last executing test programs: 2m12.195231862s ago: executing program 3 (id=1297): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) statx(r1, 0x0, 0x1000, 0x80, 0x0) 2m12.138745458s ago: executing program 3 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m12.019097583s ago: executing program 3 (id=1300): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) 2m8.265546566s ago: executing program 3 (id=1323): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x30, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="000f140000000995366e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m8.073287754s ago: executing program 32 (id=1323): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x30, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="000f140000000995366e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m13.970698778s ago: executing program 4 (id=1030): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) 1m13.528447907s ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 1m2.523919821s ago: executing program 4 (id=1030): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) 1m2.11634457s ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 48.957427692s ago: executing program 4 (id=1030): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) 48.698689504s ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 35.787128456s ago: executing program 4 (id=1030): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) 33.557319791s ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 22.85491851s ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 22.617953994s ago: executing program 1 (id=1833): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 22.617821528s ago: executing program 4 (id=1030): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) 20.369845763s ago: executing program 1 (id=1839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syslog(0x4, &(0x7f00000001c0)=""/72, 0x48) 19.808602107s ago: executing program 1 (id=1841): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsopen(&(0x7f00000000c0)='gfs2meta\x00', 0x1) 19.330205166s ago: executing program 1 (id=1844): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10041, 0x100) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffe, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17.350030675s ago: executing program 1 (id=1846): mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2b) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 17.168907135s ago: executing program 1 (id=1848): write$evdev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000400)={@private2, 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.69155235s ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 7.97605817s ago: executing program 4 (id=1030): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) 6.42848104s ago: executing program 0 (id=1870): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) readlink(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0) 4.430615587s ago: executing program 5 (id=1872): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper={0x40086303}], 0xfcff, 0x1000000000000, 0x0}) 3.965335466s ago: executing program 0 (id=1873): socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="a5", 0x1}], 0x1, 0x0) 3.50319867s ago: executing program 5 (id=1874): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{r0}, 0x20000000008}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b030600e2ff020002004788aa96a13bb1", 0x11, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd}, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 3.44944769s ago: executing program 5 (id=1875): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44810, 0x0, 0x0) 3.355395103s ago: executing program 5 (id=1876): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) 2.841156222s ago: executing program 0 (id=1877): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000642000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f00005cf000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) capset(0x0, 0x0) socket(0x2, 0x3, 0xff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) read$dsp(r4, &(0x7f0000000200)=""/168, 0xa8) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163"], 0xa0}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000580)={0x28, 0x0, 0x0, @host}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.072708713s ago: executing program 33 (id=1848): write$evdev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000400)={@private2, 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.415216664s ago: executing program 5 (id=1879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 1.373353752s ago: executing program 0 (id=1880): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200), &(0x7f0000000040)=0x24) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440), 0x0) pipe2(&(0x7f0000000040), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0xfefffffe, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x19203}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xffffffffffffff0b, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_FILTERING={0x0, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) r9 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e909", 0xa8, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r11}, &(0x7f0000000140)=""/243, 0xf3, &(0x7f0000000400)={&(0x7f0000000380)={'crc32c\x00'}}) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3, 0x400}, 0x0, &(0x7f0000000440)={0x4, 0x0, 0x10001, 0x1, 0x101, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}}) r12 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r12, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 436.63485ms ago: executing program 5 (id=1881): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x96, 0x90, 0x34, 0x20, 0x2058, 0x1005, 0xb5f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0x51, 0x8e, 0x3f}}, {{0x9, 0x4, 0x62, 0x0, 0x0, 0xd1, 0xd8, 0xa3, 0xff}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3, 0x10000}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r3, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r4, @ANYBLOB="06003429db340000acf0822b43d6bed4dd7a3d1db8d8613e469199c8744cfc4fd51568df9646017c119429c2067feab7669a412dcffe39c986b02d48196498941043fef298383388a41b141fd64493b6fd2f69da3bc7351b2e27d2ac5958ecd055a57d746bc0163f9df7e87cf132a8e62c75f43814cfb4e8ecbff4d4aee60c4c561722be96a9c035fe15d7f4d685debf4883bc61f748b9b296514764e44d4270980309e8cc2331f219ccdd8ac2933fd528e7864d7fa2f8fbfe"], 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000001c0)={0xf6c, 0x10000, 0x7}, 0xc) 293.977099ms ago: executing program 0 (id=1882): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) 0s ago: executing program 0 (id=1883): socket$packet(0x11, 0x2, 0x300) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @private2, 0x6}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1ff, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): ing dummy_hcd [ 344.265617][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.276718][ T5866] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 344.286034][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.295215][T17192] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 344.296403][ T5866] usb 1-1: config 0 descriptor?? [ 344.387573][T17196] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3632853531 (7265707062 ns) > initial count (3190851428 ns). Using initial count to start timer. [ 344.640778][T17210] block nbd1: shutting down sockets [ 344.717460][T17210] block nbd1: NBD_DISCONNECT [ 344.732742][ T5866] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 344.740367][T17210] block nbd1: Send disconnect failed -32 [ 344.760976][ T5866] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0024/input/input34 [ 344.926963][ T5866] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 345.019015][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.271095][ T899] usb 1-1: USB disconnect, device number 34 [ 345.409519][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.461875][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.474327][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.484830][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.493650][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.502175][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.509350][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.661575][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.678157][T17267] chnl_net:caif_netlink_parms(): no params data found [ 345.904048][ T29] audit: type=1326 audit(1734361766.244:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.1608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb321b85d19 code=0x0 [ 345.951336][T17267] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.964796][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.985614][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.988728][T17267] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.006448][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.014666][T17267] bridge_slave_0: entered allmulticast mode [ 346.022922][T17267] bridge_slave_0: entered promiscuous mode [ 346.030216][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.037728][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.051088][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.099799][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.130949][T17267] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.138058][T17267] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.145666][T17267] bridge_slave_1: entered allmulticast mode [ 346.153513][T17267] bridge_slave_1: entered promiscuous mode [ 346.191869][T17267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.205287][T17448] syzkaller1: entered promiscuous mode [ 346.211169][T17448] syzkaller1: entered allmulticast mode [ 346.229973][T17267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.356272][T17267] team0: Port device team_slave_0 added [ 346.373615][T17267] team0: Port device team_slave_1 added [ 346.426298][ T35] bridge_slave_1: left allmulticast mode [ 346.441466][ T35] bridge_slave_1: left promiscuous mode [ 346.452891][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.465834][ T35] bridge_slave_0: left allmulticast mode [ 346.467063][ T29] audit: type=1400 audit(1734361766.804:655): avc: denied { setopt } for pid=17548 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 346.472018][ T35] bridge_slave_0: left promiscuous mode [ 346.498574][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.507032][T17549] netlink: 'syz.1.1613': attribute type 10 has an invalid length. [ 346.889714][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.906410][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.917542][ T35] bond0 (unregistering): Released all slaves [ 347.019755][T17549] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 347.187169][T17267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.197906][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.227285][T17267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.239859][T17267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.249720][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.281778][T17267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.297709][ T29] audit: type=1400 audit(1734361767.634:656): avc: denied { mount } for pid=17580 comm="syz.1.1617" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 347.541375][ T5815] Bluetooth: hci0: command tx timeout [ 347.604041][T17267] hsr_slave_0: entered promiscuous mode [ 347.641766][T17267] hsr_slave_1: entered promiscuous mode [ 347.673497][ T29] audit: type=1400 audit(1734361768.004:657): avc: denied { create } for pid=17635 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 347.699344][T17267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.718752][T17267] Cannot create hsr debugfs directory [ 347.724548][ T29] audit: type=1400 audit(1734361768.004:658): avc: denied { connect } for pid=17635 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 347.808681][ T35] hsr_slave_0: left promiscuous mode [ 347.819274][ T35] hsr_slave_1: left promiscuous mode [ 347.859009][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.881947][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.900830][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.908249][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.986669][ T35] veth1_macvtap: left promiscuous mode [ 348.005067][ T29] audit: type=1326 audit(1734361768.334:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17670 comm="syz.5.1626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd20eb85d19 code=0x0 [ 348.010252][ T35] veth0_macvtap: left promiscuous mode [ 348.048903][ T35] veth1_vlan: left promiscuous mode [ 348.062358][ T35] veth0_vlan: left promiscuous mode [ 348.100560][ T5815] Bluetooth: hci4: command tx timeout [ 348.325919][T17687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.747860][ T35] team0 (unregistering): Port device team_slave_1 removed [ 348.805869][ T35] team0 (unregistering): Port device team_slave_0 removed [ 348.857922][T17719] syz.5.1640[17719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.857975][T17719] syz.5.1640[17719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.869612][T17719] syz.5.1640[17719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.073578][ T5866] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 349.250569][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 349.300814][ T5866] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 349.330315][ T29] audit: type=1326 audit(1734361769.654:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.5.