last executing test programs: 4m44.779409122s ago: executing program 3 (id=2160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 4m6.044531742s ago: executing program 3 (id=2160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 3m22.761349454s ago: executing program 3 (id=2160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 2m27.166846406s ago: executing program 3 (id=2160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 1m48.44760571s ago: executing program 3 (id=2160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 42.024496004s ago: executing program 3 (id=2160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 12.828872056s ago: executing program 4 (id=3221): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() socket(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r2 = socket$l2tp6(0xa, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x0, 0x3}]}) socket$igmp6(0xa, 0x3, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$inet6(r2, &(0x7f00000023c0)=[{{&(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000002180)={0xa, 0x0, 0x0, @private0, 0x6760}, 0x1c, 0x0}}], 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmmsg(r5, &(0x7f0000005d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12.524696007s ago: executing program 1 (id=3222): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a88", 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) 11.946084931s ago: executing program 1 (id=3226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000020600000000000000000000000000020073797a320000000005000400000000000500010007"], 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 11.328139664s ago: executing program 4 (id=3228): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 10.954978173s ago: executing program 2 (id=3230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) 10.880014136s ago: executing program 4 (id=3231): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f00000008c0)='wchan\x00') pread64(r3, &(0x7f0000000180)=""/252, 0xfc, 0x0) 10.560853745s ago: executing program 2 (id=3233): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0xfffffd0e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x45) listen(r2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_GETXATTR(r3, 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x1c, 0x0, 0xffffff8e) r4 = accept$inet6(r2, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x800) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x3f, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8912, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5451, 0x0) 10.487640556s ago: executing program 4 (id=3234): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x7ff, 0x6, 0x2, 0x6640abdb, 0x7, "3377f877c734c4f928875ab8db00", '\x00', "0200", "be4d22a4", ["e6fc00000023000000ecfc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="141200000105010400"/20], 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c800367058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f235ccd9a5ec42b28205618a8cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a6"], 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e0000000700ffff67640700b90f56a9d333b60c487bcdde0cf8d0735995315fe01c0f2327c74535e3886c660212078f4a7b00c1c3d055b845ac5cef765bff1e1f9674d2b7b08cd0f8ac082a8dc156bc573c09007e4cc96e88345b44913400b840fda4f5c54558944f47afb58c5cd9ac5dbe43bc80b0fab30f7e740085c941eed673a98556f1ac2c4b572aa89bdfcf78f97f8b8286508ad75a3651cf7c47845c82b4e870b2d660fe00000000000000"], 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 10.144776454s ago: executing program 1 (id=3236): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.030388221s ago: executing program 2 (id=3237): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x580200, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) unshare(0x0) semget$private(0x0, 0x2, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x500, 0x0, 0x1800}], 0x1, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="05000000e9ff000000000001b0e9d731e3db0232210ef02ff4ae6e65e654d88e37413ac4cffff3b9ce2d5bb18175d6"], 0xc) r4 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r5) 7.497270461s ago: executing program 2 (id=3239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x3, 0x4, {0x3, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @win={{0x0, 0x0, 0x1, 0xffff}, 0x2, 0x8, &(0x7f0000000380)={{0x4, 0x2, 0x44}, &(0x7f0000000100)={{0x1, 0x8, 0xffffffff, 0x283}}}, 0x80, &(0x7f0000000400)="4c3425e5d22b04b4dff741b1155196d48274b6ec3603eed4c7795069fd80b977d26fe4ce89b50f7f7f35238f72d27d54d59741f0c45e54d78ae6557844e1e3abae44d2c14895a376d0", 0xff}}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040efc07140c"], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0xfffffffe, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, r6}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x2}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) preadv(r8, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r9 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r9) 6.745965148s ago: executing program 0 (id=3241): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}) socket$packet(0x11, 0x0, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r6, 0x0, 0x20003) r8 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r8, 0xe000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r9, 0xc0384707, 0x20000002) 3.026774913s ago: executing program 0 (id=3242): pipe(&(0x7f0000000340)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES64=r1, @ANYRESDEC, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x2}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00004f6000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r4 = dup(r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x800442d2, &(0x7f0000000080)={'macsec0\x00', @dev}) 2.687174972s ago: executing program 2 (id=3243): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS}}, 0x7) socket$inet_dccp(0x2, 0x6, 0x0) r5 = mq_open(&(0x7f00000000c0)='.#\x00\x00>-\xca0x0}) r3 = syz_open_procfs(r2, &(0x7f00000008c0)='wchan\x00') pread64(r3, &(0x7f0000000180)=""/252, 0xfc, 0x0) 1.647686087s ago: executing program 0 (id=3245): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) set_robust_list(0x0, 0x0) 1.291286103s ago: executing program 2 (id=3246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000020600000000000000000000000000020073797a320000000005000400000000000500010007"], 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.153317712s ago: executing program 1 (id=3247): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e"], 0x22) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) r2 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="021dfccbb1c91012000e00050015030a0005000600080008000100"], 0x17) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x204023b3b4}) r9 = dup3(r3, r8, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x9, 0x1, 0xa2220}) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f0000000180)={0x18, r11}) r12 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r12, 0x5, &(0x7f0000000240)='/de4\x12O\x8e\x9cv/q-\xa8\xb7t\xb5\xbe;\xe2\x028s;\xfa\xb7N\xd1\xdd\xfc\x1c2\xd7^\x82\xcfM\xab\xb8\xb7\x93\xce\xfc\xb8\xad@\xd2c6\x88\x16gX}\xa4\xceO\xf7a\xd7d\xb2\x89Q$\xbf\x98\xfa\x8b\xf1\xc7\xd5\x00\xcdi\x8aT\xfd|\xe0', 0x0, r0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) r13 = memfd_secret(0x0) r14 = syz_open_dev$sg(&(0x7f0000000340), 0x20000000, 0x410002) fcntl$dupfd(r14, 0x0, r13) ioctl$LOOP_SET_STATUS(r13, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x61d6d4e6, 0x3, 0xf4780000, 0x19, "7763a42777876db7d54b45f9d97f1e65b61f41db70ef6c17c7c1aec2b6e5b08ff6c9540c00c825b4e33e705fddf3b05c2a4746015de5cd89e90f3a4995662354", "ec6324a74111bf1f7afe1c89c5fc3da1ce646cc5bd8f5ea59ed90bf016e6cf95", [0xfffffffffffffffb, 0x2]}) r15 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TUNGETFEATURES(r15, 0x800454cf, &(0x7f00000000c0)) 1.017497078s ago: executing program 4 (id=3248): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x24, &(0x7f00000000c0)={{{@in=@multicast2, @in=@local}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, 0xe8) 1.005140841s ago: executing program 0 (id=3249): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000080"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 598.921242ms ago: executing program 0 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x8848, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0xfffffffffffffe93}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 597.708377ms ago: executing program 4 (id=3251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x1, 0x497}}, './file0\x00'}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet6(0xa, 0x2, 0x4601dd03) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) socket$netlink(0x10, 0x3, 0x4) 198.233117ms ago: executing program 1 (id=3252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') readv(r1, &(0x7f0000000480)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) flistxattr(r4, 0x0, 0xdeff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/bus/input/handlers\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x54}, {0x6}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x5, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x39}, @union={0x0, 0x5, 0x0, 0x5, 0x0, 0x7, [{0x2, 0x0, 0x8}, {0x6, 0x4, 0xffff0000}, {0xe, 0x0, 0x4}, {0x9, 0x0, 0x9}, {0xc, 0x1, 0x8}]}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "a5"}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000140)=""/78, 0x91, 0x4e, 0x1, 0x10001}, 0x20) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000280)={0xf000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x80000001, 0xfff, 0x10000, 0x2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="181100000000000078f813e1ffde97542fa22eaa535e000000000000002020207b1af8ff00000000bfa100000000000007010000f861b4c92d02000800000000b7030000c55c00000000680000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) times(0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r11, 0x4b49, &(0x7f0000000780)={0x0, "033eed6e42faff815f993fd0e9dd486dfb0738b00d97eddf79b5ee5f7363bac424a2b131e83f05ec4334c91999e9f4f560b48dc25552a177b1d80d7db59f2f0126ceb914b840846596aae8da5590013ab5b4b962725fbc348ab654719dfd487f5c3f55a331645638f39424392979339de815e87c3cd49d6133ec8fb4448de4184c03b4a95fa7cb8ed05f3d9aa144fb061789def56783bebfc614fe84084939ae6f52435d74d9bbedc65b9cc6e831b0d486dba7267233947e1277a949a7e5938fb5655e6b54243e26a1cf0b97edbe52c0b95967ace9fe91f29cd76a5a5fe5d85c4bfee5aeb73ffdd2a21f9e933330529884de6182649fb72c54abc89271a08741f222edbef7bed6088465daccbe048a23c8e6114280657430345a71ab8b18b67c869f227c35d1e9a37c4401be2edd1b81486d4139d8b0ae22f71ead0a3cf74ecb5aca2298f43b9ceb7539b232a5093dfd0c884fc1733183d920cd46fbdc3debfc81b4e936092d74241b58342f4a554b23ec215a0804306734e232450a2bc6d10d6643865cece618a5e01baf06857d526f71fceff930046ce8f1e0195bed7022ab48bde3c7e40872a74d0b1b5b390a2db5c88c26f8f083b2d55d88fd057f9817e194333e8b287aafe6c07af322e533811b33758bba6e582b0a8216a457de4f4b97b59bb3c76e1a81875b5d0ffd39b1b61c2c249927f1d0b6162ef93b80bbfa2416"}) 0s ago: executing program 0 (id=3253): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$bsg(0xffffffffffffff9c, 0x0, 0x44400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x0, 0x0, "b939ee6bde127200cf8d662e0c7f1821f05bcac03dde97f3ff34eb6df3421158"}) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000180)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r4, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r5}}, {@gid={'gid', 0x3d, r6}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') kernel console output (not intermixed with test programs): n device batadv0 [ 1957.429021][T18999] veth0_vlan: entered promiscuous mode [ 1957.529457][T18999] veth1_vlan: entered promiscuous mode [ 1957.769442][T19322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1957.821854][T18999] veth0_macvtap: entered promiscuous mode [ 1957.913885][T18999] veth1_macvtap: entered promiscuous mode [ 1958.057779][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1958.127106][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.231842][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1958.310505][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.344025][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1958.397011][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.419510][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1958.431443][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.465878][T18999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1958.538286][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1958.599651][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.681173][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1958.723935][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.778205][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1958.803482][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.849553][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1958.865820][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.888482][T18999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1958.991482][T18999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.016667][T18999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.026513][T18999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.047872][T18999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.377384][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.443404][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.687430][T18820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.726798][T18820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1960.670476][T19372] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 1960.670476][T19372] program syz.0.2815 not setting count and/or reply_len properly [ 1960.714056][T19372] fuse: Unknown parameter 'Z$ +]f{vkZ`J9H#l HvJ;"DSuם V>5 L&**뿾߶(7Z&' [ 1962.969457][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.719818][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.132784][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.297298][ T29] audit: type=1326 audit(1722190622.598:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19381 comm="syz.1.2819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09f177299 code=0x0 [ 1964.408693][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.320261][ T11] bridge_slave_1: left allmulticast mode [ 1966.326003][ T11] bridge_slave_1: left promiscuous mode [ 1966.373799][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.433619][ T11] bridge_slave_0: left allmulticast mode [ 1966.449804][ T11] bridge_slave_0: left promiscuous mode [ 1966.455768][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.281678][T19075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1967.298923][T19075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1967.311374][T19075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1967.328021][T19075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1967.342120][T19075] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1967.350284][T19075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1967.448228][ T29] audit: type=1400 audit(1722190625.506:1567): avc: denied { map } for pid=19422 comm="syz.1.2827" path="socket:[91743]" dev="sockfs" ino=91743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1968.879029][ T29] audit: type=1326 audit(1722190626.817:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.0.2829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5faf77299 code=0x0 [ 1969.180961][T16073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1969.197319][T16073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1969.266968][T18359] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1969.274944][T16073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1969.293984][T16073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1969.310488][T16073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1969.321921][T16073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1969.631004][T18359] usb 