last executing test programs: 1m36.562889202s ago: executing program 1 (id=1647): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x22, 0x0, &(0x7f0000000180)) 1m36.157713845s ago: executing program 1 (id=1648): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x0, @pix_mp={0x0, 0x0, 0x47425247}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x0, 0xfc}}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x0, 0x1, [{0x1, 0x1}]}) 1m32.917329791s ago: executing program 1 (id=1650): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m28.081728118s ago: executing program 1 (id=1655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x2, 0x4, 0x0, 0x0, @adapter}, {0x2, 0x2}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000680)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0f9f0fa952600cb00845174f08076f8d7843ec0008806800008024000200e72a16c479f91ac848aaf6aa0d58a8141e881077557e4b16bae7a44756fb319a2400010000000000000000000000000000000000000000000000000000000000000000001400040002492b00ac1414bb00000000000000000600050000000000780000800600fc000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39224800098028000080060001000a000000140004175ed1f40000ff7f000000000000000002050003000000000003000080060001000200000008000200ac1414aa05000300000000000800008004000980080005000100000008000100", @ANYRES32=r8], 0x134}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$packet(0x11, 0x0, 0x300) 1m22.100521461s ago: executing program 1 (id=1671): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='sysfs\x00', 0x0, r5) 1m20.642021743s ago: executing program 1 (id=1674): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000", 0x36}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) shmctl$IPC_SET(0x0, 0x6, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 1m11.701137466s ago: executing program 0 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 1m6.76704544s ago: executing program 0 (id=1698): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82781) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x61, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result}], 0x1c) 1m1.869650417s ago: executing program 3 (id=1707): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050007000012000020000600000408000300", @ANYRES32=r4, @ANYBLOB="08000500"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="9000005c", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="59000e00800000000802110000000802110000015050505050500000000000000000000064000000040600000000000025030000002d1a00000000000000000000000000000000000000000000000000007606000000000000000000080026006c09000008000c006400000008000d0003000000"], 0x90}}, 0x0) sync() r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0x1000000, 0x7]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000280)='./file3/file0\x00', &(0x7f0000000240)='aufs\x00', 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) socket$packet(0x11, 0x0, 0x300) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 32.72616733s ago: executing program 4 (id=1755): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r2 = gettid() r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rt_sigqueueinfo(r2, 0xb, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffd}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={r10}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) 29.648933702s ago: executing program 4 (id=1762): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x4, 0x2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 28.339213754s ago: executing program 4 (id=1763): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x0, 0x7, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r3) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6(0xa, 0x8b3f341251287e20, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x2, 0x100000000, 0x100, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x814, 0x0, 0x2d, 0x3, 0x9], 0xd000, 0x4300}) 26.168268286s ago: executing program 4 (id=1764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x107}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c2", 0x66}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d1", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435071aff78177e946cf231de4f389b695c5f49772b8abb6b88226fd4c2b0c57d47b98f2aa1b2ec38c4a97f3783023f04cdb380dd6a00d2fc63c932a9876863728e1fcb245109713c16375ffc68b041b86f737c41233cf2a05e51699db6a0e3c4b82b9ca613bea89cefd2ace608e361379b1aeefb75d0aa2db26dcddc9365a8c02f49af78aa6b41599fa501f9b96824bed5cff2028bb06f3852e69b3e58b659606b7ff7e282473701c95f1da7e742b76392f90a89c65577415c62e2b495027153030cf761b44eb1ce8816f14b71f4ecb066111dea78d77fa4b58bc3b27250a516cd5f90b3df608a06eca61970a028193f5ef07ab0cc90936633e4894831d5294011e1dd1f157fe36b0897bc2d8269989a85a326038ef0f6fcec6d5fc1d88f552e2c840489e4b2df437162a800bbf60068f2a382bb4921afeee040d23aae0b3104fe8c4ae098cc71600bb5bec7393b35b4b6066f2ef0c32f5b0a3fec9a005a55293c87437354f8bcb3d8ff36d80cd300c1dddfe331c7eb82a85daa8c2bd5c3ecddb0dec54a85638154b479644ecc2f266994eca97618113ed709734f98a9f6e09f3fb117ebd03e21553e016aa1421eb14c67cb64c4707b0958cfd08776fa1055f5bff34987891c70065b724832560c9e567801fcecc20c399f4857dffc765b79fa4a28f457b3af64180e1094806a65f7fcc73eac94221a707dd8d679b018ce4df7fd960fe305836dc0507aba04e52dc9256ddd20747b4dd1a9214231743ace12ee9e7dae8f6adbef78096f6865731cf1afb8cad3e9b860e0a319a3a3a401aac8a5ed95107e06c7f722b4388d1c3603bf300e92dde9c5b36d59e9374a8a75773f6abcd106e8456f579c4d3c1d3cd29bc4b18985ff6ffd0f6344d547d4f888d150477b6c0a85e3b3234652dce2102d14c8ba9030bc2f4b5860e41ee622ebb62fa1b5886010fa7f894e540e696fb849eaae4f13bcf23b27c2de80a7a79e214125e26a77047277821817f92a7bb7905a5b47f00faeefbf58344a2374294edc97ffcccea02779a7580365d8444a5198659a194eca3c2a800823e7b6feaa4eec37c4c6627bbe212edb591c39dcf67d61f3d032e0f1071fd5387dc5ca22332e4f065780cc32643fd4c32c1c59c0128da369267e7900bc672767ea80a504cd21dbb61932bf0f497eb2494266cd4a321444cd1bea26956845dd0e992e2a073e80bff16044d012ebb1f269a91f75f0a565cdf30d11c50ee2d494d83b6b4409adfdf6cc28c9f0368d0fe321dc53d4a77e488fef893a43ebfe2854a793a104862417901c5f19c646da1155fcbcb86b9adcae5b26ece458bbf88e01bdafe55894fb0370139f14ead7562f4633e476b77fdd7fabf441e6c04a5b36396204c075a4b7a78c544638f8cfd5f97423d989fe9cd8771b0bbe6861ba499d92b896da6f4c94e3fa8e45395900e227fbbf2a7826b7694b900be910", 0x4eb}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 25.655876195s ago: executing program 4 (id=1766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x58, r2, 0x425, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 25.198386772s ago: executing program 4 (id=1767): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050007000012000020000600000408000300", @ANYRES32=r4, @ANYBLOB="08000500"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="9000005c", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="59000e00800000000802110000000802110000015050505050500000000000000000000064000000040600000000000025030000002d1a00000000000000000000000000000000000000000000000000007606000000000000000000080026006c09000008000c006400000008000d0003000000"], 0x90}}, 0x0) sync() r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0x1000000, 0x7]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000280)='./file3/file0\x00', &(0x7f0000000240)='aufs\x00', 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) socket$packet(0x11, 0x0, 0x300) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 18.245974304s ago: executing program 0 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x23}}) 17.938001259s ago: executing program 0 (id=1775): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x0, 0x5003) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/169, 0xa9, 0x25) syz_emit_ethernet(0x19f, &(0x7f00000023c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "021736", 0x169, 0x2f, 0x0, @private2, @empty, {[@dstopts={0x0, 0x18, '\x00', [@pad1, @generic={0x0, 0xb4, "64b4d8306304776b15ebb88fb44663385df6ccfeda8b4595c3b33dd454439d189a57669ea6e1d680bf45a3f32b541eae0c045d9bba19a0e54ea1777dbbc79345de99200a762643cf23741e711086032560260cd2ca248244ba6b6ef53607e9d934a3019c27c43eea33f876c0f732da5c752767cbf1116c80b660bf63e8c11b97976ce3c774c4b48813c9ef4836e266e564d855ad4f96faa0ab32833b7c01c9646000afac191134cb74891946d9044ad17b8858ec"}, @ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "3b9472a5e9fd05d7af2ed6724a857e0e77315791ba810aa7941a06acff0303013b19fcad0d432a335ed1207f159d1084259498bfce825f358ecc81f1a8c5fa03cc634eb5534a4c04ac9f215a9ab2f675ab084be189"}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}}, 0x0) 16.113874242s ago: executing program 0 (id=1776): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x14}) 15.748814799s ago: executing program 0 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0]) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) epoll_create1(0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x4) 7.472056004s ago: executing program 2 (id=1781): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 7.046007394s ago: executing program 2 (id=1782): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x4, 0x2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6.749543491s ago: executing program 3 (id=1724): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) 5.443654658s ago: executing program 2 (id=1784): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x25, 0xf8, 0x5e, 0x40, 0xbfd, 0x17, 0x2fa3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x70, 0x31, 0x66, 0x0, [], [{{0x9, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x8c, 0x2}}]}}]}}]}}, 0x0) 3.864577895s ago: executing program 3 (id=1785): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 3.534017035s ago: executing program 3 (id=1786): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x0, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) clock_gettime(0x0, 0x0) bpf$PROG_LOAD(0x1e, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x3}]}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f00000000c0)=""/252, 0x39, 0xfc, 0x1}, 0x20) creat(0x0, 0xd931d3864d39dcca) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbba7}, 0x90) 3.34927535s ago: executing program 2 (id=1787): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c000180380004001400010002000000ac1414aa0000000000000000200002000a00000000000000fc000000000000000000000000000000000000000d0001007564713a73"], 0x60}}, 0x0) 2.602477743s ago: executing program 3 (id=1788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0x5000, 0x0) 2.250403938s ago: executing program 2 (id=1789): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) set_mempolicy(0x3, 0x0, 0x7) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) mlockall(0x2) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/3) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000308000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) 2.129588378s ago: executing program 3 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x813014, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r5}}, {@gid={'gid', 0x3d, r6}}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"054b3b05"}}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000794a29408c46ea906d99010203010902240001000000010e010100092100000d0122000009050b03"], 0x0) 0s ago: executing program 2 (id=1791): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x0, 0x7, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r3) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6(0xa, 0x8b3f341251287e20, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x2, 0x100000000, 0x100, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x814, 0x0, 0x2d, 0x3, 0x9], 0xd000, 0x4300}) kernel console output (not intermixed with test programs): retrying later): interface not active [ 1279.673131][T12970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1279.751911][T12970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1279.807865][T12845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.963255][T13027] hsr_slave_0: entered promiscuous mode [ 1280.001899][ T941] usb 1-1: USB disconnect, device number 38 [ 1280.017897][T13027] hsr_slave_1: entered promiscuous mode [ 1280.039564][T13027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1280.064206][T13027] Cannot create hsr debugfs directory [ 1280.859252][ T29] audit: type=1326 audit(1722507136.629:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.3.1556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b7773b9 code=0x0 [ 1281.018175][ T2570] bridge_slave_1: left allmulticast mode [ 1281.028305][ T2570] bridge_slave_1: left promiscuous mode [ 1281.063187][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.141448][ T2570] bridge_slave_0: left allmulticast mode [ 1281.170318][ T2570] bridge_slave_0: left promiscuous mode [ 1281.199141][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.598411][T13224] x_tables: unsorted entry at hook 3 [ 1283.726412][ T941] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1283.775589][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.835480][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.872562][ T2570] bond0 (unregistering): Released all slaves [ 1283.921855][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1283.946665][ T941] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1283.979392][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1283.991005][ T941] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1284.009148][ T941] usb 4-1: New USB device found, idVendor=22b8, idProduct=4234, bcdDevice=32.84 [ 1284.019116][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.036409][ T941] usb 4-1: Product: syz [ 1284.042421][ T941] usb 4-1: Manufacturer: syz [ 1284.052364][ T941] usb 4-1: SerialNumber: syz [ 1284.071699][ T941] usb 4-1: config 0 descriptor?? [ 1284.079061][ T941] ipaq 4-1:0.0: PocketPC PDA converter detected [ 1284.095876][ T941] usb 4-1: active config #0 != 1 ?? [ 1284.247783][ T2570] hsr_slave_0: left promiscuous mode [ 1284.326861][ T2570] hsr_slave_1: left promiscuous mode [ 1284.376651][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.407818][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.568017][ T941] usb 4-1: USB disconnect, device number 18 [ 1285.903657][ T29] audit: type=1326 audit(1722507141.679:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.3.1563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b7773b9 code=0x0 [ 1286.913440][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 1287.956821][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 1289.325469][T11685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1289.340645][T11685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1289.357218][T11685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1289.365537][T11685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1289.376743][T11685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1289.384712][T11685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1290.752989][T12970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.777758][T13282] Bluetooth: MGMT ver 1.23 [ 1291.338300][T12970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.438251][T11685] Bluetooth: hci0: command tx timeout [ 1292.740200][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.747469][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.825757][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.833049][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.410678][T13276] chnl_net:caif_netlink_parms(): no