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20eb85d19 code=0x0 [ 349.359299][ T5866] usb 2-1: config 0 has no interface number 0 [ 349.368515][ T5866] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 349.411426][ T5866] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 349.432731][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.453870][ T5866] usb 2-1: Product: syz [ 349.468159][T17403] chnl_net:caif_netlink_parms(): no params data found [ 349.484847][ T5866] usb 2-1: Manufacturer: syz [ 349.498077][ T5866] usb 2-1: SerialNumber: syz [ 349.507448][ T5866] usb 2-1: config 0 descriptor?? [ 349.620263][ T5815] Bluetooth: hci0: command tx timeout [ 349.678789][T17403] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.707020][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.737921][T17403] bridge_slave_0: entered allmulticast mode [ 349.749871][T17403] bridge_slave_0: entered promiscuous mode [ 349.790627][T17403] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.798949][T17403] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.821467][T17403] bridge_slave_1: entered allmulticast mode [ 349.828264][T17403] bridge_slave_1: entered promiscuous mode [ 349.922412][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.943520][T17403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.999126][T17403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.054411][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.124829][T17403] team0: Port device team_slave_0 added [ 350.141915][ T5866] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input35 [ 350.175141][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.183210][ T5815] Bluetooth: hci4: command tx timeout [ 350.202347][T17403] team0: Port device team_slave_1 added [ 350.321073][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.335631][T17403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.355311][ T29] audit: type=1400 audit(1734361770.694:661): avc: denied { listen } for pid=18028 comm="syz.5.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.383361][ T29] audit: type=1400 audit(1734361770.694:662): avc: denied { accept } for pid=18028 comm="syz.5.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.390199][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.433177][ T899] usb 2-1: USB disconnect, device number 28 [ 350.434406][T17403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.458041][T17403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.466876][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.493676][T17403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.614025][T17403] hsr_slave_0: entered promiscuous mode [ 350.626793][T17403] hsr_slave_1: entered promiscuous mode [ 350.642749][T17403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.651012][T17403] Cannot create hsr debugfs directory [ 350.812124][T17267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.858025][ T35] bridge_slave_1: left allmulticast mode [ 350.869505][ T35] bridge_slave_1: left promiscuous mode [ 350.877846][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.894934][ T35] bridge_slave_0: left allmulticast mode [ 351.115626][ T35] bridge_slave_0: left promiscuous mode [ 351.134490][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.700374][ T5815] Bluetooth: hci0: command tx timeout [ 351.796622][ T5867] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 351.972677][ T5867] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 351.993004][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.010365][ T5867] usb 2-1: Product: syz [ 352.022659][ T5867] usb 2-1: Manufacturer: syz [ 352.030325][ T5867] usb 2-1: SerialNumber: syz [ 352.049931][ T5867] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 352.066944][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.084603][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.111718][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 352.122254][ T35] bond0 (unregistering): Released all slaves [ 352.134748][T17267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.147779][T17267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.165544][T17267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.260422][ T5820] Bluetooth: hci4: command tx timeout [ 352.319365][ C0] usb 2-1: ath: unknown panic pattern! [ 352.424475][ T29] audit: type=1400 audit(1734361772.764:663): avc: denied { listen } for pid=18207 comm="syz.0.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 352.445018][ T29] audit: type=1400 audit(1734361772.784:664): avc: denied { accept } for pid=18207 comm="syz.0.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 352.505605][T17267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.522661][ T5870] usb 2-1: USB disconnect, device number 29 [ 352.541643][ T35] hsr_slave_0: left promiscuous mode [ 352.548278][ T35] hsr_slave_1: left promiscuous mode [ 352.555956][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.564034][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.571692][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.579105][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.593716][ T35] veth1_macvtap: left promiscuous mode [ 352.599220][ T35] veth0_macvtap: left promiscuous mode [ 352.605234][ T35] veth1_vlan: left promiscuous mode [ 352.610547][ T35] veth0_vlan: left promiscuous mode [ 352.930590][ T35] team0 (unregistering): Port device team_slave_1 removed [ 352.973990][ T35] team0 (unregistering): Port device team_slave_0 removed [ 353.150343][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 353.172838][ T9] ath9k_htc: Failed to initialize the device [ 353.198007][ T5870] usb 2-1: ath9k_htc: USB layer deinitialized [ 353.649220][T17267] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.668440][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.675620][T10633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.716901][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.724004][T10633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.782245][ T5820] Bluetooth: hci0: command tx timeout [ 353.892449][T17403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.917856][T17403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.959695][T17403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.983416][T17403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.058706][T17267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.082734][T17403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.098697][T17403] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.125496][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.132659][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.169781][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.176923][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.186519][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 354.191719][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 354.231614][T17403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.243420][T17403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.340250][ T5815] Bluetooth: hci4: command tx timeout [ 354.426999][T17403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.494245][T17403] veth0_vlan: entered promiscuous mode [ 354.518052][T17403] veth1_vlan: entered promiscuous mode [ 354.541631][T17403] veth0_macvtap: entered promiscuous mode [ 354.556551][T17403] veth1_macvtap: entered promiscuous mode [ 354.604118][T17403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.623499][T17403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.634599][T17403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.645776][T17403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.655747][T17403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.666762][T17403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.677290][T17403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.687162][T17267] veth0_vlan: entered promiscuous mode [ 354.705967][T17403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.720680][T17403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.739650][T17403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.750617][T17403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.760509][T17403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.771258][T17403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.782392][T17403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.792330][T17403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.801170][T17403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.809895][T17403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.818910][T17403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.839766][T17267] veth1_vlan: entered promiscuous mode [ 354.943470][T10633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.953878][T10633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.987636][T10633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.988391][T17267] veth0_macvtap: entered promiscuous mode [ 355.011674][T17267] veth1_macvtap: entered promiscuous mode [ 355.022324][T10633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.039199][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.055462][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.071649][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.082570][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.092440][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.102950][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.113378][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.123904][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.134632][T17267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.150230][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.165608][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.176872][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.187428][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.197579][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.208176][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.218019][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.228574][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.239519][T17267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.275577][T17267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.289506][T17267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.316721][T17267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.332859][T17267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.457276][ T29] audit: type=1400 audit(1734361775.794:665): avc: denied { connect } for pid=18354 comm="syz.5.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 355.457843][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.508202][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.557405][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.566296][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.755941][T18377] evm: overlay not supported [ 356.005590][ T29] audit: type=1400 audit(1734361776.344:666): avc: denied { setopt } for pid=18395 comm="syz.1.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.322871][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.450232][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 356.582927][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.618407][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.640266][ T5870] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.649316][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.686887][ T5870] usb 2-1: config 0 descriptor?? [ 356.761262][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.868603][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.878654][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.893417][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.913604][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.915804][ T5870] usbhid 2-1:0.0: can't add hid device: -71 [ 356.928506][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.939049][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 356.940276][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.952829][ T5870] usb 2-1: USB disconnect, device number 30 [ 356.954842][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.086653][T18416] chnl_net:caif_netlink_parms(): no params data found [ 357.166866][ T61] bridge_slave_1: left allmulticast mode [ 357.174304][ T61] bridge_slave_1: left promiscuous mode [ 357.181895][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.197757][ T61] bridge_slave_0: left allmulticast mode [ 357.220454][ T61] bridge_slave_0: left promiscuous mode [ 357.239206][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.267858][ T29] audit: type=1400 audit(1734361777.604:667): avc: denied { write } for pid=18599 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 357.372779][ T5870] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 357.379705][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.396528][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.405524][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.411771][T18607] IPv4: Oversized IP packet from 127.202.26.0 [ 357.433668][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.442023][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 357.453430][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.538350][T18611] input: syz0 as /devices/virtual/input/input36 [ 357.560305][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 357.569675][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.590188][ T5870] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 357.599360][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.609296][ T5870] usb 2-1: config 0 descriptor?? [ 357.622365][ T5870] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 357.633105][ T5870] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 357.848671][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.859971][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.870048][ T61] bond0 (unregistering): Released all slaves [ 357.882684][T18416] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.891655][T18416] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.898997][T18416] bridge_slave_0: entered allmulticast mode [ 357.905937][T18416] bridge_slave_0: entered promiscuous mode [ 357.915243][T18416] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.922393][T18416] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.929969][T18416] bridge_slave_1: entered allmulticast mode [ 357.946778][T18416] bridge_slave_1: entered promiscuous mode [ 358.031113][ T8] usb 2-1: USB disconnect, device number 31 [ 358.037847][ T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 358.109062][T18416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.151324][T18416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.203816][T18663] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.214990][T18663] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.287617][ T61] hsr_slave_0: left promiscuous mode [ 358.296963][ T61] hsr_slave_1: left promiscuous mode [ 358.307974][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.316199][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.323796][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.332323][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.349708][ T61] veth1_macvtap: left promiscuous mode [ 358.355726][ T61] veth0_macvtap: left promiscuous mode [ 358.361496][ T61] veth1_vlan: left promiscuous mode [ 358.366770][ T61] veth0_vlan: left promiscuous mode [ 358.560390][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 358.775514][ T61] team0 (unregistering): Port device team_slave_1 removed [ 358.813267][ T61] team0 (unregistering): Port device team_slave_0 removed [ 358.860498][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.875705][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.949483][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.090657][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.110343][ T5815] Bluetooth: hci0: command tx timeout [ 359.254148][T18719] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 359.304941][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.541700][ T5815] Bluetooth: hci4: command tx timeout [ 359.569142][T18719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.625671][T18719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.885044][ T5870] usb 6-1: USB disconnect, device number 6 [ 360.117434][ T29] audit: type=1326 audit(1734361780.454:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18718 comm="syz.5.1701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20eb85d19 code=0x0 [ 360.219542][T18416] team0: Port device team_slave_0 added [ 360.228068][T18416] team0: Port device team_slave_1 added [ 360.383640][T18416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.392232][T18416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.443643][T18416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.471467][T18416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.480186][T18416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.519473][T18416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.677563][T18416] hsr_slave_0: entered promiscuous mode [ 360.685917][T18416] hsr_slave_1: entered promiscuous mode [ 360.699399][T18602] chnl_net:caif_netlink_parms(): no params data found [ 360.819272][T18602] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.832155][T18602] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.839663][T18602] bridge_slave_0: entered allmulticast mode [ 360.853096][T18602] bridge_slave_0: entered promiscuous mode [ 360.861702][T18602] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.870300][T18602] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.877528][T18602] bridge_slave_1: entered allmulticast mode [ 360.884499][T18602] bridge_slave_1: entered promiscuous mode [ 360.935876][T18602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.947303][T18602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.993296][T16144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.123250][T18602] team0: Port device team_slave_0 added [ 361.152436][ T5815] Bluetooth: hci0: command tx timeout [ 361.169802][T16144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.200856][T18602] team0: Port device team_slave_1 added [ 361.246359][T16144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.288827][T18602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.300843][T18602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.338101][T18602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.352433][T18602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.359460][T18602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.382741][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1712'. [ 361.394686][T18602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.425767][T16144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.514741][T18602] hsr_slave_0: entered promiscuous mode [ 361.523890][T18602] hsr_slave_1: entered promiscuous mode [ 361.535350][T18602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.543937][T18602] Cannot create hsr debugfs directory [ 361.620363][ T5815] Bluetooth: hci4: command tx timeout [ 361.648889][T16144] bridge_slave_1: left allmulticast mode [ 361.655749][T16144] bridge_slave_1: left promiscuous mode [ 361.663063][T16144] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.673144][T16144] bridge_slave_0: left allmulticast mode [ 361.678771][T16144] bridge_slave_0: left promiscuous mode [ 361.684803][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.985558][T16144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.999984][T16144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.017903][T16144] bond0 (unregistering): Released all slaves [ 362.103221][T18416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.206711][T18416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.233370][T18416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.244051][T18416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.435922][T16144] hsr_slave_0: left promiscuous mode [ 362.573261][T16144] hsr_slave_1: left promiscuous mode [ 362.585133][T16144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.592697][T16144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.612269][T16144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.218128][T16144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.225361][ T5815] Bluetooth: hci0: command tx timeout [ 363.271680][T16144] veth1_macvtap: left promiscuous mode [ 363.277832][T16144] veth0_macvtap: left promiscuous mode [ 363.283868][T16144] veth1_vlan: left promiscuous mode [ 363.290266][T16144] veth0_vlan: left promiscuous mode [ 363.411160][T19285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1718'. [ 363.697846][T16144] team0 (unregistering): Port device team_slave_1 removed [ 363.705205][ T5815] Bluetooth: hci4: command tx timeout [ 363.744041][T16144] team0 (unregistering): Port device team_slave_0 removed [ 364.094396][T19279] syzkaller0: entered promiscuous mode [ 364.099890][T19279] syzkaller0: entered allmulticast mode [ 364.273223][T19297] Invalid ELF header type: 3 != 1 [ 364.280676][ T29] audit: type=1400 audit(1734361784.614:669): avc: denied { module_load } for pid=19296 comm="syz.5.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 365.308700][ T5815] Bluetooth: hci0: command tx timeout [ 365.784262][ T5815] Bluetooth: hci4: command tx timeout [ 366.516863][T18602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.569144][T18602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.612253][T18602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.621513][T18602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.639716][T18416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.658908][T18416] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.683386][T18416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.693777][T18416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.718929][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.726065][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.804860][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.811999][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.868109][T18602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.881487][T18602] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.925628][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.932749][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.977286][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.984431][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.027567][T18416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.039598][T18602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.055186][T18602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.252277][T18602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.325653][T18602] veth0_vlan: entered promiscuous mode [ 367.339689][T18602] veth1_vlan: entered promiscuous mode [ 367.367334][T18602] veth0_macvtap: entered promiscuous mode [ 367.379527][T18602] veth1_macvtap: entered promiscuous mode [ 367.402252][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.413498][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.423641][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.436489][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.460332][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.470877][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.483571][ T29] audit: type=1400 audit(1734361787.824:670): avc: denied { setopt } for pid=19378 comm="syz.5.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 367.485565][T18602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.523317][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.533871][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.543801][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.554486][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.564344][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.575429][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.587380][T18602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.605059][T19385] dlm: plock device version mismatch: kernel (1.2.0), user (1.3392864267.1111199035) [ 367.736193][T18602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.745401][T18602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.754196][T18602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.762943][T18602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.771731][ T5868] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 367.798230][T18416] veth0_vlan: entered promiscuous mode [ 367.807899][T18416] veth1_vlan: entered promiscuous mode [ 367.980011][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.045872][ T5868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.057508][ T5868] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 368.090878][T18416] veth0_macvtap: entered promiscuous mode [ 368.101566][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 368.132152][T18416] veth1_macvtap: entered promiscuous mode [ 368.138012][ T5868] usb 6-1: SerialNumber: syz [ 368.159192][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.171183][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.193857][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.204541][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.215405][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.225985][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.235896][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.246745][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.256857][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.267672][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.278320][T18416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.289070][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.316473][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.334247][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.347999][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.373235][ T5868] usb 6-1: 0:2 : does not exist [ 368.374998][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.381463][ T5868] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 368.388703][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.403400][ T5868] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 368.425115][ T5868] usb 6-1: 5:0: failed to get current value for ch 2 (-22) [ 368.430154][T18416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.453274][ T5868] usb 6-1: USB disconnect, device number 7 [ 368.457622][T18416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.483082][T18416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.563024][T18416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.579118][T18416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.588552][T18416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.597448][T18416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.612036][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.623768][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.713086][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.730887][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.792888][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.801340][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.269690][ T29] audit: type=1800 audit(1734361789.604:671): pid=19451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1739" name="bus" dev="overlay" ino=2108 res=0 errno=0 [ 369.430309][ T29] audit: type=1400 audit(1734361789.764:672): avc: denied { write } for pid=19461 comm="syz.1.1742" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.690267][ T5868] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 369.841528][ T5868] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.851082][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.875227][ T5868] usb 2-1: config 0 descriptor?? [ 369.894382][ T5868] cp210x 2-1:0.0: cp210x converter detected [ 369.923203][ T130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.169621][ T130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.272288][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.284823][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.295083][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.307232][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.312579][ T5868] usb 2-1: cp210x converter now attached to ttyUSB0 [ 370.324886][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.335126][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.427946][ T130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.494325][ T130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.507816][T19469] chnl_net:caif_netlink_parms(): no params data found [ 370.526301][ T5868] usb 2-1: USB disconnect, device number 32 [ 370.540891][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 370.567005][ T5868] cp210x 2-1:0.0: device disconnected [ 370.604535][T19469] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.612085][T19469] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.619216][T19469] bridge_slave_0: entered allmulticast mode [ 370.626498][T19469] bridge_slave_0: entered promiscuous mode [ 370.634029][T19469] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.641650][T19469] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.648790][T19469] bridge_slave_1: entered allmulticast mode [ 370.656529][T19469] bridge_slave_1: entered promiscuous mode [ 370.689970][T19469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.708105][T19469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.826355][ T29] audit: type=1400 audit(1734361791.154:673): avc: denied { cmd } for pid=19694 comm="syz.0.1743" path="socket:[43673]" dev="sockfs" ino=43673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 370.851025][T19469] team0: Port device team_slave_0 added [ 370.878341][ T130] bridge_slave_1: left allmulticast mode [ 370.895411][ T130] bridge_slave_1: left promiscuous mode [ 370.915429][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.923396][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.937584][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.950400][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.958227][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.965727][ T130] bridge_slave_0: left allmulticast mode [ 370.971735][ T130] bridge_slave_0: left promiscuous mode [ 370.978956][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 370.986370][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.994315][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.082152][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.092832][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.103012][ T130] bond0 (unregistering): Released all slaves [ 372.118282][T19469] team0: Port device team_slave_1 added [ 372.320425][T19469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.327881][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.356847][T19469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.376454][T19469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.385705][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.412677][T19469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.423345][ T5815] Bluetooth: hci0: command tx timeout [ 372.487235][T19469] hsr_slave_0: entered promiscuous mode [ 372.490252][ T5868] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 372.503300][T19469] hsr_slave_1: entered promiscuous mode [ 372.509784][T19469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.519352][T19469] Cannot create hsr debugfs directory [ 372.547388][ T130] hsr_slave_0: left promiscuous mode [ 372.554032][ T130] hsr_slave_1: left promiscuous mode [ 372.559818][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.569613][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.579321][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.587466][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.601171][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 372.602300][ T130] veth1_macvtap: left promiscuous mode [ 372.614131][ T130] veth0_macvtap: left promiscuous mode [ 372.619648][ T130] veth1_vlan: left promiscuous mode [ 372.625036][ T130] veth0_vlan: left promiscuous mode [ 372.650542][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 372.659622][ T5868] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.685269][ T5868] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.713338][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 372.719936][ T5868] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 372.729117][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.738780][ T5868] usb 2-1: config 0 descriptor?? [ 372.774255][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 372.789301][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 372.815903][ T9] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 372.825660][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.833786][ T9] usb 6-1: Product: syz [ 372.837957][ T9] usb 6-1: Manufacturer: syz [ 372.860436][ T9] usb 6-1: SerialNumber: syz [ 372.876784][ T9] usb 6-1: config 0 descriptor?? [ 372.933834][ T29] audit: type=1400 audit(1734361793.264:674): avc: denied { nlmsg_read } for pid=19835 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 372.940524][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 373.015980][ T29] audit: type=1326 audit(1734361793.354:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19835 comm="syz.0.1753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb321b85d19 code=0x0 [ 373.064113][ T5815] Bluetooth: hci4: command tx timeout [ 373.106336][ T5870] usb 6-1: USB disconnect, device number 8 [ 373.174718][ T5868] hkems 0003:2006:0118.0025: bogus close delimiter [ 373.181554][ T5868] hkems 0003:2006:0118.0025: item 0 4 2 10 parsing failed [ 373.189651][ T5868] hkems 0003:2006:0118.0025: parse failed [ 373.195815][ T5868] hkems 0003:2006:0118.0025: probe with driver hkems failed with error -22 [ 373.224289][ T130] team0 (unregistering): Port device team_slave_1 removed [ 373.263275][ T130] team0 (unregistering): Port device team_slave_0 removed [ 373.398226][ T5870] usb 2-1: USB disconnect, device number 33 [ 373.745453][T19920] dlm: plock device version mismatch: kernel (1.2.0), user (1.3392864267.1111199035) [ 374.263799][T19966] dvmrp5: entered allmulticast mode [ 374.309791][T19713] chnl_net:caif_netlink_parms(): no params data found [ 374.444380][ T130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.512825][ T5815] Bluetooth: hci0: command tx timeout [ 374.512890][ T130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.553924][T19713] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.563952][T19713] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.577473][T19713] bridge_slave_0: entered allmulticast mode [ 374.595019][T19713] bridge_slave_0: entered promiscuous mode [ 374.639941][ T130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.669899][T19713] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.681428][T19713] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.688943][T19713] bridge_slave_1: entered allmulticast mode [ 374.696378][T19713] bridge_slave_1: entered promiscuous mode [ 374.717923][ T130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.757830][T19713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.777552][T19713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.821332][T19713] team0: Port device team_slave_0 added [ 374.831586][T19713] team0: Port device team_slave_1 added [ 374.839410][T19469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.848950][T19469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.879974][T19469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.903511][T19469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.912182][T19713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.919244][T19713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.946548][T19713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.966337][T19713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.973436][T19713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.002885][T19713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.026631][ T130] bridge_slave_1: left allmulticast mode [ 375.033168][ T130] bridge_slave_1: left promiscuous mode [ 375.039002][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.049493][ T130] bridge_slave_0: left allmulticast mode [ 375.058273][ T130] bridge_slave_0: left promiscuous mode [ 375.066236][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.150328][ T5815] Bluetooth: hci4: command tx timeout [ 375.374272][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.385111][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.395609][ T130] bond0 (unregistering): Released all slaves [ 375.455634][T19713] hsr_slave_0: entered promiscuous mode [ 375.477090][T19713] hsr_slave_1: entered promiscuous mode [ 375.527087][ T29] audit: type=1400 audit(1734361795.864:676): avc: denied { getattr } for pid=20202 comm="syz.0.1761" name="/" dev="9p" ino=4412305357440913309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 375.666777][T19469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.777334][T19469] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.815552][ T130] hsr_slave_0: left promiscuous mode [ 375.824139][ T130] hsr_slave_1: left promiscuous mode [ 375.832013][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.845170][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.854302][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.866403][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.894017][ T130] veth1_macvtap: left promiscuous mode [ 375.899598][ T130] veth0_macvtap: left promiscuous mode [ 375.907753][ T130] veth1_vlan: left promiscuous mode [ 375.913347][ T130] veth0_vlan: left promiscuous mode [ 376.256897][ T130] team0 (unregistering): Port device team_slave_1 removed [ 376.301069][ T130] team0 (unregistering): Port device team_slave_0 removed [ 376.593734][ T5815] Bluetooth: hci0: command tx timeout [ 376.727725][T20294] input: syz0 as /devices/virtual/input/input37 [ 376.729316][T20283] syzkaller0: entered allmulticast mode [ 376.769705][T20287] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 376.785848][T20287] syzkaller0: Linktype set failed because interface is up [ 376.817944][T16144] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.825108][T16144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.221911][ T5815] Bluetooth: hci4: command tx timeout [ 378.186859][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660202][ T5815] Bluetooth: hci0: command tx timeout [ 379.300710][ T5815] Bluetooth: hci4: command tx timeout [ 379.741512][T16144] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.748605][T16144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.430238][T19713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.518355][T19713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.576925][T19713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.707443][T19713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 381.004941][T19713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.015799][T19713] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.026558][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.033680][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.062841][T20369] netlink: 'syz.5.1778': attribute type 8 has an invalid length. [ 381.086688][T19469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.104564][ T29] audit: type=1326 audit(1734361801.444:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20372 comm="syz.0.1779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb321b85d19 code=0x0 [ 381.128809][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.135926][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.469061][T19713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.520957][T19469] veth0_vlan: entered promiscuous mode [ 381.543495][T19469] veth1_vlan: entered promiscuous mode [ 381.580066][T19713] veth0_vlan: entered promiscuous mode [ 381.613593][T19713] veth1_vlan: entered promiscuous mode [ 381.630919][T19469] veth0_macvtap: entered promiscuous mode [ 381.644462][T19469] veth1_macvtap: entered promiscuous mode [ 381.682677][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.700652][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.720232][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.741637][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.770247][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.789592][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.819426][T19469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.856518][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.887633][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.919500][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.974588][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.974614][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.974629][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.975428][T19469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.026977][T19469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.027000][T19469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.027016][T19469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.027032][T19469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.029415][T19713] veth0_macvtap: entered promiscuous mode [ 382.060782][T19713] veth1_macvtap: entered promiscuous mode [ 382.066295][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.066320][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.066330][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.066338][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.066344][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.066351][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.066357][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.066364][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.066862][T19713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.069053][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.069071][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.069080][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.069092][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.069101][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.069109][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.069114][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.069121][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.069573][T19713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.098127][T19713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.098162][T19713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.098189][T19713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.098215][T19713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.184943][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.184957][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.287237][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.574297][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.641785][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.670611][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.681708][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.702024][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.800608][T20432] xt_hashlimit: size too large, truncated to 1048576 [ 383.086662][T16144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.190180][ T899] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 383.248331][T16144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.365012][ T899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.380775][ T899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.392023][T16144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.410270][ T899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.450340][ T899] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 383.459417][ T899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.491886][ T899] usb 1-1: config 0 descriptor?? [ 383.547730][T16144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.763974][T16144] bridge_slave_1: left allmulticast mode [ 383.769865][T16144] bridge_slave_1: left promiscuous mode [ 383.796192][T16144] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.814876][T16144] bridge_slave_0: left allmulticast mode [ 383.833920][T16144] bridge_slave_0: left promiscuous mode [ 383.840138][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.916479][ T899] prodikeys 0003:041E:2801.0026: unknown main item tag 0x7 [ 383.950739][ T899] prodikeys 0003:041E:2801.0026: item fetching failed at offset 4/5 [ 383.959110][ T899] prodikeys 0003:041E:2801.0026: hid parse failed [ 383.990310][ T899] prodikeys 0003:041E:2801.0026: probe with driver prodikeys failed with error -22 [ 384.161308][ T6467] usb 1-1: USB disconnect, device number 35 [ 384.720211][T16144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.746745][T16144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.789651][T16144] bond0 (unregistering): Released all slaves [ 384.882806][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.906037][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.915525][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.925954][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.933155][ T29] audit: type=1400 audit(1734361805.264:678): avc: denied { write } for pid=20480 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.960706][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.968249][T19472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.323340][T16144] hsr_slave_0: left promiscuous mode [ 385.360788][T16144] hsr_slave_1: left promiscuous mode [ 385.366846][T16144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.394507][T16144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.414895][T16144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.430999][T16144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.473588][T16144] veth1_macvtap: left promiscuous mode [ 385.479105][T16144] veth0_macvtap: left promiscuous mode [ 385.500313][T16144] veth1_vlan: left promiscuous mode [ 385.505592][T16144] veth0_vlan: left promiscuous mode [ 386.072411][T16144] team0 (unregistering): Port device team_slave_1 removed [ 386.203313][T16144] team0 (unregistering): Port device team_slave_0 removed [ 386.472068][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.493772][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.511540][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.524008][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.550838][ T5815] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.568497][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.650680][T10039] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 386.806535][T10039] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.819470][T10039] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.830275][T10039] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 386.839326][T10039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.849441][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 386.858944][T10039] usb 2-1: config 0 descriptor?? [ 386.994270][T20476] chnl_net:caif_netlink_parms(): no params data found [ 387.022426][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 387.054352][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 387.078317][T19472] Bluetooth: hci0: command tx timeout [ 387.087943][ T5868] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 387.099395][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.128647][ T5868] usb 6-1: Product: syz [ 387.134506][T20533] chnl_net:caif_netlink_parms(): no params data found [ 387.143758][ T5868] usb 6-1: Manufacturer: syz [ 387.151055][ T5868] usb 6-1: SerialNumber: syz [ 387.176953][ T5868] usb 6-1: config 0 descriptor?? [ 387.195583][ T5868] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 387.217144][ T5868] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 387.233150][ T29] audit: type=1400 audit(1734361807.574:679): avc: denied { read } for pid=20789 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.262844][T20476] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.269936][T20476] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.278143][T20476] bridge_slave_0: entered allmulticast mode [ 387.286657][T20476] bridge_slave_0: entered promiscuous mode [ 387.294367][T10039] samsung 0003:0419:0600.0027: unknown main item tag 0x0 [ 387.301573][T10039] samsung 0003:0419:0600.0027: unknown main item tag 0x0 [ 387.301894][T20476] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.308623][T10039] samsung 0003:0419:0600.0027: item fetching failed at offset 2/5 [ 387.320644][T20476] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.324589][T10039] samsung 0003:0419:0600.0027: parse failed [ 387.336890][T10039] samsung 0003:0419:0600.0027: probe with driver samsung failed with error -22 [ 387.346056][T20476] bridge_slave_1: entered allmulticast mode [ 387.346848][T20476] bridge_slave_1: entered promiscuous mode [ 387.409248][T20533] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.416992][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.424643][T20533] bridge_slave_0: entered allmulticast mode [ 387.434174][T20533] bridge_slave_0: entered promiscuous mode [ 387.450980][T20476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.465075][T20533] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.473272][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.480773][T20533] bridge_slave_1: entered allmulticast mode [ 387.487424][T20533] bridge_slave_1: entered promiscuous mode [ 387.532404][ T5867] usb 2-1: USB disconnect, device number 34 [ 387.545121][T16144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.566072][T20476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.608992][T20533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.634652][T16144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.657855][T20533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.677177][T20476] team0: Port device team_slave_0 added [ 387.708443][T20476] team0: Port device team_slave_1 added [ 387.745710][T16144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.768251][T20533] team0: Port device team_slave_0 added [ 387.789251][T20533] team0: Port device team_slave_1 added [ 387.819591][ T5868] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 387.821247][T16144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.842095][T20476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.849059][T20476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.877937][T20476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.912372][T20476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.919371][T20476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.946369][T20476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.961801][T20533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.968831][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.995055][T20533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.006960][T20533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.014006][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.041244][T20533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.129507][T20476] hsr_slave_0: entered promiscuous mode [ 388.150818][T20476] hsr_slave_1: entered promiscuous mode [ 388.164827][T20476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.188264][T20476] Cannot create hsr debugfs directory [ 388.290871][T20533] hsr_slave_0: entered promiscuous mode [ 388.307987][T20533] hsr_slave_1: entered promiscuous mode [ 388.317369][T20533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.325269][T20533] Cannot create hsr debugfs directory [ 388.494425][T16144] bridge_slave_1: left allmulticast mode [ 388.504067][T16144] bridge_slave_1: left promiscuous mode [ 388.517490][T16144] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.544632][T16144] bridge_slave_0: left allmulticast mode [ 388.554478][T16144] bridge_slave_0: left promiscuous mode [ 388.561110][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.671535][T19472] Bluetooth: hci4: command tx timeout [ 388.700013][T21138] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 388.726667][ T5868] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 388.762391][ T5868] em28xx 6-1:0.0: board has no eeprom [ 388.841770][ T5868] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 388.870544][ T5868] em28xx 6-1:0.0: dvb set to bulk mode. [ 388.876222][T10039] em28xx 6-1:0.0: Binding DVB extension [ 388.885092][ T5868] usb 6-1: USB disconnect, device number 9 [ 388.910719][ T5868] em28xx 6-1:0.0: Disconnecting em28xx [ 388.963039][T10039] em28xx 6-1:0.0: Registering input extension [ 388.977799][ T5868] em28xx 6-1:0.0: Closing input extension [ 389.004197][ T5868] em28xx 6-1:0.0: Freeing device [ 389.140753][T19472] Bluetooth: hci0: command tx timeout [ 389.250551][T16144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.263511][T16144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.274261][T16144] bond0 (unregistering): Released all slaves [ 389.388025][ T29] audit: type=1400 audit(1734361809.724:680): avc: denied { write } for pid=21195 comm="syz.5.1802" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.428097][ T29] audit: type=1400 audit(1734361809.744:681): avc: denied { append } for pid=21195 comm="syz.5.1802" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.460080][ T29] audit: type=1400 audit(1734361809.754:682): avc: denied { call } for pid=21195 comm="syz.5.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 390.148556][T16144] hsr_slave_0: left promiscuous mode [ 390.158857][T16144] hsr_slave_1: left promiscuous mode [ 390.167468][T16144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.179176][T16144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.187785][T16144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.195621][T16144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.223626][T16144] veth1_macvtap: left promiscuous mode [ 390.230290][T16144] veth0_macvtap: left promiscuous mode [ 390.235929][T16144] veth1_vlan: left promiscuous mode [ 390.243493][T16144] veth0_vlan: left promiscuous mode [ 390.250436][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 390.500502][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 390.509960][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 390.670010][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 390.734903][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.770153][T19472] Bluetooth: hci4: command tx timeout [ 390.805934][ T9] usb 1-1: Product: syz [ 390.848069][ T9] usb 1-1: Manufacturer: syz [ 390.915130][ T9] usb 1-1: SerialNumber: syz [ 390.949511][ T9] usb 1-1: config 0 descriptor?? [ 391.093668][T16144] team0 (unregistering): Port device team_slave_1 removed [ 391.135198][T16144] team0 (unregistering): Port device team_slave_0 removed [ 391.230271][T19472] Bluetooth: hci0: command tx timeout [ 391.288421][ T9] usb 1-1: USB disconnect, device number 36 [ 391.749476][ T29] audit: type=1400 audit(1734361812.094:683): avc: denied { setattr } for pid=21284 comm="syz.1.1809" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.160472][ T5868] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 392.208301][T20476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.219878][T20476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.244998][T20476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.261364][T20476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.297260][T20533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.306931][T20533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.320280][T20533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.327201][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 392.336797][T20533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.338634][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.358537][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.371325][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.381180][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 392.391704][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.405960][ T5868] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 392.409238][T20476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.415290][ T5868] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 392.432287][ T5868] usb 1-1: Manufacturer: syz [ 392.439701][ T5868] usb 1-1: config 0 descriptor?? [ 392.444458][T20476] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.466075][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.473187][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.499675][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.506802][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.585813][T20533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.633190][T20533] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.655411][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.662528][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.694864][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.701988][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.730513][ T5868] rc_core: IR keymap rc-hauppauge not found [ 392.736488][ T5868] Registered IR keymap rc-empty [ 