{0x0, 0x1000, 0x5, 0xd, 0x69444d41, 0x21726574, 0x6}]}) 3m22.436835097s ago: executing program 2 (id=11060): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{&(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 3m22.376736287s ago: executing program 2 (id=11062): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}, 0x2) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.253142352s ago: executing program 2 (id=11064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 3m22.172198569s ago: executing program 2 (id=11066): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0xa, {0xa, 0x4, "c46c32155d690f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m21.41103446s ago: executing program 2 (id=11077): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 3m21.119510427s ago: executing program 34 (id=11077): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 2m37.515112266s ago: executing program 7 (id=11982): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) tkill(r0, 0x12) ptrace(0x4208, r0) 2m37.303712849s ago: executing program 7 (id=11988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ppoll(&(0x7f0000000580)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 2m36.369549977s ago: executing program 7 (id=12002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff00000500"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) 2m36.077060836s ago: executing program 7 (id=12006): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2m36.001436658s ago: executing program 7 (id=12007): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 2m34.647752777s ago: executing program 7 (id=12037): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) 2m34.320070021s ago: executing program 35 (id=12037): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) 58.394792342s ago: executing program 8 (id=12677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 49.405796788s ago: executing program 8 (id=12677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 40.683578303s ago: executing program 8 (id=12677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 32.544744931s ago: executing program 8 (id=12677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 27.463050467s ago: executing program 6 (id=13575): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) 27.335749897s ago: executing program 6 (id=13576): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 27.232107005s ago: executing program 6 (id=13578): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) userfaultfd(0x801) r1 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 26.716726026s ago: executing program 6 (id=13582): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 19.95247892s ago: executing program 8 (id=12677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 18.27524535s ago: executing program 6 (id=13582): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 7.449403179s ago: executing program 8 (id=12677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 7.387983415s ago: executing program 6 (id=13582): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 1.799239679s ago: executing program 1 (id=13789): r0 = io_uring_setup(0x722d, &(0x7f0000000000)={0x0, 0xa184, 0x1, 0x1, 0x139}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 916.355354ms ago: executing program 5 (id=13800): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b00)="c803089475", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40004090) 857.708365ms ago: executing program 5 (id=13801): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) 806.170071ms ago: executing program 4 (id=13802): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f0000feff"], 0x40}, 0x20000000) 707.446619ms ago: executing program 5 (id=13803): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 706.47836ms ago: executing program 1 (id=13804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 682.649275ms ago: executing program 4 (id=13805): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 582.611941ms ago: executing program 1 (id=13806): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 562.28369ms ago: executing program 4 (id=13807): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 486.989704ms ago: executing program 4 (id=13808): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000100)={0x18, r2, 0x0, 0x19}) 422.973863ms ago: executing program 1 (id=13809): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd018, 0x80882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x8, 0x7, 0x1009, 0x9, 0xb, 0x3, 0x0, 0x1}}) 396.006254ms ago: executing program 5 (id=13810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001140)=""/4127, 0x101f) 343.831895ms ago: executing program 4 (id=13811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 208.378203ms ago: executing program 1 (id=13812): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) read$dsp(r0, &(0x7f0000000440)=""/205, 0xcd) 119.975249ms ago: executing program 5 (id=13813): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2, {0x2, 0xf0}, 0xfe}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 80.369713ms ago: executing program 4 (id=13814): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 16.522788ms ago: executing program 1 (id=13815): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x5, 0x0, 0x2, 0x0, 0x1000}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 0s ago: executing program 5 (id=13816): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x745, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x80) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.736330][ T5912] usb 2-1: Product: syz [ 709.741687][ T5912] usb 2-1: Manufacturer: syz [ 709.746290][ T5912] usb 2-1: SerialNumber: syz [ 709.754857][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13080'. [ 709.768948][ T5912] usb 2-1: config 0 descriptor?? [ 709.776106][ T5912] smsc95xx v2.0.0 [ 709.798709][T26616] bridge_slave_1: left allmulticast mode [ 709.827454][T26616] bridge_slave_1: left promiscuous mode [ 709.842405][T26616] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.865051][T26616] bridge_slave_0: left allmulticast mode [ 709.895054][T26616] bridge_slave_0: left promiscuous mode [ 709.912643][T26616] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.192042][ T5912] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 710.219230][ T5912] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 710.496496][T26616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.506763][T26616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.516459][T26616] bond0 (unregistering): Released all slaves [ 710.544285][T20526] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.551765][T20526] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.558838][T20526] bridge_slave_0: entered allmulticast mode [ 710.566077][T20526] bridge_slave_0: entered promiscuous mode [ 710.589102][T20526] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.596428][T20526] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.603595][T20526] bridge_slave_1: entered allmulticast mode [ 710.610929][T20526] bridge_slave_1: entered promiscuous mode [ 710.664855][T20526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.666368][ T5912] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 710.676189][T20526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.693542][ T5912] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 710.701859][T31810] Bluetooth: hci2: command tx timeout [ 710.710102][ T5912] usb 2-1: USB disconnect, device number 111 [ 710.785297][T20526] team0: Port device team_slave_0 added [ 710.813505][T20526] team0: Port device team_slave_1 added [ 710.886090][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 710.946051][T20526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.955036][T20526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.980917][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.995559][T20526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.033761][T20526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.042824][T20526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.069520][T20526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.104351][T26616] hsr_slave_0: left promiscuous mode [ 711.110756][T26616] hsr_slave_1: left promiscuous mode [ 711.116392][T26616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.124045][T26616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.131585][T26616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.138961][T26616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.167071][T26616] veth1_macvtap: left promiscuous mode [ 711.175637][T26616] veth0_macvtap: left promiscuous mode [ 711.182100][T26616] veth1_vlan: left promiscuous mode [ 711.187468][T26616] veth0_vlan: left promiscuous mode [ 711.191823][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 711.262453][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 711.282702][ T7429] udevd[7429]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 711.420431][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 711.436318][ T5898] SELinux: failure in sel_netif_sid_slow(), invalid network interface (20) [ 711.453214][ T7429] udevd[7429]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 711.575614][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 711.583981][ T7429] udevd[7429]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 711.726839][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 711.844840][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 711.989114][T26616] team0 (unregistering): Port device team_slave_1 removed [ 712.056759][T26616] team0 (unregistering): Port device team_slave_0 removed [ 712.373712][T20924] pimreg: entered allmulticast mode [ 712.566606][T20526] hsr_slave_0: entered promiscuous mode [ 712.582152][T20526] hsr_slave_1: entered promiscuous mode [ 712.588345][T20526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.624470][T20526] Cannot create hsr debugfs directory [ 712.782912][T31810] Bluetooth: hci2: command tx timeout [ 713.135070][T21095] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 713.300069][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 713.300085][ T30] audit: type=1400 audit(2000263531.096:4226): avc: denied { read } for pid=21103 comm="syz.4.13126" path="socket:[122903]" dev="sockfs" ino=122903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 713.685911][T20526] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 713.737414][T20526] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 713.803752][T20526] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 713.854586][T20526] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 714.119396][T20526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.147219][T20526] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.176133][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.183285][T10195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.227865][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.235009][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.754296][T20526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.859903][T31810] Bluetooth: hci2: command tx timeout [ 714.899092][ T30] audit: type=1326 audit(2000263532.696:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21184 comm="syz.6.13146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb678e929 code=0x0 [ 714.990159][ T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 715.004383][T21215] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13151'. [ 715.119501][T20526] veth0_vlan: entered promiscuous mode [ 715.142172][T20526] veth1_vlan: entered promiscuous mode [ 715.160585][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 715.183924][ T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 715.197571][T20526] veth0_macvtap: entered promiscuous mode [ 715.210047][ T24] usb 2-1: config 0 has no interface number 0 [ 715.222028][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 715.232090][T20526] veth1_macvtap: entered promiscuous mode [ 715.243764][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.258034][T20526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.266791][ T24] usb 2-1: Product: syz [ 715.271558][ T24] usb 2-1: Manufacturer: syz [ 715.276153][ T24] usb 2-1: SerialNumber: syz [ 715.285248][T20526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.297011][ T24] usb 2-1: config 0 descriptor?? [ 715.310807][ T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 715.323033][T20526] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.332986][T20526] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.345589][T20526] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.357516][T20526] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.493512][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.517339][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.520517][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 715.566359][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 715.601801][T10217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.643103][T10217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.907118][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 715.940333][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 715.942409][ T9] usb 2-1: USB disconnect, device number 112 [ 715.976045][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 716.006131][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 716.041677][ T9] quatech2 2-1:0.51: device disconnected [ 716.052925][ T7429] udevd[7429]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 716.136334][ T30] audit: type=1326 audit(2000263533.936:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cacd8e929 code=0x7ffc0000 [ 716.239823][ T30] audit: type=1326 audit(2000263533.936:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cacd8e929 code=0x7ffc0000 [ 716.340585][ T30] audit: type=1326 audit(2000263533.936:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cacd2ab19 code=0x7ffc0000 [ 716.453665][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 716.495381][ T30] audit: type=1326 audit(2000263533.936:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cacd2ab19 code=0x7ffc0000 [ 716.623538][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 716.650264][ T30] audit: type=1326 audit(2000263533.936:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cacd2ab19 code=0x7ffc0000 [ 716.773431][ T30] audit: type=1326 audit(2000263533.936:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cacd2ab19 code=0x7ffc0000 [ 716.846065][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 716.940728][ T30] audit: type=1326 audit(2000263533.936:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cacd2ab19 code=0x7ffc0000 [ 717.012411][T10217] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.069787][ T30] audit: type=1326 audit(2000263533.936:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.4.