params data found [ 1293.466633][ T5339] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1293.517214][T11685] Bluetooth: hci0: command tx timeout [ 1293.690532][ T5339] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1293.720139][ T5339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.765454][ T5339] usb 1-1: Product: syz [ 1293.812752][ T5339] usb 1-1: Manufacturer: syz [ 1293.838450][ T5339] usb 1-1: SerialNumber: syz [ 1293.859673][ T5339] usb 1-1: config 0 descriptor?? [ 1293.939482][T13027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1294.107385][T13027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1294.245440][ T5268] usb 1-1: USB disconnect, device number 39 [ 1294.473786][T13027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1295.593931][T13027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1295.601622][T11685] Bluetooth: hci0: command tx timeout [ 1295.678387][T13276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.691245][T13276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.700147][T13276] bridge_slave_0: entered allmulticast mode [ 1295.718227][T13276] bridge_slave_0: entered promiscuous mode [ 1295.728564][T13276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.742422][T13276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.761894][T13276] bridge_slave_1: entered allmulticast mode [ 1295.957937][T13276] bridge_slave_1: entered promiscuous mode [ 1297.054538][ T29] audit: type=1400 audit(1722507152.829:665): avc: denied { getopt } for pid=13341 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1297.256072][T13276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.312995][T13276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.446074][T12970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.666791][T11685] Bluetooth: hci0: command tx timeout [ 1297.875614][T13276] team0: Port device team_slave_0 added [ 1298.161167][T13276] team0: Port device team_slave_1 added [ 1298.350863][ T2570] bridge_slave_1: left allmulticast mode [ 1298.369237][ T2570] bridge_slave_1: left promiscuous mode [ 1298.396861][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.469735][ T2570] bridge_slave_0: left allmulticast mode [ 1298.488790][ T2570] bridge_slave_0: left promiscuous mode [ 1298.507836][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.165018][ T29] audit: type=1400 audit(1722507154.939:666): avc: denied { read } for pid=13362 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1299.355249][ T29] audit: type=1400 audit(1722507155.129:667): avc: denied { ioctl } for pid=13362 comm="syz.0.1584" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1300.418025][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.474834][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.547893][ T2570] bond0 (unregistering): Released all slaves [ 1300.719321][T13276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.729876][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.765282][T13276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.808622][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.812909][T13276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.815300][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.828374][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.828447][T13276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.562529][ T2570] hsr_slave_0: left promiscuous mode [ 1301.607171][ T2570] hsr_slave_1: left promiscuous mode [ 1301.638906][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.679031][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.260649][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 1303.489805][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 1305.310009][T13392] netlink: 'syz.3.1592': attribute type 2 has an invalid length. [ 1305.527921][ T5221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1305.596511][ T5221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1305.636773][ T5221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1305.648952][ T5221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1305.657572][ T5221] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1305.665060][ T5221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1306.374562][T13276] hsr_slave_0: entered promiscuous mode [ 1306.408779][T13276] hsr_slave_1: entered promiscuous mode [ 1306.600920][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 1307.007884][ T5221] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1307.413267][T10792] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1307.829149][ T5221] Bluetooth: hci5: command tx timeout [ 1308.422759][T10792] usb 1-1: Using ep0 maxpacket: 32 [ 1308.434980][T10792] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1308.459837][T10792] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1308.476055][T10792] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1308.484944][T10792] usb 1-1: Product: syz [ 1308.489225][T10792] usb 1-1: Manufacturer: syz [ 1308.493885][T10792] usb 1-1: SerialNumber: syz [ 1308.502449][T10792] usb 1-1: config 0 descriptor?? [ 1308.529544][T13404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1309.004513][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.010832][T13404] netlink: 'syz.0.1596': attribute type 8 has an invalid length. [ 1309.035816][T13404] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1596'. [ 1309.224263][ T941] usb 1-1: USB disconnect, device number 40 [ 1309.651136][ T29] audit: type=1400 audit(1722507165.429:668): avc: denied { bind } for pid=13432 comm="syz.3.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1309.809112][T13435] netlink: 'syz.3.1599': attribute type 11 has an invalid length. [ 1309.906803][ T5221] Bluetooth: hci5: command tx timeout [ 1309.974798][T13436] netlink: 'syz.3.1599': attribute type 11 has an invalid length. [ 1310.230740][ T29] audit: type=1400 audit(1722507166.009:669): avc: denied { write } for pid=13438 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1310.251484][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.345371][T13436] debugfs: Directory 'netdev:' with parent 'phy55' already present! [ 1310.669753][T13393] chnl_net:caif_netlink_parms(): no params data found [ 1310.737405][ T5339] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1310.946510][ T5339] usb 1-1: Using ep0 maxpacket: 32 [ 1310.972936][ T5339] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1311.013433][ T5339] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1311.089748][ T5339] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1311.148793][ T5339] usb 1-1: Product: syz [ 1311.156408][ T5339] usb 1-1: Manufacturer: syz [ 1311.161108][ T5339] usb 1-1: SerialNumber: syz [ 1311.210307][ T5339] usb 1-1: config 0 descriptor?? [ 1311.216485][T13442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1311.592160][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.599759][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.822789][ T5229] usb 1-1: USB disconnect, device number 41 [ 1311.996490][ T5221] Bluetooth: hci5: command tx timeout [ 1312.167899][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.175125][T11323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.135014][T11685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1313.147538][T11685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1313.158377][T11685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1313.174099][T11685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1313.182267][T11685] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1313.193996][T11685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1313.346967][T13393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.380376][T13393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.413864][T13393] bridge_slave_0: entered allmulticast mode [ 1313.454852][T13393] bridge_slave_0: entered promiscuous mode [ 1313.636606][T13393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.643917][T13393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.706653][T13393] bridge_slave_1: entered allmulticast mode [ 1313.716046][T13393] bridge_slave_1: entered promiscuous mode [ 1314.033616][ T2570] bridge_slave_1: left allmulticast mode [ 1314.066429][ T5221] Bluetooth: hci5: command tx timeout [ 1314.076336][ T2570] bridge_slave_1: left promiscuous mode [ 1314.083052][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.119265][ T2570] bridge_slave_0: left allmulticast mode [ 1314.125262][ T2570] bridge_slave_0: left promiscuous mode [ 1314.174507][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.276468][ T29] audit: type=1400 audit(1722507170.049:670): avc: denied { map } for pid=13465 comm="syz.0.1604" path="/proc/sys/net/ipv4/tcp_wmem" dev="proc" ino=59631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 1315.266706][ T5221] Bluetooth: hci3: command tx timeout [ 1316.193467][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.275519][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.328207][ T2570] bond0 (unregistering): Released all slaves [ 1316.390272][T13393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.501035][T13393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.591883][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 1316.669214][T13276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1317.019247][ T2570] hsr_slave_0: left promiscuous mode [ 1317.076457][ T2570] hsr_slave_1: left promiscuous mode [ 1317.192397][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.237321][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.356587][ T5221] Bluetooth: hci3: command tx timeout [ 1318.808496][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 1319.057092][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 1319.426652][ T5221] Bluetooth: hci3: command tx timeout [ 1321.506879][ T5221] Bluetooth: hci3: command tx timeout [ 1321.712940][T13276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1321.758663][T13276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1321.827503][T13276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1321.960579][T13393] team0: Port device team_slave_0 added [ 1322.011185][T13393] team0: Port device team_slave_1 added [ 1322.307558][T11685] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1322.326666][T11685] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1322.346698][T11685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1322.368530][T11685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1322.377190][T11685] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1322.396776][T11685] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1322.579289][T13393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.663063][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.766444][T13393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.869344][T13393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.930671][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.986463][ T29] audit: type=1400 audit(1722507178.749:671): avc: denied { create } for pid=13484 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1323.005315][T13393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.116452][ T29] audit: type=1400 audit(1722507178.759:672): avc: denied { setattr } for pid=13484 comm="syz.0.1608" name="NETLINK" dev="sockfs" ino=59726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1323.334070][ T29] audit: type=1400 audit(1722507178.799:673): avc: denied { ioctl } for pid=13484 comm="syz.0.1608" path="socket:[59726]" dev="sockfs" ino=59726 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1323.395944][T13494] netlink: 'syz.0.1609': attribute type 11 has an invalid length. [ 1323.508094][T13497] netlink: 'syz.0.1609': attribute type 11 has an invalid length. [ 1323.658036][T13497] debugfs: Directory 'netdev:' with parent 'phy49' already present! [ 1323.893841][T13393] hsr_slave_0: entered promiscuous mode [ 1323.947035][T13393] hsr_slave_1: entered promiscuous mode [ 1324.006575][T13393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1324.014205][T13393] Cannot create hsr debugfs directory [ 1324.553689][T11685] Bluetooth: hci6: command tx timeout [ 1325.711143][T13456] chnl_net:caif_netlink_parms(): no params data found [ 1326.626596][T11685] Bluetooth: hci6: command tx timeout [ 1328.683105][T13456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.708727][T11685] Bluetooth: hci6: command tx timeout [ 1328.796559][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.804139][T13456] bridge_slave_0: entered allmulticast mode [ 1328.818642][T13456] bridge_slave_0: entered promiscuous mode [ 1329.227147][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.262308][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.310023][T13456] bridge_slave_1: entered allmulticast mode [ 1329.378102][T13456] bridge_slave_1: entered promiscuous mode [ 1329.675314][T13482] chnl_net:caif_netlink_parms(): no params data found [ 1329.767271][T13456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.808332][T13456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.925219][T13276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.356239][T13456] team0: Port device team_slave_0 added [ 1330.787208][T11685] Bluetooth: hci6: command tx timeout [ 1333.830725][T13456] team0: Port device team_slave_1 added [ 1333.964999][ T2570] bridge_slave_1: left allmulticast mode [ 1333.970933][ T2570] bridge_slave_1: left promiscuous mode [ 1333.980927][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.018038][ T2570] bridge_slave_0: left allmulticast mode [ 1334.023734][ T2570] bridge_slave_0: left promiscuous mode [ 1334.105204][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.478960][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.533471][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.549956][ T2570] bond0 (unregistering): Released all slaves [ 1335.909657][ T2570] hsr_slave_0: left promiscuous mode [ 1335.915696][ T2570] hsr_slave_1: left promiscuous mode [ 1335.957459][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.996917][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.527159][ T29] audit: type=1400 audit(1722507193.309:674): avc: denied { read } for pid=13586 comm="syz.0.1622" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1337.600951][ T29] audit: type=1400 audit(1722507193.339:675): avc: denied { open } for pid=13586 comm="syz.0.1622" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1337.648066][ T29] audit: type=1400 audit(1722507193.339:676): avc: denied { ioctl } for pid=13586 comm="syz.0.1622" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1337.689483][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 1337.715277][ T29] audit: type=1400 audit(1722507193.499:677): avc: denied { write } for pid=13586 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1337.764121][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 1338.981052][T13482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.012719][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.050447][T13482] bridge_slave_0: entered allmulticast mode [ 1339.070184][T13482] bridge_slave_0: entered promiscuous mode [ 