last executing test programs: 3m15.76576414s ago: executing program 0 (id=1308): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@empty}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@local}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3ed9, &(0x7f0000000080)={0x0, 0x5708, 0x200, 0x2, 0x1, 0x0, r0}, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) unshare(0x2a020400) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) unshare(0x44020400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) 3m6.443118634s ago: executing program 0 (id=1320): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000140)="5832b113e20ef2a80611015dcbbee21557854650d326be5e8c0d83738ce384b49d9991faffff8e53f45df0cec25e27881102cf5c68593321686ac36cc5fcb40e1125043c5431b3a0238681ad4a26ca97480df472394905de8138b03661c3fc1d30261919fb44cc1b36cd9eacefdc0ded22040405444f6954425df6c27e0dc9b64de842204b8e9320b8a37e1a860b6edad92345a123148643a89a87c23693dedbfa0a8a7d629f621c78482700ae60c5b2508e5f", 0xb3}], 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3m4.45594875s ago: executing program 0 (id=1325): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x6a) r6 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 3m0.853403683s ago: executing program 0 (id=1330): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f00000001c0)=""/59, 0x9c) 2m59.631047643s ago: executing program 0 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200408d5}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m55.295325296s ago: executing program 0 (id=1333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 40.161324403s ago: executing program 4 (id=1492): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x36}, "7058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f23cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a6"}, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e0000000700ffff67640700b90f56a9d333b60c487bcdde0cf8d0735995315fe01c0f2327c74535e3886c660212078f4a7b00c1c3d055b845ac5cef765bff1e1f9674d2b7b08cd0f8ac082a8dc156bc573c09007e4cc96e88345b44913400b840fda4f5c54558944f47afb58c5cd9ac5dbe43bc80b0fab30f7e740085c941eed673a98556f1ac2c4b572aa89bdfcf78f97f8b8286508ad75a3651cf7c47845c82b4e870b2d660fe00000000000000"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 20.063493523s ago: executing program 3 (id=1522): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x0) 10.515657566s ago: executing program 3 (id=1529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000f5000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.901893179s ago: executing program 4 (id=1493): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4, @empty}, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffbffffffffd, 0x0, 0x4000}) 8.897602343s ago: executing program 3 (id=1532): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/if_inet6\x00') pread64(r0, &(0x7f000000bf00)=""/186, 0xba, 0x3) preadv(r0, 0x0, 0x0, 0x9, 0x0) 8.49463576s ago: executing program 4 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) 8.493274379s ago: executing program 3 (id=1535): socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = io_uring_setup(0x4d63, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='kcpu '], 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) getpid() openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0xc}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r6 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5.169581893s ago: executing program 1 (id=1525): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 4.731985353s ago: executing program 1 (id=1527): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x4}]}}}], 0x38}, 0x0) 3.382683322s ago: executing program 1 (id=1530): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x11}, {0x7}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.101065366s ago: executing program 2 (id=1533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x40}}, 0x0) 3.03626253s ago: executing program 1 (id=1534): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0, 0x4}, 0x20) 2.805788927s ago: executing program 2 (id=1536): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x8c}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) 2.779604474s ago: executing program 1 (id=1537): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) 2.471897722s ago: executing program 1 (id=1538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = io_uring_setup(0x4fe1, &(0x7f0000000000)={0x0, 0x3, 0x4, 0x1}) r2 = dup2(r1, r1) r3 = eventfd(0x0) socket$inet6(0xa, 0x6, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r9 = socket(0x22, 0x2, 0x2) ioctl$IMGETCOUNT(r9, 0x80044944, &(0x7f0000000000)) io_submit(r8, 0x1, &(0x7f0000000800)=[0x0]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020660145b01036c0000000000040000000000050001000600000005000400000000000900020073797a3000000000100003683a69702c6d6163020c000780080008400000000000"], 0x54}}, 0x0) recvfrom$unix(r7, &(0x7f0000000340)=""/69, 0x45, 0x40010020, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r3, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r11}, &(0x7f0000000300)=0x14) syz_usb_connect(0x6, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r8], 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r12, 0x80045002, 0x0) 2.349376549s ago: executing program 2 (id=1539): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$isdn(0x22, 0x2, 0x25) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') prlimit64(0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000000000000a00"/40], 0x28}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) r8 = socket$isdn(0x22, 0x2, 0x4) dup3(r8, r1, 0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x82) write$midi(r9, &(0x7f0000000540)="03", 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 1.390251573s ago: executing program 3 (id=1540): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000002, 0x0) 1.154651505s ago: executing program 4 (id=1541): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.052070994s ago: executing program 3 (id=1542): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00C'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r6, 0x8905, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r4) 743.236924ms ago: executing program 2 (id=1543): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}]}, 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000001"], 0x24d8}], 0x1}, 0x0) 544.973367ms ago: executing program 4 (id=1544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x804) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001400674c0065000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x17}, 0x42800) 372.713172ms ago: executing program 2 (id=1545): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 146.251534ms ago: executing program 4 (id=1546): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f0000000000)) 0s ago: executing program 2 (id=1547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x3, 0x200, 0x26}) kernel console output (not intermixed with test programs): us Busy Wait 00 [ 768.590245][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 768.595558][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 768.600901][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 768.606472][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 768.611796][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 768.633998][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 