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cacd2ab19 code=0x7ffc0000 [ 717.282278][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 717.718585][T10217] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.945905][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 717.996104][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 718.089077][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 718.124203][T10217] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.196879][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 718.251152][ T2060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.261097][ T2060] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.269521][ T2060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.272387][T10217] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.295752][ T2060] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.303881][ T2060] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.350404][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 718.350420][ T30] audit: type=1326 audit(2000263536.146:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21361 comm="syz.5.13175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f0fe1d8e929 code=0x7ffc0000 [ 718.390533][ T30] audit: type=1326 audit(2000263536.156:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21361 comm="syz.5.13175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7ffc0000 [ 718.415073][ T30] audit: type=1326 audit(2000263536.156:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21361 comm="syz.5.13175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7ffc0000 [ 718.554632][T10217] bridge_slave_1: left allmulticast mode [ 718.575389][T10217] bridge_slave_1: left promiscuous mode [ 718.597344][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.620483][T10217] bridge_slave_0: left allmulticast mode [ 718.636051][T10217] bridge_slave_0: left promiscuous mode [ 718.648368][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.038925][T10217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.049170][T10217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.058683][T10217] bond0 (unregistering): Released all slaves [ 719.310322][T21357] chnl_net:caif_netlink_parms(): no params data found [ 719.344640][T21514] netlink: 'syz.6.13188': attribute type 9 has an invalid length. [ 719.356243][T21514] netlink: 'syz.6.13188': attribute type 7 has an invalid length. [ 719.383573][T21514] netlink: 'syz.6.13188': attribute type 8 has an invalid length. [ 719.577841][T21357] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.599835][T21357] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.607655][T21357] bridge_slave_0: entered allmulticast mode [ 719.644633][T21357] bridge_slave_0: entered promiscuous mode [ 719.656935][T10217] hsr_slave_0: left promiscuous mode [ 719.665963][T10217] hsr_slave_1: left promiscuous mode [ 719.677837][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.699918][T10217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.708021][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.715844][T10217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.782684][T10217] veth1_macvtap: left promiscuous mode [ 719.788562][T10217] veth0_macvtap: left promiscuous mode [ 719.794350][T10217] veth1_vlan: left promiscuous mode [ 719.799638][T10217] veth0_vlan: left promiscuous mode [ 719.856398][ T30] audit: type=1400 audit(2000263537.656:4454): avc: denied { map } for pid=21591 comm="syz.6.13197" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 719.947784][ T30] audit: type=1400 audit(2000263537.656:4455): avc: denied { execute } for pid=21591 comm="syz.6.13197" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 720.383547][T31810] Bluetooth: hci2: command tx timeout [ 720.595146][ T30] audit: type=1400 audit(2000263538.396:4456): avc: denied { mounton } for pid=21631 comm="syz.4.13210" path="/2744/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 720.724766][T10217] team0 (unregistering): Port device team_slave_1 removed [ 720.786152][T10217] team0 (unregistering): Port device team_slave_0 removed [ 721.167006][T21357] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.174761][T21357] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.181989][T21357] bridge_slave_1: entered allmulticast mode [ 721.188674][T21357] bridge_slave_1: entered promiscuous mode [ 721.255022][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 721.282495][T21357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.308286][T21357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.405555][T21357] team0: Port device team_slave_0 added [ 721.442305][T21357] team0: Port device team_slave_1 added [ 721.455310][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 721.559044][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 721.563403][T21357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.597313][T21357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.632045][T21357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.652289][T21357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.659320][T21357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.685205][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.692927][T21357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.756259][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 721.807324][ T7429] udevd[7429]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 721.835511][T21357] hsr_slave_0: entered promiscuous mode [ 721.864561][T21357] hsr_slave_1: entered promiscuous mode [ 721.893423][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 721.898311][T21357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.928467][T21357] Cannot create hsr debugfs directory [ 721.944601][ T7429] udevd[7429]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 722.265020][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 722.460041][T31810] Bluetooth: hci2: command tx timeout [ 722.637369][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 722.697182][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 722.990331][T11793] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 723.037745][T21357] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 723.050754][T21357] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 723.061157][T21357] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 723.076838][T21357] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 723.147104][T21357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.150137][T11793] usb 5-1: Using ep0 maxpacket: 16 [ 723.164887][T21357] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.176143][T10228] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.183288][T10228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.192404][T11793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.204154][T11793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.215316][T10228] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.222403][T10228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.232169][T11793] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 723.243815][T11793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.258135][T11793] usb 5-1: config 0 descriptor?? [ 723.387001][T21357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.678760][T21357] veth0_vlan: entered promiscuous mode [ 723.694706][T21357] veth1_vlan: entered promiscuous mode [ 723.720722][T22052] block nbd6: NBD_DISCONNECT [ 723.726353][T22051] block nbd6: Disconnected due to user request. [ 723.736200][T22051] block nbd6: shutting down sockets [ 723.747396][T21357] veth0_macvtap: entered promiscuous mode [ 723.763473][T21357] veth1_macvtap: entered promiscuous mode [ 723.793638][T21357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.804702][T21357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.833627][T21357] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.862032][T21357] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.870972][T21357] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.880028][T21357] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.979083][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.998904][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.041987][T10195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.056433][T10195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.087449][T11793] letsketch 0003:6161:4D15.0097: Device info: Â¥ [ 724.315844][T11793] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 724.324180][T11793] letsketch 0003:6161:4D15.0097: probe with driver letsketch failed with error -71 [ 724.337526][T11793] usb 5-1: USB disconnect, device number 93 [ 725.080267][T22065] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 725.147251][T22114] overlayfs: failed to clone upperpath [ 725.262247][T22065] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 725.281262][T22065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.299749][T22065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.309486][T22065] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 725.327499][T22065] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 725.336632][T22065] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 725.345478][T22065] usb 5-1: Manufacturer: syz [ 725.358958][T22065] usb 5-1: config 0 descriptor?? [ 725.411444][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13255'. [ 725.464564][T10217] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.486413][T22124] IPVS: Error joining to the multicast group [ 725.789121][T22065] appleir 0003:05AC:8243.0098: unknown main item tag 0x0 [ 725.801768][T22065] appleir 0003:05AC:8243.0098: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 725.994127][T22065] usb 5-1: USB disconnect, device number 94 [ 726.288438][T22145] tipc: Enabling of bearer rejected, already enabled [ 726.371117][T22147] 9pnet_fd: Insufficient options for proto=fd [ 726.449675][ T2060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 726.458991][ T2060] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 726.467932][ T2060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 726.475854][ T2060] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 726.483771][ T2060] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.577731][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 726.701593][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 726.794203][T10217] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.867048][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 726.950271][T22150] chnl_net:caif_netlink_parms(): no params data found [ 726.989634][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 727.006367][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 727.117087][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 727.177683][T10217] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.197238][T22150] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.205674][T22150] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.215490][T22150] bridge_slave_0: entered allmulticast mode [ 727.225218][T22150] bridge_slave_0: entered promiscuous mode [ 727.234180][T22150] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.245154][T22150] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.252478][T22150] bridge_slave_1: entered allmulticast mode [ 727.260268][T22150] bridge_slave_1: entered promiscuous mode [ 727.286127][T10217] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.359459][T22150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.377761][T22150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.468968][T22150] team0: Port device team_slave_0 added [ 727.492423][T22150] team0: Port device team_slave_1 added [ 727.533895][T22418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.641529][ T7429] udevd[7429]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 