5-1: config 6 has an invalid interface number: 169 but max is 1 [ 1969.654495][T16073] Bluetooth: hci1: command tx timeout [ 1969.657412][T18359] usb 5-1: config 6 has no interface number 1 [ 1969.715662][T18359] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 1969.728327][T18359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.729516][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1969.739269][T18359] usb 5-1: Product: syz [ 1969.760827][T18359] usb 5-1: Manufacturer: syz [ 1969.772760][T18359] usb 5-1: SerialNumber: syz [ 1969.820655][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1969.857180][ T11] bond0 (unregistering): Released all slaves [ 1970.904127][T19449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.974322][T19449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.397766][ T11] hsr_slave_0: left promiscuous mode [ 1971.441439][ T11] hsr_slave_1: left promiscuous mode [ 1971.461360][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.496420][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.518896][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1971.552589][ T5237] Bluetooth: hci2: command tx timeout [ 1971.575627][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1971.773369][ T11] veth1_macvtap: left promiscuous mode [ 1971.909788][ T5237] Bluetooth: hci1: command tx timeout [ 1972.109532][ T11] veth0_macvtap: left promiscuous mode [ 1972.233942][ T11] veth1_vlan: left promiscuous mode [ 1973.088902][ T11] veth0_vlan: left promiscuous mode [ 1973.709396][T14567] usb 5-1: USB disconnect, device number 43 [ 1973.816588][ T5237] Bluetooth: hci2: command tx timeout [ 1974.152606][ T5237] Bluetooth: hci1: command tx timeout [ 1975.065911][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1975.158976][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1976.059546][ T5237] Bluetooth: hci2: command tx timeout [ 1976.136532][T19482] batadv0: entered promiscuous mode [ 1976.183928][T19484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1976.340426][T19488] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1976.405993][ T5237] Bluetooth: hci1: command tx timeout [ 1977.955709][T19429] chnl_net:caif_netlink_parms(): no params data found [ 1978.312800][ T5237] Bluetooth: hci2: command tx timeout [ 1978.328823][ C1] eth0: bad gso: type: 1, size: 1408 [ 1978.801126][T19517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1978.876289][T19429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.890241][T19429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.904960][T19429] bridge_slave_0: entered allmulticast mode [ 1978.919012][T19429] bridge_slave_0: entered promiscuous mode [ 1979.024194][T19454] chnl_net:caif_netlink_parms(): no params data found [ 1979.112718][T19429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.149684][T19429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.221601][T19429] bridge_slave_1: entered allmulticast mode [ 1979.306175][T19429] bridge_slave_1: entered promiscuous mode [ 1979.806545][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.293072][T19544] tipc: Started in network mode [ 1980.303717][T19544] tipc: Node identity f6e2a6351e1b, cluster identity 4711 [ 1980.314699][T19544] tipc: Enabled bearer , priority 0 [ 1980.682955][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.747547][T19429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1980.846514][T19547] tipc: Resetting bearer [ 1980.907106][T19542] tipc: Disabling bearer [ 1980.997099][T19429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.086673][T16748] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1981.297549][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.334032][T16748] usb 5-1: config 6 has an invalid interface number: 169 but max is 1 [ 1981.366465][T16748] usb 5-1: config 6 has no interface number 1 [ 1981.413621][T16748] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 1981.438438][T16748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.481726][T16748] usb 5-1: Product: syz [ 1981.501264][T16748] usb 5-1: Manufacturer: syz [ 1981.513505][T16748] usb 5-1: SerialNumber: syz [ 1981.764144][T19562] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1981.952343][ T11] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.094050][T19454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1982.125171][T19454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.148976][T19454] bridge_slave_0: entered allmulticast mode [ 1982.189939][T19454] bridge_slave_0: entered promiscuous mode [ 1982.213594][T19454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1982.220885][T19454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.258946][T19454] bridge_slave_1: entered allmulticast mode [ 1982.270993][T19454] bridge_slave_1: entered promiscuous mode [ 1982.343552][T19429] team0: Port device team_slave_0 added [ 1982.369655][T19429] team0: Port device team_slave_1 added [ 1982.585081][ T5276] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1982.695088][T19429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1982.707364][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1982.849373][T19429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1982.873215][T19570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.882524][T19570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.908093][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 1982.916574][ T5276] usb 2-1: config index 0 descriptor too short (expected 485, got 396) [ 1982.950101][ T5276] usb 2-1: config 227 has an invalid interface number: 182 but max is 0 [ 1983.004716][ T5276] usb 2-1: config 227 has an invalid descriptor of length 102, skipping remainder of the config [ 1983.072283][T19454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1983.088049][ T5276] usb 2-1: config 227 has no interface number 0 [ 1983.112178][ T5276] usb 2-1: config 227 interface 182 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 1983.125876][T19429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1983.136463][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1983.139279][ T5276] usb 2-1: config 227 interface 182 altsetting 250 endpoint 0x7 has invalid maxpacket 1015, setting to 64 [ 1983.232411][T19429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1983.318791][ T5276] usb 2-1: config 227 interface 182 altsetting 250 has an endpoint descriptor with address 0x41, changing to 0x1 [ 1983.340011][ T5276] usb 2-1: config 227 interface 182 altsetting 250 endpoint 0x1 has an invalid bInterval 239, changing to 7 [ 1983.366482][T19454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1983.395899][ T5276] usb 2-1: config 227 interface 182 altsetting 250 endpoint 0x1 has invalid maxpacket 42828, setting to 1024 [ 1983.448540][ T5276] usb 2-1: config 227 interface 182 altsetting 250 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1983.493094][ T5276] usb 2-1: config 227 interface 182 altsetting 250 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1983.508006][ T5276] usb 2-1: config 227 interface 182 altsetting 250 endpoint 0xE has an invalid bInterval 254, changing to 7 [ 1983.523863][ T5276] usb 2-1: config 227 interface 182 altsetting 250 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 1983.544552][ T5276] usb 2-1: config 227 interface 182 has no altsetting 0 [ 1983.587391][ T5276] usb 2-1: New USB device found, idVendor=0f11, idProduct=2040, bcdDevice=eb.7c [ 1983.627960][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.842817][T19454] team0: Port device team_slave_0 added [ 1984.127654][T19454] team0: Port device team_slave_1 added [ 1984.407773][ T5276] usb 2-1: string descriptor 0 read error: -71 [ 1984.432931][ T5276] ldusb 2-1:227.182: Interrupt in endpoint not found [ 1984.500242][T19429] hsr_slave_0: entered promiscuous mode [ 1984.544704][ T5276] usb 2-1: USB disconnect, device number 42 [ 1984.590592][T19429] hsr_slave_1: entered promiscuous mode [ 1984.664684][T19429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1984.673137][T19429] Cannot create hsr debugfs directory [ 1984.963983][T19454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1985.006706][T19454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1985.032699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1985.070778][T19454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1985.271323][T16748] usb 5-1: USB disconnect, device number 44 [ 1985.366555][T19454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1985.394518][T19454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1985.493816][T19454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1985.754151][ T11] bridge_slave_1: left allmulticast mode [ 1985.759986][ T11] bridge_slave_1: left promiscuous mode [ 1985.774818][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.858556][ T11] bridge_slave_0: left allmulticast mode [ 1985.900667][ T11] bridge_slave_0: left promiscuous mode [ 1985.937935][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.951441][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.960079][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.308609][ T8016] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1986.470347][ T29] audit: type=1400 audit(1722190643.061:1569): avc: denied { ioctl } for pid=19603 comm="syz.1.2855" path="socket:[92800]" dev="sockfs" ino=92800 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1986.569033][ T8016] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1986.586093][ T8016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1986.596675][ T8016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.614379][T19606] sd 0:0:1:0: device reset [ 1986.674063][ T8016] usb 5-1: config 0 descriptor?? [ 1986.700419][ T8016] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1986.834766][T19608] libceph: resolve '. [ 1986.834766][T19608] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1986.834766][T19608] ' (ret=-3): failed [ 1987.920243][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.937745][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.962956][ T11] bond0 (unregistering): Released all slaves [ 1988.263075][T19454] hsr_slave_0: entered promiscuous mode [ 1988.271538][T19454] hsr_slave_1: entered promiscuous mode [ 1988.279119][T19454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1988.291181][T19454] Cannot create hsr debugfs directory [ 1989.143535][T16748] usb 5-1: USB disconnect, device number 45 [ 1989.310902][ T11] hsr_slave_0: left promiscuous mode [ 1989.326235][ C1] eth0: bad gso: type: 1, size: 1408 [ 1989.332811][ T11] hsr_slave_1: left promiscuous mode [ 1989.339766][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1989.355718][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1989.389808][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1989.410286][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1989.577871][ T11] veth1_macvtap: left promiscuous mode [ 1989.596840][ T11] veth0_macvtap: left promiscuous mode [ 1989.611125][ T11] veth1_vlan: left promiscuous mode [ 1990.642227][ T11] team0 (unregistering): Port device vlan0 removed [ 1991.205116][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1991.307322][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1993.145512][T15112] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1993.428593][T15112] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1993.439212][T15112] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 5.88 [ 1993.471844][T15112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.519627][T15112] usb 5-1: Product: syz [ 1993.567057][T15112] usb 5-1: Manufacturer: syz [ 1993.595160][T15112] usb 5-1: SerialNumber: syz [ 1993.737864][T15112] usb 5-1: config 0 descriptor?? [ 1993.922745][T15112] usb 5-1: selecting invalid altsetting 0 [ 1994.441296][T15112] usb 5-1: USB disconnect, device number 46 [ 1996.073024][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1996.309002][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1996.354298][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1996.385608][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.414761][ T25] usb 2-1: config 0 descriptor?? [ 1996.442000][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1996.710054][T19429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1996.761114][T19429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1996.817423][T19429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1996.834020][T19429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1997.050150][ T25] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1997.199697][T19429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1997.287160][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1997.302480][T19429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1997.317071][ T25] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=c9.bc [ 1997.340005][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.361049][ T25] usb 1-1: Product: syz [ 1997.365407][ T25] usb 1-1: Manufacturer: syz [ 1997.376929][ T25] usb 1-1: SerialNumber: syz [ 1997.409160][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.416567][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1997.437182][ T25] usb 1-1: config 0 descriptor?? [ 1997.451169][ T25] s2255 1-1:0.0: Could not find bulk-in endpoint [ 1997.460700][ T25] Sensoray 2255 driver load failed: 0xfffffff4 [ 1997.474141][ T25] s2255 1-1:0.0: probe with driver s2255 failed with error -12 [ 1997.534271][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.542722][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1997.740008][ T5276] usb 1-1: USB disconnect, device number 44 [ 1997.794793][T19454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1997.852292][T19454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1997.895400][T19454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1997.931456][T19454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1998.200676][T19717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1998.492785][T19454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1998.620980][T19454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1998.672681][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.680013][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1998.726694][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.734025][T16748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1998.828066][T19429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1998.973017][T19454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1998.973160][T16748] usb 2-1: USB disconnect, device number 43 [ 1999.007196][T19454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2001.205323][T19429] veth0_vlan: entered promiscuous mode [ 2001.467158][T19429] veth1_vlan: entered promiscuous mode [ 2001.656614][T19429] veth0_macvtap: entered promiscuous mode [ 2001.673501][ T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2001.690546][T19429] veth1_macvtap: entered promiscuous mode [ 2001.765137][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2001.821062][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.850786][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2001.862908][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.878860][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2001.890085][T19756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2886'. [ 2001.922685][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 2001.942170][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.960585][ T25] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 