last executing test programs: 43.782869444s ago: executing program 4 (id=4065): sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15.287094105s ago: executing program 0 (id=4122): r0 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000015640)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) readv(r3, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x81}, 0x20) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x139) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket(0x3, 0x80000, 0x78) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000101e000000001c3538800b0001005c4000000000000000000000000a00000000bb42"], 0x3c}, 0x1, 0x0, 0x0, 0x2c004870}, 0x0) 12.120069405s ago: executing program 0 (id=4128): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0/file0\x00', 0x0, &(0x7f0000000100)='\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000005840)) 12.114288265s ago: executing program 1 (id=4129): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c746502000000000000000000000000000000000000000000000000000002"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xcd1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'gretap0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'macvlan1\x00'}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0xfffffe00}}, @common=@hbh={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) eventfd(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x3c}}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)) sendmsg$AUDIT_SET(r1, 0x0, 0x48001) shutdown(r3, 0x1) socket$tipc(0x1e, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) fcntl$getown(r0, 0x9) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c0201, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 10.755850322s ago: executing program 0 (id=4131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa6, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cedd0000703afffe8000000000000000000000000000bbff87eb0000000000000004000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45c496579269748e254c1e4a8a8b3f0ab0d530d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03020001000000050000000026000400"], 0x0) 10.545546056s ago: executing program 1 (id=4132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = eventfd(0x0) io_setup(0x8, &(0x7f0000000f00)=0x0) io_submit(r9, 0x1, &(0x7f0000002600)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x0, r8, 0x0, 0x0, 0x8}]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000080)={0xa, 0x1403, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000004880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000000440)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40c90) r11 = syz_usb_connect(0x0, 0x651, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0xd, 0x8, [@generic={0x22, 0x6, "48d4a472d8eabf78f66235fcbc088b59d7a81d4f97164cf641a7bab07c13e860"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x8, 0x1, 0x3e, [@generic={0x87, 0xd, "21d06628a43111f237e9ec3738c07afae91998efa81f1c937b3cca95d5a7018a376f97d90e93f80d608da80423eb50c624637a4541a4d2bb86c3a91068533421b266d90047690208cc340e52848eb1c72d001e34c06da6cd9a0d4ffc0f47ab60c61e3464e6f9db82e0b981a2c8bc986688d2f51b1552e7037e6055c074741e5e0bd42b6139"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x0, 0x8, 0x1d, [@generic={0xd0, 0x0, "f85d5e0a54a5eaf698ad2bc10866f179c624a89c5e398f486e5235fe3ffc9ab0046f28a043be92f7be3159ceba4d67cae8e73244022cf8db7a6b486ed8a8ad0d74b58b86106ea44628385a4ab66976112d24dc92c01dfb9f8ba717f06e92af66da5ec3109881e3314e47fff7fc561fd80094816e9fc803496951acdf34e597bb6d553909fb272563791f15d18fa4237577964d8f82af2f932132d9a94f2739eecf4cb060fc6503cef7e6fc5daa558b104b011f93e00b835bbada664c8bff97bc7cee6dfe04f47d3524011164c2be"}, @generic={0xe1, 0x23, "48747d2dd24b5c4cce5e5604c73a8611f529666ad32b9a96425d789bd88a322d2e53d4d867c08f1ce2336d3e4a6f8ac92ea83da64dc0bca8e10619004b7a12da79215197e4671727da3d7835a950451e4cad5c190d959bbe61af6f145af252d7dfb33476dd397330061fbd8f5574ef1bf09ebfc5a9e2dbd74459e2c32582856f7e2e01040c5c83faf90824cc095c9a68daff61798fc62816db830a4d36aecf107845674a030883562ec7f54f2c97ba960aaa031acdbfc894b25f52f13120ab9bf3f6eca19c8f11f3c69f047abacada2cdfad886e64de6d1fd1f8231118d131"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x3, 0x9, 0x8, [@generic={0xce, 0xb, "cd8bc81d0e72f16ac2547dfa19d5b36d5c8a194fe9590f065c36b18a267aa05f113c9268739f60a9e9c6eb2a63068a5061eec17aa502cedf18f17b189f108ebf2e15a118282e7a3e4ba9c3b266d44c08f68e74399a62c76de84fb19793b525717f8614d5b5b4e7fb465afe0c6a87faf34420ef96a423ff0ae642aeea9ef3012fbe2a1ab401a06c63493db740cd7a286f6516db2cc615c27574c02ccc6868962ab049519778cfc2c3c7dff332ed796c62083777c018be55ea2016ae28942ec4b27184164c88a66776a12715de"}, @generic={0xf4, 0x24, "eb52f98804f4c4e00d7ae8d6cc6a55a05ed3701d85ac56e722b1531494dbf0ff00d58b666e8d5852349bd1b0c2647d27b7a2c7201202c29d8874cb930047abddef9d1615e03aeacb8a9c85e3007dbcf2f9388049f42b8361eb23dfa42e09238fc61df5ebb934c70bbe43120eab1cc827c73101659b95e0e817a3050bf45316b37deaecaad0f5fc74015aea957c73bc4685f7af96cb3f5379d119c61a9ae5f1e701504a2958bff5d7969cb4284619f85656333fe13d5480f85929bc30d7fbd06775bd484d6a623d03bae054a191b6aec094dd3d9db2edf5d61dae87e2d70d625f2c138e237237f44d243f514c163dae54fa8c"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x6, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xe, 0xea, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xb8, 0x7, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x22, 0x8, 0x6, [@generic={0xbd, 0x2, "ff14588c853fd297bd7125256f55aefe4df0164ab5c7461f95c3a59f94fd0ccc7dca7af47279d8572d4e648761f933ef44ea58dd21ec161707949d58241358d3b96c2009e7e9eb457914f895effc94f72d14a4d707e84b2f06ef48225c4b25ec6484888c421f0669ece21813140ed57d71435ed51f33966c05d35278f996d69eb8c845f79fb308df6be54b5f9bc8c7e987c4b7b4886d16235b10e75165e4c2b2bdf52937d2d2930c27c55cb4294ab12a94c1e6060254ca03d2bc3e"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x3, 0x1, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x23, 0x7, 0x9, [@generic={0x1b, 0x24, "13d14e74220e08dd2f5ee51c7f72b94eabd9d1709999969d9c"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x6, 0x4, [@generic={0x61, 0x0, "d316a7e17abc15827d4db368b64fa89cf0309832df2f5bcf5a8aaeedb3a184c30ef3de3f5c2c91e38199cc89f4a216fec19d65bfec4c7440d2f2166540de55a2525dbaec5ad4e4685e3d67947348dafb8a4779af655b2a86b7dbd42a1fb122"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x40}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x0, 0x6, 0x6, [@generic={0x57, 0x1, "27b6cba2b8792a77e129f5fd63f3d4aa31416b6ffbc65d8bcea26ae75a03d4fcf5d642e75819be9148016a034011c3b2cb90d0de8c246df62596520e538c166f323497fd08a386eb8dc81f8fc17845f104362a104b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x401}]}}]}}]}}]}}, &(0x7f0000005740)={0xa, &(0x7f00000055c0)={0xa, 0x6, 0x300, 0x9, 0x4, 0x8, 0x10, 0x8}, 0x62, &(0x7f0000005600)={0x5, 0xf, 0x62, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3, 0xd9}, @generic={0x45, 0x10, 0x3, "93d74930d870240ed2f0091cf08af34b9fd9862243fbcc3710458d846f198033f3bfbc658fcc97833f6f0ce72f160f72e458a5dec30c2ea45041d99414f9e3fa2768"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xb4, 0xc9, 0x7901, 0x5}]}, 0x3, [{0x4, &(0x7f0000005680)=@lang_id={0x4, 0x3, 0x3c01}}, {0x24, &(0x7f00000056c0)=@string={0x24, 0x3, "b1b1796a68f0f844e6ac3e760678424dd39d21cb068b568b36a276e3152c8d983509"}}, {0x4, &(0x7f0000005700)=@lang_id={0x4, 0x3, 0x412}}]}) r12 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r12, 0x40045436, 0x2) r13 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) shutdown(r13, 0x0) syz_usb_control_io$uac1(r11, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xd, 0xb9, {0xb9, 0x21, "662d65286d8a567bf9d32a908dff8979103332a28f9405f0774f3c70d1cd2501cb0a8c4286afa1f702ef4a4bed322427efe357e62dbd20a1b7bf3ef840eccbb57807ffa526187f393338a9b645f85f56ee88bd0029e7b3fc59d06e2f38c54000557f50c1419d8a9d2613af9df5b683d73505c88b5d8895218fb0763f1430d412e38e363994deb266cef316b73e1d0a754d83064c0a41422c2bbfea9497f72cd55ea5f6e5ecc9d03d0e94f1551ed1b5986cfcf533bc219f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x27, @string={0x27, 0x3, "48da87ce8131aebd6885bac1fce151c6fba73bd16125e4ad6cd388907c3f7a2592e2c54dd3"}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="001398000000a020949c4c770803a328a27feff3edceb9facca62d750a18180f65fd2df4ebff67eff2a0131d88794798891ff76423fbfa5561debf34b1bfeec3c24cfbc0b524efe44705ea679f20093c8df50b06c4489ab97e54607a706328500ebce6cd5a33a2d5178c03ad94e1840cdc5a5d4e394126638aaf293338b442b896f1a8c02e6678d16ae8deeccd2e5f4a113cc975c851a5a64327c09281"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x81, 0x3, "3fcb68"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, '<'}, &(0x7f0000000300)={0x20, 0x83, 0x1, "db"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "51487eb2"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "9e0937"}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000005ac0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a40)={0x18, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040860}, 0x85) 10.491504126s ago: executing program 3 (id=4133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000000280), r0, 0x0, 0x800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a004000008a47e6c71f"], 0xd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1, 0x2f, 0x0) 10.373730315s ago: executing program 0 (id=4134): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) symlink(&(0x7f00000003c0)='./file0\x00', 0x0) preadv(r0, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, 0x4, 0x0) 8.939789196s ago: executing program 0 (id=4135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 8.481564581s ago: executing program 3 (id=4136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "82e9dd6e9b51504fb0ec48fa49225145d558fa511693d06ab32edf4f66afaff1d0fd86f171063792930935509c0ce05bfd9c54f4b4f819b8738fcc2f8ce592"}, 0x60) getpeername(r3, 0x0, 0x0) getpid() 7.210805001s ago: executing program 3 (id=4137): r0 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000015640)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) readv(r3, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x81}, 0x20) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x139) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket(0x3, 0x80000, 0x78) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000101e000000001c3538800b0001005c4000000000000000000000000a00000000bb42"], 0x3c}, 0x1, 0x0, 0x0, 0x2c004870}, 0x0) 5.222165124s ago: executing program 2 (id=4139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000070a01080000000000000000020000000900020073797a32000000000c00034000000000000000000900010073797a30"], 0x38}}, 0x0) 4.841475875s ago: executing program 1 (id=4140): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c746502000000000000000000000000000000000000000000000000000002"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xcd1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'gretap0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'macvlan1\x00'}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0xfffffe00}}, @common=@hbh={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) eventfd(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x3c}}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)) sendmsg$AUDIT_SET(r1, 0x0, 0x48001) shutdown(r3, 0x1) socket$tipc(0x1e, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) fcntl$getown(r0, 0x9) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c0201, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 4.671281188s ago: executing program 2 (id=4141): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="d4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)='V', 0x1}], 0x1}}], 0x2, 0x4000001) 4.295734256s ago: executing program 2 (id=4142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa6, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cedd0000703afffe8000000000000000000000000000bbff87eb0000000000000004000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45c496579269748e254c1e4a8a8b3f0ab0d530d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03020001000000050000000026000400"], 0x0) 4.180289569s ago: executing program 4 (id=4066): r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000440)=""/234, &(0x7f0000000740)=""/224, &(0x7f0000000000)=""/31, 0x4000}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 4.165314511s ago: executing program 1 (id=4143): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000340)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) symlink(&(0x7f00000003c0)='./file0\x00', 0x0) preadv(r0, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, 0x4, 0x0) 3.938910714s ago: executing program 2 (id=4144): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.649867876s ago: executing program 2 (id=4145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000440)={r4, 0x0, &(0x7f0000000400)=@tcp6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = socket(0x0, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200001e681e64e2c20000000061174c000000000085000000270000009500000000000000"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x60600) r7 = socket$unix(0x1, 0x0, 0x0) bind$unix(r7, 0x0, 0x0) connect$unix(r6, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3.318130994s ago: executing program 3 (id=4146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000480), 0x8) io_setup(0x2, &(0x7f00000000c0)=0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 2.803232127s ago: executing program 1 (id=4147): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) 2.567078076s ago: executing program 4 (id=4148): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004b0000004b00000004000000010000010300000f030000000300c7103f8626d56da9926900000000000000000000000000000080000004000000020000010000000002000000cfd5e8080000000000000a040000000a00000000000008000000000000000000413bf547925d258fcf947bfcb84cfcff6516cda75570f8fb0be64b64a067a9175e5ffc3b8fe92ba7db5590dcc8a8f33845a807a13a8f5d7819b8bb05dd1a9a2bf3f35e41717516b4df4c06c39153bddca02fdaa6b9faf3ae9c00fb720abea1ebaa872c06fa7507bba19123690a775e6c0840265ec623b8e664a0aefb675b6f8cfb315ec3603076d5bfc0df13a585107a696f843537e9b247732e1c8b6a3285b7899a336c2c6d41722ea85db92f0b0687174218f45c986b94ba7d0fd40095ee515c64e094"], &(0x7f0000000180)=""/194, 0x68, 0xc2, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0x40, 0x3f, 0x3, 0x2048, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009500"/24], 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101f0000"], &(0x7f0000000280)='GPL\x00'}, 0x90) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='updati ecry', @ANYRES64=r4], 0x1b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000000008d0050f8ffffffb70300400800000003000000000000000000000000000000d1dd1287872f9558136bec9fce39e7e90cddf2b68e4172309475abf17bd5c255714a6f1453f1bf3ae766075d3c1ccc1f345cf3e8f62deced4e3c5ad4d7d8dd7305000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) 1.127000416s ago: executing program 1 (id=4149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x80, 0x4}}, 0x10) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000440)) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socket(0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x7}]}}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = shmget(0x1, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 943.991195ms ago: executing program 4 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000070a01080000000000000000020000000900020073797a32000000000c00034000000000000000000900010073797a30"], 0x38}}, 0x0) 916.990059ms ago: executing program 2 (id=4151): r0 = userfaultfd(0x80801) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000009c0)=0x200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x7) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "41059a5e48c9f0a831dabd0a17a98fab6be683"}) ioctl$TCSETSF(r1, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, "795929dee794cf2ad72ef54463de692a255382"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86ffffcb653e00303a0000000000000000000000ffffac1414bbff020000000000000000000000000001030090780000000060256b5400002c00ff0100000000000000000000000000010700"/102], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xda, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x2, 0x1f, 0x1, {0x22, 0xe28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x20, 0x23}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x40, 0x7, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x46, 0x6, 0x10, 0xfe}, 0x25, &(0x7f0000000140)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x32aa36c, 0xff0f, 0x9, [0xf0, 