727.723092][T22150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.761771][T22150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.828968][T22150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.955452][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 727.968843][T22150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.990399][T22150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.058595][T22150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.233295][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 728.346088][T10217] bridge_slave_1: left allmulticast mode [ 728.352377][T10217] bridge_slave_1: left promiscuous mode [ 728.367114][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.418574][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 728.439255][T22500] loop4: detected capacity change from 0 to 7 [ 728.451970][T22500] Dev loop4: unable to read RDB block 7 [ 728.459658][T10217] bridge_slave_0: left allmulticast mode [ 728.466000][T10217] bridge_slave_0: left promiscuous mode [ 728.473445][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.479680][T22500] loop4: unable to read partition table [ 728.497130][T22500] loop4: partition table beyond EOD, truncated [ 728.504911][T22500] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 728.540870][T31810] Bluetooth: hci2: command tx timeout [ 728.641929][ T30] audit: type=1326 audit(2000263546.436:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.683180][ T30] audit: type=1326 audit(2000263546.436:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.731185][ T30] audit: type=1326 audit(2000263546.446:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.759177][ T30] audit: type=1326 audit(2000263546.446:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.784510][ T30] audit: type=1326 audit(2000263546.446:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.812969][ T30] audit: type=1326 audit(2000263546.476:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.837003][ T30] audit: type=1326 audit(2000263546.476:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.899540][ T30] audit: type=1326 audit(2000263546.476:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.949305][ T30] audit: type=1326 audit(2000263546.476:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 728.978469][ T30] audit: type=1326 audit(2000263546.476:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22512 comm="syz.1.13282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 729.303793][T10217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.319549][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13291'. [ 729.332419][T10217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.343867][T10217] bond0 (unregistering): Released all slaves [ 729.359227][T22150] hsr_slave_0: entered promiscuous mode [ 729.365723][T22150] hsr_slave_1: entered promiscuous mode [ 729.372388][T22150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.380076][T22150] Cannot create hsr debugfs directory [ 729.387921][T22523] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.13284'. [ 729.992192][ T5911] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 730.116939][T10217] hsr_slave_0: left promiscuous mode [ 730.124051][T22660] overlayfs: overlapping lowerdir path [ 730.132899][T10217] hsr_slave_1: left promiscuous mode [ 730.138572][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.153178][ T5911] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 730.165465][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.169995][T10217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.186262][ T5911] usb 5-1: config 0 descriptor?? [ 730.192769][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.202955][T10217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.272411][T10217] veth1_macvtap: left promiscuous mode [ 730.278048][T10217] veth0_macvtap: left promiscuous mode [ 730.287926][T10217] veth1_vlan: left promiscuous mode [ 730.303790][T10217] veth0_vlan: left promiscuous mode [ 730.415240][ T5911] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 730.595588][T22682] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.13311'. [ 730.630827][T31810] Bluetooth: hci2: command tx timeout [ 730.982873][T10217] team0 (unregistering): Port device team_slave_1 removed [ 731.033303][T10217] team0 (unregistering): Port device team_slave_0 removed [ 731.218823][ T5911] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 731.243045][ T5911] asix 5-1:0.0: probe with driver asix failed with error -71 [ 731.280350][ T5911] usb 5-1: USB disconnect, device number 95 [ 731.877023][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 731.905111][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 731.968085][T22150] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 732.029332][T22150] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 732.088007][T22150] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 732.105492][T22150] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 732.312205][T22150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.349125][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 732.354422][T22150] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.385044][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.392183][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.407581][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.414773][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.476877][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 732.683742][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 732.706355][T31810] Bluetooth: hci2: command tx timeout [ 732.737836][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 732.815944][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 732.826976][T22150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.903955][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 733.111969][T22150] veth0_vlan: entered promiscuous mode [ 733.131216][T22150] veth1_vlan: entered promiscuous mode [ 733.159146][T22150] veth0_macvtap: entered promiscuous mode [ 733.180959][T22150] veth1_macvtap: entered promiscuous mode [ 733.202143][T22150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.218699][T22150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.234113][T22150] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.246595][T22150] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.257189][T22150] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.268381][T22150] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.376577][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.394634][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.434189][T10228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.443690][T10228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.622550][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 733.668804][T22854] ref_ctr_offset mismatch. inode: 0xadd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa04 [ 733.767818][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 733.877843][T22867] overlay: filesystem on ./bus not supported as upperdir [ 733.954370][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 733.954387][ T30] audit: type=1400 audit(2000263551.756:4512): avc: denied { relabelfrom } for pid=22869 comm="syz.6.13358" name="" dev="pipefs" ino=127048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 734.560623][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13363'. [ 734.659182][T10167] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.355799][T10167] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.837624][ T2060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.847447][ T2060] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 735.856634][ T2060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.869276][ T2060] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 735.877508][ T2060] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.920091][ T24] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 735.942261][T11793] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 736.073692][T10167] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.081422][ T24] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 736.112881][ T24] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 736.121968][T11793] usb 2-1: Using ep0 maxpacket: 16 [ 736.125718][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 736.131700][T11793] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 736.144842][ T24] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 736.163242][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 736.165326][T11793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.174706][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.196535][T11793] usb 2-1: config 0 has no interface number 0 [ 736.216692][T11793] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 736.227198][T10167] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.237944][T11793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.246424][T11793] usb 2-1: Product: syz [ 736.253974][T11793] usb 2-1: Manufacturer: syz [ 736.258582][T11793] usb 2-1: SerialNumber: syz [ 736.271510][T11793] usb 2-1: config 0 descriptor?? [ 736.432825][ T24] ath6kl: Failed to submit usb control message: -71 [ 736.439464][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 736.471996][ T24] ath6kl: Unable to send get target info: -71 [ 736.486385][T11793] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 736.496220][ T24] ath6kl: Failed to init ath6kl core: -71 [ 736.507731][T11793] usb 2-1: No valid video chain found. [ 736.508987][ T24] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 736.565873][T22926] chnl_net:caif_netlink_parms(): no params data found [ 736.588910][T10167] bridge_slave_1: left allmulticast mode [ 736.595061][T10167] bridge_slave_1: left promiscuous mode [ 736.600128][ T24] usb 5-1: USB disconnect, device number 96 [ 736.602217][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.628192][T10167] bridge_slave_0: left allmulticast mode [ 736.646851][T10167] bridge_slave_0: left promiscuous mode [ 736.660332][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.758081][ T5911] usb 2-1: USB disconnect, device number 113 [ 736.967480][T10167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.977390][T10167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.987094][T10167] bond0 (unregistering): Released all slaves [ 737.067456][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 737.157845][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 737.218975][T22926] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.231953][T22926] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.239076][T22926] bridge_slave_0: entered allmulticast mode [ 737.246100][T22926] bridge_slave_0: entered promiscuous mode [ 737.266860][T22926] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.278484][T22926] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.301865][T22926] bridge_slave_1: entered allmulticast mode [ 737.309138][T22926] bridge_slave_1: entered promiscuous mode [ 737.346468][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 737.407572][T22926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.422018][T22926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.488394][T22926] team0: Port device team_slave_0 added [ 737.505427][T22926] team0: Port device team_slave_1 added [ 737.590797][T22926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.597898][T22926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.609780][ T5898] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 737.627333][T22926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.667461][T10167] hsr_slave_0: left promiscuous mode [ 737.689852][T10167] hsr_slave_1: left promiscuous mode [ 737.695656][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.703142][T10167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.713737][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.721606][T10167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.747557][T10167] veth1_macvtap: left promiscuous mode [ 737.753231][T10167] veth0_macvtap: left promiscuous mode [ 737.758846][T10167] veth1_vlan: left promiscuous mode [ 737.764431][T10167] veth0_vlan: left promiscuous mode [ 737.802924][ T5898] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 737.813240][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.821760][ T5898] usb 5-1: Product: syz [ 737.825994][ T5898] usb 5-1: Manufacturer: syz [ 737.832228][ T5898] usb 5-1: SerialNumber: syz [ 737.839077][ T5898] usb 5-1: config 0 descriptor?? [ 737.851520][ T5898] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 737.917298][T23248] overlayfs: failed to clone upperpath [ 737.984360][ T2060] Bluetooth: hci2: command tx timeout [ 738.260431][ T5898] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 738.277379][ T5898] sq905c 5-1:0.0: Reading version command failed [ 738.290927][T10167] team0 (unregistering): Port device team_slave_1 removed [ 738.298416][ T5898] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 738.326248][ T5898] usb 5-1: USB disconnect, device number 97 [ 738.387686][T10167] team0 (unregistering): Port device team_slave_0 removed [ 738.819527][T22926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.827102][T22926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.859801][T22926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.917950][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 