last executing test programs: 2m38.679392306s ago: executing program 2 (id=1108): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x8004, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x8, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb30, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) 2m38.542104777s ago: executing program 2 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) rseq(0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x9, 0x7) 2m38.464878353s ago: executing program 2 (id=1112): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2m38.398368145s ago: executing program 2 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2m38.273288273s ago: executing program 2 (id=1116): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r2, &(0x7f00000001c0)=[{}, {0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r3, r6, 0x2, [0x40000020, 0x8]}, {r5, r1, 0x0, [0xc1b, 0x4]}, 0x1, [0x7e, 0x8]}) 2m37.932381823s ago: executing program 2 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2m37.580151319s ago: executing program 32 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 55.575312513s ago: executing program 1 (id=1898): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2327, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 47.748867478s ago: executing program 1 (id=1898): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2327, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 39.696087222s ago: executing program 1 (id=1898): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2327, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 31.823446752s ago: executing program 1 (id=1898): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2327, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 22.683457208s ago: executing program 0 (id=2674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) 22.597442109s ago: executing program 0 (id=2675): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000540), 0x282d) 22.543498963s ago: executing program 5 (id=2676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x34, 0x0, 0x1}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 22.325292202s ago: executing program 0 (id=2677): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='g', 0x1}], 0x1}, 0x0) close(0x3) 22.212638529s ago: executing program 0 (id=2678): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 22.204888043s ago: executing program 0 (id=2679): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 21.105094209s ago: executing program 5 (id=2682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}]}}}}}}}}, 0x0) 21.028431966s ago: executing program 0 (id=2683): syz_open_dev$vcsn(0x0, 0x1ff, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 20.72498411s ago: executing program 33 (id=2683): syz_open_dev$vcsn(0x0, 0x1ff, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 20.719489925s ago: executing program 5 (id=2686): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xffe0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 20.566127794s ago: executing program 1 (id=1898): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2327, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 20.520380008s ago: executing program 5 (id=2689): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc", 0x5}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 19.134624911s ago: executing program 5 (id=2690): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r2, &(0x7f00000004c0)='./bus\x00', r0, &(0x7f0000000500)='./file0\x00', 0x0) 19.014331261s ago: executing program 5 (id=2693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 7.722226589s ago: executing program 1 (id=1898): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2327, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 5.244648206s ago: executing program 3 (id=2774): syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c8200c00080001000f060400060007002ce8b04cd6877bf64d1ddd44f6a93eec0f1b375101213655bedb8839b2f1c1a42e59137e22c5f3e520de84e793a9286271c331a095f27c741d3c67589be9"], 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.230895529s ago: executing program 3 (id=2776): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x1f, {0x1f, 0xa, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.876628371s ago: executing program 34 (id=2693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 2.114396268s ago: executing program 4 (id=2784): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffc}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e73], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x7], [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2.022273764s ago: executing program 4 (id=2785): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 1.928555934s ago: executing program 4 (id=2786): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000400)="2ec8425d4ce2ef00", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x2000000000000116}}, 0x40) 1.853529449s ago: executing program 4 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r3, @ANYRES64=r0], 0x6c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 1.76257738s ago: executing program 3 (id=2788): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xf30e, 0x10, 0xfffffffd, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x1c}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.639506547s ago: executing program 4 (id=2789): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1.508321596s ago: executing program 3 (id=2790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x9dece93493136c35, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x10, 0x7}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x41) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.022864909s ago: executing program 3 (id=2794): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 848.874028ms ago: executing program 3 (id=2796): msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) r0 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000080), 0x3d) 0s ago: executing program 6 (id=2807): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') kernel console output (not intermixed with test programs): overlayfs: conflicting lowerdir path [ 240.770165][ T30] audit: type=1400 audit(1752494999.921:853): avc: denied { search } for pid=11113 comm="syz.0.2164" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.816473][ T30] audit: type=1400 audit(1752494999.921:854): avc: denied { search } for pid=11113 comm="syz.0.2164" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.849623][ T30] audit: type=1400 audit(1752494999.921:855): avc: denied { search } for pid=11113 comm="syz.0.2164" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.874134][ T30] audit: type=1400 audit(1752494999.921:856): avc: denied { search } for pid=11113 comm="syz.0.2164" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.896712][ T30] audit: type=1400 audit(1752494999.921:857): avc: denied { search } for pid=11113 comm="syz.0.2164" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.918745][ T30] audit: type=1400 audit(1752494999.961:858): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 241.103046][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.113535][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.121386][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.130765][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.138407][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.181830][ T5945] kernel write not supported for file /1112/attr/exec (pid: 5945 comm: kworker/1:6) [ 241.402297][ T7814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.483468][T11129] chnl_net:caif_netlink_parms(): no params data found [ 241.586314][ T7814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.690211][ T7814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.758075][ T5945] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 241.769952][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.777291][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.784485][T11129] bridge_slave_0: entered allmulticast mode [ 241.792033][T11129] bridge_slave_0: entered promiscuous mode [ 241.805786][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.813459][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.820649][T11129] bridge_slave_1: entered allmulticast mode [ 241.828549][T11129] bridge_slave_1: entered promiscuous mode [ 241.905987][T11129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.924406][ T5945] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.947739][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.958491][T11129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.983174][ T5945] usb 4-1: config 0 descriptor?? [ 242.009883][ T5945] cp210x 4-1:0.0: cp210x converter detected [ 242.064246][T11129] team0: Port device team_slave_0 added [ 242.084142][T11129] team0: Port device team_slave_1 added [ 242.160221][T11129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.174635][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.229343][T11129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.245534][ T7814] bridge_slave_1: left allmulticast mode [ 242.252436][ T7814] bridge_slave_1: left promiscuous mode [ 242.266015][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.285761][ T7814] bridge_slave_0: left allmulticast mode [ 242.302505][ T7814] bridge_slave_0: left promiscuous mode [ 242.310644][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.557445][ T5945] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 242.568793][ T5945] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 242.576362][ T5945] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 242.593329][ T5945] usb 4-1: cp210x converter now attached to ttyUSB0 [ 242.643681][ T5918] usb 4-1: USB disconnect, device number 30 [ 242.666842][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.675204][ T5918] cp210x 4-1:0.0: device disconnected [ 242.799234][ T5833] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 242.972299][ T5833] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 242.985683][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.004121][ T5833] usb 6-1: Product: syz [ 243.012407][ T5833] usb 6-1: Manufacturer: syz [ 243.017253][ T5833] usb 6-1: SerialNumber: syz [ 243.017636][ T7814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.025686][ T5833] usb 6-1: config 0 descriptor?? [ 243.030693][ T5945] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 243.049223][ T7814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.062240][ T7814] bond0 (unregistering): Released all slaves [ 243.087637][T11129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.105034][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.167194][T11129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.208193][ T5834] Bluetooth: hci2: command tx timeout [ 243.220526][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 243.235747][ T5945] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 243.269810][ T5945] usb 5-1: config 0 has no interface number 0 [ 243.275936][ T5945] usb 5-1: config 0 interface 230 has no altsetting 0 [ 243.321793][ T5945] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 243.338058][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.347236][ T5945] usb 5-1: Product: syz [ 243.351504][ T5945] usb 5-1: Manufacturer: syz [ 243.356125][ T5945] usb 5-1: SerialNumber: syz [ 243.386878][ T5945] usb 5-1: config 0 descriptor?? [ 243.395462][ T5945] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 243.426249][T11129] hsr_slave_0: entered promiscuous mode [ 243.436414][ T5945] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 243.438793][T11129] hsr_slave_1: entered promiscuous mode [ 243.454078][ T5833] usb 6-1: Firmware version (0.0) predates our first public release. [ 243.462933][T11129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.478150][ T5833] usb 6-1: Please update to version 0.2 or newer [ 243.484612][T11129] Cannot create hsr debugfs directory [ 243.496529][ T5833] usb 6-1: Firmware: build [ 243.507968][ T44] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 243.656940][ T5910] usb 5-1: USB disconnect, device number 33 [ 243.666853][ T44] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.692916][ T44] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 243.716537][ T44] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 243.733315][ T5833] usb 6-1: USB disconnect, device number 15 [ 243.737160][ T44] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.755986][ T7814] hsr_slave_0: left promiscuous mode [ 243.759530][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.774095][ T7814] hsr_slave_1: left promiscuous mode [ 243.783127][T11189] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 243.783638][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.808245][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.822056][ T44] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.838762][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.846185][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.884120][ T7814] veth1_macvtap: left promiscuous mode [ 243.896729][ T7814] veth0_macvtap: left promiscuous mode [ 243.903596][ T7814] veth1_vlan: left promiscuous mode [ 243.912245][ T7814] veth0_vlan: left promiscuous mode [ 244.052883][ T5888] IPVS: starting estimator thread 0... [ 244.148302][T11205] IPVS: using max 36 ests per chain, 86400 per kthread [ 244.300782][ T44] usb 4-1: USB disconnect, device number 31 [ 245.046181][ T30] audit: type=1400 audit(1752495004.351:859): avc: denied { create } for pid=11227 comm="syz.4.