0x64d5c5cae004db18, 0xffffcf, 0xff3fff, 0x3f5f]}]}, 0x6, [{0x5c, &(0x7f0000000180)=@string={0x5c, 0x3, "6648a1f359dacd963ff6ea07045dfddd1cbcc91e1da82059fb3aa4f36e0cad9996ddf867cd8f58cd8eabc2815988c6fe8a54127880812aa2b6f1986a7924ff26d6523f915a3cd8be83d4494eaf5b1b52bafbc889ff79d508dd60"}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x8f, &(0x7f0000000380)=@string={0x8f, 0x3, "fb6b8db0cc195cf64e7c9a88395fcd7da2b9f6a03a31d18cd3fdf3e355bc409d990b6f0f2d20ccda231729e29f66d72be496fbad7f517597f6db5b157c40385ad33a20c4b003bd974df30e7994a794b28ecd3c856e1c4f7019f56b8d017927cbbde8cbcaafe03b0df3839ad90aafecba22fc7205e78cde96f71e0b9aa8eded8dc0ce4ea109f9a717874be29017"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x100c}}, {0xe0, &(0x7f00000004c0)=@string={0xe0, 0x3, "a62de75d30662e0a6086a2986c7ad06d40bc6533f55578740fe8197630f44378dc17392b68b3bc7c2a790941b5db6cfb3d25c3dab9ff5954596c7fa11486feea24383aeb5fe48462db33237becb1e8622317ac802ac84005951c97cce5225054e9360aad219421ce0a380eb2b1384f65e8b9a8b76303a169fc99df0e2c4b6490f6f907355d44465336c5daf9f43ea96cf6e1e9f2a691e5bb598a843d15c5846fb1b634990784f66cb980ed94f0d8c1b6dffd97fddc9ba2ce07f81bddf946a2b6ce6423d09ff8de77bac61f24f7858be6034755f2832638fcc1ec14593bb6"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000740)={0x24, &(0x7f0000000640)={0x0, 0x21, 0x2d, {0x2d, 0x2c, "2f7041480be126af2657b4167567692360104d93a7fa4514ff28220224d53ab7f91d8091d34760c50e4b10"}}, &(0x7f0000000680)={0x0, 0x3, 0xe, @string={0xe, 0x3, "0d736d88a875c4a27fcd2ac3"}}, &(0x7f00000006c0)={0x0, 0x22, 0x15, {[@local=@item_4={0x3, 0x2, 0x8, "d3fba897"}, @global=@item_012={0x2, 0x1, 0x3, "c02d"}, @main=@item_012={0x2, 0x0, 0xa, "bb9d"}, @local=@item_4={0x3, 0x2, 0x0, "55689a64"}, @global=@item_4={0x3, 0x1, 0x2, "21a768a3"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6e, 0x1, {0x22, 0xe9}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x40, 0x30, 0x98, "1d07b433db68ee4076aaf7181c75f502db3ddc59a5b98ac6c459ddcce2d0a2c0f57cd850ee78617ecf2ef94729529b2154112b75e02af02e32a17259ef7eb1eb98acf8f4786f3cc088f38c8f96482ae2b9ee7c53df7f476c72a88305a909b3efb7d5b3c94d162845e60aa5d7d2323931ed078e3c195aba57bb0943e3b2edd73faf8067891387468e27f3dfebefa0ea97342b74146e216b75"}, &(0x7f0000000840)={0x0, 0xa, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x1, 0x3f, "6c906c5beb9221ceea74f867e4cc28c5c1922615fa302e31a90176b15806922ca5a78a46015ea3ef6610175c366ef21e783c8577b51a456551b3da9244bb49"}, &(0x7f0000000940)={0x20, 0x3, 0x1}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000e8ffffffffbfff0900020073797a310000000008004100727865001400330073797a6b"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 818.621658ms ago: executing program 3 (id=4152): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x0, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "912ec72a", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040600000000000000040000000000000000000253be97df6c4187149b547d6c57a0aa66139f75612594e7553394b9c7"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x108}, @l2cap_cid_signaling={{0x104}, [@l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x60, 0x8}, {0x5, 0xfffc, 0xa7, 0x5}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x3, 0xc, 0x0, 0x6}}, @l2cap_conn_rsp={{0x3, 0xa9, 0x8}, {0xff, 0x67ec, 0x0, 0x726}}, @l2cap_conf_rsp={{0x5, 0x31, 0x14}, {0x3, 0xc, 0xbc, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x0, 0x2400, 0x2, 0x7800}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x100}}, @l2cap_conf_req={{0x4, 0x2, 0x51}, {0x9, 0x3ff, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x5, 0x2, 0xfffa, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x42, 0x8001, 0x6, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0xffff, 0x2, 0x7fff, 0x7ff}}, @l2cap_conf_mtu={0x1, 0x2, 0xe}, @l2cap_conf_ews={0x7, 0x2, 0x1b1b}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x2, 0xf956, 0x0, 0x1, 0x1}}]}}, @l2cap_info_rsp={{0xb, 0x8, 0x59}, {0x4, 0xaae9, "a6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f"}}, @l2cap_disconn_rsp={{0x7, 0xa0, 0x4}, {0xffff, 0x101}}]}}, 0x10d) socket$inet_dccp(0x2, 0x6, 0x0) 590.770947ms ago: executing program 4 (id=4153): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c746502000000000000000000000000000000000000000000000000000002"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xcd1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'gretap0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'macvlan1\x00'}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0xfffffe00}}, @common=@hbh={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) eventfd(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x3c}}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)) sendmsg$AUDIT_SET(r1, 0x0, 0x48001) shutdown(r3, 0x1) socket$tipc(0x1e, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) fcntl$getown(r0, 0x9) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c0201, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 437.482432ms ago: executing program 3 (id=4154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 278.619626ms ago: executing program 0 (id=4155): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 4 (id=4156): r0 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000015640)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) readv(r3, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x81}, 0x20) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x139) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket(0x3, 0x80000, 0x78) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000101e000000001c3538800b0001005c4000000000000000000000000a00000000bb42"], 0x3c}, 0x1, 0x0, 0x0, 0x2c004870}, 0x0) kernel console output (not intermixed with test programs): ed [ 1091.687208][T16942] netlink: 'syz.2.3208': attribute type 10 has an invalid length. [ 1091.727903][T16942] team0: Device ipvlan1 failed to register rx_handler [ 1091.842177][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.849266][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.958932][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.001688][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.008675][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.042753][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.316665][T16844] hsr_slave_0: entered promiscuous mode [ 1092.430203][T16844] hsr_slave_1: entered promiscuous mode [ 1092.473942][T16844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1092.481539][T16844] Cannot create hsr debugfs directory [ 1094.972489][T16993] netlink: 'syz.0.3217': attribute type 2 has an invalid length. [ 1094.980869][T16844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1095.018574][T16993] openvswitch: : Dropping previously announced user features [ 1095.019105][T16844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1095.170281][T16844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1095.274627][T16844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1096.329840][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.429315][T16844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.544041][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.551325][T14546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.624456][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.631772][T14546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.851160][T16844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1098.002129][T17027] netlink: 'syz.2.3223': attribute type 10 has an invalid length. [ 1098.081203][T17027] team0: Device ipvlan1 failed to register rx_handler [ 1098.516773][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.819166][T16844] veth0_vlan: entered promiscuous mode [ 1098.850715][T16844] veth1_vlan: entered promiscuous mode [ 1099.043897][T16844] veth0_macvtap: entered promiscuous mode [ 1099.080407][T17044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3225'. [ 1099.097871][T16844] veth1_macvtap: entered promiscuous mode [ 1099.354180][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.380248][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.406233][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.445562][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.485745][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.533103][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.577103][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.628700][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.687952][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.746631][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.803798][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.880549][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.915189][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.941906][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.987104][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.044329][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.094258][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.158899][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.284701][T16844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.352233][T16844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.401770][T16844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.444602][T16844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.878311][ T4123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.053069][ T4123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.207315][ T4123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.241673][ T4123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.468778][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806823dc00: rx timeout, send abort [ 1103.977461][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806823dc00: abort rx timeout. Force session deactivation [ 1104.740603][T17105] netlink: 'syz.4.3235': attribute type 10 has an invalid length. [ 1104.779956][T17105] team0: Device ipvlan1 failed to register rx_handler [ 1107.829758][T17135] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1111.334312][T17175] autofs: Unknown parameter '0x0000000000000000' [ 1113.067566][T17187] tmpfs: Bad value for 'huge' [ 1116.262014][T17226] autofs: Unknown parameter '0x0000000000000000' [ 1118.238930][T17235] 9p: Unknown access argument 18446744073709551615: -34 [ 1118.486153][ T29] audit: type=1400 audit(1720191732.289:962): avc: denied { write } for pid=17236 comm="syz.2.3264" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1118.538045][T17237] program syz.2.3264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.250882][T17242] tmpfs: Bad value for 'huge' [ 1119.321896][T11759] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 1119.779235][T17247] openvswitch: netlink: IP tunnel dst address not specified [ 1121.059912][T17255] 9pnet_fd: p9_fd_create_unix (17255): problem connecting socket: ./file0: -2 [ 1121.426574][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.434495][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.833366][T17284] 9p: Unknown access argument 18446744073709551615: -34 [ 1124.853696][T11759] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1124.864667][T11759] Bluetooth: hci2: Injecting HCI hardware error event [ 1125.145118][T11759] Bluetooth: hci2: hardware error 0x00 [ 1127.251781][T11759] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1127.674024][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888065046000: rx timeout, send abort [ 1128.182463][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888065046000: abort rx timeout. Force session deactivation [ 1129.138084][T17321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3282'. [ 1129.446831][T17331] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1129.487032][T17333] 9p: Unknown access argument 18446744073709551615: -34 [ 1132.760172][T17366] team0: entered promiscuous mode [ 1132.783598][T17366] team_slave_0: entered promiscuous mode [ 1132.789528][T17366] team_slave_1: entered promiscuous mode [ 1132.887681][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801e1d2400: rx timeout, send abort [ 1133.205387][T17365] team0: left promiscuous mode [ 1133.221746][T17365] team_slave_0: left promiscuous mode [ 1133.227422][T17365] team_slave_1: left promiscuous mode [ 1133.396051][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801e1d2400: abort rx timeout. Force session deactivation [ 1134.879306][T17384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3297'. [ 1135.491498][T17389] 9p: Unknown access argument 18446744073709551615: -34 [ 1137.196310][T17408] team0: entered promiscuous mode [ 1137.204645][T17408] team_slave_0: entered promiscuous mode [ 1137.220606][T17408] team_slave_1: entered promiscuous mode [ 1138.402417][T17411] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3305'. [ 1138.721466][T17407] team0: left promiscuous mode [ 1138.741510][T17407] team_slave_0: left promiscuous mode [ 1138.759843][T17407] team_slave_1: left promiscuous mode [ 1140.229829][T17432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1140.247395][T17432] veth1_macvtap: left promiscuous mode [ 1140.368929][T17434] 9p: Unknown access argument 18446744073709551615: -34 [ 1142.251403][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888057e8d000: rx timeout, send abort [ 1142.759900][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888057e8d000: abort rx timeout. Force session deactivation [ 1142.824959][T17461] team0: entered promiscuous mode [ 1142.830040][T17461] team_slave_0: entered promiscuous mode [ 1142.836076][T17461] team_slave_1: entered promiscuous mode [ 1143.611287][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1143.735004][T17458] veth1_macvtap: left promiscuous mode [ 1143.888821][T17463] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3318'. [ 1144.558984][T17460] team0: left promiscuous mode [ 1144.591873][T17460] team_slave_0: left promiscuous mode [ 1144.597535][T17460] team_slave_1: left promiscuous mode [ 1145.125825][T17477] netlink: 'syz.4.3322': attribute type 4 has an invalid length. [ 1145.383637][T17477] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3322'. [ 1145.719246][T17481] 9p: Unknown access argument 18446744073709551615: -34 [ 1147.642893][ T5139] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1148.113742][ T5139] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.124558][ T5139] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1148.135555][ T5139] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.801857][ T5139] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.811079][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.921792][ T5139] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1148.949809][ T29] audit: type=1400 audit(1720191762.749:963): avc: denied { read } for pid=17507 comm="syz.3.3331" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1149.096800][ T5139] usb 2-1: USB disconnect, device number 41 [ 1149.362939][T17511] udevd[17511]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1150.599988][T17519] 9p: Unknown access argument 18446744073709551615: -34 [ 1150.642671][T11759] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1150.824986][T17521] 9pnet_fd: p9_fd_create_unix (17521): problem connecting socket: ./file0: -2 [ 1151.998885][T17540] program syz.3.3339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1152.069231][T11759] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1152.197679][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d6a8000: rx timeout, send abort [ 1152.706081][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d6a8000: abort rx timeout. Force session deactivation [ 1153.901790][ T5175] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1154.114005][ T5175] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.153140][ T5175] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1154.192991][ T5175] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1154.281923][ T5175] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1154.325741][ T5175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.470735][ T5175] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1154.571056][ T5175] usb 3-1: USB disconnect, device number 59 [ 1154.598169][T17511] udevd[17511]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1155.334043][T17566] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1155.508685][T17570] 9p: Unknown access argument 18446744073709551615: -34 [ 1157.346400][T17580] team0: entered promiscuous mode [ 1157.365851][T17580] team_slave_0: entered