738.981020][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 738.997925][T22926] hsr_slave_0: entered promiscuous mode [ 739.007838][T22926] hsr_slave_1: entered promiscuous mode [ 739.014086][T22926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.022864][T22926] Cannot create hsr debugfs directory [ 739.208677][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 739.225762][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 739.357791][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 739.420932][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 739.558097][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 739.986099][T22926] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 739.999694][T22926] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 740.023423][T22926] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 740.059952][ T2060] Bluetooth: hci2: command tx timeout [ 740.066435][T22926] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 740.193878][T22926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.223920][T22926] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.244241][T10228] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.251380][T10228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.304623][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.311731][T10167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.387958][T22926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.400611][T22926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.725810][T23499] input: syz0 as /devices/virtual/input/input97 [ 740.837409][T22926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.868031][T23518] syzkaller1: entered promiscuous mode [ 740.875253][T23518] syzkaller1: entered allmulticast mode [ 741.400527][T23552] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 741.497426][T22926] veth0_vlan: entered promiscuous mode [ 741.534005][T22926] veth1_vlan: entered promiscuous mode [ 741.576888][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13429'. [ 741.644744][T22926] veth0_macvtap: entered promiscuous mode [ 741.682016][T22926] veth1_macvtap: entered promiscuous mode [ 741.718498][T22926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.743291][T22926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.816540][T22926] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.849178][T22926] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.870478][T22926] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.889325][T22926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.956013][T23558] SELinux: failed to load policy [ 742.088518][T26616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.109452][T23583] tmpfs: Unknown parameter '' [ 742.116568][T26616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.141696][ T2060] Bluetooth: hci2: command tx timeout [ 742.215037][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.223540][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.245515][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 742.287197][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 742.394602][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 742.647613][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 742.708130][T23617] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 742.751745][T23617] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 742.862881][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 743.059923][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 743.251990][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 743.321298][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 743.340565][T10167] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.417701][T23633] SELinux: failed to load policy [ 743.476233][T10167] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.662048][T10167] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.731343][T10167] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.059398][T10167] bridge_slave_1: left allmulticast mode [ 744.065790][T10167] bridge_slave_1: left promiscuous mode [ 744.072621][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.081738][T10167] bridge_slave_0: left allmulticast mode [ 744.087367][T10167] bridge_slave_0: left promiscuous mode [ 744.094133][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.332065][T10167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.342089][T10167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.351447][T10167] bond0 (unregistering): Released all slaves [ 744.519659][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 744.615827][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 744.640604][ T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 744.690085][ T5911] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 744.742544][T31810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 744.755247][T31810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 744.769573][T31810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 744.786235][T23684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 744.795852][T23684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 744.827341][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 744.837526][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 744.848072][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 744.855726][ T5911] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 744.865051][ T5911] usb 5-1: config 0 has no interface number 0 [ 744.871435][ T5911] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 744.882046][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 744.891459][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.899484][ T5911] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 744.910243][ T24] usb 2-1: Product: syz [ 744.914445][ T24] usb 2-1: Manufacturer: syz [ 744.919074][ T24] usb 2-1: SerialNumber: syz [ 744.925561][ T5911] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 744.935133][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.945231][ T24] usb 2-1: config 0 descriptor?? [ 744.952025][T23650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 744.959517][T23650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 744.966721][ T5911] usb 5-1: Product: syz [ 744.971274][ T5911] usb 5-1: Manufacturer: syz [ 744.975915][ T5911] usb 5-1: SerialNumber: syz [ 744.997918][ T5911] usb 5-1: config 0 descriptor?? [ 745.006855][T23657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 745.015317][T23657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 745.022897][T10167] hsr_slave_0: left promiscuous mode [ 745.041786][T10167] hsr_slave_1: left promiscuous mode [ 745.060473][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.068160][T10167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.080988][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.088433][T10167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.114930][T10167] veth1_macvtap: left promiscuous mode [ 745.120673][T10167] veth0_macvtap: left promiscuous mode [ 745.136416][T10167] veth1_vlan: left promiscuous mode [ 745.150395][T10167] veth0_vlan: left promiscuous mode [ 745.224512][T23650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.240946][T23650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.248456][T23657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 745.280176][T23657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 745.847890][T10167] team0 (unregistering): Port device team_slave_1 removed [ 745.889383][T10167] team0 (unregistering): Port device team_slave_0 removed [ 745.912919][ T5911] asix 5-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x3b [ 746.101882][ T24] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 746.117239][ T24] usb 2-1: USB disconnect, device number 114 [ 746.144988][ T10] usb 5-1: USB disconnect, device number 98 [ 746.301277][T23744] overlayfs: invalid origin (0000) [ 746.500626][T23747] netlink: 136 bytes leftover after parsing attributes in process `syz.6.13470'. [ 746.747086][T23677] chnl_net:caif_netlink_parms(): no params data found [ 746.842242][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13474'. [ 746.861244][ T2060] Bluetooth: hci2: command tx timeout [ 746.873840][T23865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13475'. [ 747.056443][T23677] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.069166][T23677] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.078280][T23677] bridge_slave_0: entered allmulticast mode [ 747.103192][T23677] bridge_slave_0: entered promiscuous mode [ 747.132755][T23677] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.153480][T23930] netlink: 'syz.1.13479': attribute type 4 has an invalid length. [ 747.154816][T23677] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.174439][ T5911] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 747.182271][T23677] bridge_slave_1: entered allmulticast mode [ 747.189536][T23677] bridge_slave_1: entered promiscuous mode [ 747.265836][T23677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.286166][T23677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.344375][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 747.354856][T23677] team0: Port device team_slave_0 added [ 747.372735][ T5911] usb 5-1: config 3 has an invalid interface number: 144 but max is 0 [ 747.392833][T23677] team0: Port device team_slave_1 added [ 747.398455][ T5911] usb 5-1: config 3 has no interface number 0 [ 747.408572][ T5911] usb 5-1: config 3 interface 144 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 747.414888][T23984] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 747.426083][ T5911] usb 5-1: config 3 interface 144 has no altsetting 0 [ 747.454106][ T5911] usb 5-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice= 1.14 [ 747.477056][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.487522][T23677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.494697][ T5911] usb 5-1: Product: syz [ 747.498948][T23677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.525384][ T5911] usb 5-1: Manufacturer: syz [ 747.530342][ T5911] usb 5-1: SerialNumber: syz [ 747.567304][T23677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.596589][T23677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.609819][T23677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.645328][T23677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.753445][T23677] hsr_slave_0: entered promiscuous mode [ 747.765708][T23677] hsr_slave_1: entered promiscuous mode [ 747.773888][T23677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.774822][ T5911] usb-storage 5-1:3.144: USB Mass Storage device detected [ 747.784241][T23677] Cannot create hsr debugfs directory [ 747.813954][ T5911] usb-storage 5-1:3.144: Quirks match for vid 357d pid 7788: 1800000 [ 747.879318][ T5911] usb 5-1: USB disconnect, device number 99 [ 748.444034][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 748.499634][T23677] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 748.534928][T23677] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 748.545192][T23677] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 748.559456][T23677] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 748.676552][T23677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.703696][T23677] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.734801][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.741916][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.786334][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.793517][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.857804][T23677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.940853][T23684] Bluetooth: hci2: command tx timeout [ 749.048867][T23677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.093357][T24196] veth0: entered promiscuous mode [ 749.100962][T24196] veth0: left promiscuous mode [ 749.316945][T23677] veth0_vlan: entered promiscuous mode [ 749.334694][T23677] veth1_vlan: entered promiscuous mode [ 749.383602][T23677] veth0_macvtap: entered promiscuous mode [ 749.410380][T23677] veth1_macvtap: entered promiscuous mode [ 749.430377][T23677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.442431][T23677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.459490][T23677] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.468302][T23677] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.478011][T23677] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.486954][T23677] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.568100][T26616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.581556][T26616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.605044][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.613017][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.713427][ T30] audit: type=1326 audit(2000263567.516:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.741479][ T30] audit: type=1326 audit(2000263567.516:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.769063][ T30] audit: type=1326 audit(2000263567.516:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.798063][ T30] audit: type=1326 audit(2000263567.516:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.826814][ T30] audit: type=1326 