2001.977459][T19429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2001.984844][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.017014][ T25] usb 5-1: Product: syz [ 2002.026218][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2002.062038][ T25] usb 5-1: Manufacturer: syz [ 2002.066735][ T25] usb 5-1: SerialNumber: syz [ 2002.083221][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.093129][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2002.105361][ T25] usb 5-1: config 0 descriptor?? [ 2002.116524][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.128282][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2002.139404][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.176793][T19429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2002.298181][T19429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.358163][T19429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.408396][T19429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.458702][T19429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.576142][ T25] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 2002.585384][ T25] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 2002.591997][ T25] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 2002.628110][ T25] usb 5-1: USB disconnect, device number 47 [ 2003.673051][T19454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.158239][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.202153][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.429845][T19454] veth0_vlan: entered promiscuous mode [ 2004.449712][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.484913][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.486727][T19454] veth1_vlan: entered promiscuous mode [ 2004.708383][T19454] veth0_macvtap: entered promiscuous mode [ 2004.747736][T19454] veth1_macvtap: entered promiscuous mode [ 2004.985555][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2005.007257][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.020960][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2005.033573][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.048488][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2005.061638][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.081288][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2005.114231][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.175573][T19454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2005.332410][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.420125][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.452585][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.476451][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.517920][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.557250][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.596289][T19454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.872882][T19454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.885377][T16073] Bluetooth: hci2: command 0x0405 tx timeout [ 2005.908387][T19454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2007.434694][T18822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.689840][T18822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.762866][T19454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.786632][T19454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.820648][T19454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.842670][T19454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.935515][T18822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.112132][T18822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.651138][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2008.659053][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2008.765960][T18822] bridge_slave_1: left allmulticast mode [ 2008.781127][T18822] bridge_slave_1: left promiscuous mode [ 2008.787080][T18822] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.814200][T18822] bridge_slave_0: left allmulticast mode [ 2008.819955][T18822] bridge_slave_0: left promiscuous mode [ 2008.829094][T18822] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.065823][T19825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2897'. [ 2009.456376][ T5276] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2009.953472][ T5276] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2010.019827][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.070361][ T5276] usb 2-1: Product: syz [ 2010.096711][ T5276] usb 2-1: Manufacturer: syz [ 2010.107659][ T5276] usb 2-1: SerialNumber: syz [ 2010.198060][ T5276] usb 2-1: config 0 descriptor?? [ 2011.385709][ T5276] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 2011.409618][ T5276] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 2011.454780][ T5276] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 2011.493093][ T5276] usb 2-1: USB disconnect, device number 44 [ 2011.898319][T16073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2011.922514][T16073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2011.932420][T16073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2011.943171][T16073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2011.951310][T16073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2011.974005][T16073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2012.793528][T18822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2012.818796][T18822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2012.878654][T18822] bond0 (unregistering): Released all slaves [ 2012.906544][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2013.039632][T18807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.150250][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 2013.166447][T18807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.195517][ T25] usb 2-1: config 0 has an invalid interface number: 172 but max is 2 [ 2013.220900][ T25] usb 2-1: config 0 has an invalid interface number: 195 but max is 2 [ 2013.270837][ T25] usb 2-1: config 0 has no interface number 1 [ 2013.292774][ T25] usb 2-1: config 0 has no interface number 2 [ 2013.314720][ T25] usb 2-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 2013.354759][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.388308][ T25] usb 2-1: Product: syz [ 2013.392663][ T25] usb 2-1: Manufacturer: syz [ 2013.403746][ T25] usb 2-1: SerialNumber: syz [ 2013.446776][ T25] usb 2-1: config 0 descriptor?? [ 2013.489233][ T25] usb 2-1: selecting invalid altsetting 1 [ 2013.513386][ T25] usb 2-1: Could not set interface, error -22 [ 2013.681542][T19877] ieee802154 phy0 wpan0: encryption failed: -22 [ 2014.017604][ T5205] usb 2-1: USB disconnect, device number 45 [ 2014.206822][ T5237] Bluetooth: hci1: command tx timeout [ 2014.548271][T18822] hsr_slave_0: left promiscuous mode [ 2014.590675][T18822] hsr_slave_1: left promiscuous mode [ 2015.584827][T18822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2015.592373][T18822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2015.639702][T18822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2015.661721][T18822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2016.479481][ T5237] Bluetooth: hci1: command 0x041b tx timeout [ 2016.859757][T18822] veth1_macvtap: left promiscuous mode [ 2016.885473][T18822] veth0_macvtap: left promiscuous mode [ 2016.903942][T18822] veth1_vlan: left promiscuous mode [ 2017.086804][T18822] veth0_vlan: left promiscuous mode [ 2017.197433][T19910] xt_CONNSECMARK: invalid mode: 0 [ 2018.704122][T16073] Bluetooth: hci1: command 0x041b tx timeout [ 2019.233677][ T5274] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2019.533046][ T5274] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2019.565359][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.612849][ T5274] usb 3-1: Product: syz [ 2019.617224][ T5274] usb 3-1: Manufacturer: syz [ 2019.644161][ T5274] usb 3-1: SerialNumber: syz [ 2019.664290][ T5274] usb 3-1: config 0 descriptor?? [ 2020.172069][ T25] usb 3-1: USB disconnect, device number 83 [ 2020.425470][T19949] libceph: resolve '. [ 2020.425470][T19949] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 2020.425470][T19949] ' (ret=-3): failed [ 2020.964640][T16073] Bluetooth: hci1: command 0x041b tx timeout [ 2022.721701][T18822] team0 (unregistering): Port device team_slave_1 removed [ 2022.940250][T18822] team0 (unregistering): Port device team_slave_0 removed [ 2023.221006][T16073] Bluetooth: hci1: command 0x041b tx timeout [ 2024.759421][T16748] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2025.082381][T16748] usb 3-1: Using ep0 maxpacket: 16 [ 2025.280673][T16748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2025.608413][T16748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2025.662555][T16748] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 2025.675821][T19849] chnl_net:caif_netlink_parms(): no params data found [ 2025.707674][T16748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.758733][T16748] usb 3-1: Product: syz [ 2025.773436][T16748] usb 3-1: Manufacturer: syz [ 2025.788350][T16748] usb 3-1: SerialNumber: syz [ 2025.844702][T16748] usb 3-1: config 0 descriptor?? [ 2025.890634][T16748] imon_raw 3-1:0.0: IR endpoint missing [ 2026.377633][ T5205] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2026.471095][T16748] usb 3-1: USB disconnect, device number 84 [ 2027.631346][ T5205] usb 2-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 2027.640510][ T5205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.715394][ T5205] usb 2-1: Product: syz [ 2027.725952][ T5205] usb 2-1: Manufacturer: syz [ 2027.737300][ T5205] usb 2-1: SerialNumber: syz [ 2027.777748][ T5205] usb 2-1: config 0 descriptor?? [ 2027.876325][T19849] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.909235][T19849] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.931999][T19849] bridge_slave_0: entered allmulticast mode [ 2027.985438][T19849] bridge_slave_0: entered promiscuous mode [ 2028.102835][T19849] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.128830][T19849] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.174880][T19849] bridge_slave_1: entered allmulticast mode [ 2028.196837][T19849] bridge_slave_1: entered promiscuous mode [ 2028.647871][T19849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2028.779588][T19849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2029.163762][T19849] team0: Port device team_slave_0 added [ 2029.317844][ T5205] asix 2-1:0.0 eth5: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet, 02:0d:96:66:af:53 [ 2029.333960][T19075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2029.348504][T19075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2029.364286][T19075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2029.373403][T19075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2029.382759][T19075] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2029.391392][T19075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2029.430318][ T5205] usb 2-1: USB disconnect, device number 46 [ 2029.437140][ T5205] asix 2-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet [ 2029.694903][T19849] team0: Port device team_slave_1 added [ 2030.022862][T19849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2030.032093][T19849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2030.119030][T19849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2030.317890][ T5237] Bluetooth: hci1: command 0x041b tx timeout [ 2030.426220][T18824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.507545][T19849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2030.519258][T19849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2030.577623][T19849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2030.702222][T20031] libceph: resolve '. [ 2030.702222][T20031] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 2030.702222][T20031] ' (ret=-3): failed [ 2030.770618][ T5205] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2030.801315][T18824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.016540][T18824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.035277][ T5205] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2031.049399][ T5205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.058756][ T5205] usb 1-1: Product: syz [ 2031.063122][ T5205] usb 1-1: Manufacturer: syz [ 2031.070254][ T5205] usb 1-1: SerialNumber: syz [ 2031.082305][ T5205] usb 1-1: config 0 descriptor?? [ 2031.148262][T19849] hsr_slave_0: entered promiscuous mode [ 2031.185429][T19849] hsr_slave_1: entered promiscuous mode [ 2031.210968][T19849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2031.238824][T19849] Cannot create hsr debugfs directory [ 2031.396474][ T5205] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 2031.412423][ T5205] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 2031.430467][ T5205] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 2031.452233][T18824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.519783][ T5205] usb 1-1: USB disconnect, device number 45 [ 2031.628309][T16073] Bluetooth: hci5: command tx timeout [ 2032.810489][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2937'. [ 2034.194202][T16073] Bluetooth: hci5: command tx timeout [ 2034.575559][T18824] bridge_slave_1: left allmulticast mode [ 2034.581334][T18824] bridge_slave_1: left promiscuous mode [ 2034.636731][T18824] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.702615][T18824] bridge_slave_0: left allmulticast mode [ 2034.722883][T18824] bridge_slave_0: left promiscuous mode [ 2034.746092][T18824] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.841498][T18824] tipc: Resetting bearer [ 2035.086428][T20058] xt_CONNSECMARK: invalid mode: 0 [ 2036.253065][T18824] tipc: Disabling bearer [ 2036.401434][ T5205] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2036.496919][T16073] Bluetooth: hci5: command tx timeout [ 2036.646612][ T5205] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2036.658309][ T5205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.667870][ T5205] usb 2-1: Product: syz [ 2036.672139][ T5205] usb 2-1: Manufacturer: syz [ 2036.677516][ T5205] usb 2-1: SerialNumber: syz [ 2036.686284][ T5205] usb 2-1: config 0 descriptor?? [ 2036.881987][T18824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2036.932321][T18824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2036.963011][T18824] bond0 (unregistering): Released all slaves [ 2037.109079][T14567] usb 2-1: USB disconnect, device number 47 [ 2037.290552][T18824] tipc: Left network mode [ 2037.914391][T20012] chnl_net:caif_netlink_parms(): no params data found [ 2038.054008][T20092] netlink: 'syz.1.2949': attribute type 1 has an invalid length. [ 2038.308693][T18824] hsr_slave_0: left promiscuous mode [ 2038.315999][T18824] hsr_slave_1: left promiscuous mode [ 2038.331878][T18824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2038.345858][T18824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2038.371997][T18824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2038.379952][T18824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2038.419514][T18824] veth1_macvtap: left promiscuous mode [ 2038.425373][T18824] veth0_macvtap: left promiscuous mode [ 2038.441409][T18824] veth1_vlan: left promiscuous mode [ 2038.447635][T18824] veth0_vlan: left promiscuous mode [ 2038.724750][T16073] Bluetooth: hci5: command tx timeout [ 2040.470002][T18824] team0 (unregistering): Port device team_slave_1 removed [ 2040.574897][T18824] team0 (unregistering): Port device team_slave_0 removed [ 2041.668463][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2949'. [ 2041.706106][T20102] tap0: tun_chr_ioctl cmd 1074025677 [ 2041.711659][T20102] tap0: linktype set to 270 [ 2041.732242][T20119] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2957'. [ 