392.736568][T20533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.750272][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.753298][T20533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.780470][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.810865][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 392.832495][T19472] Bluetooth: hci4: command tx timeout [ 392.839201][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 392.859277][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.868928][T20476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.883409][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.920933][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.944330][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.980784][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 393.013659][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 393.027822][T20533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.063306][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 393.090725][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 393.099845][T20533] veth0_vlan: entered promiscuous mode [ 393.113877][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 393.130777][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 393.143520][T20533] veth1_vlan: entered promiscuous mode [ 393.155091][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 393.188440][ T5868] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 393.199352][ T5868] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 393.204938][T20476] veth0_vlan: entered promiscuous mode [ 393.219781][ T5868] usb 1-1: USB disconnect, device number 37 [ 393.234197][T20533] veth0_macvtap: entered promiscuous mode [ 393.257155][T20533] veth1_macvtap: entered promiscuous mode [ 393.270597][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 393.274189][T20476] veth1_vlan: entered promiscuous mode [ 393.286493][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 393.300407][T19472] Bluetooth: hci0: command tx timeout [ 393.310167][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.330564][ T8] usb 6-1: Product: syz [ 393.334764][ T8] usb 6-1: Manufacturer: syz [ 393.339412][ T8] usb 6-1: SerialNumber: syz [ 393.344808][T20476] veth0_macvtap: entered promiscuous mode [ 393.353692][ T8] usb 6-1: config 0 descriptor?? [ 393.369517][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.381542][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.396974][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.407780][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.417693][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.429081][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.441964][T20533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.454004][T21385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1816'. [ 393.467668][T20476] veth1_macvtap: entered promiscuous mode [ 393.485058][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.500315][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.520171][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.540629][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.557706][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.573010][T21387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.577589][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.584295][ T8] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.598521][T20533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.615329][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.626613][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.637415][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.647956][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.657846][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.668824][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.678707][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.689189][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.699958][T20476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.712294][T20533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.721504][T20533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.730273][T20533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.738961][T20533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.757195][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.768053][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.778067][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.789011][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.799065][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.809623][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.819625][T20476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.830061][T20476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.846578][T20476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.864037][T20476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.873558][T20476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.876075][T21389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1818'. [ 393.882292][T20476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.882323][T20476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.977714][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.004651][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.052227][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.094235][T16144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.105704][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.115631][T16144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.179145][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.202641][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.212955][ T8] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 394.226002][ T8] usb 6-1: USB disconnect, device number 10 [ 394.429500][T21435] input: syz1 as /devices/virtual/input/input40 [ 394.572171][ T29] audit: type=1400 audit(1734361814.914:684): avc: denied { read write } for pid=21442 comm="syz.1.1820" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 394.700856][ T29] audit: type=1400 audit(1734361814.914:685): avc: denied { open } for pid=21442 comm="syz.1.1820" path="/422/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 394.886162][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 396.005744][ T130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.410759][T21497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.428777][T21497] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.437400][T21497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.447789][T21497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.455536][T21497] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 396.464772][T21497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.566147][T21493] chnl_net:caif_netlink_parms(): no params data found [ 396.617339][T21493] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.624781][T21493] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.633063][T21493] bridge_slave_0: entered allmulticast mode [ 396.640034][T21493] bridge_slave_0: entered promiscuous mode [ 396.647468][T21493] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.654688][T21493] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.662399][T21493] bridge_slave_1: entered allmulticast mode [ 396.668788][T21493] bridge_slave_1: entered promiscuous mode [ 396.692366][T21493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.705199][T21493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.731385][T21493] team0: Port device team_slave_0 added [ 396.738847][T21493] team0: Port device team_slave_1 added [ 396.761235][T21493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.768604][T21493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.796510][T21493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.809803][T21493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.816867][T21493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.843805][T21493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.874697][T21493] hsr_slave_0: entered promiscuous mode [ 396.880964][T21493] hsr_slave_1: entered promiscuous mode [ 397.171766][ T130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.222156][ T130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.282849][ T130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.426355][ T130] bridge_slave_1: left allmulticast mode [ 397.440713][ T130] bridge_slave_1: left promiscuous mode [ 397.447485][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.459395][ T29] audit: type=1400 audit(1734361817.794:686): avc: denied { setattr } for pid=21829 comm="syz.0.1834" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.487626][ T130] bridge_slave_0: left allmulticast mode [ 397.515117][ T130] bridge_slave_0: left promiscuous mode [ 397.517754][ T29] audit: type=1400 audit(1734361817.794:687): avc: denied { write } for pid=21829 comm="syz.0.1834" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.523335][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.570690][ T29] audit: type=1400 audit(1734361817.794:688): avc: denied { open } for pid=21829 comm="syz.0.1834" path="/449/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.684399][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 397.744641][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.755598][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.765482][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.773189][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.784574][ T5815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 397.791816][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.853245][T21843] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 397.862069][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 397.873480][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.885805][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.895588][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 397.908452][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 397.917617][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.936240][ T9] usb 6-1: config 0 descriptor?? [ 398.057444][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.067706][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.077762][ T130] bond0 (unregistering): Released all slaves [ 398.303448][T21838] chnl_net:caif_netlink_parms(): no params data found [ 398.341061][ T5815] Bluetooth: hci0: command 0x1003 tx timeout [ 398.351713][T19472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 398.372337][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input41 [ 398.405450][ T9] shield 0003:0955:7214.0028: Registered Thunderstrike controller [ 398.415342][ T9] shield 0003:0955:7214.0028: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 398.428005][ T130] hsr_slave_0: left promiscuous mode [ 398.437259][ T130] hsr_slave_1: left promiscuous mode [ 398.454479][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.462523][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.474928][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.483973][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.503974][T19472] Bluetooth: hci4: command tx timeout [ 398.554159][ T130] veth1_macvtap: left promiscuous mode [ 398.559923][ T130] veth0_macvtap: left promiscuous mode [ 398.581845][ T130] veth1_vlan: left promiscuous mode [ 398.587483][ T130] veth0_vlan: left promiscuous mode [ 398.865780][ T29] audit: type=1400 audit(1734361819.204:689): avc: denied { getopt } for pid=21827 comm="syz.5.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 398.868115][ T5867] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 398.899087][ T5866] usb 6-1: USB disconnect, device number 11 [ 398.936657][ T5867] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 398.947859][ T5867] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 398.959055][ T5867] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 399.875020][ T5867] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 399.943276][T19472] Bluetooth: hci5: command tx timeout [ 400.074949][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.153732][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.172818][ T5867] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 400.184822][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.198006][ T5867] usb 2-1: config 0 descriptor?? [ 400.316993][ T130] team0 (unregistering): Port device team_slave_1 removed [ 400.365646][ T130] team0 (unregistering): Port device team_slave_0 removed [ 400.581523][T19472] Bluetooth: hci4: command tx timeout [ 400.631712][ T5867] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 400.848610][ T5867] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 400.860187][ T5867] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 400.896036][ T5867] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -32 [ 400.931270][ T5867] usb 2-1: USB disconnect, device number 35 [ 401.174797][T21838] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.182673][T21838] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.189948][T21838] bridge_slave_0: entered allmulticast mode [ 401.197878][T21838] bridge_slave_0: entered promiscuous mode [ 401.206114][T21838] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.213426][T21838] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.223233][T21838] bridge_slave_1: entered allmulticast mode [ 401.230013][T21838] bridge_slave_1: entered promiscuous mode [ 401.419415][T21838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.460903][T21838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.470632][T21493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.498753][ T29] audit: type=1400 audit(1734361821.834:690): avc: denied { mounton } for pid=22135 comm="syz.1.1846" path="/433/file1/file0" dev="autofs" ino=49157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 401.540860][T21493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.599951][T21838] team0: Port device team_slave_0 added [ 401.621045][T21493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.642557][T21493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.658493][T21838] team0: Port device team_slave_1 added [ 