audit(2000263567.516:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.854757][ T30] audit: type=1326 audit(2000263567.516:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.883768][ T30] audit: type=1326 audit(2000263567.516:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.914410][ T30] audit: type=1326 audit(2000263567.516:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.940957][ T30] audit: type=1326 audit(2000263567.516:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 749.968603][ T30] audit: type=1326 audit(2000263567.516:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.1.13510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fcd8e929 code=0x7ffc0000 [ 750.032471][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 750.120642][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 750.304208][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 750.539436][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 750.543407][ T2060] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 750.673109][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 751.001581][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 751.011609][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 751.165212][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 751.272725][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 751.398004][T10217] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.650636][T24296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13526'. [ 752.817639][T10217] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.936348][T10217] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.996293][ T2060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 753.002054][T24316] ubi31: attaching mtd0 [ 753.011423][ T2060] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 753.019427][ T2060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 753.029279][ T2060] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 753.047884][ T5911] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 753.057424][T10217] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.081249][ T2060] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 753.252025][ T5911] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 753.265349][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.310601][ T5911] usb 5-1: config 0 descriptor?? [ 753.361422][ T5911] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 753.391866][T10217] bridge_slave_1: left allmulticast mode [ 753.398506][T24346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.408544][T10217] bridge_slave_1: left promiscuous mode [ 753.419261][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.453461][T10217] bridge_slave_0: left allmulticast mode [ 753.459129][T10217] bridge_slave_0: left promiscuous mode [ 753.494532][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.511976][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 753.578373][T24360] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13539'. [ 753.707777][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 753.750455][ T5911] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 754.131295][T10217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.152026][ T5911] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 754.164244][T10217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.178570][T24376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13544'. [ 754.188787][T10217] bond0 (unregistering): Released all slaves [ 754.214372][T24372] macsec0: entered promiscuous mode [ 754.219633][T24372] dummy0: entered promiscuous mode [ 754.233215][T24372] macsec0: entered allmulticast mode [ 754.254060][T24372] dummy0: entered allmulticast mode [ 754.265368][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 754.292217][T24372] dummy0: left allmulticast mode [ 754.297686][T24372] dummy0: left promiscuous mode [ 754.325798][T24376] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 754.384874][ T5884] usb 5-1: USB disconnect, device number 100 [ 754.842128][T10217] hsr_slave_0: left promiscuous mode [ 754.848855][T10217] hsr_slave_1: left promiscuous mode [ 754.859319][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.867120][T10217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.877945][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.885382][T10217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.902477][T10217] veth1_macvtap: left promiscuous mode [ 754.908208][T10217] veth0_macvtap: left promiscuous mode [ 754.914693][T10217] veth1_vlan: left promiscuous mode [ 754.926122][T10217] veth0_vlan: left promiscuous mode [ 754.957685][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 755.028668][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 755.100282][T23684] Bluetooth: hci2: command tx timeout [ 755.214168][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 755.287956][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 755.469375][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 755.573135][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 755.664378][T21929] udevd[21929]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 755.813199][T10217] team0 (unregistering): Port device team_slave_1 removed [ 755.892851][T10217] team0 (unregistering): Port device team_slave_0 removed [ 756.233809][T24534] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13558'. [ 756.322937][T24311] chnl_net:caif_netlink_parms(): no params data found [ 756.367806][T24584] netlink: 'syz.4.13573': attribute type 4 has an invalid length. [ 756.379304][T24581] batman_adv: batadv0: Adding interface: macvlan3 [ 756.386943][T24581] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.419550][T24581] batman_adv: batadv0: Interface activated: macvlan3 [ 756.613292][T24311] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.642170][T24311] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.649317][T24311] bridge_slave_0: entered allmulticast mode [ 756.683698][T24311] bridge_slave_0: entered promiscuous mode [ 756.699108][T24311] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.708662][T24311] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.716523][T24311] bridge_slave_1: entered allmulticast mode [ 756.723267][T24311] bridge_slave_1: entered promiscuous mode [ 756.764945][T24311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.776608][T24311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.814859][T24311] team0: Port device team_slave_0 added [ 756.824803][T24311] team0: Port device team_slave_1 added [ 756.855459][T24311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.862605][T24311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.888671][T24311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.902644][T24311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.909582][T24311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.935455][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.947550][T24311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.169084][T10228] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.180176][T23684] Bluetooth: hci2: command tx timeout [ 757.217097][T10228] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.261429][T24311] hsr_slave_0: entered promiscuous mode [ 757.267719][T24311] hsr_slave_1: entered promiscuous mode [ 757.290761][T24311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.298334][T24311] Cannot create hsr debugfs directory [ 757.353089][T10228] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.371066][T10228] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.530103][T10228] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.552242][T10228] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.643301][T10228] bond0: (slave netdevsim0): Releasing backup interface [ 757.672928][T10228] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.684692][T10228] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.700707][ T5911] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 757.741640][ T2060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.763335][ T2060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.776179][ T2060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.791896][ T2060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.816644][ T2060] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.870093][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 757.879566][ T5911] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 757.909019][ T5911] usb 5-1: config 0 has no interface number 0 [ 757.933929][ T5911] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 757.954950][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.972467][ T5911] usb 5-1: Product: syz [ 757.979747][ T5911] usb 5-1: Manufacturer: syz [ 757.986520][ T5911] usb 5-1: SerialNumber: syz [ 758.011086][ T5911] usb 5-1: config 0 descriptor?? [ 758.018899][ T5911] smsc95xx v2.0.0 [ 758.123634][T10228] bridge_slave_1: left allmulticast mode [ 758.129326][T10228] bridge_slave_1: left promiscuous mode [ 758.147487][T10228] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.160583][T10228] bridge_slave_0: left allmulticast mode [ 758.166263][T10228] bridge_slave_0: left promiscuous mode [ 758.172810][T10228] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.427644][ T5911] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 758.440706][ T5911] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 758.549596][T10228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.561892][T10228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.572986][T10228] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 758.589377][T10228] bond0 (unregistering): (slave team0): Releasing backup interface [ 758.600045][T10228] bond0 (unregistering): Released all slaves [ 758.675278][ T5911] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 758.700656][ T5911] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 758.937619][ T5884] usb 5-1: USB disconnect, device number 101 [ 759.029826][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 759.029842][ T30] audit: type=1400 audit(2000263576.826:4530): avc: denied { relabelfrom } for pid=24914 comm="syz.1.13595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 759.111121][ T30] audit: type=1400 audit(2000263576.826:4531): avc: denied { relabelto } for pid=24914 comm="syz.1.13595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 759.120128][T24311] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 759.197448][T24311] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 759.207106][T25025] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13596'. [ 759.226998][T24311] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 759.247733][T24806] chnl_net:caif_netlink_parms(): no params data found [ 759.260220][ T2060] Bluetooth: hci2: command tx timeout [ 759.334620][T24311] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 759.456336][T10228] hsr_slave_0: left promiscuous mode [ 759.478135][T10228] hsr_slave_1: left promiscuous mode [ 759.514810][T10228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.526298][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 759.549252][T10228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.614113][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 759.626414][T10228] veth1_macvtap: left promiscuous mode [ 759.637307][T10228] veth0_macvtap: left promiscuous mode [ 759.647618][T10228] veth1_vlan: left promiscuous mode [ 759.654069][T10228] veth0_vlan: left promiscuous mode [ 759.724890][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 759.880011][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 759.902772][ T2060] Bluetooth: hci3: command tx timeout [ 760.009879][ T5884] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 760.029887][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 760.040642][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 760.056633][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 760.079877][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.091516][ T10] usb 2-1: Product: syz [ 760.095705][ T10] usb 2-1: Manufacturer: syz [ 760.107170][ T10] usb 2-1: SerialNumber: syz [ 760.152376][T10228] team0 (unregistering): Port device team_slave_1 removed [ 760.165127][ T5884] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 760.176175][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.190637][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.204095][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 760.218910][ T5884] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 760.219301][T10228] team0 (unregistering): Port device team_slave_0 removed [ 760.228252][ T5884] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 760.228274][ T5884] usb 5-1: Manufacturer: syz [ 760.230748][ T5884] usb 5-1: config 0 descriptor?? [ 760.256075][T10167] smc: removing ib device syz2 [ 760.552050][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input98 [ 760.697447][ T5884] appleir 0003:05AC:8243.0099: unknown main item tag 0x0 [ 760.772391][T24806] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.783690][T24806] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.790487][ T5884] appleir 0003:05AC:8243.0099: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 760.801699][T24806] bridge_slave_0: entered allmulticast mode [ 760.803004][T24806] bridge_slave_0: entered promiscuous