768.639437][ T9] gspca_vc032x: Unknown sensor... [ 768.710146][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 768.738514][ T5279] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 769.308750][T11481] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1274'. [ 769.318123][T11481] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 769.367014][ T9] usb 4-1: USB disconnect, device number 23 [ 769.645576][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 769.646076][ T29] audit: type=1400 audit(795.750:802): avc: denied { setattr } for pid=11484 comm="syz.3.1275" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 769.719765][ T5279] usb 2-1: device not accepting address 17, error -71 [ 769.735499][ T29] audit: type=1400 audit(795.803:803): avc: denied { write } for pid=11484 comm="syz.3.1275" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 770.544228][ T29] audit: type=1400 audit(795.803:804): avc: denied { open } for pid=11484 comm="syz.3.1275" path="/148/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 775.864201][T11388] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 776.064004][T11388] usb 4-1: Using ep0 maxpacket: 32 [ 776.093093][T11388] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 776.127777][T11388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.185047][T11388] usb 4-1: config 0 descriptor?? [ 776.232247][T11388] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 777.185655][T11388] gspca_nw80x: reg_w err -71 [ 777.892654][T11388] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 777.964589][T11388] usb 4-1: USB disconnect, device number 24 [ 780.416944][ T8714] Bluetooth: hci5: command 0x0406 tx timeout [ 781.363425][T11582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.376040][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.382874][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.141647][ T943] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 783.360590][ T943] usb 1-1: Using ep0 maxpacket: 8 [ 783.373294][ T943] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 783.417483][ T943] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.471696][ T943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.484933][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.509157][ T943] usb 1-1: Product: syz [ 783.532418][ T943] usb 1-1: Manufacturer: syz [ 783.542619][ T943] usb 1-1: SerialNumber: syz [ 783.570190][T11600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 783.904672][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.935950][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.020457][ T943] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 784.085455][ T943] usb 1-1: USB disconnect, device number 16 [ 785.738438][ T29] audit: type=1326 audit(812.652:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 785.781484][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 785.860826][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 785.888156][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 785.908010][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 785.911560][ T29] audit: type=1326 audit(812.683:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 785.920914][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 785.951783][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 785.975022][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.007543][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.041094][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.063946][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.072570][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.082954][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.122785][ T29] audit: type=1326 audit(812.683:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 786.123076][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.186770][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 786.202596][ T29] audit: type=1326 audit(812.694:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 786.229611][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.243165][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.252115][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.265169][ T29] audit: type=1326 audit(812.694:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 786.298873][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.317929][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.327247][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.348019][ T29] audit: type=1326 audit(812.694:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 786.409130][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.432298][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.445399][ T25] usb 5-1: config 0 has no interfaces? [ 786.466528][ T25] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 786.485666][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.488074][ T29] audit: type=1326 audit(812.694:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 786.493210][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.527787][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.547321][ T25] usb 5-1: config 0 descriptor?? [ 786.589817][ T29] audit: type=1326 audit(812.694:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe74757c890 code=0x7ffc0000 [ 786.594064][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.653653][ T29] audit: type=1326 audit(812.694:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 786.659224][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.693450][ T29] audit: type=1326 audit(812.694:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74757def9 code=0x7ffc0000 [ 786.703599][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.725308][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.733537][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.741014][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.748670][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.756312][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.763960][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.771667][ T943] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 786.849303][ T943] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 787.146385][ T943] usb 5-1: USB disconnect, device number 22 [ 791.486219][ T8714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.506146][ T8714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.516377][ T8714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.570541][ T8714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.584778][ T8714] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 791.594004][ T8714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 791.954029][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 791.983077][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 791.998352][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 792.034649][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 792.058648][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 792.073267][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 792.602517][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 792.678368][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 793.707534][ T5237] Bluetooth: hci1: command tx timeout [ 794.096367][ T5237] Bluetooth: hci6: command tx timeout [ 