1339.092737][T13276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.150726][T13456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.166366][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.232903][T13456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.305866][T13482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.318218][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.327041][T13482] bridge_slave_1: entered allmulticast mode [ 1339.334318][T13482] bridge_slave_1: entered promiscuous mode [ 1339.380035][T13456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.391971][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.459679][T13456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.554411][T13482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.744277][T13482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.776425][ T29] audit: type=1400 audit(1722507195.359:678): avc: denied { execmem } for pid=13589 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1340.801100][ T29] audit: type=1400 audit(1722507196.579:679): avc: denied { write } for pid=13595 comm="syz.0.1625" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1340.866520][ T29] audit: type=1400 audit(1722507196.579:680): avc: denied { map } for pid=13595 comm="syz.0.1625" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1340.894659][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.901972][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.094811][T13482] team0: Port device team_slave_0 added [ 1341.142614][T13482] team0: Port device team_slave_1 added [ 1341.372635][T13456] hsr_slave_0: entered promiscuous mode [ 1341.399338][T13456] hsr_slave_1: entered promiscuous mode [ 1341.412275][T13456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1341.423489][T13456] Cannot create hsr debugfs directory [ 1341.454597][T13393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1341.472207][T13393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1341.524991][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.532401][T10792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1341.731125][T13482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.739428][T13482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.784268][T13482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.799737][T13393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1341.824274][T13393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1341.888841][T13482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.895950][T13482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.980965][T13482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.473759][T13482] hsr_slave_0: entered promiscuous mode [ 1342.497889][T13482] hsr_slave_1: entered promiscuous mode [ 1342.512795][T13482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1342.532965][T13482] Cannot create hsr debugfs directory [ 1342.930467][ T2570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.201967][ T2570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.481061][ T2570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.736874][ T2570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.937706][T13393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.144374][ T2570] bridge_slave_1: left allmulticast mode [ 1345.172422][ T2570] bridge_slave_1: left promiscuous mode [ 1345.217552][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.247626][ T2570] bridge_slave_0: left allmulticast mode [ 1345.274594][ T2570] bridge_slave_0: left promiscuous mode [ 1345.283849][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.301434][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.345135][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.378177][ T2570] bond0 (unregistering): Released all slaves [ 1347.463687][T13393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.571748][T13276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.995899][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.003286][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.180756][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.188137][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.262899][T13670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1348.673260][ T2570] hsr_slave_0: left promiscuous mode [ 1348.689409][ T2570] hsr_slave_1: left promiscuous mode [ 1348.703026][ T2570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1348.722262][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.740458][ T2570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.777047][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.911783][ T2570] veth1_macvtap: left promiscuous mode [ 1348.974162][ T2570] veth0_macvtap: left promiscuous mode [ 1348.982487][ T2570] veth1_vlan: left promiscuous mode [ 1348.989511][ T2570] veth0_vlan: left promiscuous mode [ 1349.550278][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1349.580643][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1349.590281][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1349.625706][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1349.634430][ T5221] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1349.643902][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1350.784082][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 1350.918789][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 1351.761493][T11685] Bluetooth: hci2: command tx timeout [ 1353.203592][T13456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1353.309550][T13456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1353.388304][T13456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1353.536064][T13456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1353.826558][T11685] Bluetooth: hci2: command tx timeout [ 1354.089374][T13482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1354.121538][T13482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1354.168529][T13677] chnl_net:caif_netlink_parms(): no params data found [ 1354.208689][T13393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.231565][T13482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1354.271145][T13482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1354.792696][T13393] veth0_vlan: entered promiscuous mode [ 1355.069765][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.086562][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.103172][T13677] bridge_slave_0: entered allmulticast mode [ 1355.116887][T13677] bridge_slave_0: entered promiscuous mode [ 1355.209774][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.227026][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.237410][T13677] bridge_slave_1: entered allmulticast mode [ 1355.249262][T13677] bridge_slave_1: entered promiscuous mode [ 1355.526105][T13393] veth1_vlan: entered promiscuous mode [ 1355.646763][T13677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.712771][T13677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.790826][T13456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.866915][T13456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.899718][T13677] team0: Port device team_slave_0 added [ 1355.906705][T11685] Bluetooth: hci2: command tx timeout [ 1355.979385][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.986659][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.039266][T13677] team0: Port device team_slave_1 added [ 1356.233573][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.240860][T11323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.280652][T13393] veth0_macvtap: entered promiscuous mode [ 1356.348433][ T2570] bridge_slave_1: left allmulticast mode [ 1356.354975][ T2570] bridge_slave_1: left promiscuous mode [ 1356.362695][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.388701][ T2570] bridge_slave_0: left allmulticast mode [ 1356.396710][ T2570] bridge_slave_0: left promiscuous mode [ 1356.402893][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.473625][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.563912][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.598472][ T2570] bond0 (unregistering): Released all slaves [ 1357.795176][T13677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.827261][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1357.870995][T13677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.951132][ T2570] hsr_slave_0: left promiscuous mode [ 1357.987162][T11685] Bluetooth: hci2: command tx timeout [ 1358.022418][ T2570] hsr_slave_1: left promiscuous mode [ 1358.047762][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.073987][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.441894][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 1359.657630][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 1359.868867][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1359.882909][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1359.899018][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1359.911637][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1359.960470][ T5221] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1359.976582][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1361.667444][T13677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.674411][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.706893][T13677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.780241][T13482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.865238][T13393] veth1_macvtap: entered promiscuous mode [ 1362.067570][ T5221] Bluetooth: hci0: command tx timeout [ 1362.138138][T13677] hsr_slave_0: entered promiscuous mode [ 1362.152954][T13677] hsr_slave_1: entered promiscuous mode [ 1362.190885][T13393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.220973][T13393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.252324][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.258695][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.276930][T13393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.298359][T13393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.327829][T13393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.388975][T13482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.642103][T13456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1362.699690][T13393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.717253][T13393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.736241][T13393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.771258][T13393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.789316][T13393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.826156][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.833343][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.064438][T13393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.118134][T13393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.136816][T13393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.145578][T13393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.218796][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.226206][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.792079][T13482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1364.147343][ T5221] Bluetooth: hci0: command tx timeout [ 1364.241832][T13456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.574803][T12521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.649068][T12521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.297310][T13705] chnl_net:caif_netlink_parms(): no params data found [ 1365.437388][T13482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.703290][T11685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1365.727448][T11685] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1365.743470][T11685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1365.754800][T11685] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1365.765584][T11685] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1365.787122][T11685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1366.226617][ T5221] Bluetooth: hci0: command tx timeout [ 1366.693949][T13705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.742573][T13705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.770621][T13705] bridge_slave_0: entered allmulticast mode [ 1366.788550][T13705] bridge_slave_0: entered promiscuous mode [ 1366.828449][T13705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.854725][T13705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.886666][T13705] bridge_slave_1: entered allmulticast mode [ 1366.894687][T13705] bridge_slave_1: entered promiscuous mode [ 1367.018763][T13456] veth0_vlan: entered promiscuous mode [ 1367.239999][ T7125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.390400][T13705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.481888][ T7125] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.541954][T13456] veth1_vlan: entered promiscuous mode [ 1367.595612][T13705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.809769][ T7125] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.907015][ T5221] Bluetooth: hci7: command tx timeout [ 1367.946941][T13677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1367.986627][T13677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1368.100970][T13482] veth0_vlan: entered promiscuous mode [ 1368.159849][ T7125] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.201382][T13705] team0: Port device team_slave_0 added [ 1368.245969][T13677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1368.316481][ T5221] Bluetooth: hci0: command tx timeout [ 1368.326629][T13677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1368.370234][T13705] team0: Port device team_slave_1 added [ 1368.501269][T13482] veth1_vlan: entered promiscuous mode [ 1368.585281][T13705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.592757][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.623594][T13705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.638920][T13705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.645898][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.676622][T13705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.949448][T13705] hsr_slave_0: entered promiscuous mode [ 1369.000470][T13705] hsr_slave_1: entered promiscuous mode [ 1369.007307][T13705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1369.014993][T13705] Cannot create hsr debugfs directory [ 1369.299977][T13456] veth0_macvtap: entered promiscuous mode [ 1369.315479][T13456] veth1_macvtap: entered promiscuous mode [ 1369.693229][ T7125] bridge_slave_1: left allmulticast mode [ 1369.706720][ T7125] bridge_slave_1: left promiscuous mode [ 1369.713082][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.761808][ T7125] bridge_slave_0: left allmulticast mode [ 1369.767750][ T7125] bridge_slave_0: left promiscuous mode [ 1369.778549][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.988104][ T5221] Bluetooth: hci7: command tx timeout [ 1371.037371][ T7125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.062346][ T7125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.073538][ T7125] bond0 (unregistering): Released all slaves [ 1371.090130][T13482] veth0_macvtap: entered promiscuous mode [ 1371.259765][T13744] chnl_net:caif_netlink_parms(): no params data found [ 