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.081192][ T7814] team0 (unregistering): Port device team_slave_1 removed [ 245.113883][ T30] audit: type=1400 audit(1752495004.381:860): avc: denied { ioctl } for pid=11227 comm="syz.4.2208" path="socket:[36673]" dev="sockfs" ino=36673 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.198067][ T44] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 245.259923][ T7814] team0 (unregistering): Port device team_slave_0 removed [ 245.293657][ T5834] Bluetooth: hci2: command tx timeout [ 245.359486][ T44] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 245.376797][ T44] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 245.420007][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.455437][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.481277][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.509374][ T44] usb 4-1: Product: syz [ 245.533418][ T44] usb 4-1: Manufacturer: syz [ 245.544789][ T44] usb 4-1: SerialNumber: syz [ 246.100734][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 246.177493][ T44] usb 4-1: 0:2 : does not exist [ 246.224106][ T44] usb 4-1: USB disconnect, device number 32 [ 246.467862][ T5833] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 246.652828][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 246.677522][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 246.700428][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 246.724883][ T5833] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 246.742335][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.748753][T11262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2223'. [ 246.751618][ T5833] usb 6-1: Product: syz [ 246.767158][ T5833] usb 6-1: Manufacturer: syz [ 246.771839][ T5833] usb 6-1: SerialNumber: syz [ 246.783092][ T5833] usb 6-1: config 0 descriptor?? [ 246.810802][T11246] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 246.836891][T11246] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 246.845744][T11129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.874903][ T5833] usb 6-1: ucan: probing device on interface #0 [ 246.913693][T11129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.941343][T11129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.967156][T11129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.144720][T11129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.172837][T11129] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.192761][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.199979][ T7814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.234600][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.241818][ T7851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.351473][ T30] audit: type=1326 audit(1752495006.661:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.2231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x0 [ 247.374930][ T5834] Bluetooth: hci2: command tx timeout [ 247.501452][ T5833] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 247.515046][ T5833] usb 6-1: USB disconnect, device number 16 [ 247.626587][T11129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.672455][T11290] PID 11290 killed due to inadequate hugepage pool [ 247.699194][T11129] veth0_vlan: entered promiscuous mode [ 247.715940][T11129] veth1_vlan: entered promiscuous mode [ 247.752262][ T30] audit: type=1400 audit(1752495007.061:862): avc: denied { write } for pid=11295 comm="syz.4.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.792609][T11129] veth0_macvtap: entered promiscuous mode [ 247.805352][T11129] veth1_macvtap: entered promiscuous mode [ 247.828598][T11129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.842626][T11129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.855071][T11129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.864023][T11129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.872742][T11129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.882610][T11129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.010797][ T7814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.025672][ T7814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.078033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.086780][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.307945][ T5888] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 248.444729][ T30] audit: type=1326 audit(1752495007.751:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f678e929 code=0x7fc00000 [ 248.501693][ T5888] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 248.514069][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.524675][ T5888] usb 5-1: Product: syz [ 248.532068][ T5888] usb 5-1: Manufacturer: syz [ 248.536879][ T5888] usb 5-1: SerialNumber: syz [ 248.541689][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 248.557814][ T5888] usb 5-1: config 0 descriptor?? [ 248.566178][ T5888] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 248.718008][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 248.730044][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.749471][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.762383][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 248.770660][ T9] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 248.784353][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.802997][ T9] usb 4-1: config 0 descriptor?? [ 248.980844][ T5888] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 248.996395][ T5888] sq905c 5-1:0.0: Reading version command failed [ 249.018380][ T5888] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 249.056821][ T5888] usb 5-1: USB disconnect, device number 34 [ 249.122073][ T30] audit: type=1326 audit(1752495008.431:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9f678e929 code=0x7fc00000 [ 249.162420][ T30] audit: type=1326 audit(1752495008.471:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.0.2245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe78038e929 code=0x0 [ 249.246959][ T9] hid (null): global environment stack underflow [ 249.263165][ T9] cougar 0003:060B:500A.0020: usage count exceeds max: fixing up report descriptor [ 249.273135][ T9] cougar 0003:060B:500A.0020: unexpected long global item [ 249.281177][ T9] cougar 0003:060B:500A.0020: parse failed [ 249.287149][ T9] cougar 0003:060B:500A.0020: probe with driver cougar failed with error -22 [ 249.482666][ T9] usb 4-1: USB disconnect, device number 33 [ 249.548556][ T7814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.003822][ T7814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.023755][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.034468][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.042550][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.051697][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.061455][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.211998][ T7814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.329281][ T7814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.385508][ T30] audit: type=1326 audit(1752495010.691:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17678e929 code=0x7fc00000 [ 251.565927][T11352] chnl_net:caif_netlink_parms(): no params data found [ 251.658897][ T7814] bridge_slave_1: left allmulticast mode [ 251.668235][ T7814] bridge_slave_1: left promiscuous mode [ 251.673955][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.699148][ T7814] bridge_slave_0: left allmulticast mode [ 251.714981][ T7814] bridge_slave_0: left promiscuous mode [ 251.720776][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.067784][ T5945] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 252.106047][ T30] audit: type=1326 audit(1752495011.421:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff17678e929 code=0x7fc00000 [ 252.217964][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 252.227142][ T5945] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.245696][ T5945] usb 4-1: config 179 has no interface number 0 [ 252.259225][ T5945] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 252.292718][ T5945] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 252.331576][ T5945] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.342894][ T5945] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.365544][ T5945] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 252.402289][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.432933][T11379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.495184][ T7814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.510875][ T7814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.530128][ T7814] bond0 (unregistering): Released all slaves [ 252.804520][ T5918] usb 4-1: USB disconnect, device number 34 [ 252.808836][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.818829][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.875975][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.887601][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.938101][T11352] bridge_slave_0: entered allmulticast mode [ 252.945547][T11352] bridge_slave_0: entered promiscuous mode [ 253.057825][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.084211][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.107991][T11352] bridge_slave_1: entered allmulticast mode [ 253.132494][T11352] bridge_slave_1: entered promiscuous mode [ 253.133718][ T5834] Bluetooth: hci2: command tx timeout [ 253.280748][T11352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.328750][T11352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.451454][T11352] team0: Port device team_slave_0 added [ 253.480533][ T7814] hsr_slave_0: left promiscuous mode [ 253.523496][ T7814] hsr_slave_1: left promiscuous mode [ 253.531211][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.551189][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.585647][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.599781][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.631136][ T7814] veth1_macvtap: left promiscuous mode [ 253.636671][ T7814] veth0_macvtap: left promiscuous mode [ 253.646601][ T7814] veth1_vlan: left promiscuous mode [ 253.652543][ T7814] veth0_vlan: left promiscuous mode [ 253.838188][ T5945] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 253.999734][ T5945] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.024789][ T5945] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.035757][ T5945] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 254.066602][ T5945] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.076105][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.084369][ T5945] usb 5-1: Product: syz [ 254.088675][ T5945] usb 5-1: Manufacturer: syz [ 254.093296][ T5945] usb 5-1: SerialNumber: syz [ 254.272970][ T7814] team0 (unregistering): Port device team_slave_1 removed [ 254.315951][ T7814] team0 (unregistering): Port device team_slave_0 removed [ 254.559267][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 254.749245][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.771952][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 254.782469][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.790573][ T9] usb 4-1: Product: syz [ 254.794737][ T9] usb 4-1: Manufacturer: syz [ 254.799558][ T9] usb 4-1: SerialNumber: syz [ 254.809359][ T9] usb 4-1: config 0 descriptor?? [ 254.835191][ T9] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 254.899460][T11352] team0: Port device team_slave_1 added [ 255.005231][T11352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.022714][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.050079][T11352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.063569][T11352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.070575][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.105340][ T44] usb 4-1: USB disconnect, device number 35 [ 255.142000][ T5945] cdc_ncm 5-1:1.0: bind() failure [ 255.156234][ T5945] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 255.157891][T11352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.173554][ T5945] cdc_ncm 5-1:1.1: bind() failure [ 255.208194][ T5834] Bluetooth: hci2: command tx timeout [ 255.225201][ T5945] usb 5-1: USB disconnect, device number 35 [ 255.239873][T11467] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 255.263126][T11352] hsr_slave_0: entered promiscuous mode [ 255.269577][T11352] hsr_slave_1: entered promiscuous mode [ 255.275746][T11352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.284118][T11352] Cannot create hsr debugfs directory [ 255.636624][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 255.647364][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:2 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 255.647394][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.647409][ T5834] Workqueue: hci0 hci_rx_work [ 255.647447][ T5834] Call Trace: [ 255.647455][ T5834] [ 255.647462][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 255.647491][ T5834] sysfs_warn_dup+0x7f/0xa0 [ 255.647520][ T5834] sysfs_create_dir_ns+0x24b/0x2b0 [ 255.647548][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 255.647570][ T5834] ? find_held_lock+0x2b/0x80 [ 255.647600][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 255.647623][ T5834] kobject_add_internal+0x2c4/0x9b0 [ 255.647657][ T5834] kobject_add+0x16e/0x240 [ 255.647684][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 255.647719][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 255.647742][ T5834] ? kobject_put+0xab/0x5a0 [ 255.647777][ T5834] device_add+0x288/0x1a70 [ 255.647797][ T5834] ? __pfx_dev_set_name+0x10/0x10 [ 255.647828][ T5834] ? __pfx_device_add+0x10/0x10 [ 255.647849][ T5834] ? mgmt_send_event_skb+0x2fb/0x460 [ 255.647887][ T5834] hci_conn_add_sysfs+0x17e/0x230 [ 255.647918][ T5834] le_conn_complete_evt+0x1075/0x1d70 [ 255.647953][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 255.647980][ T5834] ? hci_event_packet+0x459/0x11c0 [ 255.648017][ T5834] hci_le_conn_complete_evt+0x23c/0x370 [ 255.648053][ T5834] hci_le_meta_evt+0x354/0x5e0 [ 255.648080][ T5834] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 255.648112][ T5834] hci_event_packet+0x682/0x11c0 [ 255.648140][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 255.648170][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 255.648201][ T5834] ? kcov_remote_start+0x3c9/0x6d0 [ 255.648224][ T5834] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.648259][ T5834] hci_rx_work+0x2c5/0x16b0 [ 255.648289][ T5834] ? rcu_is_watching+0x12/0xc0 [ 255.648319][ T5834] process_one_work+0x9cf/0x1b70 [ 