2042.224060][T20125] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2042.230689][T20125] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2042.239307][T20125] vhci_hcd vhci_hcd.0: Device attached [ 2042.304317][T20012] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.343798][T20012] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.365316][T20012] bridge_slave_0: entered allmulticast mode [ 2042.374021][T20012] bridge_slave_0: entered promiscuous mode [ 2042.484081][T15112] vhci_hcd: vhci_device speed not set [ 2042.559865][T15112] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 2042.647923][T20132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2042.733335][T20012] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.740543][T20012] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.835451][T20012] bridge_slave_1: entered allmulticast mode [ 2042.859003][T20012] bridge_slave_1: entered promiscuous mode [ 2042.984024][T19849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2043.182709][T20012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2043.241281][T20129] vhci_hcd: connection reset by peer [ 2043.269316][T20012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2043.274741][T18807] vhci_hcd: stop threads [ 2043.284066][T18807] vhci_hcd: release socket [ 2043.298730][T19849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2043.326293][T18807] vhci_hcd: disconnect device [ 2043.356938][T19849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2043.674331][T19849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2043.934493][T20012] team0: Port device team_slave_0 added [ 2044.042960][T20012] team0: Port device team_slave_1 added [ 2044.429576][T20012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2044.463787][T20012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2044.489920][ C1] vkms_vblank_simulate: vblank timer overrun [ 2044.558017][T20012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2044.594278][T20012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2044.629044][T20012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2044.672412][T20012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2045.632896][T20012] hsr_slave_0: entered promiscuous mode [ 2045.702453][T20012] hsr_slave_1: entered promiscuous mode [ 2045.842753][T20168] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2966'. [ 2046.596728][T20175] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 2048.222536][T15112] vhci_hcd: vhci_device speed not set [ 2048.416086][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 2048.868174][T19849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.979163][T19849] 8021q: adding VLAN 0 to HW filter on device team0 [ 2049.098227][T14567] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.105601][T14567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.177236][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.184929][T14567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.318936][T16073] Bluetooth: hci2: ACL packet for unknown connection handle 203 [ 2049.327200][T16073] Bluetooth: hci2: Malformed Event: 0x02 [ 2050.569778][T20224] ieee802154 phy0 wpan0: encryption failed: -22 [ 2050.595498][T20012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2050.655435][T20226] netlink: 'syz.1.2977': attribute type 1 has an invalid length. [ 2050.681498][T20012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2050.738250][T20012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2050.807359][T20012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2051.254379][ T29] audit: type=1400 audit(1722190702.844:1570): avc: denied { append } for pid=20234 comm="syz.1.2979" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2052.112203][ T29] audit: type=1400 audit(1722190702.918:1571): avc: denied { accept } for pid=20234 comm="syz.1.2979" lport=37219 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2052.409467][ T5274] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2052.497312][T19849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2052.530987][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2052.542425][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2052.668234][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 2052.692129][ T5274] usb 3-1: New USB device found, idVendor=059b, idProduct=0001, bcdDevice= 1.00 [ 2052.720465][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.743417][T20012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2052.758811][ T5274] usb 3-1: Product: syz [ 2052.763069][ T5274] usb 3-1: Manufacturer: syz [ 2052.792762][ T5274] usb 3-1: SerialNumber: syz [ 2052.820692][ T5274] usb 3-1: config 0 descriptor?? [ 2052.845021][ T5274] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2052.899389][T20012] 8021q: adding VLAN 0 to HW filter on device team0 [ 2052.936599][ T5274] usb-storage 3-1:0.0: Quirks match for vid 059b pid 0001: 1 [ 2052.970532][T18359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2052.978031][T18359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2053.106776][ T5274] usb 3-1: USB disconnect, device number 85 [ 2053.196062][T19849] veth0_vlan: entered promiscuous mode [ 2053.236877][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.244246][T14567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2053.354919][T19849] veth1_vlan: entered promiscuous mode [ 2053.607018][T19849] veth0_macvtap: entered promiscuous mode [ 2053.680200][T19849] veth1_macvtap: entered promiscuous mode [ 2053.782600][T19849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.822586][T19849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.859695][T19849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.902799][T19849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.917417][T19849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.939218][T19849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.006606][T19849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2054.123904][T19849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.156982][T19849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.210666][T19849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.270285][T19849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.305526][T19849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.343237][T19849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.391720][T19849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2054.471054][T19849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.541361][T19849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.575071][T19849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.583875][T19849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.586920][T20280] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2988'. [ 2055.981621][T20012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2057.514019][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.573999][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2057.655384][T20313] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2057.661999][T20313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2057.682580][T20313] vhci_hcd vhci_hcd.0: Device attached [ 2057.911934][T16748] vhci_hcd: vhci_device speed not set [ 2058.173788][T16748] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 2059.394950][T12770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2059.433604][T12770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2060.068855][T20340] netlink: 'syz.2.2999': attribute type 20 has an invalid length. [ 2060.361107][ C0] vkms_vblank_simulate: vblank timer overrun [ 2060.479561][ C0] vkms_vblank_simulate: vblank timer overrun [ 2061.442877][T12770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.662375][T12770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.869610][T12770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.950607][T20012] veth0_vlan: entered promiscuous mode [ 2062.034390][T12770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.083534][T20012] veth1_vlan: entered promiscuous mode [ 2062.251984][T20012] veth0_macvtap: entered promiscuous mode [ 2062.272127][T20012] veth1_macvtap: entered promiscuous mode [ 2062.408038][T20315] vhci_hcd: connection reset by peer [ 2062.429911][T18824] vhci_hcd: stop threads [ 2062.440544][T18824] vhci_hcd: release socket [ 2062.450431][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2062.465992][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.477162][T18824] vhci_hcd: disconnect device [ 2062.483568][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2062.498564][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.510454][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2062.522568][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.532912][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2062.543732][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.556293][T20012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2062.589540][T12770] bridge_slave_1: left allmulticast mode [ 2062.596258][T12770] bridge_slave_1: left promiscuous mode [ 2062.602204][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.625402][T12770] bridge_slave_0: left allmulticast mode [ 2062.631135][T12770] bridge_slave_0: left promiscuous mode [ 2062.639697][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.546135][T15112] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2063.940177][T16748] vhci_hcd: vhci_device speed not set [ 2068.447504][T15112] usb 2-1: device descriptor read/all, error -71 [ 2069.189939][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2069.230537][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2069.251622][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2069.286734][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2069.300585][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2069.309220][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2069.373461][T12770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2069.413442][T12770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2069.444133][T12770] bond0 (unregistering): Released all slaves [ 2069.702786][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2069.752326][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2069.812097][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2069.873527][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2069.905727][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2069.974151][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2070.035428][T20012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2070.089486][T20012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2070.142368][T20012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2070.627978][T20012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.628043][T20012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.628118][T20012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.628169][T20012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.574319][T16073] Bluetooth: hci1: command tx timeout [ 2071.810790][T12770] hsr_slave_0: left promiscuous mode [ 2071.855699][T12770] hsr_slave_1: left promiscuous mode [ 2071.891216][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2071.900220][T12770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2071.909030][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2071.931591][T12770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2072.085286][T12770] veth1_macvtap: left promiscuous mode [ 2072.101944][T12770] veth0_macvtap: left promiscuous mode [ 2072.124744][T12770] veth1_vlan: left promiscuous mode [ 2072.137620][T12770] veth0_vlan: left promiscuous mode [ 2072.209450][T20417] No control pipe specified [ 2073.278977][T20433] ufs: You didn't specify the type of your ufs filesystem [ 2073.278977][T20433] [ 2073.278977][T20433] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2073.278977][T20433] [ 2073.278977][T20433] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2073.311935][T20433] ufs: ufstype=old is supported read-only [ 2073.328297][T20433] ufs: ufs_fill_super(): bad magic number [ 2073.859038][T16073] Bluetooth: hci1: command tx timeout [ 2074.468837][ T29] audit: type=1400 audit(1722190724.285:1572): avc: denied { getopt } for pid=20438 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2074.488637][ C1] vkms_vblank_simulate: vblank timer overrun [ 2075.701892][T16748] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2075.934583][T12770] team0 (unregistering): Port device team_slave_1 removed [ 2075.935036][T16748] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2075.958085][T16748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.966478][T16748] usb 3-1: Product: syz [ 2075.970741][T16748] usb 3-1: Manufacturer: syz [ 2075.992511][T16748] usb 3-1: SerialNumber: syz [ 2076.004115][T16748] usb 3-1: config 0 descriptor?? [ 2076.045222][T12770] team0 (unregistering): Port device team_slave_0 removed [ 2076.088046][T16073] Bluetooth: hci1: command tx timeout [ 2076.341443][T18359] usb 3-1: USB disconnect, device number 86 [ 2077.555950][T18817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2077.563851][T18817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2077.927456][T20465] netlink: 'syz.2.3022': attribute type 1 has an invalid length. [ 2077.935423][T20465] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.3022'. [ 2077.944815][T20465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3022'. [ 2078.334515][T16073] Bluetooth: hci1: command tx timeout [ 2078.402614][T18811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2078.412449][T18811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2078.893166][T20387] chnl_net:caif_netlink_parms(): no params data found [ 2079.624759][T20387] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.684446][T20387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.721953][T20387] bridge_slave_0: entered allmulticast mode [ 2079.777412][T20387] bridge_slave_0: entered promiscuous mode [ 2079.821189][T20387] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.828484][T20387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.864705][T20387] bridge_slave_1: entered allmulticast mode [ 2079.904171][T20387] bridge_slave_1: entered promiscuous mode [ 2080.298435][T20387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2080.388359][T20387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.661597][T20387] team0: Port device team_slave_0 added [ 2080.753944][T20387] team0: Port device team_slave_1 added [ 2081.262947][T20387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2081.282536][T20387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2081.365717][T20387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2081.697186][T20508] libceph: resolve '. [ 2081.697186][T20508] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 2081.697186][T20508] ' (ret=-3): failed [ 2082.658807][T20387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.665835][T20387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.699397][T20387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2083.122759][T20387] hsr_slave_0: entered promiscuous mode [ 2083.176799][T20387] hsr_slave_1: entered promiscuous mode [ 2083.197087][T20387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2083.251092][T20387] Cannot create hsr debugfs directory [ 2083.983152][T20521] ufs: You didn't specify the type of your ufs filesystem [ 2083.983152][T20521] [ 2083.983152][T20521] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2083.983152][T20521] [ 2083.983152][T20521] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2084.018124][T20521] ufs: ufstype=old is supported read-only [ 2084.024977][T20521] ufs: ufs_fill_super(): bad magic number [ 