1371.371601][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.421692][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.442641][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.456591][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.481275][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.492012][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.547202][T13456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.658835][T13482] veth1_macvtap: entered promiscuous mode [ 1371.952193][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.976362][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.986249][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1372.017035][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.027485][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1372.038499][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.057637][T13456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.066604][ T5221] Bluetooth: hci7: command tx timeout [ 1372.313629][T13677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.724746][T13705] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.036431][ T7125] hsr_slave_0: left promiscuous mode [ 1373.047760][ T7125] hsr_slave_1: left promiscuous mode [ 1373.116655][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.124203][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.194857][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.235615][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.337434][T11685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1373.356632][T11685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1373.375531][T11685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1373.387851][ T7125] veth1_macvtap: left promiscuous mode [ 1373.393619][ T7125] veth0_macvtap: left promiscuous mode [ 1373.401715][ T7125] veth1_vlan: left promiscuous mode [ 1373.416877][T11685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1373.424877][ T7125] veth0_vlan: left promiscuous mode [ 1373.439334][T11685] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1373.456940][T11685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1374.146604][T11685] Bluetooth: hci7: command tx timeout [ 1375.387524][ T7125] team0 (unregistering): Port device team_slave_1 removed [ 1375.586522][T11685] Bluetooth: hci3: command tx timeout [ 1375.612172][ T7125] team0 (unregistering): Port device team_slave_0 removed [ 1377.666986][T11685] Bluetooth: hci3: command tx timeout [ 1377.738365][T13705] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.907364][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.914922][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.956114][T13744] bridge_slave_0: entered allmulticast mode [ 1377.966796][T13744] bridge_slave_0: entered promiscuous mode [ 1377.998217][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.006133][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.029471][T13744] bridge_slave_1: entered allmulticast mode [ 1378.038440][T13744] bridge_slave_1: entered promiscuous mode [ 1378.048978][T13482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1378.059883][T13482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1378.070456][T13482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1378.083069][T13482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1378.095033][T13482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1378.106205][T13482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1378.130997][T13482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.234010][T13705] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.436073][T13482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1378.448475][T13482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1378.459297][T13482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1378.476436][T13482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1378.486929][T13482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1378.526344][T13482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1378.541777][T13482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.553704][T13677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.639970][T13705] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.714434][T13744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.801109][T13744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.879547][T13482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.896509][T13482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.910660][T13482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.920032][T13482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.989508][ T941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.996813][ T941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.219462][T13744] team0: Port device team_slave_0 added [ 1379.235810][T13689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.244908][T13689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.356150][T13744] team0: Port device team_slave_1 added [ 1379.708339][T13744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.733096][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1379.766535][T11685] Bluetooth: hci3: command tx timeout [ 1379.839838][T13744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.906218][T13744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.928307][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1379.966671][T13744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.732940][T13744] hsr_slave_0: entered promiscuous mode [ 1380.776921][T13744] hsr_slave_1: entered promiscuous mode [ 1380.840740][T13744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1380.867022][T13744] Cannot create hsr debugfs directory [ 1381.501552][ T2558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.536720][ T2558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.838342][T11685] Bluetooth: hci3: command tx timeout [ 1382.087352][T13705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1382.158120][T13705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1382.289760][T13705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1382.340924][T13705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1382.390502][T13783] chnl_net:caif_netlink_parms(): no params data found [ 1382.828052][ T5221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1382.844745][ T5221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1382.858864][ T5221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1382.922003][ T5221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1382.931587][ T5221] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1382.939240][ T5221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1382.970783][T13677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.589814][T13783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.597186][T13783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.604527][T13783] bridge_slave_0: entered allmulticast mode [ 1383.617379][T13783] bridge_slave_0: entered promiscuous mode [ 1383.643775][ T7125] bridge_slave_1: left allmulticast mode [ 1383.650292][ T7125] bridge_slave_1: left promiscuous mode [ 1383.657123][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.698099][ T7125] bridge_slave_0: left allmulticast mode [ 1383.703767][ T7125] bridge_slave_0: left promiscuous mode [ 1383.717609][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.957619][ T7125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.981258][ T7125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.030559][ T7125] bond0 (unregistering): Released all slaves [ 1385.036947][ T5221] Bluetooth: hci5: command tx timeout [ 1385.304196][T13783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.316786][T13783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.324228][T13783] bridge_slave_1: entered allmulticast mode [ 1385.349320][T13783] bridge_slave_1: entered promiscuous mode [ 1385.577027][ T7125] hsr_slave_0: left promiscuous mode [ 1385.628957][ T7125] hsr_slave_1: left promiscuous mode [ 1385.663680][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.676621][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.735504][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.756964][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.892096][ T7125] veth1_macvtap: left promiscuous mode [ 1385.916481][ T7125] veth0_macvtap: left promiscuous mode [ 1385.936695][ T7125] veth1_vlan: left promiscuous mode [ 1385.942033][ T7125] veth0_vlan: left promiscuous mode [ 1387.116921][ T5221] Bluetooth: hci5: command tx timeout [ 1387.831014][ T7125] team0 (unregistering): Port device team_slave_1 removed [ 1387.998241][ T7125] team0 (unregistering): Port device team_slave_0 removed [ 1389.192706][ T5221] Bluetooth: hci5: command tx timeout [ 1389.770103][T13783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.812119][T13783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.892060][T13677] veth0_vlan: entered promiscuous mode [ 1389.924922][T13677] veth1_vlan: entered promiscuous mode [ 1390.217376][T13783] team0: Port device team_slave_0 added [ 1390.304105][T13783] team0: Port device team_slave_1 added [ 1390.442676][T13783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.463906][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.492398][T13783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.555137][T13783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.570258][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.618018][T13783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.063076][T13783] hsr_slave_0: entered promiscuous mode [ 1391.130211][T13783] hsr_slave_1: entered promiscuous mode [ 1391.156739][T13783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1391.164554][T13783] Cannot create hsr debugfs directory [ 1391.191631][T13705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.276945][ T5221] Bluetooth: hci5: command tx timeout [ 1391.293614][T13677] veth0_macvtap: entered promiscuous mode [ 1391.575181][ T7125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.640254][T13744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1391.773699][T13677] veth1_macvtap: entered promiscuous mode [ 1391.864075][T13744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1391.897712][T13744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1391.989654][ T7125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.203378][T13705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.240977][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.252236][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.263325][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.275089][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.285878][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.296840][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.327343][T13677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.347004][T13744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1392.413531][ T7125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.487323][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.506813][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.558641][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.570068][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.580435][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.596489][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.629447][T13677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.740638][ T7125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.773250][T13838] chnl_net:caif_netlink_parms(): no params data found [ 1392.805817][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.813209][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.981747][T13677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.006965][T13677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.015734][T13677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.046353][T13677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.099537][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.106750][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.684153][T13705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.066686][T13838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.073925][T13838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.128847][T13838] bridge_slave_0: entered allmulticast mode [ 1394.157026][T13838] bridge_slave_0: entered promiscuous mode [ 1394.520016][T13838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.543254][T13838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.566957][T13838] bridge_slave_1: entered allmulticast mode [ 1394.578031][T13838] bridge_slave_1: entered promiscuous mode [ 1394.669566][ T7125] bridge_slave_1: left allmulticast mode [ 1394.675270][ T7125] bridge_slave_1: left promiscuous mode [ 1394.697962][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.718569][ T7125] bridge_slave_0: left allmulticast mode [ 1394.724250][ T7125] bridge_slave_0: left promiscuous mode [ 1394.747533][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.071732][ T7125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.127488][ T7125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.206744][ T7125] bond0 (unregistering): Released all slaves [ 1396.484055][T13838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.664984][T13838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.377941][T13838] team0: Port device team_slave_0 added [ 1397.580852][T13838] team0: Port device team_slave_1 added [ 1397.763192][T13838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.786909][T13838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.870073][T13838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.888590][T13705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.950948][T13744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.026652][T12521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.034680][T12521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.041710][T13744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.051961][T13838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.071367][T13838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.166490][T13838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.304119][ T7125] hsr_slave_0: left promiscuous mode [ 1398.326608][ T7125] hsr_slave_1: left promiscuous mode [ 1398.368418][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.383412][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.400487][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.447250][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.516195][ T7125] veth1_macvtap: left promiscuous mode [ 1398.536596][ T7125] veth0_macvtap: left promiscuous mode [ 1398.542590][ T7125] veth1_vlan: left promiscuous mode [ 1398.588256][ T7125] veth0_vlan: left promiscuous mode [ 1400.550605][ T7125] team0 (unregistering): Port device team_slave_1 removed [ 1400.728529][ T7125] team0 (unregistering): Port device team_slave_0 removed [ 1402.938032][T13838] hsr_slave_0: entered promiscuous mode [ 1402.977066][T13838] hsr_slave_1: entered promiscuous mode [ 1402.991328][T13838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.006468][T13838] Cannot create hsr debugfs directory [ 1403.032686][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.039985][ T9814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.326998][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.334158][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.437962][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.462426][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.693247][T13783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1403.773789][T13783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1403.911389][T13783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1403.931398][T13783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1404.106200][T13705] veth0_vlan: entered promiscuous mode [ 1404.293899][ T29] audit: type=1400 audit(1722507260.069:681): avc: denied { create } for pid=13922 comm="syz.1.