795.034716][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.076674][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.342487][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.370230][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.958522][ T5237] Bluetooth: hci1: command tx timeout [ 796.077116][ T5237] Bluetooth: hci6: command tx timeout [ 796.705407][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.723309][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.856867][T11694] netlink: 'syz.0.1325': attribute type 12 has an invalid length. [ 796.973148][T11694] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1325'. [ 797.066820][T11646] chnl_net:caif_netlink_parms(): no params data found [ 797.287567][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.317666][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.916139][ T5237] Bluetooth: hci1: command tx timeout [ 798.022549][T11650] chnl_net:caif_netlink_parms(): no params data found [ 798.059135][ T5237] Bluetooth: hci6: command tx timeout [ 798.199668][T11704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.601899][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.623419][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.638848][T11646] bridge_slave_0: entered allmulticast mode [ 798.660622][T11646] bridge_slave_0: entered promiscuous mode [ 798.684236][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.735231][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.751905][T11646] bridge_slave_1: entered allmulticast mode [ 798.762482][T11646] bridge_slave_1: entered promiscuous mode [ 798.970429][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 798.970448][ T29] audit: type=1400 audit(826.541:827): avc: denied { mount } for pid=11709 comm="syz.4.1327" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 799.887805][ T5237] Bluetooth: hci1: command tx timeout [ 799.909481][ T35] bridge_slave_1: left allmulticast mode [ 799.915168][ T35] bridge_slave_1: left promiscuous mode [ 799.931195][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.957760][ T35] bridge_slave_0: left allmulticast mode [ 799.966713][ T35] bridge_slave_0: left promiscuous mode [ 799.972466][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.039817][ T5237] Bluetooth: hci6: command tx timeout [ 806.225008][ T29] audit: type=1400 audit(834.120:828): avc: denied { relabelfrom } for pid=11739 comm="syz.1.1334" name="" dev="pipefs" ino=38226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 807.232581][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.265277][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.297666][ T35] bond0 (unregistering): Released all slaves [ 807.354469][T11744] kvm: emulating exchange as write [ 807.419622][T11646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.532654][T11646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.571880][ T35] tipc: Disabling bearer [ 807.578073][ T35] tipc: Left network mode [ 807.651433][T11650] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.659565][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.672264][T11650] bridge_slave_0: entered allmulticast mode [ 807.692711][T11650] bridge_slave_0: entered promiscuous mode [ 807.786378][T11650] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.793595][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.844631][T11650] bridge_slave_1: entered allmulticast mode [ 807.857032][T11650] bridge_slave_1: entered promiscuous mode [ 807.925551][T11646] team0: Port device team_slave_0 added [ 807.982744][T11646] team0: Port device team_slave_1 added [ 808.002728][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 808.333184][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.380117][T11646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.427357][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.469618][T11646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.522973][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.745140][T11646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.754605][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.823168][T11646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.900564][ T35] hsr_slave_0: left promiscuous mode [ 808.936681][ T35] hsr_slave_1: left promiscuous mode [ 808.944535][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.746923][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.793902][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.811679][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.973828][ T35] veth1_macvtap: left promiscuous mode [ 809.999515][ T35] veth0_macvtap: left promiscuous mode [ 810.034124][ T35] veth1_vlan: left promiscuous mode [ 810.039422][ T35] veth0_vlan: left promiscuous mode [ 812.572822][ T35] team0 (unregistering): Port device team_slave_1 removed [ 812.888676][ T35] team0 (unregistering): Port device team_slave_0 removed [ 814.654382][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1342'. [ 814.768320][T11650] team0: Port device team_slave_0 added [ 814.865120][T11650] team0: Port device team_slave_1 added [ 814.971548][T11646] hsr_slave_0: entered promiscuous mode [ 814.999270][T11646] hsr_slave_1: entered promiscuous mode [ 815.006229][T11646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.018781][T11646] Cannot create hsr debugfs directory [ 815.132664][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.144883][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.173541][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.261594][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.270807][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.305970][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.748795][ T35] IPVS: stop unused estimator thread 0... [ 815.756641][T11650] hsr_slave_0: entered promiscuous mode [ 815.816791][T11650] hsr_slave_1: entered promiscuous mode [ 815.835502][T11650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.861929][T11650] Cannot create hsr debugfs directory [ 816.611566][ T8714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.656971][ T8714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.667673][ T8714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.682570][ T8714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.694268][ T8714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 816.698240][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.713323][ T8714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 816.772379][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 816.938134][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.948688][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 817.158518][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.169065][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 817.322594][T11825] kvm: pic: non byte write [ 817.518449][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.696752][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.900613][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.002505][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.014465][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 818.715908][ T5237] Bluetooth: hci0: command tx timeout [ 819.109430][ T35] bridge_slave_1: left allmulticast mode [ 819.117079][ T35] bridge_slave_1: left promiscuous mode [ 819.127406][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.139289][ T35] bridge_slave_0: left allmulticast mode [ 819.145394][ T35] bridge_slave_0: left promiscuous mode [ 819.162881][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.716691][ T5237] Bluetooth: hci0: command tx timeout [ 821.019501][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.093517][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.139166][ T35] bond0 (unregistering): Released all slaves [ 821.273456][T11819] chnl_net:caif_netlink_parms(): no params data found [ 821.698786][ T29] audit: type=1400 audit(850.392:829): avc: denied { map } for pid=11850 comm="syz.1.1349" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 822.266272][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'. [ 822.673443][ T5237] Bluetooth: hci0: command tx timeout [ 822.722838][T11819] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.758803][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.788094][T11819] bridge_slave_0: entered allmulticast mode [ 822.795950][T11819] bridge_slave_0: entered promiscuous mode [ 822.994807][ T35] hsr_slave_0: left promiscuous mode [ 823.007904][ T35] hsr_slave_1: left promiscuous mode [ 823.017178][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.026625][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.035635][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.043085][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.114366][ T35] veth1_macvtap: left promiscuous mode [ 823.119962][ T35] veth0_macvtap: left promiscuous mode [ 823.139914][ T35] veth1_vlan: left promiscuous mode [ 823.145502][ T35] veth0_vlan: left promiscuous mode [ 823.569017][ T8714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.583705][ T8714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.593291][ T8714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.627536][ T8714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.635898][ T8714] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 823.658318][ T8714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 824.575977][ T35] team0 (unregistering): Port device team_slave_1 removed [ 824.657783][ T8714] Bluetooth: hci0: command tx timeout [ 824.667393][ T35] team0 (unregistering): Port device team_slave_0 removed [ 825.545514][T11819] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.555527][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.565423][T11819] bridge_slave_1: entered allmulticast mode [ 825.573954][T11819] bridge_slave_1: entered promiscuous mode [ 825.654731][ T8714] Bluetooth: hci2: command tx timeout [ 825.833139][T11819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.121034][T11819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.737317][T11819] team0: Port device team_slave_0 added [ 826.824453][T11819] team0: Port device team_slave_1 added [ 827.627258][ T8714] Bluetooth: hci2: command tx timeout [ 827.765647][T11819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.777332][T11819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.811210][T11819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.830767][T11819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.841448][T11819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.871695][T11819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.927590][ T35] IPVS: stop unused estimator thread 0... [ 828.086272][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 828.220901][T11819] hsr_slave_0: entered promiscuous mode [ 828.263574][T11819] hsr_slave_1: entered promiscuous mode [ 828.278817][T11819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.286797][T11819] Cannot create hsr debugfs directory [ 828.397183][T11876] chnl_net:caif_netlink_parms(): no params data found [ 828.583269][T11646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 828.603085][T11646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 828.632674][T11646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 828.716237][T11646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 828.764409][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 828.820919][T11876] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.833739][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.844937][T11876] bridge_slave_0: entered allmulticast mode [ 828.868043][T11876] bridge_slave_0: entered promiscuous mode [ 828.939015][T11876] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.947779][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.955542][T11876] bridge_slave_1: entered allmulticast mode [ 828.962992][T11876] bridge_slave_1: entered promiscuous mode [ 829.105607][T11876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.156432][T11876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.251110][ T29] audit: type=1400 audit(858.339:830): avc: denied { nlmsg_write } for pid=11913 comm="syz.1.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 829.362482][T11876] team0: Port device team_slave_0 added [ 829.377327][T11876] team0: Port device team_slave_1 added [ 829.420032][T11650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 829.507919][T11819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.608890][ T8714] Bluetooth: hci2: command tx timeout [ 829.631096][T11876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.657726][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.692246][T11876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.722196][T11650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 829.742736][T11650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 829.766669][T11650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 829.797650][T11819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.883328][T11876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.892601][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.941585][T11876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.025658][T11819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.158303][T11876] hsr_slave_0: entered promiscuous mode [ 830.167526][T11876] hsr_slave_1: entered promiscuous mode [ 830.181203][T11876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.191279][T11876] Cannot create hsr debugfs directory [ 830.251956][T11819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.692167][T11646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.064361][T11819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 831.083171][T11819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 831.100047][T11819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 831.180782][T11876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.229724][T11646] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.245730][T11819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 831.401684][T11876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.443854][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.451010][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.519060][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.526220][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.554893][T11650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.599289][ T8714] Bluetooth: hci2: command tx timeout [ 831.685987][ T29] audit: type=1400 audit(860.880:831): avc: denied { getopt } for pid=11934 comm="syz.1.