2088.757614][T16748] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2089.031059][T16748] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=39.dc [ 2089.094330][T16748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.142279][T16748] usb 5-1: Product: syz [ 2089.146534][T16748] usb 5-1: Manufacturer: syz [ 2089.167626][ T29] audit: type=1400 audit(1722190737.844:1573): avc: denied { ioctl } for pid=20564 comm="syz.1.3042" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2089.205376][T20387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2089.214671][T16748] usb 5-1: SerialNumber: syz [ 2089.250571][T16748] usb 5-1: config 0 descriptor?? [ 2089.298395][T20387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2089.307472][T16748] gspca_main: conex-2.14.0 probing 0572:0041 [ 2089.381219][T20387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2089.411076][T20387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2090.079495][T16748] usb 5-1: USB disconnect, device number 48 [ 2090.397205][T20387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2090.652091][T20387] 8021q: adding VLAN 0 to HW filter on device team0 [ 2091.104716][T20584] 9pnet_virtio: no channels available for device [ 2091.122377][T20584] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3045'. [ 2091.953687][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.960985][T16748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2092.118229][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.125556][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2092.246050][ T29] audit: type=1400 audit(1722190740.687:1574): avc: denied { setopt } for pid=20589 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2092.400142][T20595] xt_l2tp: wrong L2TP version: 0 [ 2092.653636][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 2092.678174][T20604] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 2092.689357][T20604] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2092.698309][T20604] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2092.707235][T20604] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2092.718346][T20604] vxlan0: entered promiscuous mode [ 2093.966571][T20387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2094.110492][T20625] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2094.245550][T20387] veth0_vlan: entered promiscuous mode [ 2094.326766][T20387] veth1_vlan: entered promiscuous mode [ 2094.492118][T20387] veth0_macvtap: entered promiscuous mode [ 2094.537347][T20387] veth1_macvtap: entered promiscuous mode [ 2095.563711][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2095.642643][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2095.680638][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2096.018389][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2096.066113][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2096.137328][T20648] 9pnet_virtio: no channels available for device [ 2096.154256][T20648] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3058'. [ 2096.205353][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2096.261864][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2096.722559][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2096.760377][T20387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2097.092033][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.141957][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.175036][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.207634][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.229691][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.255963][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.283674][T20387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.315987][T20387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.369031][T20387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2097.384328][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 2097.402272][T20654] netlink: 'syz.0.3060': attribute type 30 has an invalid length. [ 2097.425875][T16073] Bluetooth: hci2: ACL packet for unknown connection handle 203 [ 2097.463815][T16073] Bluetooth: hci2: Malformed Event: 0x02 [ 2097.551809][T20387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.562224][T20387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.577372][T20387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.586371][T20387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.618930][T20663] No control pipe specified [ 2097.973705][T18817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2098.030754][T18817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.233674][T18809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2098.288216][T18809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.659545][ T29] audit: type=1326 audit(1722190746.613:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2098.783179][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 2098.803454][T20683] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.812482][T20683] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.821268][T20683] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.830256][T20683] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.839480][T20683] vxlan0: entered promiscuous mode [ 2098.981316][ T29] audit: type=1326 audit(1722190746.613:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.257987][ T29] audit: type=1326 audit(1722190746.677:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.308644][ T29] audit: type=1326 audit(1722190746.677:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.378575][ T29] audit: type=1326 audit(1722190746.696:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.402179][ C0] vkms_vblank_simulate: vblank timer overrun [ 2099.409835][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3066'. [ 2099.436230][T20685] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2099.461172][ T29] audit: type=1326 audit(1722190746.696:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.551316][ T29] audit: type=1326 audit(1722190746.705:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.665559][ T29] audit: type=1326 audit(1722190746.705:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.757016][ T29] audit: type=1326 audit(1722190746.880:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2099.891732][ T29] audit: type=1326 audit(1722190746.890:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faef77299 code=0x7ffc0000 [ 2100.792987][T18807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.224600][T18807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.312613][T18807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.405862][T18807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.738412][T18807] bridge_slave_1: left allmulticast mode [ 2101.744143][T18807] bridge_slave_1: left promiscuous mode [ 2101.763488][T18807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.787953][T18807] bridge_slave_0: left allmulticast mode [ 2101.793839][T18807] bridge_slave_0: left promiscuous mode [ 2101.799779][T18807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.165644][T20740] 9pnet_virtio: no channels available for device [ 2103.182217][T20740] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3071'. [ 2104.697219][ T5237] Bluetooth: hci2: command 0x0405 tx timeout [ 2104.831476][T20753] No control pipe specified [ 2104.875585][T18807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2105.012922][T18807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2105.099267][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2105.113514][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2105.122464][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2105.138288][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2105.157306][T18807] bond0 (unregistering): Released all slaves [ 2105.166712][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2105.177536][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2105.749314][T20771] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2106.217596][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 2106.217621][ T29] audit: type=1400 audit(1722190753.591:1615): avc: denied { shutdown } for pid=20765 comm="syz.2.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2106.791666][T18807] hsr_slave_0: left promiscuous mode [ 2106.900605][T18807] hsr_slave_1: left promiscuous mode [ 2106.929261][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2106.966893][T18807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2106.988381][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2107.003990][T18807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2107.081569][T18807] veth1_macvtap: left promiscuous mode [ 2107.087590][T18807] veth0_macvtap: left promiscuous mode [ 2107.096496][T18807] veth1_vlan: left promiscuous mode [ 2107.103912][T18807] veth0_vlan: left promiscuous mode [ 2107.230167][ T5274] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2107.467839][T16073] Bluetooth: hci1: command tx timeout [ 2107.489427][ T5274] usb 1-1: Using ep0 maxpacket: 32 [ 2107.500164][ T5274] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 2107.509517][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.497558][ T5274] usb 1-1: config 0 descriptor?? [ 2108.576406][ T5274] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 2108.583188][ T5274] gspca_mr97310a: reg write [21] error -22 [ 2108.593628][ T5274] mr97310a 1-1:0.0: probe with driver mr97310a failed with error -22 [ 2108.702998][ T5205] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2108.856584][ T5274] usb 1-1: USB disconnect, device number 46 [ 2108.935951][ T5205] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=39.dc [ 2108.994811][ T5205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.011126][ T5205] usb 2-1: Product: syz [ 2109.015428][ T5205] usb 2-1: Manufacturer: syz [ 2109.020966][ T5205] usb 2-1: SerialNumber: syz [ 2109.038119][ T5205] usb 2-1: config 0 descriptor?? [ 2109.069300][ T5205] gspca_main: conex-2.14.0 probing 0572:0041 [ 2109.266193][ T8016] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2109.511493][ T8016] usb 5-1: Using ep0 maxpacket: 16 [ 2109.523908][ T8016] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.545476][ T8016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2109.559447][ T5205] usb 2-1: USB disconnect, device number 50 [ 2109.596933][ T8016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2109.608576][ T8016] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2109.619089][ T8016] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2109.679557][ T8016] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2109.706191][ T8016] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2109.710564][T16073] Bluetooth: hci1: command tx timeout [ 2109.732147][ T8016] usb 5-1: Manufacturer: syz [ 2109.793408][ T8016] usb 5-1: config 0 descriptor?? [ 2110.328834][ T8016] rc_core: IR keymap rc-hauppauge not found [ 2110.334782][ T8016] Registered IR keymap rc-empty [ 2110.354259][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.413211][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.469990][ T8016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2110.532905][ T8016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 2110.569533][T20812] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2110.582336][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.654767][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.720018][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.761472][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.811597][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.893749][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.956517][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2110.985830][ T29] audit: type=1400 audit(1722190757.984:1616): avc: denied { map } for pid=20815 comm="syz.1.3091" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2111.034791][T18807] team0 (unregistering): Port device team_slave_1 removed [ 2111.043656][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2111.069234][ T29] audit: type=1400 audit(1722190757.984:1617): avc: denied { execute } for pid=20815 comm="syz.1.3091" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2111.093528][ C1] vkms_vblank_simulate: vblank timer overrun [ 2111.110488][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2111.212815][ T8016] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2111.290652][ T8016] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2111.306750][T18807] team0 (unregistering): Port device team_slave_0 removed [ 2111.359680][ T8016] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2111.446753][ T8016] usb 5-1: USB disconnect, device number 49 [ 2111.987125][T16073] Bluetooth: hci1: command tx timeout [ 2115.223657][T16073] Bluetooth: hci1: command tx timeout [ 2118.540958][ T29] audit: type=1400 audit(1722190764.971:1618): avc: denied { remount } for pid=20848 comm="syz.0.3101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2118.774759][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2118.812456][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2118.823332][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2118.834824][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2118.843113][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2118.851198][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2119.198605][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2119.213606][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2120.942440][T20759] chnl_net:caif_netlink_parms(): no params data found [ 2121.076117][ T5237] Bluetooth: hci3: command tx timeout [ 2122.249276][T20759] bridge0: port 1(bridge_slave_0) entered blocking state [ 2122.250045][T20759] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.250260][T20759] bridge_slave_0: entered allmulticast mode [ 2122.252624][T20759] bridge_slave_0: entered promiscuous mode [ 2122.280091][T20759] bridge0: port 2(bridge_slave_1) entered blocking state [ 2122.280281][T20759] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.280533][T20759] bridge_slave_1: entered allmulticast mode [ 2122.283015][T20759] bridge_slave_1: entered promiscuous mode [ 2122.586398][T20759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2122.590453][T20759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2122.701879][T20853] chnl_net:caif_netlink_parms(): no params data found [ 2122.876088][T20759] team0: Port device team_slave_0 added [ 2123.206423][T18807] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.318410][ T5237] Bluetooth: hci3: command tx timeout [ 2123.450717][T20759] team0: Port device team_slave_1 added [ 2124.041077][T18807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.368316][T18807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.459021][T20759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2125.486446][T20759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2125.536880][T20759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2125.571883][ T5237] Bluetooth: hci3: command tx timeout [ 2125.864771][T18807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.536300][T20759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.543368][T20759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.580243][T20759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2126.649607][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3113'. [ 2127.169152][T20853] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.306230][T20853] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.375037][T20853] bridge_slave_0: entered allmulticast mode [ 2127.717818][T20853] bridge_slave_0: entered promiscuous mode [ 2127.774842][T20853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.813668][T20853] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.825188][ T5237] Bluetooth: hci3: command tx timeout [ 2127.842804][T20853] bridge_slave_1: entered allmulticast mode [ 2127.881124][T20853] bridge_slave_1: entered promiscuous mode [ 2127.988953][T20759] hsr_slave_0: entered promiscuous mode [ 2128.042316][T20759] hsr_slave_1: entered promiscuous mode [ 2128.099900][T20759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2128.128473][T20759] Cannot create hsr debugfs directory [ 2129.665604][T20853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2129.720400][T20853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2130.103404][T20958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=20958 comm=syz.4.3120 [ 2130.175202][T20958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3120'. [ 2130.394597][T18807] bridge_slave_1: left allmulticast mode [ 2130.426231][T18807] bridge_slave_1: left promiscuous mode [ 2130.462351][T18807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.483250][T18807] bridge_slave_0: left allmulticast mode [ 2130.488942][T18807] bridge_slave_0: left promiscuous mode [ 2130.503256][T18807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.586036][T18807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2131.602034][T18807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2131.623262][T18807] bond0 (unregistering): Released all slaves [ 2131.664615][T20853] team0: Port device team_slave_0 added [ 2131.967769][T20853] team0: Port device team_slave_1 added [ 2133.161583][T20853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2133.216784][T20853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.548251][T20853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2133.679063][T20853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2133.719834][T20853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.783925][T20853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2134.768792][T20853] hsr_slave_0: entered promiscuous mode [ 2134.822334][T20853] hsr_slave_1: entered promiscuous mode [ 2134.877785][T20853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2134.885687][T20853] Cannot create hsr debugfs directory [ 2136.016978][T18807] hsr_slave_0: left promiscuous mode [ 2136.035362][T18807] hsr_slave_1: left promiscuous mode [ 2136.050956][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2136.058463][T18807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2136.074067][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2136.082094][T18807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2136.132030][T18807] veth1_macvtap: left promiscuous mode [ 2136.138297][T18807] veth0_macvtap: left promiscuous mode [ 2136.144727][T18807] veth1_vlan: left promiscuous mode [ 2136.150756][T18807] veth0_vlan: left promiscuous mode [ 2137.736404][T18807] team0 (unregistering): Port device team_slave_1 removed [ 2137.979072][T18807] team0 (unregistering): Port device team_slave_0 removed [ 2139.079491][T16073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2139.114979][T16073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2139.135442][T16073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2139.144409][T16073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2139.179799][T16073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2139.190885][T16073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2139.608774][ T29] audit: type=1400 audit(1722190784.410:1619): avc: denied { create } for pid=21020 comm="syz.4.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2139.934902][ T29] audit: type=1400 audit(1722190784.705:1620): avc: denied { setopt } for pid=21020 comm="syz.4.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2140.242034][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2140.258121][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2140.269319][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2140.501448][T21007] infiniband syz2: set active [ 2140.506807][T21007] infiniband syz2: added ip6gretap0 [ 2140.518627][T21007] syz2: rxe_create_cq: returned err = -12 [ 2140.525744][T21007] infiniband syz2: Couldn't create ib_mad CQ [ 2140.532078][T21007] infiniband syz2: Couldn't open port 1 [ 2140.600173][T21007] RDS/IB: syz2: added [ 2140.605323][T21007] smc: adding ib device syz2 with port count 1 [ 2140.615179][T21007] smc: ib device syz2 port 1 has pnetid [ 2140.753305][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2141.100587][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2141.428121][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2141.439629][T21034] fuse: Bad value for 'fd' [ 2141.754017][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2141.812463][ T5237] Bluetooth: hci2: command tx timeout [ 2142.074933][T21007] ip6gretap0 speed is unknown, defaulting to 1000 [ 2142.315649][ T5205] ip6gretap0 speed is unknown, defaulting to 1000 [ 2142.333059][T15112] ip6gretap0 speed is unknown, defaulting to 1000 [ 2143.543626][T21018] ip6gretap0 speed is unknown, defaulting to 1000 [ 2144.044079][ T5237] Bluetooth: hci2: command tx timeout [ 2146.286987][ T5237] Bluetooth: hci2: command tx timeout [ 2147.234231][T20853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2147.376383][T20853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2147.439609][T20853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2147.599088][T20853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2147.662160][T21078] fuse: Bad value for 'fd' [ 2148.007293][T20759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2148.712239][ T5237] Bluetooth: hci2: command tx timeout [ 2149.747899][T20759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2149.800606][T20759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2149.850693][T21018] chnl_net:caif_netlink_parms(): no params data found [ 2149.937269][T20759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2150.272182][T21018] bridge0: port 1(bridge_slave_0) entered blocking state [ 2150.289900][T21018] bridge0: port 1(bridge_slave_0) entered disabled state [ 2150.302155][T21018] bridge_slave_0: entered allmulticast mode [ 2150.321202][T21018] bridge_slave_0: entered promiscuous mode [ 2150.417699][T21018] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.434637][T21018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.445689][T21018] bridge_slave_1: entered allmulticast mode [ 2150.474468][T21018] bridge_slave_1: entered promiscuous mode [ 2151.705401][T21018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2151.775138][T21018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2152.064901][T21018] team0: Port device team_slave_0 added [ 2152.125142][T21018] team0: Port device team_slave_1 added [ 2152.312799][T21018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2152.321110][T21018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2152.398085][T21018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2152.466136][T21018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2152.488778][T21018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2152.564381][T21018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2153.087018][T21018] hsr_slave_0: entered promiscuous mode [ 2153.114871][T21018] hsr_slave_1: entered promiscuous mode [ 2153.126295][T21018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2153.142886][T21018] Cannot create hsr debugfs directory [ 2153.250610][T20853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2153.392338][T20759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2153.510122][T20853] 8021q: adding VLAN 0 to HW filter on device team0 [ 2153.633369][ T8016] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2153.648720][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2153.656180][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2153.924918][T20759] 8021q: adding VLAN 0 to HW filter on device team0 [ 2153.938287][ T8016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2153.951257][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 2153.958620][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2153.976058][ T8016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2154.053331][ T8016] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2154.086728][ T8016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.127515][ T8016] usb 2-1: Product: syz [ 2154.142854][ T8016] usb 2-1: Manufacturer: syz [ 2154.161627][ T8016] usb 2-1: SerialNumber: syz [ 2154.169211][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 2154.176470][ T5205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2154.194716][ T8016] usb 2-1: config 0 descriptor?? [ 2154.216240][T21117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2154.285654][T21117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2154.298816][T18359] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.299025][T18359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2154.524807][T21117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2154.558158][T21117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2154.748980][T21018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2154.767780][T21018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.039586][ T8016] Error reading MAC address [ 2155.186099][T21018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2155.217003][T21018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.730202][T21018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2155.871535][T21018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.454011][T20759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2156.680885][T21018] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2156.691562][T21018] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.740592][T21154] fuse: Bad value for 'fd' [ 2158.254716][T14567] usb 2-1: USB disconnect, device number 51 [ 2158.416150][T20853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2158.658474][T21018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2158.758722][T21018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2158.817037][T21018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2158.881633][T21018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2158.907214][ T29] audit: type=1400 audit(1722190802.214:1621): avc: denied { getopt } for pid=21169 comm="syz.4.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2159.218335][T20759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2159.320507][ T8016] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2159.352315][T20853] veth0_vlan: entered promiscuous mode [ 2159.547000][T20853] veth1_vlan: entered promiscuous mode [ 2159.559470][ T8016] usb 2-1: Using ep0 maxpacket: 16 [ 2159.592535][ T8016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2159.664357][ T8016] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2159.694007][ T8016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.729770][ T8016] usb 2-1: Product: syz [ 2159.773027][ T8016] usb 2-1: Manufacturer: syz [ 2159.787727][ T8016] usb 2-1: SerialNumber: syz [ 2159.844760][ T8016] usb 2-1: config 0 descriptor?? [ 2159.901924][ T8016] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2159.943857][ T8016] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2160.075715][T20759] veth0_vlan: entered promiscuous mode [ 2160.153335][T20759] veth1_vlan: entered promiscuous mode [ 2160.237948][T21018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2160.386941][T20853] veth0_macvtap: entered promiscuous mode [ 2160.440724][T20853] veth1_macvtap: entered promiscuous mode [ 2160.602606][T21018] 8021q: adding VLAN 0 to HW filter on device team0 [ 2160.621536][ T8016] em28xx 2-1:0.0: chip ID is em2884 [ 2160.705046][T18359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2160.712493][T18359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2160.775700][T20853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2160.822490][T20853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2160.861250][T20853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2160.892623][T20853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2160.904010][T20853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2160.928739][T20853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2160.948393][T20853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2160.964481][ T8016] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2160.967953][T20759] veth0_macvtap: entered promiscuous mode [ 2160.988806][ T8016] em28xx 2-1:0.0: board has no eeprom [ 2161.068679][T20853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2161.091229][T20853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.109193][ T8016] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2161.117655][T20853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2161.128741][ T8016] em28xx 2-1:0.0: dvb set to bulk mode. [ 2161.131355][ T5275] em28xx 2-1:0.0: Binding DVB extension [ 2161.149186][T20853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.160392][ T8016] usb 2-1: USB disconnect, device number 52 [ 2161.181313][T20853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2161.214261][T20853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.217705][ T8016] em28xx 2-1:0.0: Disconnecting em28xx [ 2161.246214][T20853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2161.296956][T20759] veth1_macvtap: entered promiscuous mode [ 2161.323247][T18359] bridge0: port 2(bridge_slave_1) entered blocking state [ 2161.330594][T18359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2161.330708][ T5275] em28xx 2-1:0.0: Registering input extension [ 2161.452603][T20853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.508984][T20853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.530643][T20853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.577913][T20853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.726375][ T5275] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 2161.763289][ T5275] Registered IR keymap rc-empty [ 2161.789542][ T5275] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2161.820884][ T5275] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input56 [ 2161.858749][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2161.895237][ T5275] em28xx 2-1:0.0: Input extension successfully initialized [ 2161.912942][ T8016] em28xx 2-1:0.0: Closing input extension [ 2161.925536][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.963759][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2161.974277][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.019835][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.039577][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.092706][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.136878][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.195117][T20759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2162.279156][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2162.313358][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.340543][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2162.365784][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.383988][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2162.406072][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.462027][ T8016] em28xx 2-1:0.0: Freeing device [ 2162.478119][T20759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2162.554620][T20759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.597674][T20759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2162.834796][T20759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.889913][T20759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.920305][T20759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.939131][T20759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.206387][T18822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.240051][T18822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2163.673749][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.782171][T21226] netlink: 'syz.4.3168': attribute type 25 has an invalid length. [ 2164.149712][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2164.772694][T21230] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 2164.801891][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2164.849849][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2165.040909][T18817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2165.068194][T18817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2165.214184][T16748] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2165.263817][T21018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2165.376656][ T5237] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 2165.501432][T16748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.530943][T16748] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2165.543534][T16748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.555723][T16748] usb 2-1: config 0 descriptor?? [ 2165.826429][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 2165.999957][T16748] rndis_host 2-1:0.0: skipping garbage [ 2166.021480][T16748] usb 2-1: bad CDC descriptors [ 2166.091879][ T29] audit: type=1400 audit(1722190808.851:1622): avc: denied { mount } for pid=21236 comm="syz.2.3099" name="/" dev="rpc_pipefs" ino=102134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2166.260388][ T29] audit: type=1400 audit(1722190809.008:1623): avc: denied { unmount } for pid=21236 comm="syz.2.3099" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2166.508792][ T29] audit: type=1400 audit(1722190809.238:1624): avc: denied { write } for pid=21228 comm="syz.1.