promiscuous mode [ 1157.378956][T17580] team_slave_1: entered promiscuous mode [ 1157.502496][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802af2e400: rx timeout, send abort [ 1158.010911][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802af2e400: abort rx timeout. Force session deactivation [ 1159.089164][T17579] team0: left promiscuous mode [ 1159.133817][T17579] team_slave_0: left promiscuous mode [ 1159.427613][T17579] team_slave_1: left promiscuous mode [ 1159.540065][T17597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17597 comm=syz.4.3355 [ 1159.554390][T17597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17597 comm=syz.4.3355 [ 1160.037492][T17609] 9pnet_fd: p9_fd_create_unix (17609): problem connecting socket: ./file0: -2 [ 1160.368980][T17615] program syz.3.3360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.419461][T11759] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1160.511866][ T8] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1160.764795][ T8] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.837086][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.891819][ T8] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1161.027321][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1161.067281][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.122051][ T8] usb 5-1: invalid MIDI out EP 0 [ 1161.276189][ T8] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1161.321203][ T8] usb 5-1: USB disconnect, device number 43 [ 1161.359972][T17628] 9pnet_fd: p9_fd_create_unix (17628): problem connecting socket: ./file0: -2 [ 1161.533009][T17629] udevd[17629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1162.007362][ T5139] libceph: connect (1)[c::]:6789 error -101 [ 1162.018384][ T5139] libceph: mon0 (1)[c::]:6789 connect error [ 1162.168620][T17635] ceph: No mds server is up or the cluster is laggy [ 1163.226406][T17647] team0: entered promiscuous mode [ 1163.331373][T17647] team_slave_0: entered promiscuous mode [ 1163.392490][T17647] team_slave_1: entered promiscuous mode [ 1163.866130][T17646] team0: left promiscuous mode [ 1163.883901][T17646] team_slave_0: left promiscuous mode [ 1163.897050][T17646] team_slave_1: left promiscuous mode [ 1164.243657][T17664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17664 comm=syz.1.3369 [ 1164.555162][T17664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17664 comm=syz.1.3369 [ 1166.926639][T17697] program syz.2.3378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1167.679778][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 1168.077412][T17701] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.087776][T17701] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.096887][T17701] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.105653][T17701] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.941300][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802eacf000: rx timeout, send abort [ 1169.449669][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802eacf000: abort rx timeout. Force session deactivation [ 1169.468268][T17724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17724 comm=syz.0.3384 [ 1169.488497][T17724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17724 comm=syz.0.3384 [ 1169.869843][T11759] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 1170.557417][T17735] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1172.398800][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 1173.547808][T17774] program syz.2.3398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.681356][T17777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17777 comm=syz.4.3399 [ 1173.721692][T17777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17777 comm=syz.4.3399 [ 1174.574778][T11759] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1174.630520][T17791] 9pnet_fd: p9_fd_create_unix (17791): problem connecting socket: ./file0: -2 [ 1175.199207][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807c58bc00: rx timeout, send abort [ 1175.707555][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807c58bc00: abort rx timeout. Force session deactivation [ 1176.348483][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3408'. [ 1176.613732][T17810] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.621847][T17810] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.630584][T17810] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.639359][T17810] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1178.332534][T17828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17828 comm=syz.4.3413 [ 1178.350521][T17828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17828 comm=syz.4.3413 [ 1178.611919][T11759] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1178.622677][T11759] Bluetooth: hci5: Injecting HCI hardware error event [ 1178.633308][T11759] Bluetooth: hci5: hardware error 0x00 [ 1179.119564][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1179.507715][T17850] program syz.3.3420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.578273][ T5105] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1180.500066][T17859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1180.703364][T11759] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1181.135589][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056ebb800: rx timeout, send abort [ 1181.644054][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056ebb800: abort rx timeout. Force session deactivation [ 1182.380671][T17881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17881 comm=syz.3.3428 [ 1182.424260][T17881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17881 comm=syz.3.3428 [ 1182.867899][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.874480][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.558664][T17895] tmpfs: Bad value for 'huge' [ 1183.591290][T11759] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 1183.947031][T17900] 9pnet_fd: Insufficient options for proto=fd [ 1185.761203][T17920] program syz.1.3438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1186.333049][T17929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17929 comm=syz.2.3442 [ 1186.348306][T17929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17929 comm=syz.2.3442 [ 1188.847066][T17949] tmpfs: Bad value for 'huge' [ 1189.112197][T11759] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 1191.112083][T14546] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1191.345973][T14546] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1191.366832][T14546] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1191.407475][T14546] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1191.467388][T14546] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1191.484482][T14546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.512899][T14546] usb 2-1: Product: syz [ 1191.526644][T14546] usb 2-1: Manufacturer: syz [ 1191.545442][T14546] usb 2-1: SerialNumber: syz [ 1191.917336][T14546] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1191.965639][T14546] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 1192.067370][T14546] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1192.121884][T14546] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 1192.362645][T14546] usb 2-1: USB disconnect, device number 42 [ 1192.496709][T17560] udevd[17560]: setting mode of /dev/dsp3 to 020660 failed: No such file or directory [ 1192.542766][T17560] udevd[17560]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: No such file or directory [ 1194.049622][T17630] udevd[17630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1194.348888][T17997] program syz.4.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1197.289454][T18021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3469'. [ 1197.504924][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1197.517664][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1197.528045][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1197.537041][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1197.546820][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1197.554580][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1197.713378][ T8] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1197.942551][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1197.970524][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1198.019330][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1198.059558][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1198.084285][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1198.101410][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1198.166856][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.431461][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 1198.493635][ T8] usbtmc 3-1:16.0: can't read capabilities [ 1198.546307][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.607838][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.639505][ T8] usb 3-1: USB disconnect, device number 60 [ 1199.123377][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.177912][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.353037][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.377106][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.656998][T11759] Bluetooth: hci0: command tx timeout [ 1199.810367][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.820966][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.378635][T18069] program syz.1.3480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1201.508393][T18071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1201.556177][T18025] chnl_net:caif_netlink_parms(): no params data found [ 1201.732565][T11759] Bluetooth: hci0: command tx timeout [ 1201.932052][ T35] bridge_slave_1: left allmulticast mode [ 1201.937753][ T35] bridge_slave_1: left promiscuous mode [ 1202.008609][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.058356][ T35] bridge_slave_0: left allmulticast mode [ 1202.075960][ T35] bridge_slave_0: left promiscuous mode [ 1202.096295][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.812098][T11759] Bluetooth: hci0: command tx timeout [ 1204.171319][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.190837][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.205046][ T35] bond0 (unregistering): Released all slaves [ 1204.228726][ T35] bond1 (unregistering): (slave lo): Releasing backup interface [ 1204.240024][ T35] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1204.263527][ T35] bond1 (unregistering): Released all slaves [ 1204.563766][ T35] : left promiscuous mode [ 1205.192665][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.215630][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.272631][T18025] bridge_slave_0: entered allmulticast mode [ 1205.293057][T18025] bridge_slave_0: entered promiscuous mode [ 1205.524908][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.566418][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.588009][T18025] bridge_slave_1: entered allmulticast mode [ 1205.605150][T18025] bridge_slave_1: entered promiscuous mode [ 1205.804128][T18126] tmpfs: Bad value for 'huge' [ 1205.852730][T11759] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 1205.893237][T11759] Bluetooth: hci0: command tx timeout [ 1206.048229][T18025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.167737][T18025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.667526][T18025] team0: Port device team_slave_0 added [ 1206.894343][T18025] team0: Port device team_slave_1 added [ 1207.218358][ T35] hsr_slave_0: left promiscuous mode [ 1207.239696][ T35] hsr_slave_1: left promiscuous mode [ 1207.277229][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.302170][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.340291][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.356152][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.470560][ T35] veth1_macvtap: left promiscuous mode [ 1207.476541][ T35] veth0_macvtap: left promiscuous mode [ 1207.492420][ T35] veth1_vlan: left promiscuous mode [ 1207.497853][ T35] veth0_vlan: left promiscuous mode [ 1209.439991][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1209.499732][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1210.980471][T18025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.000993][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.088834][T18025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.124463][T18025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.148286][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.175357][T18025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.316771][T18025] hsr_slave_0: entered promiscuous mode [ 1214.382582][T18025] hsr_slave_1: entered promiscuous mode [ 1214.579738][T18025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.607884][T18025] Cannot create hsr debugfs directory [ 1214.693639][T11759] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1217.314957][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1217.578279][T18025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1217.719403][T18025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1217.790907][T18025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1217.857330][T18025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1219.162752][T18262] program syz.4.3519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1219.180484][T18025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.682122][T18025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.277890][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.285181][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.413512][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.420791][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.950470][T18025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1222.257685][T18308] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 1222.313665][T18308] openvswitch: : Dropping previously announced user features [ 1222.931604][T18317] team0: entered promiscuous mode [ 1222.981900][T18317] team_slave_0: entered promiscuous mode [ 1222.987836][T18317] team_slave_1: entered promiscuous mode [ 1223.167833][T18025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.399596][T18025] veth0_vlan: entered promiscuous mode [ 1223.497874][T18025] veth1_vlan: entered promiscuous mode [ 1223.718937][T18025] veth0_macvtap: entered promiscuous mode [ 1223.795570][T18316] team0: left promiscuous mode [ 1223.830354][T18316] team_slave_0: left promiscuous mode [ 1223.836189][T18316] team_slave_1: left promiscuous mode [ 1223.877363][T18025] veth1_macvtap: entered promiscuous mode [ 1223.969624][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.009503][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.052186][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.088325][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.112579][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.173636][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.191631][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.238184][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.274495][T18025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.325362][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.369029][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.399356][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.431202][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.468079][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.509701][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.532944][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.565614][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.605050][T18025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.660516][T18025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.895369][T18025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.908729][T18025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.922036][T18025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.541660][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.591619][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.774486][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.785294][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.625744][T18393] ucma_write: process 211 (syz.1.3538) changed security contexts after opening file descriptor, this is not allowed. [ 1232.844231][ T9146] syz_tun (unregistering): left promiscuous mode [ 1233.083364][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1233.112428][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1233.122037][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1233.174191][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1233.183209][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1233.203038][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1233.570577][ T2792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.601988][ T2792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.707785][T18457] team0: entered promiscuous mode [ 1233.741666][T18457] team_slave_0: entered promiscuous mode [ 1233.793926][T18457] team_slave_1: entered promiscuous mode [ 1233.910189][ T29] audit: type=1400 audit(1720191847.709:964): avc: denied { bind } for pid=18459 comm="syz.0.