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1404.297926][T13923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1376'. [ 1404.364460][ T29] audit: type=1400 audit(1722507260.079:682): avc: denied { write } for pid=13922 comm="syz.1.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1404.440555][ T29] audit: type=1400 audit(1722507260.079:683): avc: denied { nlmsg_write } for pid=13922 comm="syz.1.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1404.758287][T13705] veth1_vlan: entered promiscuous mode [ 1406.071734][T13705] veth0_macvtap: entered promiscuous mode [ 1406.285074][T13705] veth1_macvtap: entered promiscuous mode [ 1406.376094][T13783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.431904][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.486931][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.514174][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.544325][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.566434][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.614382][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.698226][T13705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.820378][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.848799][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.867007][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.894906][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.905638][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.935427][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.957591][T13705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.970172][T13783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.046788][T11323] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1407.093287][T13705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.113530][T13705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.126497][T13705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.136083][T13705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.259296][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.266951][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.279246][T11323] usb 2-1: config 0 has no interfaces? [ 1407.293096][T11323] usb 2-1: New USB device found, idVendor=19d2, idProduct=0040, bcdDevice=85.1f [ 1407.302380][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.302595][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.346404][T11323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.354483][T11323] usb 2-1: Product: syz [ 1407.375134][T13744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.387600][T11323] usb 2-1: Manufacturer: syz [ 1407.392385][T11323] usb 2-1: SerialNumber: syz [ 1407.440067][T11323] usb 2-1: config 0 descriptor?? [ 1407.449467][T13838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1407.501684][T13838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1407.541755][T13838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1407.601760][T13838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1408.023227][T13744] veth0_vlan: entered promiscuous mode [ 1408.196853][ T2558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.248177][ T2558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.298608][T13744] veth1_vlan: entered promiscuous mode [ 1408.553961][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.599651][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.710222][T13744] veth0_macvtap: entered promiscuous mode [ 1408.814304][T13744] veth1_macvtap: entered promiscuous mode [ 1408.879724][T13838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.802658][T11323] usb 2-1: USB disconnect, device number 13 [ 1409.850666][T13838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.957753][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.021059][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.042607][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.068356][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.096657][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.119313][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.326564][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.056487][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.078024][T13744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.287804][T11323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.296180][T11323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.364835][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.372041][T11323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.488069][ T29] audit: type=1400 audit(1722507267.259:684): avc: denied { read } for pid=13988 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1411.580001][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.669035][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.681827][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.693763][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.715703][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.741206][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.756519][T13744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.776396][T13744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.800366][T13744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.836858][T13997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1645'. [ 1412.188320][T13991] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 1412.347661][T13991] batman_adv: batadv0: Adding interface: team0 [ 1412.367129][T13991] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.431244][T13991] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1412.508638][T13838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1412.570508][T13838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1412.621852][T13993] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 1412.670613][T13993] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1645'. [ 1412.696587][T13993] team0: entered promiscuous mode [ 1412.702434][T13993] team_slave_0: entered promiscuous mode [ 1412.710984][T13993] team_slave_1: entered promiscuous mode [ 1412.738937][T13993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.746027][T13993] batman_adv: batadv0: Interface activated: team0 [ 1412.806862][T13993] batman_adv: batadv0: Interface deactivated: team0 [ 1412.813523][T13993] batman_adv: batadv0: Removing interface: team0 [ 1412.867881][T13993] bridge0: port 3(team0) entered blocking state [ 1412.874356][T13993] bridge0: port 3(team0) entered disabled state [ 1412.900940][T13993] team0: entered allmulticast mode [ 1412.910921][T13993] team_slave_0: entered allmulticast mode [ 1412.935448][T13993] team_slave_1: entered allmulticast mode [ 1412.953157][T13993] bridge0: port 3(team0) entered blocking state [ 1412.960068][T13993] bridge0: port 3(team0) entered forwarding state [ 1413.063885][T13744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.141020][T13744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.195730][T13744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.237216][T13744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.862761][T13783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.367544][T11775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.396395][T11775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.627654][T11775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.635564][T13838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.635690][T11775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.890498][T13838] veth0_vlan: entered promiscuous mode [ 1415.428756][T14032] usb usb8: usbfs: process 14032 (syz.1.1648) did not claim interface 0 before use [ 1417.786792][T13838] veth1_vlan: entered promiscuous mode [ 1418.188855][T13838] veth0_macvtap: entered promiscuous mode [ 1418.306031][ T5339] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1419.047729][ T29] audit: type=1400 audit(1722507274.809:685): avc: denied { read } for pid=14036 comm="syz.2.1505" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1419.158736][T13838] veth1_macvtap: entered promiscuous mode [ 1419.178379][ T29] audit: type=1400 audit(1722507274.809:686): avc: denied { open } for pid=14036 comm="syz.2.1505" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1419.205522][ T5339] usb 2-1: Using ep0 maxpacket: 32 [ 1419.229179][ T5339] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1419.318513][ T5339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1419.414828][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.432500][ T5339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1419.452850][ T5339] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1419.464953][ T5339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.497242][ T5339] usb 2-1: config 0 descriptor?? [ 1419.501724][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.526721][T14035] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1419.538809][ T5339] hub 2-1:0.0: USB hub found [ 1419.554787][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.581403][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.615203][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.646423][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.669716][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.727033][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.753811][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.774812][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.819721][T13838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.902443][T13783] veth0_vlan: entered promiscuous mode [ 1419.906687][ T5339] hub 2-1:0.0: 2 ports detected [ 1420.023649][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.106366][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.165606][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.266372][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.299878][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.356939][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.391415][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.468586][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.502583][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.517347][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.539620][T13838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.588582][T13838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.611825][T13838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.621646][T13838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.631908][T13838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.723452][ T5229] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1420.743580][T13783] veth1_vlan: entered promiscuous mode [ 1420.926438][ T5229] usb 3-1: Using ep0 maxpacket: 16 [ 1420.966388][ C1] hrtimer: interrupt took 135722 ns [ 1420.978183][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1421.009991][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1421.020398][T13783] veth0_macvtap: entered promiscuous mode [ 1421.031112][ T5229] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1421.085972][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.130594][ T5229] usb 3-1: config 0 descriptor?? [ 1421.176635][T13783] veth1_macvtap: entered promiscuous mode [ 1421.216539][T12523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.216568][T12523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.328984][ T29] audit: type=1400 audit(1722507277.109:687): avc: denied { read } for pid=14050 comm="syz.0.1653" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1421.450692][ T29] audit: type=1400 audit(1722507277.109:688): avc: denied { open } for pid=14050 comm="syz.0.1653" path="/7/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1421.487408][T14054] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1654'. [ 1421.501552][T12521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.517253][ T29] audit: type=1400 audit(1722507277.129:689): avc: denied { ioctl } for pid=14050 comm="syz.0.1653" path="/7/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1421.534059][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.587168][T12521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.606401][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.638630][T14058] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1654'. [ 1421.658311][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.677026][T14058] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1421.698023][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.713708][ T29] audit: type=1400 audit(1722507277.489:690): avc: denied { read } for pid=14053 comm="syz.2.