255.648355][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 255.648386][ T5834] ? assign_work+0x1a0/0x250 [ 255.648410][ T5834] worker_thread+0x6c8/0xf10 [ 255.648442][ T5834] ? __kthread_parkme+0x19e/0x250 [ 255.648472][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 255.648493][ T5834] kthread+0x3c5/0x780 [ 255.648515][ T5834] ? __pfx_kthread+0x10/0x10 [ 255.648537][ T5834] ? rcu_is_watching+0x12/0xc0 [ 255.648561][ T5834] ? __pfx_kthread+0x10/0x10 [ 255.648582][ T5834] ret_from_fork+0x5d7/0x6f0 [ 255.648610][ T5834] ? __pfx_kthread+0x10/0x10 [ 255.648630][ T5834] ret_from_fork_asm+0x1a/0x30 [ 255.648669][ T5834] [ 255.735321][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2304'. [ 255.758166][ T5834] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 255.820396][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2304'. [ 255.822054][ T5834] Bluetooth: hci0: failed to register connection device [ 255.852341][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.990543][T11486] fuse: Invalid gid '00000000000037777777777' [ 256.359715][T11502] vxcan1: tx drop: invalid sa for name 0x0000001000000000 [ 256.481960][T11508] geneve2: entered promiscuous mode [ 256.487207][T11508] geneve2: entered allmulticast mode [ 256.582018][T11352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.619043][T11352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.690754][T11352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.735381][T11352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.895063][T11531] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2325'. [ 257.062818][T11352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.105695][T11352] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.128797][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.135920][ T7851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.173867][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.181027][ T7851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.296539][ T5846] Bluetooth: hci2: command tx timeout [ 257.833789][T11352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.916033][T11352] veth0_vlan: entered promiscuous mode [ 257.945002][T11352] veth1_vlan: entered promiscuous mode [ 258.000766][T11352] veth0_macvtap: entered promiscuous mode [ 258.034406][T11352] veth1_macvtap: entered promiscuous mode [ 258.078134][T11352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.093746][T11352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.113303][T11352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.147753][T11352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.166132][T11352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.177264][T11352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.292046][T11575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 258.298599][T11575] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.318087][ T7814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.333450][ T7814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.347330][ T30] audit: type=1400 audit(1752495017.641:868): avc: denied { connect } for pid=11578 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 258.349121][T11575] vhci_hcd vhci_hcd.0: Device attached [ 258.395431][T11580] vhci_hcd vhci_hcd.0: port 0 already used [ 258.403900][ T30] audit: type=1400 audit(1752495017.711:869): avc: denied { listen } for pid=11578 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 258.424878][ T7814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.440029][ T7814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.447361][T11576] vhci_hcd: connection closed [ 258.451874][ T7814] vhci_hcd: stop threads [ 258.474189][ T7814] vhci_hcd: release socket [ 258.478845][ T7814] vhci_hcd: disconnect device [ 258.630895][ T30] audit: type=1400 audit(1752495017.941:870): avc: denied { append } for pid=11586 comm="syz.4.2346" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 259.168079][ T5918] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 259.329923][ T5918] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 259.340723][ T5918] usb 1-1: config 0 has no interface number 0 [ 259.351715][ T5918] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 259.362179][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.372315][ T5918] usb 1-1: Product: syz [ 259.376532][ T5918] usb 1-1: Manufacturer: syz [ 259.382677][ T5918] usb 1-1: SerialNumber: syz [ 259.390848][ T5918] usb 1-1: config 0 descriptor?? [ 259.474918][T11619] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2360'. [ 259.478196][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 259.607749][T11625] ip6gretap0: entered promiscuous mode [ 259.613547][T11625] macsec1: entered promiscuous mode [ 259.622468][T11625] macsec1: entered allmulticast mode [ 259.628519][T11625] ip6gretap0: entered allmulticast mode [ 259.668013][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 259.680117][ T9] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 259.727326][ T9] usb 4-1: config 0 has no interface number 0 [ 259.737355][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.773520][ T7844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.784059][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 259.813214][ T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 259.832290][ T9] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.853550][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 259.865669][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.878522][ T9] usb 4-1: Product: syz [ 259.882706][ T9] usb 4-1: Manufacturer: syz [ 259.887315][ T9] usb 4-1: SerialNumber: syz [ 259.901750][ T9] usb 4-1: config 0 descriptor?? [ 259.960868][ T5918] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 259.989331][ T5918] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 259.997964][ T5918] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 260.005743][ T5918] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 260.016937][ T5918] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 260.119500][ T9] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 260.180913][ T9] usb 1-1: USB disconnect, device number 24 [ 260.190190][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 260.200445][ T9] keyspan 1-1:0.133: device disconnected [ 260.339120][ T5945] usb 4-1: USB disconnect, device number 36 [ 260.805060][ T7844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.010506][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.019537][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.029620][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.042050][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.061185][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.067884][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 261.174564][ T7844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.268686][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 261.290876][ T5918] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 261.307209][T11664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.309549][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.348784][ T7844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.361164][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.370809][ T30] audit: type=1400 audit(1752495020.681:871): avc: denied { search } for pid=11666 comm="syz.0.2381" name="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.377373][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 261.401078][ T30] audit: type=1400 audit(1752495020.711:872): avc: denied { search } for pid=11666 comm="syz.0.2381" name="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.405453][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.424971][ T30] audit: type=1400 audit(1752495020.711:873): avc: denied { setattr } for pid=11666 comm="syz.0.2381" name="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.506025][ T9] usb 5-1: config 0 descriptor?? [ 261.554269][ T5918] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.579542][ T5918] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.598967][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.622272][ T5918] usb 6-1: SerialNumber: syz [ 261.654613][T11650] chnl_net:caif_netlink_parms(): no params data found [ 261.672560][ T7844] bridge_slave_1: left allmulticast mode [ 261.679462][ T7844] bridge_slave_1: left promiscuous mode [ 261.686286][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.704987][ T7844] bridge_slave_0: left allmulticast mode [ 261.711194][ T7844] bridge_slave_0: left promiscuous mode [ 261.717191][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.805352][T11679] loop2: detected capacity change from 0 to 7 [ 261.837951][T11679] Dev loop2: unable to read RDB block 7 [ 261.843586][T11679] loop2: unable to read partition table [ 261.849669][T11679] loop2: partition table beyond EOD, truncated [ 261.856550][T11679] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.952134][ T9] logitech 0003:046D:C24F.0021: unbalanced collection at end of report description [ 261.976676][ T9] logitech 0003:046D:C24F.0021: parse failed [ 261.995215][ T9] logitech 0003:046D:C24F.0021: probe with driver logitech failed with error -22 [ 262.089530][ T5834] Bluetooth: hci0: command 0x1407 tx timeout [ 262.218696][ T9] usb 5-1: USB disconnect, device number 36 [ 262.299554][ T7844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.310858][ T7844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.320751][ T7844] bond0 (unregistering): Released all slaves [ 262.406218][ T5918] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 262.427918][ T5903] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 262.477459][T11650] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.503455][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.510799][T11650] bridge_slave_0: entered allmulticast mode [ 262.520958][T11650] bridge_slave_0: entered promiscuous mode [ 262.542173][T11650] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.549443][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.556822][T11650] bridge_slave_1: entered allmulticast mode [ 262.563822][T11650] bridge_slave_1: entered promiscuous mode [ 262.597905][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 262.604383][ T5903] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 262.615916][ T5903] usb 4-1: config 0 has no interface number 0 [ 262.622187][ T5903] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 262.636908][ T5903] usb 4-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.647009][ T5903] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.657642][ T5903] usb 4-1: config 0 interface 126 has no altsetting 0 [ 262.666815][ T5903] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 262.676197][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.682933][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.694706][ T5903] usb 4-1: Product: syz [ 262.700604][ T5903] usb 4-1: Manufacturer: syz [ 262.704129][ T5833] usb 6-1: USB disconnect, device number 17 [ 262.705242][ T5903] usb 4-1: SerialNumber: syz [ 262.722901][ T5833] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 262.734584][ T5903] usb 4-1: config 0 descriptor?? [ 262.744379][T11694] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 262.752571][ T7844] hsr_slave_0: left promiscuous mode [ 262.771156][ T7844] hsr_slave_1: left promiscuous mode [ 262.777155][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.793939][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.809143][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.824187][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.858615][ T7844] veth1_macvtap: left promiscuous mode [ 262.864226][ T7844] veth0_macvtap: left promiscuous mode [ 262.869977][ T7844] veth1_vlan: left promiscuous mode [ 262.875383][ T7844] veth0_vlan: left promiscuous mode [ 263.117994][ T5918] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 263.139682][ T5153] Bluetooth: hci2: command tx timeout [ 263.182539][ T5903] ir_usb 4-1:0.126: IR Dongle converter detected [ 263.294497][ T5918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.317835][ T5918] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 263.332097][ T5918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.332126][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.332147][ T5918] usb 1-1: Product: syz [ 263.332162][ T5918] usb 1-1: Manufacturer: syz [ 263.332179][ T5918] usb 1-1: SerialNumber: syz [ 263.355411][ T5918] cdc_mbim 1-1:1.0: skipping garbage [ 263.394098][ T5903] usb 4-1: IRDA class descriptor not found, device not bound [ 263.437673][ T7844] team0 (unregistering): Port device team_slave_1 removed [ 263.522131][ T7844] team0 (unregistering): Port device team_slave_0 removed [ 263.530791][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 263.559106][T11710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.635127][ T5903] usb 4-1: USB disconnect, device number 37 [ 263.702287][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.712489][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.725670][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 263.733651][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.742797][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 263.751782][ T9] usb 5-1: SerialNumber: syz [ 263.772584][ T9] usb 5-1: bad CDC descriptors [ 263.944270][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.988422][ T5903] usb 5-1: USB disconnect, device number 37 [ 264.020230][T11650] team0: Port device team_slave_0 added [ 264.043736][T11650] team0: Port device team_slave_1 added [ 264.072349][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.083771][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.111109][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.124673][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.132352][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.164131][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.195916][T11710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.213995][ T5918] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 264.242173][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'. [ 264.264790][T11650] hsr_slave_0: entered promiscuous mode [ 264.271190][T11650] hsr_slave_1: entered promiscuous mode [ 264.277282][T11650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.286284][T11650] Cannot create hsr debugfs directory [ 264.328052][ T5833] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 264.437583][ T5918] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 264.455664][ T5918] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 264.475900][ T5918] wwan wwan0: port wwan0mbim0 attached [ 264.491200][ T5833] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.519748][ T5918] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 7a:fe:d6:2e:cd:fe [ 264.530577][ T5833] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.546090][ T5918] usb 1-1: USB disconnect, device number 25 [ 264.553181][ T5833] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.563742][ T5918] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 264.572793][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.586884][ T5833] usb 6-1: SerialNumber: syz [ 264.587488][ T30] audit: type=1326 audit(1752495023.901:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 264.631008][ T5918] wwan wwan0: port wwan0mbim0 disconnected [ 264.677058][ T30] audit: type=1326 audit(1752495023.921:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 264.707196][ T30] audit: type=1326 audit(1752495023.921:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 264.734532][ T30] audit: type=1326 audit(1752495023.921:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 264.760231][ T30] audit: type=1326 audit(1752495023.921:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 264.783934][ T30] audit: type=1326 audit(1752495023.941:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 264.824714][ T5833] usb 6-1: 0:2 : does not exist [ 264.851968][ T5833] usb 6-1: USB disconnect, device number 18 [ 264.904764][ T30] audit: type=1326 audit(1752495023.941:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 264.986373][ T30] audit: type=1326 audit(1752495023.941:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 265.051570][ T30] audit: type=1326 audit(1752495023.941:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 265.089556][T11650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.096613][ T30] audit: type=1326 audit(1752495023.941:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fb64cf8e929 code=0x7ffc0000 [ 265.124170][T11650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.145804][T11650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.208237][ T5834] Bluetooth: hci2: command tx timeout [ 265.208320][T11650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.412611][T11750] sp0: Synchronizing with TNC [ 265.423362][T11650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.458929][T11650] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.512741][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.519833][ T7851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.541783][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.548924][ T7818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.572874][T11756] sp0: Synchronizing with TNC [ 265.886486][T11650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.972082][T11650] veth0_vlan: entered promiscuous mode [ 265.992866][T11650] veth1_vlan: entered promiscuous mode [ 266.055097][T11650] veth0_macvtap: entered promiscuous mode [ 266.069410][T11650] veth1_macvtap: entered promiscuous mode [ 266.110794][T11650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.133460][T11650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.159097][T11650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.183657][T11650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.205527][T11650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.215542][T11650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.497672][ T7844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.517040][ T7844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.574988][ T7844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.583269][ T7844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.127850][ T5153] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 267.140441][T11815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.668350][ T7818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.577004][T11845] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 268.583557][T11845] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.619510][T11845] vhci_hcd vhci_hcd.0: Device attached [ 268.690863][ T7818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.799773][ T5910] vhci_hcd: vhci_device speed not set [ 268.857913][ T5910] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 268.877922][ T5918] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 268.919740][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.929317][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.937194][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.956158][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.963886][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.067985][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 269.099266][ T5918] usb 4-1: config 3 has an invalid interface number: 227 but max is 0 [ 269.137558][ T5918] usb 4-1: config 3 has no interface number 0 [ 269.152402][ T7818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.181216][ T5918] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 269.193866][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.203786][ T5918] usb 4-1: Product: syz [ 269.226411][ T5918] usb 4-1: Manufacturer: syz [ 269.237668][ T5918] usb 4-1: SerialNumber: syz [ 269.254004][ T5918] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 269.262632][ T5918] cxusb: set interface failed [ 269.267388][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 269.275760][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.288137][ T5918] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 269.296747][ T5918] usb 4-1: media controller created [ 269.318474][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.338009][ T7818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.471264][T11851] vhci_hcd: connection reset by peer [ 269.472546][ T5918] DVB: Unable to find symbol lgdt330x_attach() [ 269.484783][ T12] vhci_hcd: stop threads [ 269.497848][ T12] vhci_hcd: release socket [ 269.502456][ T12] vhci_hcd: disconnect device [ 269.523578][ T5918] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 269.582728][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 269.596833][ T5918] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 269.614893][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 269.654261][ T5918] usb 4-1: USB disconnect, device number 38 [ 269.777854][ T5918] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 269.792357][T11862] chnl_net:caif_netlink_parms(): no params data found [ 269.833815][ T7818] bridge_slave_1: left allmulticast mode [ 269.840915][ T7818] bridge_slave_1: left promiscuous mode [ 269.846575][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.855451][ T7818] bridge_slave_0: left allmulticast mode [ 269.861546][ T7818] bridge_slave_0: left promiscuous mode [ 269.867200][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.077988][ T44] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 270.132323][ T7818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.143734][ T7818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.155495][ T7818] bond0 (unregistering): Released all slaves [ 270.235536][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.243546][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.251135][T11862] bridge_slave_0: entered allmulticast mode [ 270.258075][T11862] bridge_slave_0: entered promiscuous mode [ 270.267932][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 270.282059][ T44] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 270.291323][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.299607][ T44] usb 5-1: Product: syz [ 270.303793][ T44] usb 5-1: Manufacturer: syz [ 270.304825][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.308399][ T44] usb 5-1: SerialNumber: syz [ 270.320016][ T44] usb 5-1: config 0 descriptor?? [ 270.323505][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.333243][T11862] bridge_slave_1: entered allmulticast mode [ 270.346564][T11862] bridge_slave_1: entered promiscuous mode [ 270.412888][T11862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.424677][T11862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.511918][T11862] team0: Port device team_slave_0 added [ 270.520806][T11862] team0: Port device team_slave_1 added [ 270.547800][ T7818] hsr_slave_0: left promiscuous mode [ 270.560962][ T44] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 270.569952][ T7818] hsr_slave_1: left promiscuous mode [ 270.575984][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.583784][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.594481][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.608928][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.644675][ T7818] veth1_macvtap: left promiscuous mode [ 270.654878][ T7818] veth0_macvtap: left promiscuous mode [ 270.665153][ T7818] veth1_vlan: left promiscuous mode [ 270.677847][ T7818] veth0_vlan: left promiscuous mode [ 271.058159][ T5834] Bluetooth: hci2: command tx timeout [ 271.207155][ T7818] team0 (unregistering): Port device team_slave_1 removed [ 271.246713][ T7818] team0 (unregistering): Port device team_slave_0 removed [ 271.366687][ T44] gspca_sunplus: reg_w_riv err -71 [ 271.374646][ T44] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 271.384900][ T44] usb 5-1: USB disconnect, device number 38 [ 271.458036][ T5945] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 271.596680][T11903] dummy0: entered promiscuous mode [ 271.603098][T11903] bond0: entered promiscuous mode [ 271.612935][T11903] bond_slave_0: entered promiscuous mode [ 271.628330][T11903] bond_slave_1: entered promiscuous mode [ 271.635574][T11903] hsr1: entered allmulticast mode [ 271.641271][T11903] dummy0: entered allmulticast mode [ 271.642586][ T5945] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.646463][T11903] bond0: entered allmulticast mode [ 271.646480][T11903] bond_slave_0: entered allmulticast mode [ 271.646497][T11903] bond_slave_1: entered allmulticast mode [ 271.680611][ T5945] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.691964][ T5945] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.701199][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.712521][T11918] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 271.722887][ T5945] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.753975][T11862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.761262][T11862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.809395][T11862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.823997][T11862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.831033][T11862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.857207][T11862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.903888][T11922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.067961][T11862] hsr_slave_0: entered promiscuous mode [ 272.082507][T11862] hsr_slave_1: entered promiscuous mode [ 272.089063][T11862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.096621][T11862] Cannot create hsr debugfs directory [ 272.103845][ T5945] usb 4-1: USB disconnect, device number 39 [ 272.175187][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 272.175202][ T30] audit: type=1400 audit(1752495031.481:901): avc: denied { read } for pid=11931 comm="syz.4.2480" path="socket:[41835]" dev="sockfs" ino=41835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.229588][T11934] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2480'. [ 272.670828][ T30] audit: type=1400 audit(1752495031.981:902): avc: denied { create } for pid=11949 comm="syz.4.2489" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 272.707203][T11862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.725963][ T30] audit: type=1400 audit(1752495032.031:903): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 272.734746][T11862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.800067][T11862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.814596][T11862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.010787][T11862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.046879][T11862] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.075332][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.082492][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.095876][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.103036][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.131024][ T5834] Bluetooth: hci2: command tx timeout [ 273.176069][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 273.188055][ T5918] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 273.240296][ T30] audit: type=1400 audit(1752495032.551:904): avc: denied { setopt } for pid=11978 comm="syz.3.