mode [ 760.837773][T24806] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.869528][T24806] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.877318][T24806] bridge_slave_1: entered allmulticast mode [ 760.893591][ T5884] usb 5-1: USB disconnect, device number 102 [ 760.895318][T24806] bridge_slave_1: entered promiscuous mode [ 761.041253][T25148] fido_id[25148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 761.170823][T24806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.195437][T24806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.336210][T24806] team0: Port device team_slave_0 added [ 761.343059][ T2060] Bluetooth: hci2: command tx timeout [ 761.355905][T24806] team0: Port device team_slave_1 added [ 761.476675][T24806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.484207][T24806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.513487][T24806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.560594][T24806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.580076][T24806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.597988][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 761.638403][T24806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.826934][T24806] hsr_slave_0: entered promiscuous mode [ 761.833575][T24806] hsr_slave_1: entered promiscuous mode [ 761.839463][T24806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.849087][T24806] Cannot create hsr debugfs directory [ 761.894768][T10228] IPVS: stop unused estimator thread 0... [ 761.898544][T24311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.939815][ T5884] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 761.980218][ T2060] Bluetooth: hci3: command tx timeout [ 762.002492][T24311] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.016227][T10228] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.023377][T10228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.055532][T10228] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.062647][T10228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.114337][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 762.128711][ T5884] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 762.148770][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.173933][ T5884] usb 5-1: Product: syz [ 762.185343][ T5884] usb 5-1: Manufacturer: syz [ 762.192943][ T5884] usb 5-1: SerialNumber: syz [ 762.204255][ T5884] usb 5-1: config 0 descriptor?? [ 762.213503][ T5884] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 762.391070][T24311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.527072][T24806] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 762.537741][T24806] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 762.553951][T24806] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 762.565533][T24806] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 762.650713][ T10] usb 2-1: USB disconnect, device number 115 [ 762.714896][T24311] veth0_vlan: entered promiscuous mode [ 762.726831][T24806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.739426][T24311] veth1_vlan: entered promiscuous mode [ 762.758009][T24806] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.775804][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.782965][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.802907][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.810044][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.835389][T24311] veth0_macvtap: entered promiscuous mode [ 762.848177][T24311] veth1_macvtap: entered promiscuous mode [ 762.879042][T24311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.902204][T24311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.928490][T24311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.938263][T24311] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.948914][T24311] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.958817][T24311] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.135053][T10167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.152856][T10167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.212402][T10167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.220455][ T30] audit: type=1326 audit(2000263581.016:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.244774][T10167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.252349][ T5884] gspca_sonixj: reg_w err -71 [ 763.257641][T24806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.257891][ T5884] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 763.273051][ T30] audit: type=1326 audit(2000263581.026:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.305993][ T5884] usb 5-1: USB disconnect, device number 103 [ 763.317436][ T30] audit: type=1326 audit(2000263581.026:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.350699][ T30] audit: type=1326 audit(2000263581.026:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.432094][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 763.449603][ T30] audit: type=1326 audit(2000263581.026:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.482527][ T30] audit: type=1326 audit(2000263581.026:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.523207][ T30] audit: type=1326 audit(2000263581.026:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.565134][ T30] audit: type=1326 audit(2000263581.026:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.5.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 763.610112][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 763.616692][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 763.628177][ T10] usb 2-1: config 0 has no interface number 0 [ 763.639827][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 763.659216][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 763.682069][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.699869][ T10] usb 2-1: Product: syz [ 763.704259][ T10] usb 2-1: Manufacturer: syz [ 763.708857][ T10] usb 2-1: SerialNumber: syz [ 763.734090][ T10] usb 2-1: config 0 descriptor?? [ 763.759540][ T10] smsc75xx v1.0.0 [ 763.766551][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 763.768607][T24806] veth0_vlan: entered promiscuous mode [ 763.777376][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 763.812823][T24806] veth1_vlan: entered promiscuous mode [ 763.884867][T10167] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.934657][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 763.965976][T25464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25464 comm=syz.5.13629 [ 763.992898][ T10] usb 2-1: USB disconnect, device number 116 [ 763.994798][T24806] veth0_macvtap: entered promiscuous mode [ 764.022113][T24806] veth1_macvtap: entered promiscuous mode [ 764.060250][ T2060] Bluetooth: hci3: command tx timeout [ 764.072643][T24806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.091304][T24806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.102133][T24806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.110882][T24806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.119563][T24806] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.129320][T24806] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.214905][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.225061][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.249627][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.262034][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.292671][T10167] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.786373][T10167] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.236511][T10167] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.453503][T10167] bridge_slave_1: left allmulticast mode [ 765.469350][T10167] bridge_slave_1: left promiscuous mode [ 765.480002][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.503266][T10167] bridge_slave_0: left allmulticast mode [ 765.508927][T10167] bridge_slave_0: left promiscuous mode [ 765.540514][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.548160][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 765.548173][ T30] audit: type=1326 audit(2000263583.346:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25493 comm="syz.5.13630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 765.733535][T23684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 765.745410][T23684] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 765.762973][T23684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 765.779586][T23684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 765.787179][T23684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 765.935067][ T30] audit: type=1400 audit(2000263583.736:4712): avc: denied { remount } for pid=25523 comm="syz.1.13635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 766.134003][T23684] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 766.146622][T23684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 766.156194][T23684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 766.166823][T23684] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 766.185743][T23684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 766.227350][ T30] audit: type=1326 audit(2000263584.016:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25493 comm="syz.5.13630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fe1d8e929 code=0x7fc00000 [ 766.261846][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 766.390053][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 766.452056][T10167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.463645][T10167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.473635][T10167] bond0 (unregistering): Released all slaves [ 766.855679][T10167] hsr_slave_0: left promiscuous mode [ 766.876293][T10167] hsr_slave_1: left promiscuous mode [ 766.905532][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.929820][T10167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.944150][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.962439][T10167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.986937][T10167] veth1_macvtap: left promiscuous mode [ 766.992689][T10167] veth0_macvtap: left promiscuous mode [ 766.998333][T10167] veth1_vlan: left promiscuous mode [ 767.004209][T10167] veth0_vlan: left promiscuous mode [ 767.038386][T25691] 9pnet_fd: Insufficient options for proto=fd [ 767.330083][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 767.522216][T10167] team0 (unregistering): Port device team_slave_1 removed [ 767.556133][T10167] team0 (unregistering): Port device team_slave_0 removed [ 767.831520][T23684] Bluetooth: hci2: command tx timeout [ 767.911378][T25700] syzkaller1: entered promiscuous mode [ 767.916949][T25700] syzkaller1: entered allmulticast mode [ 767.944469][T25529] chnl_net:caif_netlink_parms(): no params data found [ 768.042613][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 768.225138][T23684] Bluetooth: hci3: command tx timeout [ 768.226361][T25513] chnl_net:caif_netlink_parms(): no params data found [ 768.284856][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 768.444568][T25529] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.453460][T25529] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.464136][T25529] bridge_slave_0: entered allmulticast mode [ 768.476966][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 768.493021][T25529] bridge_slave_0: entered promiscuous mode [ 768.511931][T25529] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.524511][T25529] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.536171][T25529] bridge_slave_1: entered allmulticast mode [ 768.545090][T25529] bridge_slave_1: entered promiscuous mode [ 768.606062][T25529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.627353][T25529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.641353][ T5911] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 768.686543][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 768.716227][T25513] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.731438][T25513] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.744002][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 768.749883][T25513] bridge_slave_0: entered allmulticast mode [ 768.764182][T25513] bridge_slave_0: entered promiscuous mode [ 768.810017][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 768.819816][ T5911] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 768.822118][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 768.832150][ T5911] usb 2-1: config 0 has no interface number 0 [ 768.846829][ T5911] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 768.863680][ T5911] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 768.873155][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.884519][ T5911] usb 2-1: Product: syz [ 768.888697][ T5911] usb 2-1: Manufacturer: syz [ 768.893329][ T5911] usb 2-1: SerialNumber: syz [ 768.902685][ T5911] usb 2-1: config 0 descriptor?? [ 768.912908][ T5911] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 768.925012][ T5911] em28xx 2-1:0.132: Video interface 132 found: [ 768.937387][T10167] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.957758][T25513] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.965451][T25513] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.977423][T25513] bridge_slave_1: entered allmulticast mode [ 768.985322][T25513] bridge_slave_1: entered promiscuous mode [ 