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1234.626325][ T2792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.680899][ T2792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.692861][T18458] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1235.262109][ T5105] Bluetooth: hci1: command tx timeout [ 1235.396619][ T29] audit: type=1400 audit(1720191849.189:965): avc: denied { nlmsg_read } for pid=18472 comm="syz.3.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1235.438989][ T2792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.454280][ T2792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.608703][T18456] team0: left promiscuous mode [ 1235.616902][T18456] team_slave_0: left promiscuous mode [ 1235.652418][T18456] team_slave_1: left promiscuous mode [ 1236.122655][ T2792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.134412][ T2792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.841827][T18500] program syz.3.3569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1236.917252][ T5105] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1236.930533][T18506] netlink: 'syz.0.3568': attribute type 10 has an invalid length. [ 1236.980268][T18506] team0: Device ipvlan1 failed to register rx_handler [ 1237.170501][ T2792] bridge_slave_0: left allmulticast mode [ 1237.180920][ T2792] bridge_slave_0: left promiscuous mode [ 1237.223466][ T2792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.331999][ T5105] Bluetooth: hci1: command tx timeout [ 1239.448067][ T5105] Bluetooth: hci1: command tx timeout [ 1240.084056][ T2792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.183485][ T2792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.210881][ T2792] bond0 (unregistering): Released all slaves [ 1240.242092][ T2792] bond1 (unregistering): Released all slaves [ 1240.587857][ T2792] IPVS: stopping master sync thread 11965 ... [ 1240.607590][T18437] chnl_net:caif_netlink_parms(): no params data found [ 1240.714521][T18537] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1241.503003][ T5105] Bluetooth: hci1: command tx timeout [ 1244.033709][ T2792] hsr_slave_0: left promiscuous mode [ 1244.112247][ T2792] hsr_slave_1: left promiscuous mode [ 1244.116291][ T29] audit: type=1400 audit(1720191857.919:966): avc: denied { getopt } for pid=18586 comm="syz.1.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1244.141803][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.163526][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.197560][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.233026][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.296860][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.303335][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.337093][ T2792] veth0_macvtap: left promiscuous mode [ 1244.344382][ T2792] veth1_vlan: left promiscuous mode [ 1244.349709][ T2792] veth0_vlan: left promiscuous mode [ 1244.868417][ T784] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1245.086719][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1245.122149][ T784] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1245.148418][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.159415][ T784] usb 2-1: Product: syz [ 1245.168962][ T784] usb 2-1: Manufacturer: syz [ 1245.176080][ T784] usb 2-1: SerialNumber: syz [ 1245.200755][ T784] usb 2-1: config 0 descriptor?? [ 1245.417119][ T2792] team0 (unregistering): Port device team_slave_1 removed [ 1245.472464][ T2792] team0 (unregistering): Port device team_slave_0 removed [ 1246.704642][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.737295][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.761893][T18437] bridge_slave_0: entered allmulticast mode [ 1246.791623][T18437] bridge_slave_0: entered promiscuous mode [ 1246.849890][T18437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.867509][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.898144][T18437] bridge_slave_1: entered allmulticast mode [ 1246.959508][T18437] bridge_slave_1: entered promiscuous mode [ 1247.503814][T18437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.573548][T18437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.167185][T18437] team0: Port device team_slave_0 added [ 1248.205712][T18437] team0: Port device team_slave_1 added [ 1248.399143][T11759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1248.528505][T11759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1248.539312][T11759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1248.550354][T11759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1248.559596][T11759] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1248.574198][T11759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1249.864718][T18437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.884947][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.000148][ T784] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1250.301582][T18437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.333571][ T784] usb 2-1: USB disconnect, device number 43 [ 1250.481784][T18437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.488776][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.669147][T18437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.713520][T18582] udevd[18582]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.871805][ T29] audit: type=1326 audit(1720191864.669:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18634 comm="syz.4.3594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1386b75bd9 code=0x0 [ 1251.185637][ T5105] Bluetooth: hci3: command tx timeout [ 1251.327865][T18648] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1252.164043][ T2802] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.191745][ T2802] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.283891][T18437] hsr_slave_0: entered promiscuous mode [ 1252.320412][T18437] hsr_slave_1: entered promiscuous mode [ 1252.762127][ T2802] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.779326][ T2802] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.889401][ T2802] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.902594][ T2802] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.036815][ T2802] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1253.078913][ T2802] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.332239][ T5105] Bluetooth: hci3: command tx timeout [ 1254.740917][T18613] chnl_net:caif_netlink_parms(): no params data found [ 1255.342304][ T2802] bridge_slave_0: left allmulticast mode [ 1255.348009][ T2802] bridge_slave_0: left promiscuous mode [ 1255.373036][T18693] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1255.374567][ T2802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.412364][ T5105] Bluetooth: hci3: command tx timeout [ 1255.851860][ T29] audit: type=1400 audit(1720191869.599:968): avc: denied { setopt } for pid=18701 comm="syz.4.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1255.911338][ T29] audit: type=1400 audit(1720191869.699:969): avc: denied { bind } for pid=18701 comm="syz.4.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1257.025668][ T2802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.040700][ T2802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.045143][ T5172] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1257.068812][ T2802] bond0 (unregistering): Released all slaves [ 1257.246464][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.290289][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.343921][ T5172] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1257.360248][ T2802] : left promiscuous mode [ 1257.381360][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.433169][ T5172] usb 2-1: config 0 descriptor?? [ 1257.502100][ T5105] Bluetooth: hci3: command tx timeout [ 1257.730931][ T2802] tipc: Disabling bearer [ 1257.738172][ T2802] tipc: Left network mode [ 1261.015897][T18437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1261.050255][T18437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1261.078768][T18437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1261.099630][T18437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1261.139034][ T5172] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -71 [ 1261.174482][ T5172] usb 2-1: USB disconnect, device number 44 [ 1261.202886][T18613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.210526][T18613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.465214][T18613] bridge_slave_0: entered allmulticast mode [ 1261.602335][T18613] bridge_slave_0: entered promiscuous mode [ 1261.737290][T18613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.758656][T18613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.789950][T18613] bridge_slave_1: entered allmulticast mode [ 1261.822039][T18613] bridge_slave_1: entered promiscuous mode [ 1262.263883][T18613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.278719][T18613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.717284][T18613] team0: Port device team_slave_0 added [ 1263.750257][T18613] team0: Port device team_slave_1 added [ 1263.807397][ T2802] hsr_slave_0: left promiscuous mode [ 1263.820587][ T2802] hsr_slave_1: left promiscuous mode [ 1263.858321][ T2802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.897757][ T2802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.930196][ T2802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.959550][ T2802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.046651][ T2802] veth0_macvtap: left promiscuous mode [ 1264.062242][ T2802] veth1_vlan: left promiscuous mode [ 1264.086813][ T2802] veth0_vlan: left promiscuous mode [ 1265.470064][ T2802] team0 (unregistering): Port device team_slave_1 removed [ 1265.542670][ T2802] team0 (unregistering): Port device team_slave_0 removed [ 1266.410127][T18613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.436519][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.463100][T18613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.479671][T18613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.488568][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.523258][T18613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.788843][T18613] hsr_slave_0: entered promiscuous mode [ 1266.871932][T18613] hsr_slave_1: entered promiscuous mode [ 1266.929857][T18613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1267.033211][T18613] Cannot create hsr debugfs directory [ 1268.696054][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.881919][T18796] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3629'. [ 1268.954512][T18794] team0: entered promiscuous mode [ 1268.959878][T18794] team_slave_0: entered promiscuous mode [ 1268.970534][T18794] team_slave_1: entered promiscuous mode [ 1269.173672][T18437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.212316][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.219566][ T9521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.334030][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.341333][ T9521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.575592][T18793] team0: left promiscuous mode [ 1269.580416][T18793] team_slave_0: left promiscuous mode [ 1269.601974][T18793] team_slave_1: left promiscuous mode [ 1269.888731][T18437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.684258][T18613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1270.749375][T18613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1270.797306][T18613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1270.827023][T18613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1270.845008][T18825] tmpfs: Bad value for 'huge' [ 1270.901434][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.396577][T18437] veth0_vlan: entered promiscuous mode [ 1271.700458][T18437] veth1_vlan: entered promiscuous mode [ 1272.340381][T18613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.724676][T18437] veth0_macvtap: entered promiscuous mode [ 1272.797253][T18437] veth1_macvtap: entered promiscuous mode [ 1272.888148][T18613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.974566][T18391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.981822][T18391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.044896][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.076707][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.111602][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.141600][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.151458][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.203117][T18854] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3638'. [ 1273.212421][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.244825][T18437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.313010][T18847] team0: entered promiscuous mode [ 1273.318120][T18847] team_slave_0: entered promiscuous mode [ 1273.366620][T18847] team_slave_1: entered promiscuous mode [ 1273.426358][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.433649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.490877][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.526168][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.554975][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.591614][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.621020][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.646379][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.668419][T18437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.739851][T18437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.760060][T18437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.784140][T18437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.801690][T18437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.950678][T18613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1273.998027][T18846] team0: left promiscuous mode [ 1274.008736][T18846] team_slave_0: left promiscuous mode [ 1274.016261][T18846] team_slave_1: left promiscuous mode [ 1274.333491][ T4123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.341382][ T4123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.407545][T18870] tmpfs: Bad value for 'huge' [ 1274.550625][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.582068][T18740] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1274.610810][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.783462][T18740] usb 2-1: Using ep0 maxpacket: 32 [ 1274.835709][T18740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.888745][T18613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.900909][T18740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.941483][T18740] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1275.113412][T18613] veth0_vlan: entered promiscuous mode [ 1275.129159][T18613] veth1_vlan: entered promiscuous mode [ 1275.151585][T18740] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1275.282506][T18740] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1275.334662][T18740] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1275.397071][T18740] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1275.440089][T18740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.461535][T18613] veth0_macvtap: entered promiscuous mode [ 1275.483474][T18740] usb 2-1: Product: syz [ 1275.504709][T18740] usb 2-1: Manufacturer: syz [ 1275.541670][T18740] usb 2-1: SerialNumber: syz [ 1275.546639][T18613] veth1_macvtap: entered promiscuous mode [ 