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.262180][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 273.335279][T11984] input: syz1 as /devices/virtual/input/input48 [ 273.358174][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 273.381115][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.395588][ T5918] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 273.419575][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.439642][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.454207][ T5918] usb 6-1: config 0 descriptor?? [ 273.467989][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.491060][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 273.503097][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.522649][T11862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.532901][ T9] usb 1-1: config 0 descriptor?? [ 273.584202][T11862] veth0_vlan: entered promiscuous mode [ 273.606401][T11862] veth1_vlan: entered promiscuous mode [ 273.652135][ T30] audit: type=1326 audit(1752495032.961:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17678e929 code=0x7ffc0000 [ 273.658653][T11862] veth0_macvtap: entered promiscuous mode [ 273.685037][ T30] audit: type=1326 audit(1752495033.001:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff17678e929 code=0x7ffc0000 [ 273.700794][T11862] veth1_macvtap: entered promiscuous mode [ 273.715243][ T30] audit: type=1326 audit(1752495033.001:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17678e929 code=0x7ffc0000 [ 273.731570][T11862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.761872][T11862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.767661][ T30] audit: type=1326 audit(1752495033.001:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17678e929 code=0x7ffc0000 [ 273.776296][T11862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.801639][ T30] audit: type=1326 audit(1752495033.001:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff17678e929 code=0x7ffc0000 [ 273.825399][ T30] audit: type=1326 audit(1752495033.001:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17678e929 code=0x7ffc0000 [ 273.854100][T11862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.862902][T11862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.871853][T11862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.901325][ T5918] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 273.984967][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.997446][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.004946][ T5910] vhci_hcd: vhci_device speed not set [ 274.048399][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.056743][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.156315][ T9] usb 1-1: string descriptor 0 read error: -22 [ 274.346978][ T5918] usb 6-1: USB disconnect, device number 19 [ 274.380952][ T9] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0023/input/input49 [ 274.409155][ T9] uclogic 0003:256C:006D.0023: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 274.604221][ T24] usb 1-1: USB disconnect, device number 26 [ 275.007841][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 275.165561][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.189294][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.229839][ T9] usb 5-1: config 0 descriptor?? [ 275.242582][ T9] cp210x 5-1:0.0: cp210x converter detected [ 275.582997][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.645621][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 275.669361][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 275.868631][ T5910] usb 5-1: USB disconnect, device number 39 [ 275.876285][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.885047][ T5910] cp210x 5-1:0.0: device disconnected [ 276.739538][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.748563][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.758100][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.765897][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.775186][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.848084][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 276.914045][T12054] chnl_net:caif_netlink_parms(): no params data found [ 276.977522][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.984750][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.992331][T12054] bridge_slave_0: entered allmulticast mode [ 276.999475][T12054] bridge_slave_0: entered promiscuous mode [ 277.006785][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.015445][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 277.020862][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.028123][T12054] bridge_slave_1: entered allmulticast mode [ 277.035029][T12054] bridge_slave_1: entered promiscuous mode [ 277.042088][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 277.057823][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.068029][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.085889][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.095504][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.103868][ T9] usb 1-1: Product: syz [ 277.110193][ T9] usb 1-1: Manufacturer: syz [ 277.111402][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.114796][ T9] usb 1-1: SerialNumber: syz [ 277.133982][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.171660][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.202375][T12054] team0: Port device team_slave_0 added [ 277.210730][T12054] team0: Port device team_slave_1 added [ 277.248723][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.277234][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.284512][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.310627][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.340722][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.353967][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.361396][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.388618][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.438873][T12054] hsr_slave_0: entered promiscuous mode [ 277.445380][T12054] hsr_slave_1: entered promiscuous mode [ 277.451809][T12054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.469892][T12054] Cannot create hsr debugfs directory [ 277.533242][ T9] usb 1-1: 0:2 : does not exist [ 277.701214][ T12] bridge_slave_1: left allmulticast mode [ 277.707223][ T12] bridge_slave_1: left promiscuous mode [ 277.713189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.721150][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 277.721162][ T30] audit: type=1400 audit(1752495037.041:916): avc: denied { mounton } for pid=12069 comm="syz.4.2533" path="/527/file0" dev="tmpfs" ino=2745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 277.753710][ T12] bridge_slave_0: left allmulticast mode [ 277.761790][ T12] bridge_slave_0: left promiscuous mode [ 277.774170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.207968][ T5833] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 278.363152][ T9] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 278.377087][ T5833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.389277][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.392937][ T5833] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 278.410424][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.412618][ T5833] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.433011][ T12] bond0 (unregistering): Released all slaves [ 278.433038][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.474570][T12075] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.495700][ T9] usb 1-1: USB disconnect, device number 27 [ 278.505360][ T5833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.813231][ T9] usb 5-1: USB disconnect, device number 40 [ 278.817732][ T5153] Bluetooth: hci2: command tx timeout [ 278.842895][ T12] hsr_slave_0: left promiscuous mode [ 278.869771][ T12] hsr_slave_1: left promiscuous mode [ 278.875958][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.883743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.892355][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.899995][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.926995][ T12] veth1_macvtap: left promiscuous mode [ 278.933195][ T12] veth0_macvtap: left promiscuous mode [ 278.953224][ T12] veth1_vlan: left promiscuous mode [ 278.959052][ T12] veth0_vlan: left promiscuous mode [ 279.045193][T12088] SELinux: policydb version 0 does not match my version range 15-34 [ 279.088115][T12088] SELinux: failed to load policy [ 279.224156][ T2148] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 279.375704][ T30] audit: type=1400 audit(1752495038.681:917): avc: denied { bind } for pid=12094 comm="syz.3.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 279.423177][ T2148] usb 1-1: Using ep0 maxpacket: 8 [ 279.448482][T12098] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 279.456555][ T2148] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 279.476361][ T2148] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 279.484586][ T2148] usb 1-1: config 0 has no interface number 0 [ 279.491067][ T2148] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.511040][ T2148] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 279.607803][ T2148] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.628562][ T2148] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 279.637643][ T2148] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 279.658446][ T2148] usb 1-1: Product: syz [ 279.673486][ T2148] usb 1-1: config 0 descriptor?? [ 279.681710][T12086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.813095][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.890215][ T12] team0 (unregistering): Port device team_slave_0 removed [ 280.341182][ T2148] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input50 [ 280.439017][ T30] audit: type=1400 audit(1752495039.741:918): avc: denied { ioctl } for pid=12101 comm="syz.3.2547" path="socket:[44428]" dev="sockfs" ino=44428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.578312][ T5918] usb 1-1: USB disconnect, device number 28 [ 280.578353][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 280.888531][ T5153] Bluetooth: hci2: command tx timeout [ 280.927143][T12054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.942650][T12054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.954485][T12054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.966029][T12054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.066164][T12054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.090267][T12054] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.102886][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.110070][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.136811][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.143987][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.392236][T12054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.450501][T12054] veth0_vlan: entered promiscuous mode [ 281.462963][T12054] veth1_vlan: entered promiscuous mode [ 281.495361][T12054] veth0_macvtap: entered promiscuous mode [ 281.506123][T12054] veth1_macvtap: entered promiscuous mode [ 281.530398][T12054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.545729][T12054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.563605][T12054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.573195][T12054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.586841][T12054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.597612][T12054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.847643][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.874260][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.918270][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.943061][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.964545][T12158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.750827][T12180] block nbd0: shutting down sockets [ 282.957783][ T5945] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 283.098021][T12193] xt_CT: No such helper "pptp" [ 283.143554][ T5945] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.161737][ T5945] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.184189][ T5945] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.193616][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.213682][ T5945] usb 5-1: Product: syz [ 283.223776][ T5945] usb 5-1: Manufacturer: syz [ 283.227196][ T30] audit: type=1400 audit(1752495042.531:919): avc: denied { read } for pid=12199 comm="syz.3.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 283.233875][ T5945] usb 5-1: SerialNumber: syz [ 283.294163][ T30] audit: type=1400 audit(1752495042.601:920): avc: denied { mount } for pid=12201 comm="syz.5.2581" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 283.321770][ T30] audit: type=1400 audit(1752495042.631:921): avc: denied { remount } for pid=12201 comm="syz.5.2581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 283.341434][T12202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 283.375245][ T30] audit: type=1400 audit(1752495042.681:922): avc: denied { unmount } for pid=8674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 283.456140][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.538209][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 283.638121][ T5910] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 283.689902][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.699242][ T24] usb 1-1: config 166 has an invalid interface number: 51 but max is 0 [ 283.707550][ T24] usb 1-1: config 166 has no interface number 0 [ 283.714310][ T24] usb 1-1: config 166 interface 51 has no altsetting 0 [ 283.722903][ T24] usb 1-1: New USB device found, idVendor=04a5, idProduct=300c, bcdDevice=a8.c9 [ 283.732685][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.740738][ T24] usb 1-1: Product: syz [ 283.744909][ T24] usb 1-1: Manufacturer: syz [ 283.750150][ T24] usb 1-1: SerialNumber: syz [ 283.799380][ T5910] usb 6-1: config 0 has no interfaces? [ 283.806848][ T5910] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.816070][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.824197][ T5910] usb 6-1: Product: syz [ 283.828459][ T5910] usb 6-1: Manufacturer: syz [ 283.833067][ T5910] usb 6-1: SerialNumber: syz [ 283.839999][ T5910] usb 6-1: config 0 descriptor?? [ 283.969060][ T24] gspca_main: spca500-2.14.0 probing 04a5:300c [ 283.983260][ T24] usb 1-1: USB disconnect, device number 29 [ 284.140387][ T5833] usb 6-1: USB disconnect, device number 20 [ 284.301966][ T5945] cdc_mbim 5-1:1.0: bind() failure [ 284.310575][ T5945] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 284.317449][ T5945] cdc_ncm 5-1:1.1: bind() failure [ 284.598655][ T5945] usb 5-1: USB disconnect, device number 41 [ 284.758564][T12215] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 284.819711][T12217] kvm: kvm [12216]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x3072 [ 284.822180][ T30] audit: type=1400 audit(1752495044.131:923): avc: denied { mounton } for pid=12218 comm="syz.0.2588" path="/607/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 284.842069][T12215] bond2: entered promiscuous mode [ 284.856982][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.865536][T12215] bond2: entered allmulticast mode [ 284.866127][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.886943][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.897631][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.905416][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.923842][T12223] bond2: (slave erspan1): making interface the new active one [ 284.931476][T12223] erspan1: entered promiscuous mode [ 284.937062][T12223] erspan1: entered allmulticast mode [ 284.943456][T12223] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 285.057649][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.145372][ T30] audit: type=1400 audit(1752495044.451:924): avc: denied { watch watch_reads } for pid=12230 comm="syz.3.2593" path="/593/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 285.226453][ T30] audit: type=1400 audit(1752495044.501:925): avc: denied { listen } for pid=12232 comm="syz.0.