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2166.683085][T18807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.965400][T18807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.995581][T21018] veth0_vlan: entered promiscuous mode [ 2167.026238][ T8016] usb 2-1: USB disconnect, device number 53 [ 2167.042834][T21018] veth1_vlan: entered promiscuous mode [ 2167.127458][T18807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.169918][T21018] veth0_macvtap: entered promiscuous mode [ 2167.185446][T21018] veth1_macvtap: entered promiscuous mode [ 2167.268573][T18807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.314296][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.326223][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.339374][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.351839][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.370173][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.380725][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.391459][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.402423][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.413751][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.424324][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.439120][T21018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2167.465070][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.476001][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.486823][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.503050][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.513627][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.524515][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.534656][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.545749][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.558066][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.568677][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.581047][T21018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2167.595988][T21018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.605164][T21018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.614778][T21018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.630337][T21018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.953726][T18807] bridge_slave_1: left allmulticast mode [ 2167.962524][T18807] bridge_slave_1: left promiscuous mode [ 2167.971105][T18807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2167.982785][T18807] bridge_slave_0: left allmulticast mode [ 2167.989112][T18807] bridge_slave_0: left promiscuous mode [ 2167.995051][T18807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.997049][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2171.199167][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2171.213541][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2171.232668][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2171.241274][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2171.262719][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2171.626603][T18807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2171.658485][T18807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2171.705573][ T29] audit: type=1400 audit(1722190814.019:1625): avc: denied { audit_write } for pid=21287 comm="syz.2.3180" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2171.738164][T18807] bond0 (unregistering): Released all slaves [ 2172.101654][T18822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.419166][T18822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.603325][ T5237] Bluetooth: hci1: command tx timeout [ 2173.961876][T21284] ip6gretap0 speed is unknown, defaulting to 1000 [ 2173.986399][T18817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2174.055360][T18817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2174.185525][ T5276] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2174.417310][ T5237] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 2174.468360][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.478948][ T5276] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2174.489049][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.535510][ T5276] usb 2-1: config 0 descriptor?? [ 2174.572913][ T5276] rndis_host 2-1:0.0: skipping garbage [ 2174.625360][ T5276] usb 2-1: bad CDC descriptors [ 2174.743289][ T29] audit: type=1400 audit(1722190816.825:1626): avc: denied { watch } for pid=21301 comm="syz.4.3184" path="/59/file0" dev="rpc_pipefs" ino=103402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 2174.767044][ C1] vkms_vblank_simulate: vblank timer overrun [ 2175.842752][ T5237] Bluetooth: hci1: command tx timeout [ 2176.066224][ T5276] usb 2-1: USB disconnect, device number 54 [ 2178.082478][T18807] hsr_slave_0: left promiscuous mode [ 2178.109204][ T5237] Bluetooth: hci1: command tx timeout [ 2178.120402][T18807] hsr_slave_1: left promiscuous mode [ 2178.130977][T18359] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2178.162170][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2178.169697][T18807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2178.201502][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2178.215830][T18807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2178.357254][T18807] veth1_macvtap: left promiscuous mode [ 2178.357714][T18359] usb 2-1: Using ep0 maxpacket: 16 [ 2178.364678][T18807] veth0_macvtap: left promiscuous mode [ 2178.378075][T18807] veth1_vlan: left promiscuous mode [ 2178.383574][T18807] veth0_vlan: left promiscuous mode [ 2178.402430][T18359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2178.434588][T18359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2178.722039][T18359] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2178.776195][T18359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.349731][ T5237] Bluetooth: hci1: command tx timeout [ 2181.585708][T18359] usb 2-1: config 0 descriptor?? [ 2181.811907][T18359] usb 2-1: can't set config #0, error -71 [ 2181.833893][T18359] usb 2-1: USB disconnect, device number 55 [ 2183.438184][T21362] SET target dimension over the limit! [ 2183.563323][ T29] audit: type=1400 audit(1722190824.975:1627): avc: denied { ioctl } for pid=21361 comm="syz.1.3196" path="socket:[104529]" dev="sockfs" ino=104529 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2183.774998][T15112] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2184.025266][T15112] usb 3-1: Using ep0 maxpacket: 8 [ 2184.087014][T15112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2184.099975][T15112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2184.112764][T15112] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2184.130712][T15112] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2184.139823][T15112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.188173][T15112] usb 3-1: config 0 descriptor?? [ 2184.300706][T18807] team0 (unregistering): Port device team_slave_1 removed [ 2184.444545][T18807] team0 (unregistering): Port device team_slave_0 removed [ 2184.673581][T15112] hid-picolcd 0003:04D8:C002.002A: item fetching failed at offset 5/7 [ 2184.693025][T15112] hid-picolcd 0003:04D8:C002.002A: device report parse failed [ 2184.712164][T15112] hid-picolcd 0003:04D8:C002.002A: probe with driver hid-picolcd failed with error -22 [ 2184.994374][T16748] usb 3-1: USB disconnect, device number 87 [ 2185.648173][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2185.655917][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2185.685732][T18817] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 2185.904383][T21284] chnl_net:caif_netlink_parms(): no params data found [ 2187.229237][ T5274] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2187.657062][T21389] syz.2.3199: attempt to access beyond end of device [ 2187.657062][T21389] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2187.695771][ T5274] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2188.781939][ T5274] usb 5-1: config 0 has no interface number 0 [ 2188.788179][ T5274] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2188.916554][ T5274] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2188.985174][ T5274] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2189.006148][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.019579][ T5274] usb 5-1: config 0 descriptor?? [ 2189.353894][ T5274] usbhid 5-1:0.1: can't add hid device: -71 [ 2189.361290][ T5274] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 2189.469819][ T5274] usb 5-1: USB disconnect, device number 50 [ 2189.563242][T21284] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.616228][T21284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.648646][T21284] bridge_slave_0: entered allmulticast mode [ 2189.699120][T21284] bridge_slave_0: entered promiscuous mode [ 2189.746536][T21284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2189.819136][T21284] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.826561][T21284] bridge_slave_1: entered allmulticast mode [ 2189.875318][T21284] bridge_slave_1: entered promiscuous mode [ 2189.882648][T21386] overlayfs: missing 'lowerdir' [ 2190.408778][T21284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2190.575548][T21284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2191.050204][T21284] team0: Port device team_slave_0 added [ 2191.052361][T21408] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2191.120251][T21284] team0: Port device team_slave_1 added [ 2191.395486][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3209'. [ 2191.466116][T21284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2191.473314][T21284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2191.569199][T21284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2191.629027][T21284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2191.951115][T21284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.716116][T21284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2192.745136][ T5274] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2193.132294][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 2193.166112][T21284] hsr_slave_0: entered promiscuous mode [ 2193.232213][T21284] hsr_slave_1: entered promiscuous mode [ 2193.282267][T21284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2193.329712][T21284] Cannot create hsr debugfs directory [ 2193.345063][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2193.363342][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2193.373265][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2193.386398][ T5274] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2193.404802][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.452280][ T5274] usb 3-1: config 0 descriptor?? [ 2194.009308][ T5274] hid-picolcd 0003:04D8:C002.002B: item fetching failed at offset 5/7 [ 2194.056713][ T5274] hid-picolcd 0003:04D8:C002.002B: device report parse failed [ 2194.120317][ T5274] hid-picolcd 0003:04D8:C002.002B: probe with driver hid-picolcd failed with error -22 [ 2194.900427][ T29] audit: type=1400 audit(1722190835.304:1628): avc: denied { execute } for pid=21467 comm="syz.4.3218" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2195.052831][ T5274] usb 3-1: USB disconnect, device number 88 [ 2197.147126][T21284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2197.209132][T21504] kvm: kvm [21502]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4 [ 2197.217640][T21504] kvm: kvm [21502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x5 [ 2197.241225][T21284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2197.304726][T21284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2197.316026][T21504] kvm: kvm [21502]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 2197.324622][T21504] kvm: kvm [21502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x100 [ 2197.365408][T21284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2197.865667][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2197.921510][T21284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2198.089079][T21284] 8021q: adding VLAN 0 to HW filter on device team0 [ 2198.147525][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.154945][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2198.239302][T21542] netlink: 'syz.0.3235': attribute type 2 has an invalid length. [ 2198.247236][T21542] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3235'. [ 2198.279164][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 2198.976104][ T5237] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2199.097849][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.112793][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2199.158408][T15329] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2199.743409][T15329] usb 2-1: Using ep0 maxpacket: 8 [ 2200.372105][T15329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2200.445711][T15329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2200.456708][T15329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2200.470983][T15329] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2200.615834][T15329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.675542][T15329] usb 2-1: config 0 descriptor?? [ 2201.261084][T15329] hid-picolcd 0003:04D8:C002.002C: item fetching failed at offset 5/7 [ 2201.312763][T15329] hid-picolcd 0003:04D8:C002.002C: device report parse failed [ 2201.343682][T15329] hid-picolcd 0003:04D8:C002.002C: probe with driver hid-picolcd failed with error -22 [ 2205.382729][T21284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2205.569420][ T8016] usb 2-1: USB disconnect, device number 56 [ 2205.810986][T21284] veth0_vlan: entered promiscuous mode [ 2206.331481][T21284] veth1_vlan: entered promiscuous mode [ 2206.937876][T21284] veth0_macvtap: entered promiscuous mode [ 2207.006500][T21284] veth1_macvtap: entered promiscuous mode [ 