769.016739][T25994] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 769.027555][T25529] team0: Port device team_slave_0 added [ 769.119241][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 769.137543][T25529] team0: Port device team_slave_1 added [ 769.177289][T10167] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.203477][T25513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.255179][T25529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.275405][T25529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.316774][T25529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.331595][ T5911] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 769.339385][T25513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.381523][T10167] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.405565][T25529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.412963][T25529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.448044][T25529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.479921][ T30] audit: type=1326 audit(2000263843.272:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26053 comm="syz.4.13669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cacd8e929 code=0x7fc00000 [ 769.523092][T10167] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.577978][T25529] hsr_slave_0: entered promiscuous mode [ 769.588796][T25529] hsr_slave_1: entered promiscuous mode [ 769.595504][T25529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.603261][T25529] Cannot create hsr debugfs directory [ 769.613375][T25513] team0: Port device team_slave_0 added [ 769.645551][T25513] team0: Port device team_slave_1 added [ 769.739677][ T5911] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 769.768501][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13674'. [ 769.780797][ T5911] em28xx 2-1:0.132: board has no eeprom [ 769.782139][T25513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.793597][T25513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.824369][T25513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.840314][ T5911] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 769.866669][T25513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.869850][ T5911] em28xx 2-1:0.132: analog set to bulk mode. [ 769.879614][ T5834] em28xx 2-1:0.132: Registering V4L2 extension [ 769.897143][ T5911] usb 2-1: USB disconnect, device number 117 [ 769.900380][T23684] Bluetooth: hci2: command tx timeout [ 769.912178][T25513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.942721][T25513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.961649][ T5911] em28xx 2-1:0.132: Disconnecting em28xx [ 770.120608][ T5834] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 770.133033][ T5834] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 770.148699][T25513] hsr_slave_0: entered promiscuous mode [ 770.157066][ T5834] em28xx 2-1:0.132: No AC97 audio processor [ 770.163140][ T30] audit: type=1326 audit(2000263843.962:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26053 comm="syz.4.13669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cacd8e929 code=0x7fc00000 [ 770.196332][T25513] hsr_slave_1: entered promiscuous mode [ 770.224505][T25513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.228281][ T5834] usb 2-1: Decoder not found [ 770.241296][ T5834] em28xx 2-1:0.132: failed to create media graph [ 770.247643][ T5834] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 770.247705][T25513] Cannot create hsr debugfs directory [ 770.268775][ T5834] em28xx 2-1:0.132: Remote control support is not available for this card. [ 770.278497][ T5911] em28xx 2-1:0.132: Closing input extension [ 770.300762][T23684] Bluetooth: hci3: command tx timeout [ 770.311651][ T5911] em28xx 2-1:0.132: Freeing device [ 770.434133][T10167] bridge_slave_1: left allmulticast mode [ 770.449406][T10167] bridge_slave_1: left promiscuous mode [ 770.460889][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.482971][T10167] bridge_slave_0: left allmulticast mode [ 770.488594][T10167] bridge_slave_0: left promiscuous mode [ 770.494389][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.814190][T10167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.824354][T10167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.834410][T10167] bond0 (unregistering): Released all slaves [ 770.859502][T26291] can0: slcan on ptm0. [ 771.020167][ T5911] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 771.123200][T10167] hsr_slave_0: left promiscuous mode [ 771.128774][T10167] hsr_slave_1: left promiscuous mode [ 771.134588][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.142156][T10167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.151929][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.159348][T26287] can0 (unregistered): slcan off ptm0. [ 771.167155][T10167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.192730][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.214094][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.247466][T10167] veth1_macvtap: left promiscuous mode [ 771.253451][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 771.264631][T10167] veth0_macvtap: left promiscuous mode [ 771.270243][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.288510][T10167] veth1_vlan: left promiscuous mode [ 771.295754][ T5911] usb 2-1: config 0 descriptor?? [ 771.301141][T10167] veth0_vlan: left promiscuous mode [ 771.379245][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 771.469106][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 771.577901][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 771.730460][ T5911] pyra 0003:1E7D:2CF6.009A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 771.786488][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 771.895769][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 771.923735][ T5911] pyra 0003:1E7D:2CF6.009A: couldn't init struct pyra_device [ 771.941251][T10167] team0 (unregistering): Port device team_slave_1 removed [ 771.943431][ T5911] pyra 0003:1E7D:2CF6.009A: couldn't install mouse [ 771.959379][ T5911] pyra 0003:1E7D:2CF6.009A: probe with driver pyra failed with error -71 [ 771.980260][ T5911] usb 2-1: USB disconnect, device number 118 [ 771.980587][T23684] Bluetooth: hci2: command tx timeout [ 772.008441][T10167] team0 (unregistering): Port device team_slave_0 removed [ 772.378859][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 772.382981][T23684] Bluetooth: hci3: command tx timeout [ 772.616134][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 772.787203][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 772.845130][T25513] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 772.858737][T25513] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 772.871822][T25513] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 772.878724][T26474] sctp: [Deprecated]: syz.4.13704 (pid 26474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.878724][T26474] Use struct sctp_sack_info instead [ 772.898689][T25513] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 772.951613][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 772.989209][T26484] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 773.032806][T25529] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 773.066826][T25529] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 773.076613][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 773.091035][T25529] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 773.120095][T25529] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 773.196838][T25513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.257287][T25513] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.291018][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.298133][T10167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.323195][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.330315][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.407256][T25513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 773.471586][T25529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.503276][T25529] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.534161][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.541294][T10208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.584506][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.591671][T10167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.737633][T25513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.764307][T26537] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13717'. [ 774.015160][T26550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13720'. [ 774.047052][T26550] netlink: 'syz.1.13720': attribute type 30 has an invalid length. [ 774.049412][T25529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.067808][T23684] Bluetooth: hci2: command tx timeout [ 774.102819][T26550] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.111846][T26550] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.120706][T26550] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.129361][T26550] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.356197][T25513] veth0_vlan: entered promiscuous mode [ 774.381113][T25513] veth1_vlan: entered promiscuous mode [ 774.448872][T25513] veth0_macvtap: entered promiscuous mode [ 774.460501][T23684] Bluetooth: hci3: command tx timeout [ 774.474196][T25513] veth1_macvtap: entered promiscuous mode [ 774.524823][T25513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.539377][T25529] veth0_vlan: entered promiscuous mode [ 774.562864][T25513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.585605][T25513] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.597515][T25513] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.607315][T25513] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.619461][T25513] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.643445][T25529] veth1_vlan: entered promiscuous mode [ 774.723507][T25529] veth0_macvtap: entered promiscuous mode [ 774.754048][T10208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.754909][T25529] veth1_macvtap: entered promiscuous mode [ 774.772755][T10208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.828423][T10208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.832424][T25529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.845094][T10208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.876234][T25529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.905751][T25529] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.926333][T25529] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.936632][T25529] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.945801][T25529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.126360][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.146240][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.185612][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.195643][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.413101][T26638] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13735'. [ 776.457709][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 776.497475][T10164] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.548525][T26677] netlink: 'syz.1.13748': attribute type 29 has an invalid length. [ 776.593688][T26680] netlink: 'syz.1.13748': attribute type 29 has an invalid length. [ 776.795181][T26690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.006395][T10164] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.133344][ T2060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.153536][ T2060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 777.158191][T31810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.169215][T31810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 777.179520][T31810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 777.192210][T10164] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.192993][T31810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 777.212309][T22065] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 777.221103][T31810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 777.236440][T31810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 777.244574][T31810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 777.254629][T31810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 777.327127][T10164] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.380157][T22065] usb 2-1: Using ep0 maxpacket: 16 [ 777.397427][T22065] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 777.419624][T22065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.456776][T22065] usb 2-1: Product: syz [ 777.473252][T22065] usb 2-1: Manufacturer: syz [ 777.482529][T22065] usb 2-1: SerialNumber: syz [ 777.518388][T22065] usb 2-1: config 0 descriptor?? [ 777.535804][T22065] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 777.740296][T22065] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 777.759765][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 777.775249][T22065] visor 2-1:0.0: probe with driver visor failed with error -71 [ 777.782037][T26707] chnl_net:caif_netlink_parms(): no params data found [ 777.802062][T22065] usb 2-1: USB disconnect, device number 119 [ 777.985636][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 778.046658][ T30] audit: type=1400 audit(2000263851.842:4716): avc: denied { accept } for pid=26931 