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1421.753515][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.778465][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.789708][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.797372][ T46] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 1421.800976][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.843151][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.882940][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.916589][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.964865][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.981516][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.003213][T13783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.018294][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.050770][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.096430][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.101542][ T5229] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 1422.127044][ T5229] hid-generic 0003:0158:0100.0017: unexpected long global item [ 1422.127857][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.155514][ T5229] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 1422.168646][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.189004][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.225667][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.256335][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.283577][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.323237][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.356359][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.396505][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.426325][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.469682][T13783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.497426][ T5229] usb 3-1: USB disconnect, device number 34 [ 1422.592454][T13783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.636460][T13783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.678991][ T46] hub 2-1:0.0: set hub depth failed [ 1422.684380][T13783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.685044][ T5339] usb 2-1: USB disconnect, device number 14 [ 1422.723693][T13783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.156633][ T7125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.195689][ T7125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.362292][ T7125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.395794][ T7125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.455542][T14068] netlink: 'syz.2.1657': attribute type 2 has an invalid length. [ 1423.477762][T14068] : entered promiscuous mode [ 1423.684527][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.694320][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.726939][ T29] audit: type=1400 audit(1722507279.509:691): avc: denied { write } for pid=14064 comm="syz.3.1656" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1423.771285][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 1423.783270][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 1427.087889][ T9814] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1427.136581][ T5269] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1427.336415][ T9814] usb 4-1: Using ep0 maxpacket: 32 [ 1427.350154][ T9814] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1427.350646][ T5269] usb 1-1: config 0 has no interfaces? [ 1427.393464][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1668'. [ 1427.413719][ T9814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1427.431729][ T5269] usb 1-1: New USB device found, idVendor=19d2, idProduct=0040, bcdDevice=85.1f [ 1427.448669][ T9814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1427.467515][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.475862][ T5269] usb 1-1: Product: syz [ 1427.503860][ T5269] usb 1-1: Manufacturer: syz [ 1427.511028][ T9814] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1427.536218][ T5269] usb 1-1: SerialNumber: syz [ 1427.560126][ T9814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.581339][ T5269] usb 1-1: config 0 descriptor?? [ 1427.618556][ T9814] usb 4-1: config 0 descriptor?? [ 1427.649979][T14097] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1427.689049][ T9814] hub 4-1:0.0: USB hub found [ 1427.954377][T14115] netlink: 'syz.4.1669': attribute type 2 has an invalid length. [ 1427.968381][T14115] : entered promiscuous mode [ 1428.165464][ T9814] hub 4-1:0.0: 2 ports detected [ 1428.315346][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 1428.325108][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 1429.246342][ T29] audit: type=1400 audit(1722507285.019:692): avc: denied { getopt } for pid=14090 comm="syz.0.1662" laddr=::1 lport=20000 faddr=::1 fport=60142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1429.530635][ T5274] usb 1-1: USB disconnect, device number 42 [ 1429.805971][ T29] audit: type=1800 audit(1722507285.579:693): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1672" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1430.330602][ T2512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.646171][ T2512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.931027][ T2512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.089695][ T9814] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 1431.209252][ T2512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.854818][ T9814] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1431.862411][T13689] usb 4-1: USB disconnect, device number 19 [ 1431.880915][ T9814] usb 4-1-port2: attempt power cycle [ 1432.153515][ T2512] bridge_slave_1: left allmulticast mode [ 1432.196103][ T2512] bridge_slave_1: left promiscuous mode [ 1432.200754][T14138] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1679'. [ 1432.212377][T14138] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 1432.217641][ T2512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.302363][ T2512] bridge_slave_0: left allmulticast mode [ 1432.318911][ T2512] bridge_slave_0: left promiscuous mode [ 1432.324991][ T2512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.428387][T11685] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1432.457658][T11685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1432.487994][ T29] audit: type=1400 audit(1722507288.249:694): avc: denied { mount } for pid=14141 comm="syz.3.1680" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1432.700591][T11685] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1432.712325][T11685] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1432.723166][T11685] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1432.736800][T11685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1433.503564][ T29] audit: type=1400 audit(1722507289.279:695): avc: denied { mount } for pid=14146 comm="syz.4.1682" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1433.763911][ T29] audit: type=1400 audit(1722507289.419:696): avc: denied { unmount } for pid=13783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1435.515530][ T5221] Bluetooth: hci2: command tx timeout [ 1436.918059][ T9814] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1437.161116][ T9814] usb 5-1: config 0 has no interfaces? [ 1437.212520][ T9814] usb 5-1: New USB device found, idVendor=19d2, idProduct=0040, bcdDevice=85.1f [ 1437.279944][ T9814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.346527][ T9814] usb 5-1: Product: syz [ 1437.367622][ T9814] usb 5-1: Manufacturer: syz [ 1437.390465][ T9814] usb 5-1: SerialNumber: syz [ 1437.437689][ T9814] usb 5-1: config 0 descriptor?? [ 1437.586661][ T5221] Bluetooth: hci2: command tx timeout [ 1438.294926][ T2512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.322859][ T29] audit: type=1800 audit(1722507294.099:697): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1688" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1438.383383][ T2512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.443826][ T2512] bond0 (unregistering): Released all slaves [ 1438.562984][ T5269] usb 5-1: USB disconnect, device number 26 [ 1438.726478][ T9814] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1438.986984][ T9814] usb 4-1: Using ep0 maxpacket: 32 [ 1439.059156][ T9814] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1439.102220][ T9814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1439.144687][ T9814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1439.168046][ T9814] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1439.187744][ T9814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.667809][ T5221] Bluetooth: hci2: command tx timeout [ 1441.756554][ T5221] Bluetooth: hci2: command tx timeout [ 1442.288016][ T9814] usb 4-1: config 0 descriptor?? [ 1442.478378][ T9814] usb 4-1: can't set config #0, error -71 [ 1442.565297][ T9814] usb 4-1: USB disconnect, device number 24 [ 1442.893549][ T29] audit: type=1400 audit(1722507298.669:698): avc: denied { listen } for pid=14197 comm="syz.2.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1443.997899][T14212] xt_TCPMSS: Only works on TCP SYN packets [ 1444.049580][T14216] loop7: detected capacity change from 0 to 16384 [ 1444.355150][T14206] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1696'. [ 1444.376628][T14206] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1444.418174][T14206] 0ªX¹¦Dö»: entered allmulticast mode [ 1444.686505][ T2512] hsr_slave_0: left promiscuous mode [ 1444.694952][ T2512] hsr_slave_1: left promiscuous mode [ 1444.737701][ T2512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.745210][ T2512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.804741][ T2512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1444.833109][ T2512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.025784][ T2512] veth1_macvtap: left promiscuous mode [ 1445.059674][ T2512] veth1_vlan: left promiscuous mode [ 1445.065204][ T2512] veth0_vlan: left promiscuous mode [ 1446.633570][T11685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1446.645299][T11685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1446.656507][T11685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1446.669715][T11685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1446.685569][T11685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1446.693411][T11685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1446.903873][T11323] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1447.250181][T11323] usb 5-1: config 0 has no interfaces? [ 1448.249683][T11323] usb 5-1: New USB device found, idVendor=19d2, idProduct=0040, bcdDevice=85.1f [ 1448.302410][T11323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.322389][T11323] usb 5-1: Product: syz [ 1448.332592][T11323] usb 5-1: Manufacturer: syz [ 1448.346370][T11323] usb 5-1: SerialNumber: syz [ 1448.368220][T11323] usb 5-1: config 0 descriptor?? [ 1448.766144][T11323] usb 5-1: USB disconnect, device number 27 [ 1448.796479][ T5221] Bluetooth: hci0: command tx timeout [ 1449.690287][ T2512] team0 (unregistering): Port device team_slave_1 removed [ 1449.975852][ T2512] team0 (unregistering): Port device team_slave_0 removed [ 1450.877066][ T5221] Bluetooth: hci0: command tx timeout [ 1451.876979][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1708'. [ 1453.022641][ T5221] Bluetooth: hci0: command tx timeout [ 1453.119029][T14145] chnl_net:caif_netlink_parms(): no params data found [ 1454.106196][T14233] chnl_net:caif_netlink_parms(): no params data found [ 1454.528005][T14145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.966467][T14145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.058595][T14145] bridge_slave_0: entered allmulticast mode [ 1455.106659][ T5221] Bluetooth: hci0: command tx timeout [ 1455.375449][T14145] bridge_slave_0: entered promiscuous mode [ 1455.541902][T14145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.576477][T14145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.621542][T14145] bridge_slave_1: entered allmulticast mode [ 1455.628373][T14283] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1713'. [ 1455.628408][T14283] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 1455.715070][T14145] bridge_slave_1: entered promiscuous mode [ 1456.210022][ T2512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.530658][T14145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.526720][T14308] delete_channel: no stack [ 1457.732536][ T2512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.909241][T14145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.503002][ T2512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.973270][T14145] team0: Port device team_slave_0 added [ 1459.717940][ T2512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.853354][T14145] team0: Port device team_slave_1 added [ 1459.869718][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.893390][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.914972][T14233] bridge_slave_0: entered allmulticast mode [ 1460.007954][T14233] bridge_slave_0: entered promiscuous mode [ 1460.377870][T11685] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1460.391467][T11685] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1460.402252][T11685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1460.431954][T11685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1460.451716][T11685] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1460.459556][T11685] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1460.779328][T14145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.806580][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.894621][T14145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.921231][T14145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.928471][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.954357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1460.966398][T14145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.992397][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.012383][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.046602][T14233] bridge_slave_1: entered allmulticast mode [ 1461.076339][T14233] bridge_slave_1: entered promiscuous mode [ 1461.533595][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.940791][T14145] hsr_slave_0: entered promiscuous mode [ 1461.965320][T14145] hsr_slave_1: entered promiscuous mode [ 1462.251032][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.546888][ T5221] Bluetooth: hci6: command tx timeout [ 1463.009416][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 1463.575819][T14233] team0: Port device team_slave_0 added [ 1463.627191][T14233] team0: Port device team_slave_1 added [ 1463.989276][ T5221] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1464.000371][ T5221] Bluetooth: hci7: Injecting HCI hardware error event [ 1464.011758][ T5221] Bluetooth: hci7: hardware error 0x00 [ 1464.265749][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.318374][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.359014][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.474200][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.516660][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.637627][T11685] Bluetooth: hci6: command tx timeout [ 1464.661853][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.748043][ T2512] team0: left allmulticast mode [ 1464.752961][ T2512] team_slave_0: left allmulticast mode [ 1464.776522][ T2512] team_slave_1: left allmulticast mode [ 1464.810648][ T2512] bridge0: port 3(team0) entered disabled state [ 1464.899933][ T2512] bridge_slave_1: left allmulticast mode [ 1464.922067][ T2512] bridge_slave_1: left promiscuous mode [ 1464.928254][ T5229] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1464.962170][ T2512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.997467][ T2512] bridge_slave_0: left allmulticast mode [ 1465.028683][ T2512] bridge_slave_0: left promiscuous mode [ 1465.053939][ T2512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.157657][ T5229] usb 5-1: Using ep0 maxpacket: 32 [ 1465.184168][ T5229] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1465.202594][T14391] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 1465.211281][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1465.247976][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1465.305468][ T5229] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1465.344863][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.565346][ T5229] usb 5-1: config 0 descriptor?? [ 1466.326712][ T5221] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1466.387646][T14379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1466.452688][ T5229] hub 5-1:0.0: USB hub found [ 1466.691905][ T5229] hub 5-1:0.0: 2 ports detected [ 1466.719063][ T5221] Bluetooth: hci6: command tx timeout [ 1467.837090][ T2512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.908624][ T2512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.967080][ T2512] bond0 (unregistering): Released all slaves [ 1468.781648][ T29] audit: type=1326 