2207.097086][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2207.134357][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.175164][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2207.206409][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.234186][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2207.263482][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.285507][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2207.304295][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.314793][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2207.325842][T16073] Bluetooth: hci4: ACL packet for unknown connection handle 3101 [ 2207.333826][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.351390][T21284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2207.374292][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.388949][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.400711][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.413533][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.435183][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.445718][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.483397][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.509059][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.519514][T21284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.556380][T21284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.579404][T21284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2207.643656][T21284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.684299][T21284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.693277][T21284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.737857][T21592] kvm: kvm [21591]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4 [ 2207.749293][T21284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.771900][T21592] kvm: kvm [21591]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x5 [ 2207.795087][T21608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3250'. [ 2207.856981][T21608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3250'. [ 2207.879795][T21592] kvm: kvm [21591]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 2207.888357][T21592] kvm: kvm [21591]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x100 [ 2208.144215][T21592] kvm: kvm [21591]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100 [ 2208.164339][T21592] kvm: kvm [21591]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x101 [ 2208.205054][T21617] syz.1.3252[21617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2208.205312][T21617] syz.1.3252[21617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2322.050307][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2322.068832][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18811/1:b..l P21018/1:b..l [ 2322.079101][ C1] rcu: (detected by 1, t=10503 jiffies, g=238417, q=193 ncpus=2) [ 2322.086956][ C1] task:syz-executor state:R running task stack:23824 pid:21018 tgid:21018 ppid:21017 flags:0x00004000 [ 2322.100845][ C1] Call Trace: [ 2322.104166][ C1] [ 2322.107134][ C1] __schedule+0xe37/0x5490 [ 2322.111624][ C1] ? find_held_lock+0x2d/0x110 [ 2322.116486][ C1] ? __pfx_lock_release+0x10/0x10 [ 2322.121576][ C1] ? __pfx___schedule+0x10/0x10 [ 2322.127024][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2322.132471][ C1] preempt_schedule_common+0x44/0xc0 [ 2322.138522][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2322.143774][ C1] _raw_spin_unlock+0x3e/0x50 [ 2322.148524][ C1] copy_page_range+0x1c95/0x57d0 [ 2322.153540][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 2322.158978][ C1] ? __pfx_lock_release+0x10/0x10 [ 2322.164164][ C1] ? __pfx_mas_store+0x10/0x10 [ 2322.168994][ C1] ? down_write+0x14e/0x200 [ 2322.173552][ C1] ? up_write+0x1b2/0x520 [ 2322.177940][ C1] copy_process+0x8117/0x8de0 [ 2322.182751][ C1] ? hlock_class+0x4e/0x130 [ 2322.187308][ C1] ? __pfx_copy_process+0x10/0x10 [ 2322.192398][ C1] kernel_clone+0xfd/0x980 [ 2322.196874][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 2322.201947][ C1] ? find_held_lock+0x59/0x110 [ 2322.206772][ C1] ? find_held_lock+0x2d/0x110 [ 2322.211600][ C1] __do_sys_clone+0xba/0x100 [ 2322.216236][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 2322.221489][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 2322.226838][ C1] do_syscall_64+0xcd/0x250 [ 2322.231393][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2322.237363][ C1] RIP: 0033:0x7f68e5d6db93 [ 2322.241826][ C1] RSP: 002b:00007fff9eb83558 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2322.250329][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f68e5d6db93 [ 2322.258340][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2322.266349][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2322.274361][ C1] R10: 000055558bfc37d0 R11: 0000000000000246 R12: 0000000000000000 [ 2322.282373][ C1] R13: 0000000000215dd7 R14: 0000000000215ce7 R15: 00007fff9eb836e0 [ 2322.290397][ C1] [ 2322.293467][ C1] task:kworker/u8:14 state:R running task stack:24008 pid:18811 tgid:18811 ppid:2 flags:0x00004000 [ 2322.305298][ C1] Workqueue: events_unbound toggle_allocation_gate [ 2322.311858][ C1] Call Trace: [ 2322.315169][ C1] [ 2322.318131][ C1] __schedule+0xe37/0x5490 [ 2322.322611][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2322.327518][ C1] ? __pfx___schedule+0x10/0x10 [ 2322.332520][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2322.337513][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2322.342935][ C1] preempt_schedule_common+0x44/0xc0 [ 2322.348294][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2322.353556][ C1] ? __kmalloc_noprof+0xe1/0x400 [ 2322.358550][ C1] _raw_spin_unlock+0x3e/0x50 [ 2322.363301][ C1] __text_poke+0x618/0xca0 [ 2322.367765][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 2322.373297][ C1] ? __pfx___text_poke+0x10/0x10 [ 2322.378293][ C1] ? __kmalloc_noprof+0xe1/0x400 [ 2322.383283][ C1] text_poke_bp_batch+0x3e0/0x760 [ 2322.388381][ C1] ? __kmalloc_noprof+0xe1/0x400 [ 2322.393412][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 2322.399015][ C1] ? __jump_label_patch+0x1db/0x400 [ 2322.404289][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2322.410588][ C1] text_poke_finish+0x30/0x40 [ 2322.415326][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 2322.421365][ C1] jump_label_update+0x1d7/0x400 [ 2322.426362][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 2322.432313][ C1] static_key_enable+0x1a/0x20 [ 2322.437216][ C1] toggle_allocation_gate+0xf8/0x250 [ 2322.442555][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2322.447983][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2322.453927][ C1] ? preempt_schedule_common+0x44/0xc0 [ 2322.459448][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2322.464865][ C1] process_one_work+0x9c5/0x1b40 [ 2322.469862][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2322.475290][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2322.480722][ C1] ? assign_work+0x1a0/0x250 [ 2322.485366][ C1] worker_thread+0x6c8/0xf20 [ 2322.490023][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2322.495201][ C1] kthread+0x2c1/0x3a0 [ 2322.499314][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2322.504574][ C1] ? __pfx_kthread+0x10/0x10 [ 2322.509209][ C1] ret_from_fork+0x45/0x80 [ 2322.513688][ C1] ? __pfx_kthread+0x10/0x10 [ 2322.518319][ C1] ret_from_fork_asm+0x1a/0x30 [ 2322.523152][ C1] [ 2322.526204][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g238417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2322.537530][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2322.547528][ C1] rcu: RCU grace-period kthread stack dump: [ 2322.553441][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2322.565247][ C1] Call Trace: [ 2322.568570][ C1] [ 2322.571541][ C1] __schedule+0xe37/0x5490 [ 2322.576032][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2322.581389][ C1] ? __pfx___schedule+0x10/0x10 [ 2322.586315][ C1] ? schedule+0x298/0x350 [ 2322.590712][ C1] ? __pfx_lock_release+0x10/0x10 [ 2322.595787][ C1] ? __pfx___mod_timer+0x10/0x10 [ 2322.600778][ C1] ? lock_acquire+0x1b1/0x560 [ 2322.605504][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 2322.611020][ C1] schedule+0xe7/0x350 [ 2322.615151][ C1] schedule_timeout+0x136/0x2a0 [ 2322.620060][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2322.625490][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2322.630829][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2322.636708][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 2322.642225][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2322.647038][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2322.652373][ C1] ? rcu_gp_init+0xc82/0x1630 [ 2322.657094][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2322.662356][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2322.668224][ C1] rcu_gp_kthread+0x271/0x380 [ 2322.672946][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2322.678191][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2322.683451][ C1] ? __kthread_parkme+0x148/0x220 [ 2322.688543][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2322.693790][ C1] kthread+0x2c1/0x3a0 [ 2322.697906][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2322.703163][ C1] ? __pfx_kthread+0x10/0x10 [ 2322.707794][ C1] ret_from_fork+0x45/0x80 [ 2322.712271][ C1] ? __pfx_kthread+0x10/0x10 [ 2322.716901][ C1] ret_from_fork_asm+0x1a/0x30 [ 2322.721734][ C1] [ 2322.724783][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2322.731144][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2322.736407][ C0] NMI backtrace for cpu 0 [ 2322.736435][ C0] CPU: 0 UID: 0 PID: 21611 Comm: syz.4.3251 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 2322.736467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2322.736484][ C0] RIP: 0010:match_held_lock+0x5f/0xc0 [ 2322.736513][ C0] Code: 28 5c 8f 48 2d e0 8a 62 94 48 c1 f8 03 48 0f af c2 0f b7 53 20 5b 81 e2 ff 1f 00 00 48 39 d0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 01 00 00 00 5b c3 cc cc cc cc 31 f6 e8 3f fe ff ff 48 85 c0 75 [ 2322.736539][ C0] RSP: 0018:ffffc90000007d30 EFLAGS: 00000046 [ 2322.736560][ C0] RAX: 0000000000000000 RBX: ffff88802a3c46e0 RCX: 0000000000000001 [ 2322.736578][ C0] RDX: 0000000000000000 RSI: ffff88802f02a300 RDI: ffff88802a3c46e0 [ 2322.736596][ C0] RBP: ffff88802f02a300 R08: 0000000000000005 R09: 0000000000000000 [ 2322.736613][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a3c3c00 [ 2322.736630][ C0] R13: ffff88802a3c46e0 R14: 00000000ffffffff R15: 0000000000000000 [ 2322.736648][ C0] FS: 00007f7fafe016c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2322.736676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2322.736695][ C0] CR2: 0000001b2e1f3ff8 CR3: 000000005be24000 CR4: 00000000003526f0 [ 2322.736713][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2322.736729][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2322.736746][ C0] Call Trace: [ 2322.736757][ C0] [ 2322.736767][ C0] ? show_regs+0x8c/0xa0 [ 2322.736819][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2322.736855][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2322.736904][ C0] ? nmi_handle+0x1a9/0x5c0 [ 2322.736937][ C0] ? match_held_lock+0x5f/0xc0 [ 2322.736969][ C0] ? default_do_nmi+0x6a/0x160 [ 2322.737014][ C0] ? exc_nmi+0x170/0x1e0 [ 2322.737056][ C0] ? end_repeat_nmi+0xf/0x53 [ 2322.737105][ C0] ? match_held_lock+0x5f/0xc0 [ 2322.737137][ C0] ? match_held_lock+0x5f/0xc0 [ 2322.737168][ C0] ? match_held_lock+0x5f/0xc0 [ 2322.737200][ C0] [ 2322.737211][ C0] [ 2322.737223][ C0] lock_is_held_type+0xb0/0x150 [ 2322.737257][ C0] ? __pfx_advance_sched+0x10/0x10 [ 2322.737302][ C0] advance_sched+0x790/0xc60 [ 2322.737344][ C0] ? timerqueue_del+0x83/0x150 [ 2322.737386][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2322.737432][ C0] ? __pfx_advance_sched+0x10/0x10 [ 2322.737466][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 2322.737510][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2322.737551][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 2322.737587][ C0] hrtimer_interrupt+0x31b/0x800 [ 2322.737632][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 2322.737662][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 2322.737705][ C0] [ 2322.737713][ C0] [ 2322.737722][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2322.737759][ C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 2322.737798][ C0] Code: a9 0a 00 00 44 8b 0d 57 d8 b7 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 a9 ce 36 00 fb 65 48 8b 1d 80 cf a8 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 2322.737824][ C0] RSP: 0018:ffffc9000366f4c8 EFLAGS: 00000206 [ 2322.737844][ C0] RAX: 0000000000009e6f RBX: ffff88802a3c3c00 RCX: 1ffffffff2024dd9 [ 2322.737862][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc500 RDI: ffffffff8bb08f40 [ 2322.737881][ C0] RBP: ffffc9000366f510 R08: 0000000000000001 R09: 0000000000000001 [ 2322.737898][ C0] R10: ffffffff9012b31f R11: 0000000000000000 R12: dffffc0000000000 [ 2322.737916][ C0] R13: ffff88801d319e00 R14: 0000000000000000 R15: 0000000000000000 [ 2322.737940][ C0] ? finish_task_switch.isra.0+0x217/0xcc0 [ 2322.737977][ C0] __schedule+0xe3f/0x5490 [ 2322.738017][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2322.738048][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 2322.738083][ C0] ? __pfx___schedule+0x10/0x10 [ 2322.738123][ C0] ? schedule+0x298/0x350 [ 2322.738162][ C0] ? __pfx_lock_release+0x10/0x10 [ 2322.738194][ C0] ? lock_acquire+0x1b1/0x560 [ 2322.738225][ C0] ? find_held_lock+0x2d/0x110 [ 2322.738267][ C0] schedule+0xe7/0x350 [ 2322.738306][ C0] schedule_timeout+0x258/0x2a0 [ 2322.738343][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2322.738382][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2322.738428][ C0] ? prepare_to_wait_exclusive+0xdc/0x2a0 [ 2322.738462][ C0] unix_wait_for_peer+0x247/0x280 [ 2322.738492][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 2322.738523][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2322.738555][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2322.738595][ C0] unix_dgram_sendmsg+0x182f/0x1a60 [ 2322.738633][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2322.738669][ C0] ? __import_iovec+0x1fd/0x6e0 [ 2322.738712][ C0] ____sys_sendmsg+0xab5/0xc90 [ 2322.738741][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 2322.738780][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2322.738809][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 2322.738843][ C0] ___sys_sendmsg+0x135/0x1e0 [ 2322.738882][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 2322.738928][ C0] ? __pfx___might_resched+0x10/0x10 [ 2322.738966][ C0] ? __might_fault+0xe3/0x190 [ 2322.738993][ C0] __sys_sendmmsg+0x1a1/0x450 [ 2322.739032][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2322.739070][ C0] ? __pfx_unix_dgram_connect+0x10/0x10 [ 2322.739107][ C0] ? __pfx_do_futex+0x10/0x10 [ 2322.739134][ C0] ? fput+0x32/0x390 [ 2322.739170][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 2322.739201][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 2322.739240][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2322.739282][ C0] do_syscall_64+0xcd/0x250 [ 2322.739310][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2322.739344][ C0] RIP: 0033:0x7f7faef77299 [ 2322.739364][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2322.739390][ C0] RSP: 002b:00007f7fafe01048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2322.739419][ C0] RAX: ffffffffffffffda RBX: 00007f7faf105f80 RCX: 00007f7faef77299 [ 2322.739437][ C0] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000004 [ 2322.739455][ C0] RBP: 00007f7faefe48e6 R08: 0000000000000000 R09: 0000000000000000 [ 2322.739471][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2322.739488][ C0] R13: 000000000000000b R14: 00007f7faf105f80 R15: 00007ffeffad30f8 [ 2322.739510][ C0]