1275.685712][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.712947][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.745006][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.770542][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.817759][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.850296][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.887773][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.940391][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.973632][T18613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.057499][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.089955][T18740] cdc_ncm 2-1:1.0: bind() failure [ 1276.099261][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.130918][T18740] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1276.149705][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.162590][T18740] cdc_ncm 2-1:1.1: bind() failure [ 1276.170466][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.199588][T18740] usb 2-1: USB disconnect, device number 45 [ 1276.215844][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.281723][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.325617][T18613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.378448][T18613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.405170][T18613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.469089][T18613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.504962][T18613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.532107][T18613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.540855][T18613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.888608][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.936262][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.123966][ T2797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.147804][ T2797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.438808][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888023f3b400: rx timeout, send abort [ 1278.947186][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888023f3b400: abort rx timeout. Force session deactivation [ 1279.515995][T18931] team0: entered promiscuous mode [ 1279.521313][T18931] team_slave_0: entered promiscuous mode [ 1279.527403][T18931] team_slave_1: entered promiscuous mode [ 1279.576354][T18930] tmpfs: Bad value for 'huge' [ 1280.530101][T18926] team0: left promiscuous mode [ 1280.712712][T18926] team_slave_0: left promiscuous mode [ 1280.787779][T18926] team_slave_1: left promiscuous mode [ 1282.751599][T18740] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1282.972350][T18740] usb 5-1: Using ep0 maxpacket: 32 [ 1282.989884][T18740] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.061262][T18740] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.125917][T18740] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1283.191576][T18740] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1283.250534][T18740] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1283.286628][T18740] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1283.325908][T18740] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1283.350716][T18740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.393893][T18740] usb 5-1: Product: syz [ 1283.398182][T18740] usb 5-1: Manufacturer: syz [ 1283.423649][T18740] usb 5-1: SerialNumber: syz [ 1284.565294][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 1285.061588][T18740] cdc_ncm 5-1:1.0: bind() failure [ 1285.287515][T18740] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1285.583059][T18740] cdc_ncm 5-1:1.1: bind() failure [ 1285.662400][T18740] usb 5-1: USB disconnect, device number 44 [ 1286.164783][T19019] team0: entered promiscuous mode [ 1286.169881][T19019] team_slave_0: entered promiscuous mode [ 1286.200109][T19019] team_slave_1: entered promiscuous mode [ 1286.822532][T19017] team0: left promiscuous mode [ 1286.827445][T19017] team_slave_0: left promiscuous mode [ 1286.833377][T19017] team_slave_1: left promiscuous mode [ 1288.182930][T19050] 9pnet_fd: p9_fd_create_unix (19050): problem connecting socket: ./file0: -2 [ 1291.095718][ T5172] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1291.311574][ T5172] usb 2-1: Using ep0 maxpacket: 32 [ 1291.340364][ T5172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.411790][ T5172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.440404][T19081] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 1291.441827][ T5172] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1291.512355][ T5172] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1291.544380][ T5172] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1291.577029][ T5172] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1291.600126][ T5172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1291.609845][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.661620][ T5172] usb 2-1: Product: syz [ 1291.665870][ T5172] usb 2-1: Manufacturer: syz [ 1291.702296][ T5172] usb 2-1: SerialNumber: syz [ 1292.007915][ T5172] cdc_ncm 2-1:1.0: bind() failure [ 1292.077111][ T5172] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1292.107883][ T5172] cdc_ncm 2-1:1.1: bind() failure [ 1292.162809][ T5172] usb 2-1: USB disconnect, device number 46 [ 1292.222551][ T5105] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1292.232727][ T5105] Bluetooth: hci0: Injecting HCI hardware error event [ 1292.241710][ T5105] Bluetooth: hci0: hardware error 0x00 [ 1293.415104][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1293.576417][T19111] veth5: entered allmulticast mode [ 1294.462783][ T5105] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1294.648449][T19123] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1296.827805][T19153] team0: entered promiscuous mode [ 1296.840801][T19153] team_slave_0: entered promiscuous mode [ 1296.982505][T19153] team_slave_1: entered promiscuous mode [ 1297.453818][T19152] team0: left promiscuous mode [ 1297.477703][T19152] team_slave_0: left promiscuous mode [ 1297.495955][T19152] team_slave_1: left promiscuous mode [ 1298.032520][ T5172] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1298.142435][ T5105] Bluetooth: hci3: command tx timeout [ 1298.303609][ T5172] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1298.368456][ T5172] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1298.422262][ T5172] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1298.461584][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.480049][T19165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1299.347328][T19177] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1299.521246][T18391] usb 4-1: USB disconnect, device number 55 [ 1300.523223][T19181] udevd[19181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.713619][T19186] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1302.169839][T19203] team0: entered promiscuous mode [ 1302.181662][T19203] team_slave_0: entered promiscuous mode [ 1302.211974][T19203] team_slave_1: entered promiscuous mode [ 1303.139383][T19201] team0: left promiscuous mode [ 1303.176013][T19201] team_slave_0: left promiscuous mode [ 1303.184520][T19201] team_slave_1: left promiscuous mode [ 1305.701721][ T9523] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1306.123097][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.129482][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.414524][ T9523] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1306.437317][ T9523] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1306.457056][ T9523] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1306.468844][ T9523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.701356][T19244] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1306.720580][T19230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1308.130856][ T9523] usb 4-1: can't set config #27, error -71 [ 1308.368533][ T9523] usb 4-1: USB disconnect, device number 56 [ 1310.410244][T19266] team0: entered promiscuous mode [ 1310.441963][T19266] team_slave_0: entered promiscuous mode [ 1310.462957][T19266] team_slave_1: entered promiscuous mode [ 1311.934692][T19264] team0: left promiscuous mode [ 1311.941282][T19264] team_slave_0: left promiscuous mode [ 1311.976088][T19264] team_slave_1: left promiscuous mode [ 1315.297682][T19313] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1316.860857][T19329] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 1317.298171][T19342] team0: entered promiscuous mode [ 1317.315616][T19342] team_slave_0: entered promiscuous mode [ 1317.339337][T19342] team_slave_1: entered promiscuous mode [ 1318.941784][T19341] team0: left promiscuous mode [ 1318.946802][T19341] team_slave_0: left promiscuous mode [ 1319.008530][T19341] team_slave_1: left promiscuous mode [ 1319.040716][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1319.077695][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1319.084995][T19354] ceph: No mds server is up or the cluster is laggy [ 1319.501049][T19369] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1322.012038][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802d284800: rx timeout, send abort [ 1322.520429][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802d284800: abort rx timeout. Force session deactivation [ 1324.185768][T19394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19394 comm=syz.3.3753 [ 1324.205160][T19394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19394 comm=syz.3.3753 [ 1324.783105][T19406] team0: entered promiscuous mode [ 1324.804902][T19406] team_slave_0: entered promiscuous mode [ 1324.835413][T19406] team_slave_1: entered promiscuous mode [ 1325.947517][T19405] team0: left promiscuous mode [ 1325.971428][T19405] team_slave_0: left promiscuous mode [ 1326.002093][T19405] team_slave_1: left promiscuous mode [ 1326.487052][T19421] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3759'. [ 1329.636886][T19456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19456 comm=syz.1.3767 [ 1329.672597][T19456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19456 comm=syz.1.3767 [ 1330.627509][T19479] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3772'. [ 1335.029639][T19531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19531 comm=syz.3.3784 [ 1335.043041][T19531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19531 comm=syz.3.3784 [ 1336.283770][T19536] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3787'. [ 1336.932021][T19548] kernel profiling enabled (shift: 10) [ 1338.931988][ T5105] Bluetooth: hci1: command tx timeout [ 1340.824115][T19607] netlink: 'syz.0.3805': attribute type 10 has an invalid length. [ 1340.838760][T19607] team0: Device ipvlan1 failed to register rx_handler [ 1340.857183][T19608] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3802'. [ 1343.603512][T19651] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1345.722921][T19676] overlayfs: failed to resolve './file0': -2 [ 1345.938450][ T29] audit: type=1400 audit(1720191959.739:970): avc: denied { map } for pid=19680 comm="syz.1.3826" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1346.008829][ T29] audit: type=1400 audit(1720191959.739:971): avc: denied { execute } for pid=19680 comm="syz.1.3826" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1346.422748][T19696] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1347.251723][ T5105] Bluetooth: hci1: command tx timeout [ 1347.637177][T19701] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1347.646249][T19701] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1350.288490][T19726] tmpfs: Bad value for 'huge' [ 1350.393033][T19731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3838'. [ 1352.251787][ T5105] Bluetooth: hci3: command tx timeout [ 1352.443775][T19749] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1352.585007][ T29] audit: type=1400 audit(1720191966.369:972): avc: denied { mounton } for pid=19756 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1352.802791][T11759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1353.386041][T11759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1353.398031][T11759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1353.421139][T11759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1353.436733][T11759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1353.447690][T11759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1354.240916][T19767] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1354.250312][T19767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1354.277949][ T2792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.416085][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1355.050239][ T2792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.531795][ T2792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.602582][T11759] Bluetooth: hci4: command tx timeout [ 1356.114741][ T2792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.990615][T19756] chnl_net:caif_netlink_parms(): no params data found [ 1357.207915][T19804] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3861'. [ 1357.309131][T19807] 9pnet_fd: p9_fd_create_unix (19807): problem connecting socket: ./file0: -2 [ 1357.651969][T11759] Bluetooth: hci4: command tx timeout [ 1357.942162][T19812] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1357.961600][T19812] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1358.101309][T19756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.129891][T19756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.165578][T19756] bridge_slave_0: entered allmulticast mode [ 1358.182687][T19756] bridge_slave_0: entered promiscuous mode [ 1358.204803][T19756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.221789][T19756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.376505][T19756] bridge_slave_1: entered allmulticast mode [ 1359.092714][T19756] bridge_slave_1: entered promiscuous mode [ 1359.132229][ T2792] bridge_slave_1: left allmulticast mode [ 1359.137940][ T2792] bridge_slave_1: left promiscuous mode [ 1359.186985][ T2792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.233085][ T2792] bridge_slave_0: left allmulticast mode [ 1359.238759][ T2792] bridge_slave_0: left promiscuous mode [ 1359.399937][ T2792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.732159][T11759] Bluetooth: hci4: command tx timeout [ 1360.131183][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802dbfc800: rx timeout, send abort [ 1360.646697][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802dbfc800: abort rx timeout. Force session deactivation [ 1361.812413][T11759] Bluetooth: hci4: command tx timeout [ 1362.223825][T19849] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1362.633073][ T2792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.655059][T19858] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1362.669439][ T2792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.703373][ T2792] bond0 (unregistering): Released all slaves [ 1363.231431][T19756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.288379][T19756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.699253][T19756] team0: Port device team_slave_0 added [ 1364.845100][T19756] team0: Port device team_slave_1 added [ 1364.963547][T19756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.978005][T19756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.055672][T19756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.228756][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888063873000: rx timeout, send abort [ 1365.698958][T19756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.707175][T19756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.737287][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888063873000: abort rx timeout. Force session deactivation [ 1365.919921][T19756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.104376][ T2792] hsr_slave_0: left promiscuous mode [ 1366.157970][ T2792] hsr_slave_1: left promiscuous mode [ 1366.188275][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.221569][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.241064][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.463230][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.179630][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.186212][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.289357][ T2792] veth1_macvtap: left promiscuous mode [ 1367.303375][ T2792] veth0_macvtap: left promiscuous mode [ 1367.318016][ T2792] veth1_vlan: left promiscuous mode [ 1367.372211][ T2792] veth0_vlan: left promiscuous mode [ 