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 285.346164][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.509646][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.710548][T12221] chnl_net:caif_netlink_parms(): no params data found [ 285.747876][ T2148] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 285.928294][ T12] bridge_slave_1: left allmulticast mode [ 285.935799][ T12] bridge_slave_1: left promiscuous mode [ 285.953570][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.975014][ T12] bridge_slave_0: left allmulticast mode [ 285.983921][ T12] bridge_slave_0: left promiscuous mode [ 285.990950][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.000044][ T2148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.011124][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 286.022261][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 286.032971][ T2148] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 286.049167][ T5910] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 286.064401][ T2148] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 286.073660][ T2148] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.081786][ T2148] usb 5-1: Manufacturer: syz [ 286.090443][ T2148] usb 5-1: config 0 descriptor?? [ 286.218117][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 286.237832][ T5910] usb 1-1: config 0 has no interfaces? [ 286.243390][ T5910] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 286.270395][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.293086][ T5910] usb 1-1: config 0 descriptor?? [ 286.391440][ T2148] rc_core: IR keymap rc-hauppauge not found [ 286.397381][ T2148] Registered IR keymap rc-empty [ 286.413431][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.437875][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.459851][ T2148] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 286.474877][ T2148] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input51 [ 286.499440][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.532331][ T30] audit: type=1400 audit(1752495045.831:926): avc: denied { mounton } for pid=12256 comm="syz.0.2604" path="/proc/1371/task" dev="proc" ino=45912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 286.556882][ T5910] usb 1-1: USB disconnect, device number 30 [ 286.564639][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.591528][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.620485][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.649091][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.659037][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.667965][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.677403][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.688022][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.695322][ T12] bond0 (unregistering): Released all slaves [ 286.708058][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.731944][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.768014][ T2148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 286.801612][ T2148] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 286.821035][ T2148] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 286.876304][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.886357][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.894243][T12221] bridge_slave_0: entered allmulticast mode [ 286.902377][T12221] bridge_slave_0: entered promiscuous mode [ 286.909669][ T5918] usb 5-1: USB disconnect, device number 42 [ 286.944044][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.954412][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.961690][T12221] bridge_slave_1: entered allmulticast mode [ 286.968202][ T5834] Bluetooth: hci2: command tx timeout [ 286.976797][T12221] bridge_slave_1: entered promiscuous mode [ 287.052615][T12221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.065124][T12221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.140811][ T12] hsr_slave_0: left promiscuous mode [ 287.173038][ T12] hsr_slave_1: left promiscuous mode [ 287.193129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.230753][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.284900][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.317186][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.370334][ T12] veth1_macvtap: left promiscuous mode [ 287.387825][ T12] veth0_macvtap: left promiscuous mode [ 287.393519][ T12] veth1_vlan: left promiscuous mode [ 287.427885][ T12] veth0_vlan: left promiscuous mode [ 287.617954][ T5910] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 287.742365][ T2148] IPVS: starting estimator thread 0... [ 287.748235][T12305] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.779060][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 287.800058][ T5910] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 287.834017][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.842183][T12309] IPVS: using max 33 ests per chain, 79200 per kthread [ 287.886979][ T5910] pvrusb2: Hardware description: Terratec Grabster AV400 [ 287.910955][ T5910] pvrusb2: ********** [ 287.920863][ T5910] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 287.944456][ T5910] pvrusb2: Important functionality might not be entirely working. [ 287.963119][ T5910] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 287.992728][ T5910] pvrusb2: ********** [ 288.105435][ T2340] pvrusb2: Invalid write control endpoint [ 288.165968][ T30] audit: type=1400 audit(1752495047.471:927): avc: denied { getopt } for pid=12312 comm="syz.4.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.176490][ T2340] pvrusb2: Invalid write control endpoint [ 288.226242][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 288.248537][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 288.256299][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 288.266398][ T2340] pvrusb2: Device being rendered inoperable [ 288.280018][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 288.307525][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 288.331070][ T2148] usb 1-1: USB disconnect, device number 31 [ 288.339477][ T2340] pvrusb2: Attached sub-driver cx25840 [ 288.345227][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 288.374498][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 288.641833][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.720828][ T12] team0 (unregistering): Port device team_slave_0 removed [ 288.945689][ T30] audit: type=1400 audit(1752495048.251:928): avc: denied { setopt } for pid=12331 comm="syz.3.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 289.062962][ T5834] Bluetooth: hci2: command tx timeout [ 289.394282][T12221] team0: Port device team_slave_0 added [ 289.413319][T12221] team0: Port device team_slave_1 added [ 289.480885][T12221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.491825][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.522559][T12221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.566006][T12221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.584016][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.609958][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.627636][T12221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.666633][T12359] input: syz0 as /devices/virtual/input/input52 [ 289.702863][T12221] hsr_slave_0: entered promiscuous mode [ 289.710618][T12221] hsr_slave_1: entered promiscuous mode [ 289.716884][T12221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.727475][T12221] Cannot create hsr debugfs directory [ 289.827846][ T5833] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 289.989364][ T5833] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.004971][ T5833] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.021855][ T5833] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.031122][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.046579][T12357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.097838][ T5833] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.147581][T12376] netlink: 'syz.4.2650': attribute type 2 has an invalid length. [ 290.187077][T12376] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2650'. [ 290.222421][T12376] nbd: must specify a device to reconfigure [ 290.236389][T12221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.247659][T12221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.259886][T12221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.271908][T12221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.379873][ T24] usb 1-1: USB disconnect, device number 32 [ 290.482769][T12221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.512630][T12221] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.532425][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.539596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.554517][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.561694][ T7814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.950456][ T30] audit: type=1326 audit(1752495050.261:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.3.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64cf8e929 code=0x7fc00000 [ 290.973861][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.113516][T12221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.131359][ T5834] Bluetooth: hci2: command tx timeout [ 291.303470][T12221] veth0_vlan: entered promiscuous mode [ 291.370119][T12221] veth1_vlan: entered promiscuous mode [ 291.456826][T12221] veth0_macvtap: entered promiscuous mode [ 291.497243][T12221] veth1_macvtap: entered promiscuous mode [ 291.571442][T12221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.594978][T12221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.629833][ T30] audit: type=1400 audit(1752495050.931:930): avc: denied { ioctl } for pid=12427 comm="syz.0.2668" path="socket:[47753]" dev="sockfs" ino=47753 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 291.682749][T12221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.697541][T12221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.717850][T12221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.747767][T12221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.780798][ T5834] Bluetooth: hci0: command 0x1407 tx timeout [ 291.801455][ T5918] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 291.808030][ T5918] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 292.490005][ T30] audit: type=1400 audit(1752495051.801:931): avc: denied { bind } for pid=12442 comm="syz.0.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 293.209597][ T5834] Bluetooth: hci2: command tx timeout [ 293.995247][T12431] Set syz1 is full, maxelem 65536 reached [ 294.008100][ T5918] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 294.020383][ T5918] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 294.061369][ T30] audit: type=1400 audit(1752495053.361:932): avc: denied { write } for pid=12456 comm="syz.3.2680" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 294.191914][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.221730][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.285502][ T9033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.332595][ T7844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.345380][ T7844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.441475][ T9033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.577464][ T9033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.756037][ T9033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.040985][ T9033] bridge_slave_1: left allmulticast mode [ 295.055964][ T9033] bridge_slave_1: left promiscuous mode [ 295.056373][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.068019][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.085882][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.094535][ T9033] bridge_slave_0: left allmulticast mode [ 295.099213][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.100475][ T9033] bridge_slave_0: left promiscuous mode [ 295.109365][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.121805][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.126225][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.420927][ T9033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.433986][ T9033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.444208][ T9033] bond0 (unregistering): Released all slaves [ 295.642318][T12475] chnl_net:caif_netlink_parms(): no params data found [ 295.692325][ T9033] hsr_slave_0: left promiscuous mode [ 295.698333][ T9033] hsr_slave_1: left promiscuous mode [ 295.704023][ T9033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.713089][ T9033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.730376][ T9033] veth1_macvtap: left promiscuous mode [ 295.735907][ T9033] veth0_macvtap: left promiscuous