comm="syz.4.13762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 778.069985][T10164] bridge_slave_1: left allmulticast mode [ 778.098894][T10164] bridge_slave_1: left promiscuous mode [ 778.107317][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.190379][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 778.211221][T10164] bridge_slave_0: left allmulticast mode [ 778.216880][T10164] bridge_slave_0: left promiscuous mode [ 778.242485][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.638099][T10164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.648576][T10164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.658415][T10164] bond0 (unregistering): Released all slaves [ 778.739488][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 778.760647][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 778.770462][T26710] chnl_net:caif_netlink_parms(): no params data found [ 778.838051][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 778.928996][T26707] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.938688][T26707] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.947360][T26707] bridge_slave_0: entered allmulticast mode [ 778.956246][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.968937][T26707] bridge_slave_0: entered promiscuous mode [ 778.974957][ T9] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 779.002624][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.013327][T26707] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.034510][ T9] usb 2-1: config 0 descriptor?? [ 779.041026][T26707] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.048295][T26707] bridge_slave_1: entered allmulticast mode [ 779.059729][T26707] bridge_slave_1: entered promiscuous mode [ 779.217704][T26707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.265732][T31810] Bluetooth: hci2: command tx timeout [ 779.276626][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 779.299249][T27122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13770'. [ 779.319362][T26707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.336172][T10164] hsr_slave_0: left promiscuous mode [ 779.343925][T10164] hsr_slave_1: left promiscuous mode [ 779.349583][T10164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.352259][T31810] Bluetooth: hci3: command tx timeout [ 779.358034][T10164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.370897][T10164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.378507][T27131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13770'. [ 779.379919][T10164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.407559][T10164] veth1_macvtap: left promiscuous mode [ 779.413381][T10164] veth0_macvtap: left promiscuous mode [ 779.418962][T10164] veth1_vlan: left promiscuous mode [ 779.424404][T10164] veth0_vlan: left promiscuous mode [ 779.477915][ T9] petalynx 0003:18B1:0037.009B: unknown main item tag 0x5 [ 779.487035][ T9] petalynx 0003:18B1:0037.009B: unknown global tag 0xd [ 779.498083][ T9] petalynx 0003:18B1:0037.009B: item 0 2 1 13 parsing failed [ 779.506320][ T9] petalynx 0003:18B1:0037.009B: parse failed [ 779.515956][ T9] petalynx 0003:18B1:0037.009B: probe with driver petalynx failed with error -22 [ 779.688495][ T9] usb 2-1: USB disconnect, device number 120 [ 779.800800][T10164] team0 (unregistering): Port device team_slave_1 removed [ 779.840956][T10164] team0 (unregistering): Port device team_slave_0 removed [ 780.240282][T26710] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.247460][T26710] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.262082][T26710] bridge_slave_0: entered allmulticast mode [ 780.281517][T26710] bridge_slave_0: entered promiscuous mode [ 780.288332][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 780.305160][T26710] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.317173][T26710] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.340195][T26710] bridge_slave_1: entered allmulticast mode [ 780.346843][T26710] bridge_slave_1: entered promiscuous mode [ 780.395347][T10208] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 780.405138][T10208] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 780.420009][ T5884] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 780.507658][T26707] team0: Port device team_slave_0 added [ 780.520130][T26710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.538321][T26710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.561268][T26707] team0: Port device team_slave_1 added [ 780.675909][T26710] team0: Port device team_slave_0 added [ 780.693052][T26710] team0: Port device team_slave_1 added [ 780.703499][T26707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.719484][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 780.719800][T26707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.759645][T26707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.772247][T26707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.779180][T26707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.805697][T26707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.851980][T26710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.858970][T26710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.885311][T26710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.900111][T26710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.907066][T26710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.933504][T26710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.970249][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 781.038431][T26707] hsr_slave_0: entered promiscuous mode [ 781.052142][T26707] hsr_slave_1: entered promiscuous mode [ 781.058378][T26707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.070650][T26707] Cannot create hsr debugfs directory [ 781.145932][T26710] hsr_slave_0: entered promiscuous mode [ 781.153638][T26710] hsr_slave_1: entered promiscuous mode [ 781.162616][T26710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.180274][T26710] Cannot create hsr debugfs directory [ 781.260223][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 781.340337][T31810] Bluetooth: hci2: command tx timeout [ 781.420101][T31810] Bluetooth: hci3: command tx timeout [ 781.439195][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 781.561334][ T30] audit: type=1400 audit(2000263855.362:4717): avc: denied { setopt } for pid=27484 comm="syz.1.13783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 781.599661][T10164] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.749065][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 781.826661][T10164] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.878909][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 781.950433][T10164] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.038251][T10164] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.063843][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 782.336514][T27544] serio: Serial port ptm0 [ 782.405339][T10164] bridge_slave_1: left allmulticast mode [ 782.424755][T10164] bridge_slave_1: left promiscuous mode [ 782.441180][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.480583][T10164] bridge_slave_0: left allmulticast mode [ 782.496673][T10164] bridge_slave_0: left promiscuous mode [ 782.517104][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.532402][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 782.649407][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 782.768837][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 783.021723][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 783.136889][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 783.265979][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 783.301544][T10164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.336440][T21929] udevd[21929]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 783.376612][T10164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.420191][T31810] Bluetooth: hci2: command tx timeout [ 783.460912][T10164] bond0 (unregistering): Released all slaves [ 783.500305][T31810] Bluetooth: hci3: command tx timeout [ 783.801193][T27627] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN NOPTI [ 783.813281][T27627] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 783.821680][T27627] CPU: 1 UID: 0 PID: 27627 Comm: syz.1.13815 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 783.833821][T27627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 783.843884][T27627] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 783.849446][T27627] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 60 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 783.869056][T27627] RSP: 0018:ffffc9000387f330 EFLAGS: 00010203 [ 783.875113][T27627] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b589000 [ 783.883068][T27627] RDX: 000000000000005d RSI: ffffffff898edeb0 RDI: 00000000000002ec [ 783.891031][T27627] RBP: 00000000000a0009 R08: 0000000000000005 R09: 0000000000000000 [ 783.898993][T27627] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce8a2e0 [ 783.906952][T27627] R13: 0000000000000000 R14: ffffffff8ce8a2c0 R15: ffff88807d4a9000 [ 783.914913][T27627] FS: 00007f85fdb1d6c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 783.923836][T27627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 783.930406][T27627] CR2: 000000110c411faf CR3: 0000000069631000 CR4: 00000000003526f0 [ 783.938366][T27627] Call Trace: [ 783.941636][T27627] [ 783.944556][T27627] qdisc_tree_reduce_backlog+0x224/0x500 [ 783.950182][T27627] hhf_change+0x892/0xde0 [ 783.954503][T27627] ? __pfx_hhf_change+0x10/0x10 [ 783.959349][T27627] ? __pfx_qdisc_get_stab+0x10/0x10 [ 783.964538][T27627] hhf_init+0x2f1/0x8c0 [ 783.968681][T27627] ? __pfx_hhf_init+0x10/0x10 [ 783.973347][T27627] qdisc_create+0x457/0xfc0 [ 783.977840][T27627] tc_modify_qdisc+0x12bb/0x2130 [ 783.982767][T27627] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 783.988044][T27627] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 783.993316][T27627] rtnetlink_rcv_msg+0x3c9/0xe90 [ 783.998246][T27627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 784.003696][T27627] ? __lock_acquire+0x622/0x1c90 [ 784.008634][T27627] netlink_rcv_skb+0x158/0x420 [ 784.013384][T27627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 784.018833][T27627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 784.024115][T27627] ? netlink_deliver_tap+0x1ae/0xd30 [ 784.029404][T27627] ? is_vmalloc_addr+0x86/0xa0 [ 784.034172][T27627] netlink_unicast+0x53a/0x7f0 [ 784.038926][T27627] ? __pfx_netlink_unicast+0x10/0x10 [ 784.044195][T27627] netlink_sendmsg+0x8d1/0xdd0 [ 784.048945][T27627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.054218][T27627] ____sys_sendmsg+0xa95/0xc70 [ 784.058989][T27627] ? copy_msghdr_from_user+0x10a/0x160 [ 784.064438][T27627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.069713][T27627] ? __pfx_futex_wake_mark+0x10/0x10 [ 784.074986][T27627] ___sys_sendmsg+0x134/0x1d0 [ 784.079671][T27627] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.084875][T27627] ? __lock_acquire+0x622/0x1c90 [ 784.089829][T27627] __sys_sendmsg+0x16d/0x220 [ 784.094414][T27627] ? __pfx___sys_sendmsg+0x10/0x10 [ 784.099511][T27627] ? __x64_sys_futex+0x1e0/0x4c0 [ 784.104459][T27627] do_syscall_64+0xcd/0x4c0 [ 784.108961][T27627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.114841][T27627] RIP: 0033:0x7f85fcd8e929 [ 784.119254][T27627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.138892][T27627] RSP: 002b:00007f85fdb1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.147313][T27627] RAX: ffffffffffffffda RBX: 00007f85fcfb5fa0 RCX: 00007f85fcd8e929 [ 784.155280][T27627] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 784.163246][T27627] RBP: 00007f85fce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 784.171202][T27627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.179161][T27627] R13: 0000000000000000 R14: 00007f85fcfb5fa0 R15: 00007ffd80c55ae8 [ 784.187131][T27627] [ 784.190135][T27627] Modules linked in: [ 784.194084][T27627] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 784.199536][T27627] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 784.205123][T27627] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 60 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 784.224752][T27627] RSP: 0018:ffffc9000387f330 EFLAGS: 00010203 [ 784.230842][T27627] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b589000 [ 784.238812][T27627] RDX: 000000000000005d RSI: ffffffff898edeb0 RDI: 00000000000002ec [ 784.246834][T27627] RBP: 00000000000a0009 R08: 0000000000000005 R09: 0000000000000000 [ 784.254834][T27627] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce8a2e0 [ 784.259782][ T30] audit: type=1400 audit(2000263858.002:4718): avc: denied { write } for pid=5814 comm="syz-executor" path="pipe:[4256]" dev="pipefs" ino=4256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 784.262908][T27627] R13: 0000000000000000 R14: ffffffff8ce8a2c0 R15: ffff88807d4a9000 [ 784.293983][T27627] FS: 00007f85fdb1d6c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 784.302939][T27627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 784.309527][T27627] CR2: 000000110c411faf CR3: 0000000069631000 CR4: 00000000003526f0 [ 784.317524][T27627] Kernel panic - not syncing: Fatal exception in interrupt [ 784.324904][T27627] Kernel Offset: disabled [ 784.329208][T27627] Rebooting in 86400 seconds..