1367.478302][T19895] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1367.486752][T19895] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1370.003215][T19925] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1370.235575][T19928] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1371.654147][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802efc4800: rx timeout, send abort [ 1371.760962][ T2792] team0 (unregistering): Port device team_slave_1 removed [ 1371.810638][ T2792] team0 (unregistering): Port device team_slave_0 removed [ 1372.167564][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802efc4800: abort rx timeout. Force session deactivation [ 1374.123571][T19756] hsr_slave_0: entered promiscuous mode [ 1374.172667][T19756] hsr_slave_1: entered promiscuous mode [ 1374.371602][ T5105] Bluetooth: hci3: command 0x0406 tx timeout [ 1376.383563][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3899'. [ 1378.536313][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802dccc800: rx timeout, send abort [ 1378.726666][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1378.776740][T19756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1378.828547][T19756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1378.894423][T19756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1378.953054][T19756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1379.044893][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802dccc800: abort rx timeout. Force session deactivation [ 1379.395211][T20005] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1379.656233][T19756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.699879][T20011] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3905'. [ 1381.267112][T19756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.411973][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.419271][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.614190][T18391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.621423][T18391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.808513][T19756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1382.229555][T11759] Bluetooth: hci3: unexpected event 0x06 length: 17 > 3 [ 1382.421527][T11759] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1382.728836][T19756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.904439][T20055] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1382.935540][T20055] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1383.010826][T19756] veth0_vlan: entered promiscuous mode [ 1383.050265][T20050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1383.135174][T20050] veth1_macvtap: left promiscuous mode [ 1383.296544][T19756] veth1_vlan: entered promiscuous mode [ 1384.109691][T20079] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1384.140284][T19756] veth0_macvtap: entered promiscuous mode [ 1384.243482][T19756] veth1_macvtap: entered promiscuous mode [ 1384.302071][T11759] Bluetooth: hci3: command 0x0406 tx timeout [ 1384.367954][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.422976][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.437378][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.449709][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.484516][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.596933][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.684277][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.780066][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.887139][T19756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.964243][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.990253][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.024012][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.051793][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.086114][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.120346][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.139872][T19756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.150950][T19756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.357198][T19756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.380038][T19756] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.389017][T19756] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.409212][T19756] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.174048][T19756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.186960][T20099] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1386.981034][ T2802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.008692][ T2802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.233842][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.607966][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.643184][T20118] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 1387.676521][T20118] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 1388.644474][T20141] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 1388.663174][T20141] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 1389.034305][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1390.212369][T11759] Bluetooth: hci4: command tx timeout [ 1392.358218][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d09c000: rx timeout, send abort [ 1392.866635][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d09c000: abort rx timeout. Force session deactivation [ 1393.713548][T20188] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1397.850771][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f0ef000: rx timeout, send abort [ 1398.337469][T20253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1398.359179][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f0ef000: abort rx timeout. Force session deactivation [ 1398.790917][T20263] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1398.919400][T20265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1398.960085][T20265] veth1_macvtap: left promiscuous mode [ 1400.805752][T20279] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1401.925674][ T9523] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1402.334786][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807c685800: rx timeout, send abort [ 1402.432812][ T9523] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1402.469163][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.482924][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.499928][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.511891][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.520955][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.538885][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.549596][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.579854][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.592838][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.602889][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.612399][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.623980][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.633185][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.642474][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.653980][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.664285][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.682243][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.693952][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.705187][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.716474][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.732608][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.764837][ T9523] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.774539][ T9523] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.809544][ T9523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.836443][ T9523] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1402.845545][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807c685800: abort rx timeout. Force session deactivation [ 1403.007248][ T9523] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1403.019446][ T9523] usb 2-1: Product: syz [ 1403.023751][ T9523] usb 2-1: Manufacturer: syz [ 1403.028447][ T9523] usb 2-1: SerialNumber: syz [ 1403.049767][ T9523] usb 2-1: config 0 descriptor?? [ 1403.075703][ T9523] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1403.452554][ T9523] usb 2-1: USB disconnect, device number 47 [ 1403.470956][T20315] netlink: 'syz.2.3978': attribute type 2 has an invalid length. [ 1403.500325][ T9523] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1403.525823][T20315] : entered promiscuous mode [ 1404.685331][ T5105] Bluetooth: hci4: unexpected event 0x06 length: 17 > 3 [ 1404.841045][ T5105] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1404.854801][ T5105] Bluetooth: Wrong link type (-22) [ 1404.861755][ T5105] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1404.868338][ T5105] Bluetooth: Wrong link type (-22) [ 1404.878833][ T5105] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1404.885860][ T5105] Bluetooth: Wrong link type (-22) [ 1404.892032][ T5105] Bluetooth: hci4: link tx timeout [ 1404.897808][ T5105] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1405.099563][T20332] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 1405.109335][T20332] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 1405.688724][T20338] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1405.697255][T20338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1406.611709][T20334] Bluetooth: hci3: command 0x0406 tx timeout [ 1406.679318][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888063f1c400: rx timeout, send abort [ 1406.761836][T20334] Bluetooth: hci4: command tx timeout [ 1407.188131][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888063f1c400: abort rx timeout. Force session deactivation [ 1407.958551][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 1408.310468][T20359] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1408.703721][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1408.777168][ T5105] Bluetooth: hci4: command 0x0406 tx timeout [ 1410.047107][T20400] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4002'. [ 1410.167748][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c0d0400: rx timeout, send abort [ 1410.479510][T20413] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1410.515955][T20407] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1410.525334][T20407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1410.703623][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c0d0400: abort rx timeout. Force session deactivation [ 1411.877523][T20419] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1412.215570][T20424] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1412.224720][T20424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1413.081149][T20442] tmpfs: Bad value for 'huge' [ 1413.667811][T20460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4014'. [ 1414.219095][T20469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20469 comm=syz.2.4017 [ 1414.234287][T20469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20469 comm=syz.2.4017 [ 1415.742677][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c589000: rx timeout, send abort [ 1415.938774][T20491] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1416.085453][T20487] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1416.251015][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c589000: abort rx timeout. Force session deactivation [ 1416.436956][T20496] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1416.445480][T20496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1417.683321][T20516] tmpfs: Bad value for 'huge' [ 1417.708423][ T5105] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 1417.955559][T20521] syzkaller1: entered promiscuous mode [ 1417.965519][T20521] syzkaller1: entered allmulticast mode [ 1418.989271][T20537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20537 comm=syz.2.4032 [ 1419.002194][T20537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20537 comm=syz.2.4032 [ 1420.387044][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880798af000: rx timeout, send abort [ 1420.469368][ T5105] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1420.504379][T20550] 9pnet_fd: p9_fd_create_unix (20550): problem connecting socket: ./file0: -2 [ 1420.851214][ T2797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.895419][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880798af000: abort rx timeout. Force session deactivation [ 1421.132876][ T5105] Bluetooth: hci4: unexpected event 0x06 length: 17 > 3 [ 1421.200012][ T2797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.209317][T20563] tmpfs: Bad value for 'huge' [ 1421.356237][ T5105] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1421.365076][ T5105] Bluetooth: Wrong link type (-22) [ 1421.370281][ T5105] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1421.376993][ T5105] Bluetooth: Wrong link type (-22) [ 1421.382428][ T5105] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1421.388948][ T5105] Bluetooth: Wrong link type (-22) [ 1421.620397][ T2797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.740267][T20561] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 1421.765375][T20561] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 1421.821550][ T2797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.869712][T20334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1421.885939][T20334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1421.897002][T20334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1421.911797][T20334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1421.920965][T20334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1421.931402][T20334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1422.686579][ T2797] bridge_slave_1: left allmulticast mode [ 1422.736264][ T2797] bridge_slave_1: left promiscuous mode [ 1422.755194][T20576] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1422.764825][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.860190][ T2797] bridge_slave_0: left allmulticast mode [ 1422.878183][ T2797] bridge_slave_0: left promiscuous mode [ 1422.890416][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.248011][ T5105] Bluetooth: hci4: command 0x0406 tx timeout [ 1424.062251][ T5105] Bluetooth: hci1: command tx timeout [ 1424.212475][T20593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20593 comm=syz.3.4047 [ 1424.231805][T20593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20593 comm=syz.3.4047 [ 1424.381929][T20599] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1425.850640][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805eb7d000: rx timeout, send abort [ 1426.078281][ T2797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.090728][ T2797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.102768][ T2797] bond0 (unregistering): Released all slaves [ 1426.133479][ T5105] Bluetooth: hci1: command tx timeout [ 1426.359045][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805eb7d000: abort rx timeout. Force session deactivation [ 1427.066525][ T5142] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 1427.288661][ T5142] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1427.320979][ T5142] usb 4-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1427.363392][ T5142] usb 4-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1427.411558][ T5142] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1427.430915][ T5142] usb 4-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 1427.462029][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.470067][ T5142] usb 4-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 1427.612647][ T2797] hsr_slave_0: left promiscuous mode [ 1427.659507][ T5142] usb 4-1: SerialNumber: Ъ [ 1427.679711][ T2797] hsr_slave_1: left promiscuous mode [ 1427.705813][T20633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1427.725702][T20633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1427.753045][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.819350][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.022942][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.200366][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.309563][ T5105] Bluetooth: hci1: command tx timeout [ 1428.435101][ T2797] veth0_macvtap: left promiscuous mode [ 1428.472838][ T2797] veth1_vlan: left promiscuous mode [ 1428.478345][ T2797] veth0_vlan: left promiscuous mode [ 1428.538803][T20631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20631 comm=syz.3.4056 [ 