mode [ 295.741716][ T9033] veth1_vlan: left promiscuous mode [ 295.746996][ T9033] veth0_vlan: left promiscuous mode [ 296.036155][ T9033] team0 (unregistering): Port device team_slave_1 removed [ 296.072138][ T9033] team0 (unregistering): Port device team_slave_0 removed [ 296.594760][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.615215][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.623756][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.632872][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.645588][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.208640][ T5834] Bluetooth: hci2: command tx timeout [ 297.243193][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.252447][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.307939][T12475] bridge_slave_0: entered allmulticast mode [ 297.336011][T12475] bridge_slave_0: entered promiscuous mode [ 297.398641][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.426139][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.457166][T12475] bridge_slave_1: entered allmulticast mode [ 297.467560][T12475] bridge_slave_1: entered promiscuous mode [ 297.614094][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.686320][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.835038][ T9033] IPVS: stop unused estimator thread 0... [ 297.836725][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 297.910780][T12475] team0: Port device team_slave_0 added [ 298.008085][T12475] team0: Port device team_slave_1 added [ 298.137009][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.167833][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.234897][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.259889][T12520] input: syz0 as /devices/virtual/input/input53 [ 298.325785][ T9033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.405953][T12492] chnl_net:caif_netlink_parms(): no params data found [ 298.446737][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.464889][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.511432][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.597689][ T9033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.727863][ T5834] Bluetooth: hci4: command tx timeout [ 298.766319][ T9033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.013796][T12475] hsr_slave_0: entered promiscuous mode [ 299.039606][T12475] hsr_slave_1: entered promiscuous mode [ 299.045837][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.063790][T12475] Cannot create hsr debugfs directory [ 299.093414][ T9033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.254195][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.262497][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.277403][T12492] bridge_slave_0: entered allmulticast mode [ 299.287973][ T5834] Bluetooth: hci2: command tx timeout [ 299.295810][T12492] bridge_slave_0: entered promiscuous mode [ 299.367096][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.385456][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.396826][T12535] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2710'. [ 299.405690][T12492] bridge_slave_1: entered allmulticast mode [ 299.427276][T12492] bridge_slave_1: entered promiscuous mode [ 299.537450][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.626895][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.741181][T12492] team0: Port device team_slave_0 added [ 299.803108][T12492] team0: Port device team_slave_1 added [ 299.956937][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.967795][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.012763][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.074906][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.105599][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.176934][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.192844][ T9033] bridge_slave_1: left allmulticast mode [ 300.198706][ T9033] bridge_slave_1: left promiscuous mode [ 300.222507][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.240248][ T9033] bridge_slave_0: left allmulticast mode [ 300.253764][ T9033] bridge_slave_0: left promiscuous mode [ 300.278169][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.810269][ T5834] Bluetooth: hci4: command tx timeout [ 301.054950][ T9033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.075495][ T9033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.096454][ T9033] bond0 (unregistering): Released all slaves [ 301.362842][T12492] hsr_slave_0: entered promiscuous mode [ 301.368591][ T5834] Bluetooth: hci2: command tx timeout [ 301.377779][ T5945] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 301.394143][T12492] hsr_slave_1: entered promiscuous mode [ 301.411942][T12492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.438422][T12492] Cannot create hsr debugfs directory [ 301.530378][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 301.537187][ T5945] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.557490][ T5945] usb 4-1: config 0 has no interface number 0 [ 301.569642][ T5945] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 301.583121][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.599928][ T5945] usb 4-1: Product: syz [ 301.609053][ T5945] usb 4-1: Manufacturer: syz [ 301.613663][ T5945] usb 4-1: SerialNumber: syz [ 301.656239][ T5945] usb 4-1: config 0 descriptor?? [ 301.698399][ T9033] hsr_slave_0: left promiscuous mode [ 301.706761][ T9033] hsr_slave_1: left promiscuous mode [ 301.746318][ T9033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.754487][ T9033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.783369][ T9033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.790865][ T9033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.805221][T12562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.852184][ T9033] veth1_macvtap: left promiscuous mode [ 301.867764][ T9033] veth0_macvtap: left promiscuous mode [ 301.878076][ T9033] veth1_vlan: left promiscuous mode [ 301.882673][ T5945] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 301.883367][ T9033] veth0_vlan: left promiscuous mode [ 302.486430][ T5945] gspca_spca1528: reg_w err -71 [ 302.518931][ T5945] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 302.556224][ T5945] usb 4-1: USB disconnect, device number 40 [ 302.752157][T12571] input: syz0 as /devices/virtual/input/input54 [ 302.820686][ T9033] team0 (unregistering): Port device team_slave_1 removed [ 302.890961][ T5834] Bluetooth: hci4: command tx timeout [ 302.911615][ T9033] team0 (unregistering): Port device team_slave_0 removed [ 303.450424][ T5834] Bluetooth: hci2: command tx timeout [ 303.600423][T12475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.634126][T12475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.695975][T12475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.752886][T12475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.101339][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.166783][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.192624][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.199814][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.269218][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.276360][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.466825][T12492] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.528348][T12492] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.551063][T12492] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.583973][T12492] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.830916][T12492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.882474][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.910506][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.917647][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.936864][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.944022][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.968238][ T5834] Bluetooth: hci4: command tx timeout [ 304.977965][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.516332][T12492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.650113][T12475] veth0_vlan: entered promiscuous mode [ 305.684635][T12475] veth1_vlan: entered promiscuous mode [ 305.725804][T12492] veth0_vlan: entered promiscuous mode [ 305.771245][T12492] veth1_vlan: entered promiscuous mode [ 305.836691][T12475] veth0_macvtap: entered promiscuous mode [ 305.881696][T12475] veth1_macvtap: entered promiscuous mode [ 305.922689][T12492] veth0_macvtap: entered promiscuous mode [ 305.952966][T12492] veth1_macvtap: entered promiscuous mode [ 305.975321][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.012452][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.051225][T12492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.095748][T12492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.104710][T12475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.114585][T12475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.125037][T12475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.155665][T12475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.177144][T12492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.186918][T12492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.208363][T12492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.251761][T12492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.462371][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.474117][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.510602][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.528232][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.604380][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.618966][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.638288][ T5833] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 306.704273][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.725309][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.808967][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 306.815726][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.837973][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.858782][ T5833] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 306.877790][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.910305][ T5833] usb 4-1: config 0 descriptor?? [ 307.184574][T12660] kernel read not supported for file /!sel (pid: 12660 comm: syz.4.2750) [ 307.193321][ T30] audit: type=1800 audit(1752495066.501:933): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2750" name="!sel" dev="mqueue" ino=51201 res=0 errno=0 [ 307.362735][ T5833] zydacron 0003:13EC:0006.0024: unknown main item tag 0x4 [ 307.370719][ T5833] zydacron 0003:13EC:0006.0024: unexpected long global item [ 307.388653][ T5833] zydacron 0003:13EC:0006.0024: parse failed [ 307.394737][ T5833] zydacron 0003:13EC:0006.0024: probe with driver zydacron failed with error -22 [ 307.621186][ T5833] usb 4-1: USB disconnect, device number 41 [ 307.668793][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.062683][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.382518][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.453836][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.593222][ T37] bridge_slave_1: left allmulticast mode [ 308.599464][ T37] bridge_slave_1: left promiscuous mode [ 308.605218][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.618698][ T37] bridge_slave_0: left allmulticast mode [ 308.624354][ T37] bridge_slave_0: left promiscuous mode [ 308.634473][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.333090][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.388586][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.429301][ T37] bond0 (unregistering): Released all slaves [ 309.608128][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.617607][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.626118][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.627789][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 309.656082][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.666249][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.892095][T12707] binder: 12706:12707 ioctl c0306201 200000000000 returned -14 [ 310.066564][T12717] kernel read not supported for file /eth0 (pid: 12717 comm: syz.6.2775) [ 310.090037][ T30] audit: type=1800 audit(1752495069.401:934): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2775" name="eth0" dev="mqueue" ino=50298 res=0 errno=0 [ 311.147206][ T37] hsr_slave_0: left promiscuous mode [ 311.158451][ T37] hsr_slave_1: left promiscuous mode [ 311.171922][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.181572][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.202066][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.211181][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.281841][ T37] veth1_macvtap: left promiscuous mode [ 311.287557][ T37] veth0_macvtap: left promiscuous mode [ 311.300317][ T37] veth1_vlan: left promiscuous mode [ 311.305702][ T37] veth0_vlan: left promiscuous mode [ 311.378550][ T5903] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 311.569740][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.602851][ T5903] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 311.638466][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.671481][ T5903] usb 4-1: config 0 descriptor?? [ 311.778210][ T5153] Bluetooth: hci4: command tx timeout [ 311.964917][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.980585][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.990652][ T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 312.005821][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.026128][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.035533][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.125931][ T5903] lenovo 0003:17EF:6047.0025: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 312.155714][ T9] usb 5-1: config 8 has an invalid interface number: 22 but max is 0 [ 312.165069][ T9] usb 5-1: config 8 has no interface number 0 [ 312.171283][ T9] usb 5-1: config 8 interface 22 has no altsetting 0 [ 312.180187][ T9] usb 5-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 312.192100][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.200283][ T9] usb 5-1: Product: syz [ 312.204548][ T9] usb 5-1: Manufacturer: syz [ 312.209304][ T9] usb 5-1: SerialNumber: syz [ 312.266781][ T37] team0 (unregistering): Port device team_slave_1 removed [ 312.306742][ T37] team0 (unregistering): Port device team_slave_0 removed [ 312.439615][ T9] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 312.459904][ T9] usb 5-1: USB disconnect, device number 43 [ 312.910217][T12696] chnl_net:caif_netlink_parms(): no params data found [ 312.935208][ T5903] lenovo 0003:17EF:6047.0025: Sensitivity setting failed: -71 [ 312.958557][ T5903] usb 4-1: USB disconnect, device number 42 [ 313.080280][T12743] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2783'. [ 313.164197][T12748] input: syz0 as /devices/virtual/input/input55 [ 313.191465][T12730] chnl_net:caif_netlink_parms(): no params data found [ 313.206967][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.215304][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.226471][T12696] bridge_slave_0: entered allmulticast mode [ 313.235045][T12696] bridge_slave_0: entered promiscuous mode [ 313.263549][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.272434][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.283205][T12696] bridge_slave_1: entered allmulticast mode [ 313.291719][T12696] bridge_slave_1: entered promiscuous mode [ 313.344397][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.376720][ T37] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.392080][ T37] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.415406][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.445918][T12756] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2787'. [ 313.511093][T12696] team0: Port device team_slave_0 added [ 313.522197][T12730] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.530584][T12730] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.540730][T12730] bridge_slave_0: entered allmulticast mode [ 313.552184][T12730] bridge_slave_0: entered promiscuous mode [ 313.569994][T12730] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.577346][T12730] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.585617][T12730] bridge_slave_1: entered allmulticast mode [ 313.594559][T12730] bridge_slave_1: entered promiscuous mode [ 313.603023][ T37] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.615410][ T37] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.661391][T12696] team0: Port device team_slave_1 added [ 313.753695][ T37] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.769134][ T37] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.799979][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.807022][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.842214][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.856378][T12730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.857794][ T5834] Bluetooth: hci4: command tx timeout [ 313.887992][ T5833] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 313.927687][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'. [ 313.947491][ T37] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.959309][ T37] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.975491][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.982706][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.023401][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.041741][T12730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.056802][T12763] vlan2: entered allmulticast mode [ 314.064169][T12763] macvtap0: entered allmulticast mode [ 314.069967][ T5833] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 314.078129][ T5833] usb 5-1: config 0 has no interface number 0 [ 314.084190][ T5833] usb 5-1: config 0 interface 98 has no altsetting 0 [ 314.087912][T12763] veth0_macvtap: entered allmulticast mode [ 314.097976][ T5834] Bluetooth: hci0: command tx timeout [ 314.099002][ T5833] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 314.140522][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.173968][ T5833] usb 5-1: Product: syz [ 314.179831][ T5833] usb 5-1: Manufacturer: syz [ 314.184435][ T5833] usb 5-1: SerialNumber: syz [ 314.210895][ T5833] usb 5-1: config 0 descriptor?? [ 314.290745][T12730] team0: Port device team_slave_0 added [ 314.306167][T12696] hsr_slave_0: entered promiscuous mode [ 314.324395][T12696] hsr_slave_1: entered promiscuous mode [ 314.338676][T12696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.346243][T12696] Cannot create hsr debugfs directory [ 314.356331][T12730] team0: Port device team_slave_1 added [ 314.434116][ T5833] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 314.482056][T12730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.494254][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.528147][T12730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.541316][T12730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.548377][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.575120][T12730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.652376][T12730] hsr_slave_0: entered promiscuous mode [ 314.659466][T12730] hsr_slave_1: entered promiscuous mode [ 314.665421][T12730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.673686][T12730] Cannot create hsr debugfs directory [ 314.709151][ T37] bridge_slave_1: left allmulticast mode [ 314.714799][ T37] bridge_slave_1: left promiscuous mode [ 314.720702][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 314.733063][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.743668][ T37] bridge_slave_0: left allmulticast mode [ 314.753977][ T37] bridge_slave_0: left promiscuous mode [ 314.759793][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.870979][ T37] ip6gretap0 (unregistering): left allmulticast mode [ 314.877934][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 314.886470][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 314.901545][ T10] usb 4-1: config 0 has no interface number 0 [ 314.912273][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.932152][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 314.962824][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 314.982381][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.990550][ T10] usb 4-1: Product: syz [ 314.994718][ T10] usb 4-1: Manufacturer: syz [ 315.000398][ T10] usb 4-1: SerialNumber: syz [ 315.031363][ T10] usb 4-1: config 0 descriptor?? [ 315.234150][ T37] bond0 (unregistering): left promiscuous mode [ 315.242146][ T37] bond_slave_0: left promiscuous mode [ 315.247652][ T37] bond_slave_1: left promiscuous mode [ 315.269092][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.288525][ T37] bond_slave_0: left allmulticast mode [ 315.295592][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.308568][ T37] bond_slave_1: left allmulticast mode [ 315.315121][ T37] bond0 (unregistering): Released all slaves [ 315.450538][ T10] appletouch 4-1:0.85: Failed to read mode from device. [ 315.468298][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 315.499332][ T10] usb 4-1: USB disconnect, device number 43 [ 315.520095][ T5833] usb 5-1: reset high-speed USB device number 44 using dummy_hcd [ 315.545226][ T5833] usb 5-1: device reset changed ep0 maxpacket size! [ 315.565500][ T5833] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 315.578026][ T5833] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 315.587024][ T9] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 315.605490][ T5833] usb 5-1: USB disconnect, device number 44 [ 315.617945][ T9] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 315.625611][ T30] audit: type=1400 audit(1752495074.931:935): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 315.652837][ T9] ------------[ cut here ]------------ [ 315.658891][ T9] WARNING: CPU: 0 PID: 9 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 315.667594][ T9] Modules linked in: [ 315.671817][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 315.681955][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.692330][ T9] Workqueue: events request_firmware_work_func [ 315.698763][ T9] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 315.704326][ T9] Code: c8 a6 5a ff 85 ed 74 1c e8 7f ab 5a ff be 04 00 00 00 48 89 df e8 62 8d c1 ff f0 ff 03 5b 5d e9 48 fc 29 09 e8 63 ab 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 45 85 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 315.724233][ T9] RSP: 0000:ffffc900000e7790 EFLAGS: 00010293 [ 315.730592][ T9] RAX: 0000000000000000 RBX: ffff88807ce85f00 RCX: ffffffff826146f8 [ 315.738619][ T9] RDX: ffff88801e28c880 RSI: ffffffff8261471d RDI: 0000000000000005 [ 315.746594][ T9] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 315.754736][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806cd740b0 [ 315.762780][ T9] R13: ffff888056ddbfb0 R14: 0000000000000000 R15: ffff888056ddbfa8 [ 315.770837][ T9] FS: 0000000000000000(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 315.779938][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.786534][ T9] CR2: 00007f2b20ce1f98 CR3: 000000000e382000 CR4: 00000000003526f0 [ 315.795226][ T9] Call Trace: [ 315.798559][ T9] [ 315.801685][ T9] kernfs_get+0x1f/0x30 [ 315.805859][ T9] kobject_add_internal+0x353/0x9b0 [ 315.811290][ T9] kobject_add+0x16e/0x240 [ 315.815729][ T9] ? __pfx_kobject_add+0x10/0x10 [ 315.820741][ T9] get_device_parent+0x399/0x4e0 [ 315.825697][ T9] device_add+0x1ad/0x1a70 [ 315.830176][ T9] ? __pfx_device_add+0x10/0x10 [ 315.835037][ T9] ? __init_waitqueue_head+0xca/0x150 [ 315.840494][ T9] firmware_fallback_sysfs+0x2ec/0xbe0 [ 315.845972][ T9] _request_firmware+0xfe9/0x1470 [ 315.851091][ T9] ? __pfx__request_firmware+0x10/0x10 [ 315.856564][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 315.862424][ T9] ? debug_object_deactivate+0x1ec/0x3a0 [ 315.868100][ T9] ? finish_task_switch.isra.0+0x221/0xc10 [ 315.873921][ T9] request_firmware_work_func+0xea/0x250 [ 315.879599][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 315.885852][ T9] ? rcu_is_watching+0x12/0xc0 [ 315.890674][ T9] process_one_work+0x9cf/0x1b70 [ 315.895633][ T9] ? __pfx_process_one_work+0x10/0x10 [ 315.901102][ T9] ? assign_work+0x1a0/0x250 [ 315.905908][ T9] worker_thread+0x6c8/0xf10 [ 315.910713][ T9] ? __pfx_worker_thread+0x10/0x10 [ 315.915836][ T9] kthread+0x3c5/0x780 [ 315.919978][ T9] ? __pfx_kthread+0x10/0x10 [ 315.924576][ T9] ? rcu_is_watching+0x12/0xc0 [ 315.930512][ T9] ? __pfx_kthread+0x10/0x10 [ 315.935120][ T9] ret_from_fork+0x5d7/0x6f0 [ 315.939779][ T9] ? __pfx_kthread+0x10/0x10 [ 315.944375][ T9] ret_from_fork_asm+0x1a/0x30 [ 315.949218][ T9] [ 315.952238][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 315.959508][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 315.969558][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.979600][ T9] Workqueue: events request_firmware_work_func [ 315.985750][ T9] Call Trace: [ 315.989014][ T9] [ 315.991931][ T9] dump_stack_lvl+0x3d/0x1f0 [ 315.996516][ T9] panic+0x71c/0x800 [ 316.000409][ T9] ? __pfx_panic+0x10/0x10 [ 316.004822][ T9] ? show_trace_log_lvl+0x29b/0x3e0 [ 316.010040][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 316.015143][ T9] ? kernfs_get.part.0+0x6e/0x80 [ 316.020082][ T9] check_panic_on_warn+0xab/0xb0 [ 316.025008][ T9] __warn+0xf6/0x3c0 [ 316.028890][ T9] ? kernfs_get.part.0+0x6e/0x80 [ 316.033823][ T9] report_bug+0x3c3/0x580 [ 316.038155][ T9] ? kernfs_get.part.0+0x6e/0x80 [ 316.043093][ T9] handle_bug+0x184/0x210 [ 316.047417][ T9] exc_invalid_op+0x17/0x50 [ 316.051919][ T9] asm_exc_invalid_op+0x1a/0x20 [ 316.056757][ T9] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 316.062297][ T9] Code: c8 a6 5a ff 85 ed 74 1c e8 7f ab 5a ff be 04 00 00 00 48 89 df e8 62 8d c1 ff f0 ff 03 5b 5d e9 48 fc 29 09 e8 63 ab 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 45 85 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 316.081893][ T9] RSP: 0000:ffffc900000e7790 EFLAGS: 00010293 [ 316.087948][ T9] RAX: 0000000000000000 RBX: ffff88807ce85f00 RCX: ffffffff826146f8 [ 316.095905][ T9] RDX: ffff88801e28c880 RSI: ffffffff8261471d RDI: 0000000000000005 [ 316.103862][ T9] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 316.111822][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806cd740b0 [ 316.119780][ T9] R13: ffff888056ddbfb0 R14: 0000000000000000 R15: ffff888056ddbfa8 [ 316.127745][ T9] ? kernfs_get.part.0+0x48/0x80 [ 316.132683][ T9] ? kernfs_get.part.0+0x6d/0x80 [ 316.137626][ T9] kernfs_get+0x1f/0x30 [ 316.141774][ T9] kobject_add_internal+0x353/0x9b0 [ 316.146973][ T9] kobject_add+0x16e/0x240 [ 316.151392][ T9] ? __pfx_kobject_add+0x10/0x10 [ 316.156340][ T9] get_device_parent+0x399/0x4e0 [ 316.161279][ T9] device_add+0x1ad/0x1a70 [ 316.165687][ T9] ? __pfx_device_add+0x10/0x10 [ 316.170522][ T9] ? __init_waitqueue_head+0xca/0x150 [ 316.175894][ T9] firmware_fallback_sysfs+0x2ec/0xbe0 [ 316.181370][ T9] _request_firmware+0xfe9/0x1470 [ 316.186395][ T9] ? __pfx__request_firmware+0x10/0x10 [ 316.191845][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 316.197646][ T9] ? debug_object_deactivate+0x1ec/0x3a0 [ 316.203275][ T9] ? finish_task_switch.isra.0+0x221/0xc10 [ 316.209082][ T9] request_firmware_work_func+0xea/0x250 [ 316.214710][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 316.220953][ T9] ? rcu_is_watching+0x12/0xc0 [ 316.225712][ T9] process_one_work+0x9cf/0x1b70 [ 316.230650][ T9] ? __pfx_process_one_work+0x10/0x10 [ 316.236018][ T9] ? assign_work+0x1a0/0x250 [ 316.240600][ T9] worker_thread+0x6c8/0xf10 [ 316.245193][ T9] ? __pfx_worker_thread+0x10/0x10 [ 316.250292][ T9] kthread+0x3c5/0x780 [ 316.254350][ T9] ? __pfx_kthread+0x10/0x10 [ 316.258931][ T9] ? rcu_is_watching+0x12/0xc0 [ 316.263689][ T9] ? __pfx_kthread+0x10/0x10 [ 316.268268][ T9] ret_from_fork+0x5d7/0x6f0 [ 316.272856][ T9] ? __pfx_kthread+0x10/0x10 [ 316.277433][ T9] ret_from_fork_asm+0x1a/0x30 [ 316.282200][ T9] [ 316.285407][ T9] Kernel Offset: disabled [ 316.289712][ T9] Rebooting in 86400 seconds..