401.699436][T21838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.715998][T21838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.753561][T21838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.771901][T21838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.782711][T21838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.808921][ T5866] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 401.816743][T21838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.893008][ T130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.942396][T21838] hsr_slave_0: entered promiscuous mode [ 401.949372][T21838] hsr_slave_1: entered promiscuous mode [ 401.964738][T21838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.976412][T21838] Cannot create hsr debugfs directory [ 401.982455][ T5866] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.991297][ T5866] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 402.004949][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.018070][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 402.029096][T19472] Bluetooth: hci5: command tx timeout [ 402.034781][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 402.036064][ T5866] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.055552][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.063643][ T5866] usb 1-1: Product: syz [ 402.067884][ T5866] usb 1-1: Manufacturer: syz [ 402.080947][ T130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.092882][ T5866] cdc_wdm 1-1:1.0: skipping garbage [ 402.098432][ T5866] cdc_wdm 1-1:1.0: skipping garbage [ 402.229153][ T5866] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 402.243852][ T5866] cdc_wdm 1-1:1.0: Unknown control protocol [ 402.262523][ T130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.549456][ T6467] usb 1-1: USB disconnect, device number 38 [ 402.624929][ T130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.660913][T19472] Bluetooth: hci4: command tx timeout [ 402.730704][T21493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.747598][T21493] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.799065][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.806234][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.825525][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.833184][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.094168][ T130] bridge_slave_1: left allmulticast mode [ 403.099906][ T130] bridge_slave_1: left promiscuous mode [ 403.106778][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.121340][ T130] bridge_slave_0: left allmulticast mode [ 403.138391][ T130] bridge_slave_0: left promiscuous mode [ 403.152211][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.342551][ T29] audit: type=1400 audit(1734361823.674:691): avc: denied { transfer } for pid=22321 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 403.351489][T22322] binder_alloc: 22321: binder_alloc_buf, no vma [ 404.102621][T19472] Bluetooth: hci5: command tx timeout [ 404.194272][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.204703][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.217680][ T130] bond0 (unregistering): Released all slaves [ 404.363065][T21493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.648396][T21493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.686234][ T130] hsr_slave_0: left promiscuous mode [ 404.711844][ T130] hsr_slave_1: left promiscuous mode [ 404.725051][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.740583][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.741454][T19472] Bluetooth: hci4: command tx timeout [ 404.753890][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.770842][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.811104][ T130] veth1_macvtap: left promiscuous mode [ 404.816653][ T130] veth0_macvtap: left promiscuous mode [ 404.830226][ T130] veth1_vlan: left promiscuous mode [ 404.835534][ T130] veth0_vlan: left promiscuous mode [ 405.876260][ T130] team0 (unregistering): Port device team_slave_1 removed [ 405.896007][ T29] audit: type=1326 audit(1734361826.234:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.5.1861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20eb85d19 code=0x0 [ 405.948063][ T130] team0 (unregistering): Port device team_slave_0 removed [ 406.184983][T19472] Bluetooth: hci5: command tx timeout [ 406.410343][T21493] veth0_vlan: entered promiscuous mode [ 406.428357][T21838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.456682][T21838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.471380][T21838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.502136][T21838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.523259][T21493] veth1_vlan: entered promiscuous mode [ 406.612260][T21493] veth0_macvtap: entered promiscuous mode [ 406.624871][T21493] veth1_macvtap: entered promiscuous mode [ 406.656230][T21493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.676467][T21493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.686822][T21493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.698292][T21493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.709596][T21493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.721062][T21493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.731921][T21493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.756378][T21493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.769503][T21493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.784793][T21493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.795320][T21493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.807608][T21493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.818736][T21493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.831979][T21493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.843684][T21493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.853569][T21493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.863528][T21493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.872283][T21493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.932195][T21838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.954518][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.966607][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.968486][T21838] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.002720][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.009773][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.020831][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.027986][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.045755][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.053836][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.073203][T21838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.219670][T21838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.367852][T21838] veth0_vlan: entered promiscuous mode [ 407.377915][T21838] veth1_vlan: entered promiscuous mode [ 407.396394][T21838] veth0_macvtap: entered promiscuous mode [ 407.404827][T21838] veth1_macvtap: entered promiscuous mode [ 407.418398][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.429317][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.439682][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.451006][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.461855][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.472615][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.482926][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.500519][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.511344][T21838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.528665][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.539423][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.549875][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.746195][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.759489][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.777095][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.877166][T21838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.978074][T21838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.052161][T21838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.077749][T21838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.086819][T21838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.096060][T21838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.105591][T21838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.147964][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.266839][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.367291][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.376374][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.396480][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.405266][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.845227][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.081965][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.159020][ T61] bridge_slave_1: left allmulticast mode [ 409.165125][ T61] bridge_slave_1: left promiscuous mode [ 409.170963][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.204975][ T61] bridge_slave_0: left allmulticast mode [ 409.212697][ T61] bridge_slave_0: left promiscuous mode [ 409.222847][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.063473][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.079611][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.087977][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.107538][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.123443][ T5815] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 410.123980][T22480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1868'. [ 410.139998][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.356010][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.367141][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.377103][ T61] bond0 (unregistering): Released all slaves [ 410.778095][T22517] ceph: No mds server is up or the cluster is laggy [ 410.797142][T22475] chnl_net:caif_netlink_parms(): no params data found [ 410.998049][ T61] hsr_slave_0: left promiscuous mode [ 411.015605][ T61] hsr_slave_1: left promiscuous mode [ 411.032667][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.040167][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.060731][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.068146][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.084853][ T61] veth1_macvtap: left promiscuous mode [ 411.090553][ T61] veth0_macvtap: left promiscuous mode [ 411.096064][ T61] veth1_vlan: left promiscuous mode [ 411.101444][ T61] veth0_vlan: left promiscuous mode [ 411.404983][ T61] team0 (unregistering): Port device team_slave_1 removed [ 411.443814][ T61] team0 (unregistering): Port device team_slave_0 removed [ 411.779382][T22475] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.787354][T22475] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.794969][T22475] bridge_slave_0: entered allmulticast mode [ 411.804238][T22475] bridge_slave_0: entered promiscuous mode [ 411.814606][T22475] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.822051][T22475] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.829185][T22475] bridge_slave_1: entered allmulticast mode [ 411.835669][T22475] bridge_slave_1: entered promiscuous mode [ 411.877415][T22475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.888113][T22475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.934124][T22475] team0: Port device team_slave_0 added [ 411.941575][T22475] team0: Port device team_slave_1 added [ 411.978408][T22475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.993580][T22475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.021249][T22475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.032725][T22475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.039657][T22475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.065885][T22475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.102745][T22475] hsr_slave_0: entered promiscuous mode [ 412.108879][T22475] hsr_slave_1: entered promiscuous mode [ 412.182150][ T5815] Bluetooth: hci0: command tx timeout [ 412.225872][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.287505][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.342602][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.481967][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.614882][T19472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.625948][T19472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.634617][T19472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.644060][T19472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.660663][ T5867] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 412.668468][T19472] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 412.676119][T19472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.830520][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 412.845672][ T5867] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 412.856961][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.867976][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.880442][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 412.897011][ T5867] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 412.906566][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.916932][ T5867] usb 1-1: config 0 descriptor?? [ 414.271121][ T5815] Bluetooth: hci0: command tx timeout [ 414.308269][ T5867] usbhid 1-1:0.0: can't add hid device: -71 [ 414.315383][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 414.330015][ T5867] usb 1-1: USB disconnect, device number 39 [ 414.381986][T22475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.399551][ T61] bridge_slave_1: left allmulticast mode [ 414.407402][ T61] bridge_slave_1: left promiscuous mode [ 414.414010][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.421747][T22886] binder: BINDER_SET_CONTEXT_MGR already set [ 414.431134][ T61] bridge_slave_0: left allmulticast mode [ 414.436879][ T61] bridge_slave_0: left promiscuous mode [ 414.437219][T22886] binder: 22885:22886 ioctl 4018620d 200002c0 returned -16 [ 414.442604][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.729554][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.741208][ T5815] Bluetooth: hci4: command tx timeout [ 414.749081][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.758709][ T61] bond0 (unregistering): Released all slaves [ 414.772933][T22475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.790650][T22475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.818548][T22475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 415.081184][T22844] chnl_net:caif_netlink_parms(): no params data found [ 415.183877][ T61] hsr_slave_0: left promiscuous mode [ 415.193600][ T61] hsr_slave_1: left promiscuous mode [ 415.199496][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.208630][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.217776][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.225508][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.246962][ T61] veth1_macvtap: left promiscuous mode [ 415.258412][ T61] veth0_macvtap: left promiscuous mode [ 415.264109][ T61] veth1_vlan: left promiscuous mode [ 415.269417][ T61] veth0_vlan: left promiscuous mode [ 416.115178][ T61] team0 (unregistering): Port device team_slave_1 removed [ 416.340428][ T5815] Bluetooth: hci0: command tx timeout [ 416.765396][ T61] team0 (unregistering): Port device team_slave_0 removed [ 416.820489][ T5815] Bluetooth: hci4: command tx timeout [ 417.057739][T19472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.085095][T19472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.095725][T19472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.111982][T19472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.120492][T19472] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 417.127828][T19472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.451425][T22844] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.458497][T22844] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.466097][T22844] bridge_slave_0: entered allmulticast mode [ 417.472916][T22844] bridge_slave_0: entered promiscuous mode [ 417.483751][T22844] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.491967][T22844] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.495212][T23081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'. [ 417.499147][T22844] bridge_slave_1: entered allmulticast mode [ 417.541065][T22844] bridge_slave_1: entered promiscuous mode [ 418.365928][T22844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.376854][T22844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.418293][T22475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.431262][T19472] Bluetooth: hci0: command tx timeout [ 418.495497][T22844] team0: Port device team_slave_0 added [ 418.520008][T22844] team0: Port device team_slave_1 added [ 418.594139][ T29] audit: type=1400 audit(1734361838.934:693): avc: denied { map } for pid=23176 comm="syz.0.1882" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.623383][ T29] audit: type=1400 audit(1734361838.934:694): avc: denied { execute } for pid=23176 comm="syz.0.1882" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.649770][T22475] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.667988][T22844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.678488][T22844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.704880][T22844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.716946][T22844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.723988][T22844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.750154][T22844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.790437][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.797562][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.808548][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.815687][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.839434][T22475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.850035][T22475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.862534][ T46] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 523.930052][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 523.937017][ C0] rcu: 1-...!: (1 GPs behind) idle=c5cc/0/0x1 softirq=67515/67520 fqs=0 [ 523.947031][ C0] rcu: (detected by 0, t=10506 jiffies, g=53841, q=157 ncpus=2) [ 523.954767][ C0] Sending NMI from CPU 0 to CPUs 1: [ 523.954792][ C1] NMI backtrace for cpu 1 [ 523.954802][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc3-syzkaller #0 [ 523.954816][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 523.954823][ C1] RIP: 0010:advance_sched+0x35b/0xc60 [ 523.954843][ C1] Code: 00 fc ff df 48 89 d0 48 c1 e8 03 48 01 c8 85 db 48 89 44 24 10 0f 8e 86 01 00 00 4c 89 74 24 68 44 8b 74 24 28 4c 89 6c 24 60 <4c> 89 7c 24 08 48 89 54 24 70 eb 71 e8 04 1c 59 f8 48 8b 04 24 49 [ 523.954854][ C1] RSP: 0018:ffffc90000a18d80 EFLAGS: 00000002 [ 523.954866][ C1] RAX: ffffed1006956ea6 RBX: 0000000000000002 RCX: dffffc0000000000 [ 523.954876][ C1] RDX: ffff888034ab7530 RSI: 0000000000000000 RDI: 0000000000000005 [ 523.954884][ C1] RBP: ffff888034ab6c00 R08: 0000000000000005 R09: 0000000000000000 [ 523.954892][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 523.954900][ C1] R13: ffff888034ab6c00 R14: 0000000000000002 R15: ffff888034ab7400 [ 523.954908][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 523.954922][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.954931][ C1] CR2: 00000000e0000031 CR3: 000000005b426000 CR4: 00000000003526f0 [ 523.954940][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.954948][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.954956][ C1] Call Trace: [ 523.954962][ C1] [ 523.954968][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 523.954984][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 523.954997][ C1] ? nmi_handle+0x1ac/0x5d0 [ 523.955011][ C1] ? advance_sched+0x35b/0xc60 [ 523.955024][ C1] ? default_do_nmi+0x6a/0x160 [ 523.955036][ C1] ? exc_nmi+0x170/0x1e0 [ 523.955047][ C1] ? end_repeat_nmi+0xf/0x53 [ 523.955069][ C1] ? advance_sched+0x35b/0xc60 [ 523.955081][ C1] ? advance_sched+0x35b/0xc60 [ 523.955094][ C1] ? advance_sched+0x35b/0xc60 [ 523.955106][ C1] [ 523.955110][ C1] [ 523.955117][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 523.955135][ C1] ? __pfx_advance_sched+0x10/0x10 [ 523.955147][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 523.955167][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 523.955183][ C1] ? read_tsc+0x9/0x20 [ 523.955207][ C1] hrtimer_interrupt+0x392/0x8e0 [ 523.955228][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 523.955245][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 523.955259][ C1] [ 523.955263][ C1] [ 523.955268][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 523.955285][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 523.955303][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 85 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 2c b4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 523.955315][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 523.955325][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b293679 [ 523.955333][ C1] RDX: 0000000000000001 RSI: ffff888140af5800 RDI: ffff888140af5864 [ 523.955341][ C1] RBP: ffff888140af5864 R08: 0000000000000001 R09: ffffed10170e6fed [ 523.955350][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff88801f7c3000 [ 523.955358][ C1] R13: ffffffff8ee16120 R14: 0000000000000001 R15: 0000000000000000 [ 523.955368][ C1] ? ct_kernel_exit+0x139/0x190 [ 523.955386][ C1] acpi_idle_enter+0xc5/0x160 [ 523.955404][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 523.955421][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 523.955435][ C1] cpuidle_enter+0x4e/0xa0 [ 523.955453][ C1] do_idle+0x310/0x3f0 [ 523.955467][ C1] ? __pfx_do_idle+0x10/0x10 [ 523.955482][ C1] cpu_startup_entry+0x4f/0x60 [ 523.955495][ C1] start_secondary+0x222/0x2b0 [ 523.955507][ C1] ? __pfx_start_secondary+0x10/0x10 [ 523.955528][ C1] common_startup_64+0x13e/0x148 [ 523.955547][ C1] [ 523.955788][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g53841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 524.344517][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 524.354479][ C0] rcu: RCU grace-period kthread stack dump: [ 524.360356][ C0] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 524.372107][ C0] Call Trace: [ 524.375379][ C0] [ 524.378309][ C0] __schedule+0xe58/0x5ad0 [ 524.382726][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 524.387935][ C0] ? __pfx___schedule+0x10/0x10 [ 524.392783][ C0] ? schedule+0x298/0x350 [ 524.397111][ C0] ? __pfx_lock_release+0x10/0x10 [ 524.402151][ C0] ? lock_acquire+0x2f/0xb0 [ 524.406652][ C0] ? schedule+0x1fd/0x350 [ 524.410983][ C0] schedule+0xe7/0x350 [ 524.415051][ C0] schedule_timeout+0x124/0x280 [ 524.419912][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 524.425281][ C0] ? __pfx_process_timeout+0x10/0x10 [ 524.430575][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 524.436394][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 524.441859][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 524.446633][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 524.451919][ C0] ? rcu_gp_init+0xc82/0x1630 [ 524.456609][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 524.461817][ C0] rcu_gp_kthread+0x271/0x380 [ 524.466491][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.471688][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.476888][ C0] ? __kthread_parkme+0x148/0x220 [ 524.481917][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.487118][ C0] kthread+0x2c1/0x3a0 [ 524.491186][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.496382][ C0] ? __pfx_kthread+0x10/0x10 [ 524.500973][ C0] ret_from_fork+0x45/0x80 [ 524.505397][ C0] ? __pfx_kthread+0x10/0x10 [ 524.509988][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.514779][ C0] [ 524.517877][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 524.524189][ C0] CPU: 0 UID: 0 PID: 23284 Comm: syz.0.1883 Not tainted 6.13.0-rc3-syzkaller #0 [ 524.533203][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 524.543250][ C0] RIP: 0010:smp_call_function_many_cond+0x47c/0x1300 [ 524.549925][ C0] Code: aa 0d 0c 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 89 c5 89 c6 e8 c4 0f 0c 00 <45> 85 ed 75 d0 e8 7a 0d 0c 00 e8 75 0d 0c 00 44 8b 6c 24 20 bf 07 [ 524.569538][ C0] RSP: 0018:ffffc900048efb30 EFLAGS: 00000297 [ 524.575603][ C0] RAX: 0000000000000002 RBX: ffff8880b8744a40 RCX: ffffffff818e06bc [ 524.583655][ C0] RDX: ffff888079b68000 RSI: 0000000000000000 RDI: 0000000000000005 [ 524.591622][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 524.599585][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170e8949 [ 524.607565][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 524.615529][ C0] FS: 00007fb3228ce6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 524.624453][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.631034][ C0] CR2: 000000110c2da11a CR3: 00000000325fa000 CR4: 00000000003526f0 [ 524.639000][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 524.646968][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 524.654933][ C0] Call Trace: [ 524.658206][ C0] [ 524.661044][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 524.667372][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 524.672572][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 524.678042][ C0] ? timekeeping_advance+0x72e/0xa90 [ 524.683322][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 524.688957][ C0] ? __asan_memcpy+0x3c/0x60 [ 524.693555][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 524.698851][ C0] ? rcu_is_watching+0x12/0xc0 [ 524.703619][ C0] ? update_process_times+0x178/0x2d0 [ 524.709017][ C0] ? __pfx_update_process_times+0x10/0x10 [ 524.714746][ C0] ? update_wall_time+0x1c/0x40 [ 524.719594][ C0] ? tick_nohz_handler+0x376/0x530 [ 524.724709][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 524.730167][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 524.735546][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 524.741275][ C0] ? read_tsc+0x9/0x20 [ 524.745353][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 524.750468][ C0] ? sched_core_idle_cpu+0xc4/0x250 [ 524.755668][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 524.761821][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 524.767623][ C0] [ 524.770550][ C0] [ 524.773476][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.779637][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 524.785705][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 524.791791][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 524.796832][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 524.801866][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 524.806989][ C0] text_poke_bp_batch+0x22b/0x760 [ 524.812024][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 524.817051][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 524.822599][ C0] ? text_poke_queue+0xef/0x180 [ 524.827457][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 524.833706][ C0] text_poke_finish+0x30/0x40 [ 524.838390][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 524.844410][ C0] jump_label_update+0x1d7/0x400 [ 524.849442][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 524.855336][ C0] static_key_enable+0x1a/0x20 [ 524.860101][ C0] sched_core_get+0x8a/0xa0 [ 524.864600][ C0] sched_core_share_pid+0x41f/0xa00 [ 524.869800][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 524.875698][ C0] ? __pfx_sched_core_share_pid+0x10/0x10 [ 524.881419][ C0] ? static_key_count+0x5a/0x70 [ 524.886277][ C0] ? security_task_prctl+0x11c/0x160 [ 524.891572][ C0] __do_sys_prctl+0x15e6/0x2190 [ 524.896422][ C0] ? __pfx___do_sys_prctl+0x10/0x10 [ 524.901645][ C0] do_syscall_64+0xcd/0x250 [ 524.906151][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.912053][ C0] RIP: 0033:0x7fb321b85d19 [ 524.916463][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.936065][ C0] RSP: 002b:00007fb3228ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 524.944474][ C0] RAX: ffffffffffffffda RBX: 00007fb321d75fa0 RCX: 00007fb321b85d19 [ 524.952446][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 524.960412][ C0] RBP: 00007fb321c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 524.968393][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 524.976372][ C0] R13: 0000000000000000 R14: 00007fb321d75fa0 R15: 00007fffb6c938a8 [ 524.984350][ C0]