1428.616621][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.623577][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.655644][ T5142] usbhid 4-1:1.0: can't add hid device: -71 [ 1428.679314][ T5142] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1428.921608][ T5142] usb 4-1: USB disconnect, device number 57 [ 1429.706744][T20334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1429.719522][T20334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1429.728214][T20334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1429.756549][T20334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1429.766681][T20334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1429.774455][T20334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1430.373215][T20334] Bluetooth: hci1: command tx timeout [ 1430.500152][ T2797] team0 (unregistering): Port device team_slave_1 removed [ 1430.555200][ T2797] team0 (unregistering): Port device team_slave_0 removed [ 1431.079783][T20572] chnl_net:caif_netlink_parms(): no params data found [ 1431.117417][T20665] syz_tun: entered promiscuous mode [ 1431.209576][T19516] syz_tun (unregistering): left promiscuous mode [ 1431.285727][T20334] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1431.292798][T20670] 9pnet_fd: p9_fd_create_unix (20670): problem connecting socket: ./file0: -2 [ 1432.152812][ T5105] Bluetooth: hci2: command tx timeout [ 1432.550497][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ac38c00: rx timeout, send abort [ 1432.724730][T20572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.749926][T20572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.796651][T20572] bridge_slave_0: entered allmulticast mode [ 1432.837130][T20572] bridge_slave_0: entered promiscuous mode [ 1432.900845][T20572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.924819][T20572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.934710][T20572] bridge_slave_1: entered allmulticast mode [ 1432.945274][T20572] bridge_slave_1: entered promiscuous mode [ 1433.058931][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ac38c00: abort rx timeout. Force session deactivation [ 1433.324755][T20572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.505771][T20572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.714046][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1434.064602][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1434.075312][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1434.093098][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1434.106746][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1434.124111][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1434.222364][ T5105] Bluetooth: hci2: command tx timeout [ 1434.463651][T20660] chnl_net:caif_netlink_parms(): no params data found [ 1434.495584][T20572] team0: Port device team_slave_0 added [ 1434.641060][T20572] team0: Port device team_slave_1 added [ 1434.732036][T20716] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1434.778257][ T2797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.798614][ T2797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.006309][ T2797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1435.017207][ T2797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.032244][T18740] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1435.076516][T20572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.090867][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.118834][T20572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.207836][ T2797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1435.226383][ T2797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.260628][T20572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.273572][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.309796][T20572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.428974][ T5105] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1435.438672][ T5105] Bluetooth: hci3: Injecting HCI hardware error event [ 1435.451787][ T5105] Bluetooth: hci3: hardware error 0x00 [ 1435.483381][T18740] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1435.500370][T18740] usb 4-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1435.512460][T18740] usb 4-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1435.525754][T18740] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1435.566432][T18740] usb 4-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 1435.911346][T18740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.984382][T18740] usb 4-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 1436.220304][T20334] Bluetooth: hci4: command tx timeout [ 1436.251976][T18740] usb 4-1: SerialNumber: Ъ [ 1436.292457][T20334] Bluetooth: hci2: command tx timeout [ 1436.362607][T20717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1436.375797][T20717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1436.386429][ T2797] bond0: (slave ): Releasing backup interface [ 1436.398398][ T2797] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1436.408187][ T2797] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.438374][T20572] hsr_slave_0: entered promiscuous mode [ 1436.446665][T20572] hsr_slave_1: entered promiscuous mode [ 1436.452551][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807da4f800: rx timeout, send abort [ 1436.471306][T20572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1436.479040][T20572] Cannot create hsr debugfs directory [ 1436.493115][T20660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.500532][T20660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.509078][T20660] bridge_slave_0: entered allmulticast mode [ 1436.516812][T20660] bridge_slave_0: entered promiscuous mode [ 1436.616370][T20660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.625160][T20660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.634554][T20660] bridge_slave_1: entered allmulticast mode [ 1436.645721][T20660] bridge_slave_1: entered promiscuous mode [ 1436.795342][T20713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20713 comm=syz.3.4072 [ 1436.830667][T20660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.834782][T18740] usbhid 4-1:1.0: can't add hid device: -71 [ 1436.849611][T18740] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1436.901933][T18740] usb 4-1: USB disconnect, device number 58 [ 1436.952651][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807da4f800: abort rx timeout. Force session deactivation [ 1437.047322][T20660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.510286][T20660] team0: Port device team_slave_0 added [ 1437.539116][T20660] team0: Port device team_slave_1 added [ 1437.573342][ T5105] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1438.256940][ T2797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.297861][ T5105] Bluetooth: hci4: command tx timeout [ 1438.501388][ T5105] Bluetooth: hci2: command tx timeout [ 1439.041874][T20760] trusted_key: encrypted_key: insufficient parameters specified [ 1439.551272][T20761] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1439.777119][ T2797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.989458][T20660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.016708][T20660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.083599][T20660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.394335][ T5105] Bluetooth: hci4: command tx timeout [ 1440.611809][ T2797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.119704][ T2797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.211918][T20660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.252613][T20660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.285076][T20660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.451629][ T5105] Bluetooth: hci4: command tx timeout [ 1442.647921][T20702] chnl_net:caif_netlink_parms(): no params data found [ 1442.650549][T20792] tmpfs: Bad value for 'huge' [ 1443.037284][T20660] hsr_slave_0: entered promiscuous mode [ 1443.060961][T20660] hsr_slave_1: entered promiscuous mode [ 1443.076437][T20660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.088823][T20660] Cannot create hsr debugfs directory [ 1443.440949][ T29] audit: type=1400 audit(1720192057.239:973): avc: denied { sys_chroot } for pid=20794 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1443.548505][ T29] audit: type=1400 audit(1720192057.239:974): avc: denied { setgid } for pid=20794 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1443.579916][ T29] audit: type=1400 audit(1720192057.269:975): avc: denied { setrlimit } for pid=20794 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1444.153528][T20702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.181746][T20702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.189001][T20702] bridge_slave_0: entered allmulticast mode [ 1444.198198][T20702] bridge_slave_0: entered promiscuous mode [ 1444.208222][T20702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.223583][T20702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.384989][T20702] bridge_slave_1: entered allmulticast mode [ 1444.496716][T20805] trusted_key: encrypted_key: insufficient parameters specified [ 1444.681424][T20702] bridge_slave_1: entered promiscuous mode [ 1444.997368][ T2797] bridge_slave_0: left allmulticast mode [ 1445.009473][ T2797] bridge_slave_0: left promiscuous mode [ 1445.020106][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.046048][ T2797] bridge_slave_1: left allmulticast mode [ 1445.057954][ T2797] bridge_slave_1: left promiscuous mode [ 1445.066840][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.090123][ T2797] bridge_slave_0: left allmulticast mode [ 1445.099513][ T2797] bridge_slave_0: left promiscuous mode [ 1445.112017][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.496436][T20813] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1445.595715][T20815] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1445.604221][T20815] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1447.010041][ T2797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.038264][ T2797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.058676][ T2797] bond0 (unregistering): Released all slaves [ 1447.089131][ T2797] bond1 (unregistering): Released all slaves [ 1447.322413][ T2797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.349552][ T2797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.373247][ T2797] bond0 (unregistering): Released all slaves [ 1447.479134][T20702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.870477][T20702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.393721][ T2797] : left promiscuous mode [ 1448.487965][T20702] team0: Port device team_slave_0 added [ 1448.629420][ T2797] tipc: Disabling bearer [ 1448.645686][ T2797] tipc: Left network mode [ 1448.672614][T20702] team0: Port device team_slave_1 added [ 1448.933514][T20702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.955665][T20702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.991401][T20702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.015934][T20702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.037358][T20702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.144610][T20702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.476745][T20572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1449.749010][T20572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1449.881387][T20702] hsr_slave_0: entered promiscuous mode [ 1449.910872][T20702] hsr_slave_1: entered promiscuous mode [ 1449.919939][T20702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.939629][T20702] Cannot create hsr debugfs directory [ 1450.122229][T20572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1450.441405][T20572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1450.597721][T20854] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1450.623073][T20854] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1450.631421][T20873] tmpfs: Bad value for 'huge' [ 1451.045087][T20877] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1451.804964][T20660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1451.831134][T20660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1451.897672][T20660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1452.250381][T20660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1453.411636][ T2797] hsr_slave_0: left promiscuous mode [ 1453.439352][ T2797] hsr_slave_1: left promiscuous mode [ 1453.480705][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.499727][T20912] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1453.512011][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.525040][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.550279][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.579805][ T2797] hsr_slave_0: left promiscuous mode [ 1453.604439][ T2797] hsr_slave_1: left promiscuous mode [ 1453.612198][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.620925][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.630482][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.654891][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.812110][ T2797] veth0_macvtap: left promiscuous mode [ 1453.818458][ T2797] veth1_vlan: left promiscuous mode [ 1453.830921][ T2797] veth0_vlan: left promiscuous mode [ 1453.846209][ T2797] veth1_macvtap: left promiscuous mode [ 1453.857702][ T2797] veth0_macvtap: left promiscuous mode [ 1453.876153][ T2797] veth1_vlan: left promiscuous mode [ 1453.883888][ T2797] veth0_vlan: left promiscuous mode [ 1454.827139][ T2797] team0 (unregistering): Port device team_slave_1 removed [ 1454.879794][ T2797] team0 (unregistering): Port device team_slave_0 removed [ 1455.885541][ T2797] team0 (unregistering): Port device team_slave_1 removed [ 1455.940726][ T2797] team0 (unregistering): Port device team_slave_0 removed [ 1456.727327][T20927] tmpfs: Bad value for 'huge' [ 1456.761061][T20572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.989802][T20572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.068185][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.075509][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.136398][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.143675][T14546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.601406][T20660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.836549][T20702] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1457.937038][T20702] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1458.072080][T20702] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1458.118946][T20660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.157052][T20702] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1458.229538][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.236795][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.319609][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.326904][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.338409][T20949] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1458.347058][T20949] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1458.837865][ T2797] IPVS: stop unused estimator thread 0... [ 1459.251048][T20660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1459.326804][T20572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.755195][T20572] veth0_vlan: entered promiscuous mode [ 1459.790747][T20971] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1459.795422][T20702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.880380][T20572] veth1_vlan: entered promiscuous mode [ 1459.925686][T20702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.964117][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.971349][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.046020][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.053214][ T9523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.244989][T20572] veth0_macvtap: entered promiscuous mode [ 1460.379619][T20981] syz_tun: entered promiscuous mode [ 1460.419097][T20572] veth1_macvtap: entered promiscuous mode [ 