audit(1722507324.549:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.2.1738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f471af773b9 code=0x0 [ 1468.807940][ T5221] Bluetooth: hci6: command tx timeout [ 1468.808029][ T5274] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1468.997401][T14233] hsr_slave_0: entered promiscuous mode [ 1469.008757][T14233] hsr_slave_1: entered promiscuous mode [ 1469.046381][T14233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1469.054105][T14233] Cannot create hsr debugfs directory [ 1469.378918][T14404] netlink: 'syz.2.1738': attribute type 4 has an invalid length. [ 1469.886368][ T2512] hsr_slave_0: left promiscuous mode [ 1469.927822][ T2512] hsr_slave_1: left promiscuous mode [ 1469.933295][ T5274] usb 5-1: device descriptor read/64, error -32 [ 1469.947853][ T2512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.966425][ T2512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.005364][ T2512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1470.086748][ T2512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.087083][ T5229] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1470.150397][ T2512] veth1_macvtap: left promiscuous mode [ 1470.186497][ T2512] veth0_macvtap: left promiscuous mode [ 1470.202559][ T2512] veth1_vlan: left promiscuous mode [ 1470.218101][ T2512] veth0_vlan: left promiscuous mode [ 1470.236495][ T5274] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1470.254601][ T5274] usb 5-1: device reset changed ep0 maxpacket size! [ 1470.278066][ T5274] hub 5-1:0.0: set hub depth failed [ 1470.283785][ T5339] usb 5-1: USB disconnect, device number 28 [ 1470.296489][ T5229] usb 3-1: Using ep0 maxpacket: 8 [ 1470.314279][ T5229] usb 3-1: config 0 has an invalid interface number: 172 but max is 2 [ 1470.355987][ T5229] usb 3-1: config 0 has an invalid interface number: 195 but max is 2 [ 1470.367516][ T5229] usb 3-1: config 0 has no interface number 1 [ 1470.382262][ T5229] usb 3-1: config 0 has no interface number 2 [ 1470.404229][ T5229] usb 3-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 1470.435108][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.466701][ T5229] usb 3-1: Product: syz [ 1470.499331][ T5229] usb 3-1: Manufacturer: syz [ 1470.504003][ T5229] usb 3-1: SerialNumber: syz [ 1470.596669][ T5229] usb 3-1: config 0 descriptor?? [ 1470.640717][ T5339] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1470.673393][ T5229] usb 3-1: selecting invalid altsetting 1 [ 1470.692512][ T5229] usb 3-1: Could not set interface, error -22 [ 1470.876427][ T5339] usb 5-1: Using ep0 maxpacket: 8 [ 1470.938334][ T5339] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=96.70 [ 1470.964296][ T5339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.998806][ T5339] usb 5-1: Product: syz [ 1471.003052][ T5339] usb 5-1: Manufacturer: syz [ 1471.016377][ T5339] usb 5-1: SerialNumber: syz [ 1471.051357][ T5339] usb 5-1: config 0 descriptor?? [ 1471.061082][ T5274] usb 3-1: USB disconnect, device number 35 [ 1471.082323][ T5339] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1471.144792][ T5339] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1471.469503][T11323] usb 5-1: USB disconnect, device number 29 [ 1473.499788][ T2512] team_slave_1 (unregistering): left promiscuous mode [ 1473.531059][ T2512] team0 (unregistering): Port device team_slave_1 removed [ 1473.692334][ T2512] team_slave_0 (unregistering): left promiscuous mode [ 1473.757420][ T2512] team0 (unregistering): Port device team_slave_0 removed [ 1473.887467][T13689] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1474.096695][T13689] usb 5-1: Using ep0 maxpacket: 8 [ 1474.123994][T13689] usb 5-1: config 0 has an invalid interface number: 172 but max is 2 [ 1474.156620][T13689] usb 5-1: config 0 has an invalid interface number: 195 but max is 2 [ 1474.205550][T13689] usb 5-1: config 0 has no interface number 1 [ 1474.223517][T13689] usb 5-1: config 0 has no interface number 2 [ 1474.245263][T13689] usb 5-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 1474.255316][T13689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.276475][T13689] usb 5-1: Product: syz [ 1474.280702][T13689] usb 5-1: Manufacturer: syz [ 1474.285324][T13689] usb 5-1: SerialNumber: syz [ 1474.296226][T13689] usb 5-1: config 0 descriptor?? [ 1474.369267][T13689] usb 5-1: selecting invalid altsetting 1 [ 1474.387879][T13689] usb 5-1: Could not set interface, error -22 [ 1474.629053][ T5229] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1474.840486][ T5229] usb 3-1: Using ep0 maxpacket: 8 [ 1474.851132][ T5229] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=96.70 [ 1474.881327][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.916611][ T5229] usb 3-1: Product: syz [ 1474.927294][ T5274] usb 5-1: USB disconnect, device number 30 [ 1474.934457][ T5229] usb 3-1: Manufacturer: syz [ 1474.940913][ T5229] usb 3-1: SerialNumber: syz [ 1475.003808][ T5229] usb 3-1: config 0 descriptor?? [ 1475.021974][ T5229] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1475.072297][ T5229] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1475.458755][ T5229] usb 3-1: USB disconnect, device number 36 [ 1477.786503][T14336] chnl_net:caif_netlink_parms(): no params data found [ 1478.226078][T14460] bond0: entered promiscuous mode [ 1478.241727][T14460] bond_slave_0: entered promiscuous mode [ 1478.310931][T14460] bond_slave_1: entered promiscuous mode [ 1479.079607][T14336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.105372][T14336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.129267][T14336] bridge_slave_0: entered allmulticast mode [ 1479.164206][T14336] bridge_slave_0: entered promiscuous mode [ 1479.209753][T14336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.246562][T14336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.253888][T14336] bridge_slave_1: entered allmulticast mode [ 1479.311674][T14336] bridge_slave_1: entered promiscuous mode [ 1479.358659][T14467] tipc: Failed to obtain node identity [ 1479.376591][T14467] tipc: Enabling of bearer rejected, failed to enable media [ 1480.407611][T14459] bond0: left promiscuous mode [ 1480.463117][T14459] bond_slave_0: left promiscuous mode [ 1480.520496][T14459] bond_slave_1: left promiscuous mode [ 1480.573716][T14336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.675732][T14336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.021700][T14336] team0: Port device team_slave_0 added [ 1481.080482][T14336] team0: Port device team_slave_1 added [ 1481.146991][ T46] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1481.326044][T14336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.366869][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 1481.385353][ T46] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1481.458611][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.571431][ T46] usb 3-1: config 0 descriptor?? [ 1481.660488][T14336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.914188][T14336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.988137][T14336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.995440][T14336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.066165][T14336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.087358][T14233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1482.228539][T14233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1482.262220][T14233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1482.458113][T14233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1482.639232][T14336] hsr_slave_0: entered promiscuous mode [ 1482.703825][T14336] hsr_slave_1: entered promiscuous mode [ 1482.756754][T14336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1482.796650][T14336] Cannot create hsr debugfs directory [ 1483.101790][T14145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1483.140819][T14145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1483.328005][T14145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1483.482907][T14145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1483.788444][ T46] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1483.852953][ T46] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1483.888174][ T46] usb 3-1: USB disconnect, device number 37 [ 1484.457938][T14336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.820082][T14233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.979787][T14336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.111222][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.122320][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.171185][T14336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.271150][T14145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.400707][T14336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.539694][T14233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.639613][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.647391][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.700176][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.707582][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.865619][T14145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.949828][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.957130][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.177866][T13689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.185459][T13689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.312826][T14336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1487.384210][T14336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1487.442660][T14336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1487.635403][T14336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1487.951698][ T5339] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1487.981498][T14233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.166604][ T5339] usb 3-1: Using ep0 maxpacket: 16 [ 1488.181082][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1488.222740][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1488.277700][ T5339] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1488.310108][T14233] veth0_vlan: entered promiscuous mode [ 1488.316140][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.344848][ T5339] usb 3-1: Product: syz [ 1488.354989][ T5339] usb 3-1: Manufacturer: syz [ 1488.365149][ T5339] usb 3-1: SerialNumber: syz [ 1488.374797][ T5339] usb 3-1: config 0 descriptor?? [ 1488.387597][ T5339] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1488.451047][T14145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.531250][T14233] veth1_vlan: entered promiscuous mode [ 1488.634309][ T5268] usb 3-1: USB disconnect, device number 38 [ 1488.752267][T14336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.929175][T14336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.977357][T14233] veth0_macvtap: entered promiscuous mode [ 1489.067986][T11323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.075359][T11323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.147624][T14233] veth1_macvtap: entered promiscuous mode [ 1489.275438][T14145] veth0_vlan: entered promiscuous mode [ 1489.322616][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.329875][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.373200][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.386500][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.407258][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.446666][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.521612][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.566336][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.587480][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.607364][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.645195][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.719336][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.819858][T14233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.955157][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.989495][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.019844][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.054967][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.089035][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.111856][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.138053][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.176425][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.216413][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.246384][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.268543][T14233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.370078][T14145] veth1_vlan: entered promiscuous mode [ 1490.489567][T14233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.516158][T14233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.560641][T14233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.586405][T14233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.088986][T14145] veth0_macvtap: entered promiscuous mode [ 1491.163367][T14145] veth1_macvtap: entered promiscuous mode [ 1491.811746][ T2586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.877691][ T2586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.169294][ T2512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.180096][ T2512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.360764][ T29] audit: type=1400 audit(1722507348.139:700): avc: denied { view } for pid=14602 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1492.396429][T14336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.750983][T14336] veth0_vlan: entered promiscuous mode [ 1492.895984][T14336] veth1_vlan: entered promiscuous mode [ 1494.119125][T14336] veth0_macvtap: entered promiscuous mode [ 1494.160488][T14336] veth1_macvtap: entered promiscuous mode [ 1494.399052][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.423188][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.545741][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.571583][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.589442][T11685] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1494.601193][T11685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1494.617288][T11685] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1494.643220][T11685] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1494.653277][T11685] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1494.661002][T11685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1494.679058][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.763424][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.835491][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.883980][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.916349][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.991048][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.035580][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.064158][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.089746][T14336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.271771][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.289036][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.651676][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.729361][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.790162][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.888607][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.932413][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.996482][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.066335][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.116380][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.166354][T14336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.525786][T14336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.598171][T14336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.622132][T14336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.726415][T14336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.735160][T14336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.793586][T11685] Bluetooth: hci2: command tx timeout [ 1496.826879][T14336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.416405][T11685] Bluetooth: hci3: command 0x0406 tx timeout [ 1501.421426][ T4607] Bluetooth: hci2: command tx timeout [ 1502.179679][ T4607] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1502.222674][ T4607] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1502.243658][ T4607] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1502.254449][ T4607] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1502.265689][ T4607] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1502.274245][ T4607] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1502.928529][T12523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.967399][T12523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.506993][ T4607] Bluetooth: hci2: command tx timeout [ 1503.608804][T12523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.638074][T12523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.311046][ T4607] Bluetooth: hci8: command tx timeout [ 1504.602318][T11775] bridge_slave_1: left allmulticast mode [ 1504.615256][T11775] bridge_slave_1: left promiscuous mode [ 1504.625464][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.715167][T11775] bridge_slave_0: left allmulticast mode [ 1504.744671][T11775] bridge_slave_0: left promiscuous mode [ 1504.758764][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.597550][ T5221] Bluetooth: hci2: command tx timeout [ 1505.757356][ T5269] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1505.969030][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1506.019946][ T5269] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1506.052578][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1506.093504][ T5269] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1506.133239][ T5269] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 1506.225093][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.249494][T11685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1506.273783][T11685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1506.295816][ T5269] usb 3-1: Product: syz [ 1506.300120][ T5269] usb 3-1: Manufacturer: syz [ 1506.304745][ T5269] usb 3-1: SerialNumber: syz [ 1506.311511][T11685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1506.323160][ T5269] usb 3-1: config 0 descriptor?? [ 1506.331635][ T5269] kvaser_usb 3-1:0.0: Cannot get software info, error -90 [ 1506.346337][ T5269] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1506.393856][T11685] Bluetooth: hci8: command tx timeout [ 1506.417204][T11685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1506.467565][T11685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1506.481420][T11685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1506.650394][ T5268] usb 3-1: USB disconnect, device number 39 [ 1507.671656][ T5221] Bluetooth: hci5: command 0x0406 tx timeout [ 1507.877648][T11775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.960596][T11775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.019854][T11775] bond0 (unregistering): Released all slaves [ 1508.279747][T14667] tipc: Enabling of bearer rejected, media not registered [ 1508.318165][T14629] chnl_net:caif_netlink_parms(): no params data found [ 1508.467910][ T4607] Bluetooth: hci8: command tx timeout [ 1508.546668][ T4607] Bluetooth: hci0: command tx timeout [ 1510.228695][T11775] hsr_slave_0: left promiscuous mode [ 1510.328961][T11775] hsr_slave_1: left promiscuous mode [ 1510.391436][T11775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.440187][T11775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.517703][T11775] veth1_macvtap: left promiscuous mode [ 1510.526624][T11323] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1510.535939][T11775] veth0_macvtap: left promiscuous mode [ 1510.551760][T11775] veth1_vlan: left promiscuous mode [ 1510.557210][ T4607] Bluetooth: hci8: command tx timeout [ 1510.593019][T11775] veth0_vlan: left promiscuous mode [ 1510.636419][ T4607] Bluetooth: hci0: command tx timeout [ 1510.707162][ T30] INFO: task syz.0.1637:13676 blocked for more than 143 seconds. [ 1510.735528][ T30] Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1510.755811][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1510.768126][T11323] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1510.796875][T11323] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 1510.819740][ T30] task:syz.0.1637 state:D stack:27320 pid:13676 tgid:13675 ppid:11956 flags:0x00004006 [ 1510.842379][T11323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.876019][ T30] Call Trace: [ 1510.884539][ T30] [ 1510.930007][T11323] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1510.939189][ T30] __schedule+0xe37/0x5490 [ 1510.969600][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1510.979130][T11323] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 1511.005668][ T30] ? __pfx___schedule+0x10/0x10 [ 1511.046483][T11323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.054650][T11323] usb 4-1: Product: syz [ 1511.058956][ T30] ? schedule+0x298/0x350 [ 1511.067185][T11323] usb 4-1: Manufacturer: syz [ 1511.072026][T11323] usb 4-1: SerialNumber: syz [ 1511.076342][ T30] ? __pfx_lock_release+0x10/0x10 [ 1511.221060][T11323] usb 4-1: config 0 descriptor?? [ 1511.237141][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1511.242487][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1511.286556][ T30] ? preempt_schedule_common+0x44/0xc0 [ 1511.311976][ T30] schedule+0xe7/0x350 [ 1511.316100][ T30] io_schedule+0xbf/0x130 [ 1511.328992][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 1511.376391][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 1511.396722][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1511.402650][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1511.416360][ T30] ? __pfx___might_resched+0x10/0x10 [ 1511.421781][ T30] ? folio_flags.constprop.0+0x56/0x150 [ 1511.448474][ T30] truncate_inode_pages_range+0xb93/0xe80 [ 1511.454282][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1511.462049][ T30] ? mark_held_locks+0x9f/0xe0 [ 1511.470082][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 1511.475659][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1511.487095][ T30] set_blocksize+0x2b2/0x370 [ 1511.507376][ T30] sb_set_blocksize+0x47/0x120 [ 1511.536815][ T30] omfs_fill_super+0x69c/0x1e00 [ 1511.556383][ T30] ? lock_acquire+0x1b1/0x560 [ 1511.561156][ T30] ? __pfx_omfs_fill_super+0x10/0x10 [ 1511.579489][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1511.584697][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1511.596690][ T30] ? sb_set_blocksize+0xf6/0x120 [ 1511.601725][ T30] ? setup_bdev_super+0x369/0x730 [ 1511.607608][ T30] ? __pfx_omfs_fill_super+0x10/0x10 [ 1511.613083][ T30] mount_bdev+0x1e3/0x2d0 [ 1511.626939][ T30] ? __pfx_mount_bdev+0x10/0x10 [ 1511.631877][ T30] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1511.646590][ T30] ? cap_capable+0x1cf/0x240 [ 1511.664265][ T30] ? __pfx_omfs_mount+0x10/0x10 [ 1511.669824][ T30] legacy_get_tree+0x109/0x220 [ 1511.677023][ T30] vfs_get_tree+0x8f/0x380 [ 1511.681582][ T30] path_mount+0x14e6/0x1f20 [ 1511.686145][ T30] ? __pfx_path_mount+0x10/0x10 [ 1511.692062][ T30] ? putname+0x12e/0x170 [ 1511.706604][ T30] ? putname+0x12e/0x170 [ 1511.725129][ T30] __x64_sys_mount+0x294/0x320 [ 1511.730368][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 1511.735774][ T30] do_syscall_64+0xcd/0x250 [ 1511.756388][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.762586][ T30] RIP: 0033:0x7f7f891773b9 [ 1511.770084][ T30] RSP: 002b:00007f7f89f59048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1511.787006][ T30] RAX: ffffffffffffffda RBX: 00007f7f89305f80 RCX: 00007f7f891773b9 [ 1511.795152][ T30] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 00000000200001c0 [ 1511.803782][ T30] RBP: 00007f7f891e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1511.812857][ T30] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000000 [ 1511.825850][ T30] R13: 000000000000004d R14: 00007f7f89305f80 R15: 00007fffabac0388 [ 1511.836846][ T30] [ 1511.840166][ T30] [ 1511.840166][ T30] Showing all locks held in the system: [ 1511.887218][ T30] 1 lock held by khungtaskd/30: [ 1511.892153][ T30] #0: ffffffff8ddb53a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1511.924021][ T30] 3 locks held by kworker/u8:8/2536: [ 1511.929475][ T30] #0: ffff88802a613948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1511.948868][ T30] #1: ffffc90009717d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1511.961273][ T30] #2: ffffffff8fa1f4e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x1500 [ 1511.971187][ T30] 1 lock held by dhcpcd/4883: [ 1511.975896][ T30] #0: ffffffff8fa1f4e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1511.985572][ T30] 2 locks held by getty/4976: [ 1512.016345][ T30] #0: ffff88802ffaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1512.036729][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1512.066339][ T30] 3 locks held by kworker/1:4/5269: [ 1512.071603][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1512.116340][ T30] #1: ffffc900031afd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1512.136320][ T30] #2: ffffffff8fa1f4e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1512.145577][ T30] 2 locks held by syz.1.303/6383: [ 1512.166709][ T30] 5 locks held by kworker/0:0/11323: [ 1512.176743][ T30] #0: ffff88801b686548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1512.208318][ T30] #1: ffffc9000315fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1512.237090][ T30] #2: ffff8880243cb190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e20 [ 1512.246920][ T30] #3: ffff888070e08190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 1512.272960][ T30] #4: ffff8880239c1968 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_configuration+0x5fd/0x1c50 [ 1512.291146][ T30] 5 locks held by kworker/u8:1/11775: [ 1512.307839][ T30] #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1512.319379][ T30] #1: ffffc90003aafd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1512.336668][ T30] #2: ffffffff8fa09d90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 1512.346228][ T30] #3: ffffffff8fa1f4e8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8c/0xae0 [ 1512.371638][ T30] #4: ffffffff8ddc0b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1512.387896][ T30] 1 lock held by syz.0.1637/13676: [ 1512.393098][ T30] #0: ffff888066e820e0 (&type->s_umount_key#87/1){+.+.}-{3:3}, at: alloc_super+0x23d/0xbd0 [ 1512.404688][ T30] 1 lock held by syz-executor/14614: [ 1512.410529][ T30] #0: ffffffff8fa1f4e8 (rtnl_mutex){+.+.}-{3:3}, at: __rtnl_newlink+0x65a/0x1960 [ 1512.421122][ T30] 1 lock held by syz-executor/14629: [ 1512.436451][ T30] #0: ffffffff8fa1f4e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1512.446173][ T30] 4 locks held by udevd/14643: [ 1512.451738][ T30] #0: ffff88805b550418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 [ 1512.478485][ T30] #1: ffff888043205888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 [ 1512.491334][ T30] #2: ffff88802d0a6008 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 1512.506119][ T30] #3: ffff888070e08190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x188/0x3b0 [ 1512.527374][ T30] 2 locks held by syz-executor/14658: [ 1512.536386][ T30] #0: ffffffff8fa09d90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1512.545912][ T30] #1: ffffffff8fa1f4e8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 1512.557528][ T30] 3 locks held by syz.3.1790/14676: [ 1512.576488][ T30] #0: ffff888042e1cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1512.589518][ T30] #1: ffff888042e1c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1512.601416][ T30] #2: ffffffff8ddc0b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1512.626708][ T30] [ 1512.631261][ T30] ============================================= [ 1512.631261][ T30] [ 1512.641598][ T30] NMI backtrace for cpu 0 [ 1512.646087][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1512.656715][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1512.666801][ T30] Call Trace: [ 1512.670169][ T30] [ 1512.673167][ T30] dump_stack_lvl+0x116/0x1f0 [ 1512.677951][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1512.682923][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1512.688930][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1512.695084][ T30] watchdog+0xf4e/0x1280 [ 1512.699355][ T30] ? __pfx_watchdog+0x10/0x10 [ 1512.704136][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1512.709703][ T30] ? __kthread_parkme+0x148/0x220 [ 1512.714743][ T30] ? __pfx_watchdog+0x10/0x10 [ 1512.719429][ T30] kthread+0x2c1/0x3a0 [ 1512.723501][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1512.728783][ T30] ? __pfx_kthread+0x10/0x10 [ 1512.733378][ T30] ret_from_fork+0x45/0x80 [ 1512.737817][ T30] ? __pfx_kthread+0x10/0x10 [ 1512.742436][ T30] ret_from_fork_asm+0x1a/0x30 [ 1512.747234][ T30] [ 1512.751938][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1512.758634][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1512.788542][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1512.795454][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1512.806007][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1512.816526][ T30] Call Trace: [ 1512.819829][ T30] [ 1512.822784][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1512.827501][ T30] panic+0x6f5/0x7a0 [ 1512.831421][ T30] ? __pfx_panic+0x10/0x10 [ 1512.835997][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1512.841381][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1512.847395][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1512.852800][ T30] ? watchdog+0xd8a/0x1280 [ 1512.857315][ T30] ? watchdog+0xd7d/0x1280 [ 1512.861802][ T30] watchdog+0xd9b/0x1280 [ 1512.866090][ T30] ? __pfx_watchdog+0x10/0x10 [ 1512.870811][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1512.876070][ T30] ? __kthread_parkme+0x148/0x220 [ 1512.881139][ T30] ? __pfx_watchdog+0x10/0x10 [ 1512.885857][ T30] kthread+0x2c1/0x3a0 [ 1512.889952][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1512.895194][ T30] ? __pfx_kthread+0x10/0x10 [ 1512.899812][ T30] ret_from_fork+0x45/0x80 [ 1512.904273][ T30] ? __pfx_kthread+0x10/0x10 [ 1512.908895][ T30] ret_from_fork_asm+0x1a/0x30 [ 1512.913699][ T30] [ 1512.929389][ T30] Kernel Offset: disabled [ 1512.933765][ T30] Rebooting in 86400 seconds..