1460.579325][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.611372][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.626360][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.639279][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.683405][T20572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.786540][T20660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.863060][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.898585][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.919672][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.931183][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.020325][T20572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.038959][T20983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1461.138894][T20572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.159151][T20572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.173769][T20572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.185673][T20572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.586584][T20660] veth0_vlan: entered promiscuous mode [ 1461.756616][ T2802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.793558][ T2802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.851392][T20660] veth1_vlan: entered promiscuous mode [ 1462.074092][T10247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.099004][T10247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.183593][T20702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.340903][T20660] veth0_macvtap: entered promiscuous mode [ 1462.398227][T20660] veth1_macvtap: entered promiscuous mode [ 1462.500919][T20660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1462.517558][T20660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.550355][T20660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1462.584227][T20660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.612230][T20660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1462.633820][T20660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.812709][T20660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.850578][T20660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.919922][T20660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.940218][T20660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.961386][T20660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.981496][T20660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.003463][T20660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.033822][T20660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.087128][T20660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.131506][T20660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.161522][T20660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.201501][T20660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.075861][T21038] trusted_key: encrypted_key: insufficient parameters specified [ 1464.582946][T21035] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1464.709279][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.751988][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.988308][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.057196][T20702] veth0_vlan: entered promiscuous mode [ 1465.277747][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.309011][T20702] veth1_vlan: entered promiscuous mode [ 1466.317048][ T5142] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1466.521661][ T5142] usb 2-1: Using ep0 maxpacket: 32 [ 1466.561060][ T5142] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1466.590722][T20702] veth0_macvtap: entered promiscuous mode [ 1466.605506][ T5142] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1466.646919][ T5142] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1466.658539][T20702] veth1_macvtap: entered promiscuous mode [ 1466.688382][ T5142] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1466.731657][ T5142] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1466.809086][ T5142] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1466.826248][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.834970][ T5142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1466.878857][ T5142] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1466.883005][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.945404][ T5142] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 1466.946756][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.986324][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.994671][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.014738][ T5142] usb 2-1: Product: В [ 1467.024892][ T5142] usb 2-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍व [ 1467.045531][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.076406][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.118084][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.163791][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.246437][T20702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.322567][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.338828][ T5142] usb 2-1: SerialNumber: syz [ 1467.348089][ T5142] usb 2-1: config 0 descriptor?? [ 1467.359775][ T5142] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1467.367268][ T5142] pvrusb2: ********** [ 1467.371286][ T5142] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1467.494430][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.651794][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.843909][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.921907][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.985249][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.043785][T20702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.113642][T20702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.156913][ T5142] pvrusb2: Important functionality might not be entirely working. [ 1468.164846][ T5142] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1468.176230][ T5142] pvrusb2: ********** [ 1468.184542][T20702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1468.207338][ T1976] pvrusb2: Invalid write control endpoint [ 1468.236334][T20702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.277679][T20702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.326610][T20702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.363739][T20702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.448281][ T1976] pvrusb2: Invalid write control endpoint [ 1468.478603][ T1976] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1468.497208][ T1976] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1468.505425][ T1976] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1468.531075][ T1976] pvrusb2: Device being rendered inoperable [ 1468.564019][ T1976] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1468.611901][ T1976] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1468.935605][ T1976] pvrusb2: Attached sub-driver cx25840 [ 1469.774254][T21092] trusted_key: encrypted_key: insufficient parameters specified [ 1469.855368][ T1976] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1470.199845][ T1976] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1470.421138][ T9523] usb 2-1: USB disconnect, device number 48 [ 1470.635382][T21099] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1470.719539][ T2792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.746216][ T2792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.804640][T21093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4137'. [ 1470.982547][ T2797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.001814][ T2797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.288697][T21108] syz_tun: entered promiscuous mode [ 1474.086007][T21141] trusted_key: encrypted_key: insufficient parameters specified [ 1475.009066][T21160] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1475.133656][ T9523] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 1580.251408][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1580.258426][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21168/1:b..l [ 1580.267202][ C0] rcu: (detected by 0, t=10502 jiffies, g=150433, q=573 ncpus=2) [ 1580.275027][ C0] task:dhcpcd state:R running task stack:28640 pid:21168 tgid:21168 ppid:4751 flags:0x00000002 [ 1580.288162][ C0] Call Trace: [ 1580.291472][ C0] [ 1580.294430][ C0] __schedule+0xf15/0x5d00 [ 1580.298884][ C0] ? hlock_class+0x4e/0x130 [ 1580.303429][ C0] ? __pfx___schedule+0x10/0x10 [ 1580.308309][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1580.313547][ C0] ? stack_trace_save+0x95/0xd0 [ 1580.318435][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1580.323240][ C0] ? mark_held_locks+0x9f/0xe0 [ 1580.328047][ C0] preempt_schedule_irq+0x51/0x90 [ 1580.333108][ C0] irqentry_exit+0x36/0x90 [ 1580.337560][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1580.343594][ C0] RIP: 0010:prepend_path+0x158/0xf50 [ 1580.348930][ C0] Code: 75 08 48 c7 c7 08 47 81 8d e8 74 d0 61 ff 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 12 e3 83 ff 48 85 db 58 0f 85 2d 0c 00 00 d3 e7 83 ff 48 c7 c2 00 47 81 8d 48 b8 00 00 00 00 00 fc ff df [ 1580.368572][ C0] RSP: 0018:ffffc90003687930 EFLAGS: 00000293 [ 1580.374666][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff820a0782 [ 1580.382660][ C0] RDX: ffff888020dc8000 RSI: ffffffff820a0791 RDI: ffffffff820a1e7f [ 1580.390680][ C0] RBP: ffffc90003687a30 R08: 0000000000000007 R09: 0000000000000000 [ 1580.398681][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88801fb18ffe [ 1580.406674][ C0] R13: 1ffff920006d0f34 R14: dffffc0000000000 R15: ffff8880208d2a48 [ 1580.414681][ C0] ? prepend_path+0xc22/0xf50 [ 1580.419399][ C0] ? prepend_path+0xc31/0xf50 [ 1580.424109][ C0] ? d_absolute_path+0xff/0x1b0 [ 1580.429005][ C0] ? __pfx_prepend_path+0x10/0x10 [ 1580.434078][ C0] d_absolute_path+0xff/0x1b0 [ 1580.438819][ C0] ? __pfx_d_absolute_path+0x10/0x10 [ 1580.444150][ C0] ? trace_kmalloc+0x2d/0xe0 [ 1580.448788][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1580.453867][ C0] tomoyo_realpath_from_path+0x36a/0x720 [ 1580.459540][ C0] tomoyo_check_open_permission+0x2a7/0x3b0 [ 1580.465479][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1580.471953][ C0] ? selinux_file_permission+0x125/0x590 [ 1580.477636][ C0] tomoyo_bprm_check_security+0xc8/0x1d0 [ 1580.483305][ C0] security_bprm_check+0x65/0xb0 [ 1580.488285][ C0] bprm_execve+0x642/0x19b0 [ 1580.492830][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 1580.497806][ C0] ? copy_strings.isra.0+0x3c0/0x450 [ 1580.503127][ C0] do_execveat_common.isra.0+0x5cb/0x750 [ 1580.508799][ C0] __x64_sys_execve+0x8c/0xb0 [ 1580.513537][ C0] do_syscall_64+0xcd/0x250 [ 1580.518093][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.524035][ C0] RIP: 0033:0x7f2af9929ef7 [ 1580.528477][ C0] RSP: 002b:00007f2af97d3e78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1580.536922][ C0] RAX: ffffffffffffffda RBX: 00007ffe1bd4a8c0 RCX: 00007f2af9929ef7 [ 1580.544925][ C0] RDX: 00005630925091d0 RSI: 00007ffe1bd4adb0 RDI: 0000563074df7df6 [ 1580.552930][ C0] RBP: 00007f2af97d3ff0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.560929][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffe1bd4abd8 [ 1580.568928][ C0] R13: 00007f2af97d3f28 R14: 0000000000000000 R15: 0000000000000041 [ 1580.576931][ C0] [ 1580.579981][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g150433 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1580.591299][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1580.601305][ C0] rcu: RCU grace-period kthread stack dump: [ 1580.607213][ C0] task:rcu_preempt state:R running task stack:26064 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1580.618986][ C0] Call Trace: [ 1580.622293][ C0] [ 1580.625254][ C0] __schedule+0xf15/0x5d00 [ 1580.629704][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1580.634993][ C0] ? __pfx___schedule+0x10/0x10 [ 1580.639896][ C0] ? schedule+0x298/0x350 [ 1580.644265][ C0] ? __pfx_lock_release+0x10/0x10 [ 1580.649345][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1580.654332][ C0] ? lock_acquire+0x1b1/0x560 [ 1580.659058][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 1580.664588][ C0] schedule+0xe7/0x350 [ 1580.668697][ C0] schedule_timeout+0x136/0x2a0 [ 1580.673600][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1580.679014][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1580.684342][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1580.690181][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 1580.695712][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1580.700519][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1580.705858][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1580.711761][ C0] rcu_gp_kthread+0x271/0x380 [ 1580.716494][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1580.721739][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1580.726990][ C0] ? __kthread_parkme+0x148/0x220 [ 1580.732056][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1580.737308][ C0] kthread+0x2c1/0x3a0 [ 1580.741434][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1580.746677][ C0] ? __pfx_kthread+0x10/0x10 [ 1580.751316][ C0] ret_from_fork+0x45/0x80 [ 1580.755788][ C0] ? __pfx_kthread+0x10/0x10 [ 1580.760415][ C0] ret_from_fork_asm+0x1a/0x30 [ 1580.765226][ C0] [ 1580.768265][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1580.774605][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1580.784346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1580.794419][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1580.799784][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 68 54 1c 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 38 af b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1580.819429][ C0] RSP: 0018:ffffffff8d807d70 EFLAGS: 00000246 [ 1580.825523][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae767b9 [ 1580.833513][ C0] RDX: 0000000000000001 RSI: ffff888019e84000 RDI: ffff888019e84064 [ 1580.841513][ C0] RBP: ffff888019e84064 R08: 0000000000000001 R09: ffffed1017246fdd [ 1580.849530][ C0] R10: ffff8880b9237eeb R11: 0000000000000000 R12: ffff888019f3d000 [ 1580.857534][ C0] R13: ffffffff8e742280 R14: 0000000000000000 R15: 0000000000000000 [ 1580.865532][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1580.874489][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1580.881105][ C0] CR2: 0000555584dae5c8 CR3: 0000000023792000 CR4: 00000000003506f0 [ 1580.889094][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1580.897080][ C0] DR3: 000000000000f41c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1580.905058][ C0] Call Trace: [ 1580.908333][ C0] [ 1580.911171][ C0] ? show_regs+0x8c/0xa0 [ 1580.915456][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1580.921834][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1580.922761][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1580.927064][ C0] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 1580.938794][ C0] ? __pfx_lock_release+0x10/0x10 [ 1580.943866][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1580.949553][ C0] ? __asan_memcpy+0x3c/0x60 [ 1580.954184][ C0] ? update_process_times+0x175/0x220 [ 1580.959587][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1580.965349][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1580.970862][ C0] ? update_wall_time+0x1c/0x40 [ 1580.975793][ C0] ? tick_nohz_handler+0x376/0x530 [ 1580.980944][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1580.986446][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 1580.991458][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1580.991837][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1581.001168][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.003764][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 1581.016137][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 1581.021299][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1581.027500][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 1581.033308][ C0] [ 1581.036232][ C0] [ 1581.039156][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1581.045320][ C0] ? ct_kernel_exit+0x139/0x190 [ 1581.050177][ C0] ? acpi_safe_halt+0x1a/0x20 [ 1581.054871][ C0] acpi_idle_enter+0xc5/0x160 [ 1581.059569][ C0] cpuidle_enter_state+0x85/0x500 [ 1581.064620][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1581.070432][ C0] cpuidle_enter+0x4e/0xa0 [ 1581.074847][ C0] do_idle+0x313/0x3f0 [ 1581.078911][ C0] ? __pfx_do_idle+0x10/0x10 [ 1581.083498][ C0] cpu_startup_entry+0x4f/0x60 [ 1581.088260][ C0] rest_init+0x16b/0x2b0 [ 1581.092510][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1581.097799][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1581.103347][ C0] start_kernel+0x3df/0x4c0 [ 1581.107856][ C0] x86_64_start_reservations+0x18/0x30 [ 1581.113318][ C0] x86_64_start_kernel+0xb2/0xc0 [ 1581.118259][ C0] common_startup_64+0x13e/0x148 [ 1581.123215][ C0]