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 831.718290][T11876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.803307][T11650] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.844800][T11646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 831.874196][T11646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.990945][T11876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.073841][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.081022][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.174647][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.181893][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.816924][ T5305] kernel write not supported for file /snd/seq (pid: 5305 comm: kworker/0:7) [ 833.019411][T11876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 833.406136][T11876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 833.536117][T11876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 833.656793][T11646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.685717][T11876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 833.835820][T11819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.984972][T11819] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.084254][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.091515][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.137435][T11646] veth0_vlan: entered promiscuous mode [ 834.226085][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.233606][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.370440][T11646] veth1_vlan: entered promiscuous mode [ 834.396184][T11650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.683507][T11646] veth0_macvtap: entered promiscuous mode [ 834.712214][T11876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.776778][T11646] veth1_macvtap: entered promiscuous mode [ 834.859950][T11876] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.879534][T11650] veth0_vlan: entered promiscuous mode [ 834.973541][T11650] veth1_vlan: entered promiscuous mode [ 834.984567][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.997586][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.011322][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.029681][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.040545][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.051538][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.064800][T11646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.080011][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.087291][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.100827][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.108116][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.192332][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.213015][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.235276][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.259028][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.273720][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.285645][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.299495][T11646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.347137][T11646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.358086][T11646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.370310][T11646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.383144][T11646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.423654][T11819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.568301][T11876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 835.581000][T11876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 835.597174][T11650] veth0_macvtap: entered promiscuous mode [ 835.626905][T11650] veth1_macvtap: entered promiscuous mode [ 835.864795][T11819] veth0_vlan: entered promiscuous mode [ 835.891374][T11320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.906039][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.932901][T11320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.940505][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.965453][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.979636][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.993307][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.004324][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.015852][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.026817][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.042216][T11650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.102849][T11819] veth1_vlan: entered promiscuous mode [ 836.125379][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.147538][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.147538][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.147562][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.147574][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.198668][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.215239][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.238559][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.251608][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.263157][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.278768][T11650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.364755][T11650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.383693][T11650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.404041][T11650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.425623][T11650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.529993][T11819] veth0_macvtap: entered promiscuous mode [ 836.573400][T11819] veth1_macvtap: entered promiscuous mode [ 836.719606][T11876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.829670][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.894222][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.911147][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.972926][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.997555][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.020692][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.047606][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.059893][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.071795][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.082792][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.101843][T11819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.136038][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.147402][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.162464][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.176278][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.189603][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.202528][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.219178][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.244164][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.261163][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.273430][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.295121][T11819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.319805][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.350437][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.419565][T11819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.438544][T11819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.448131][T11819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.467002][T11819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.630789][ T5957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.655025][ T5957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.995054][T11876] veth0_vlan: entered promiscuous mode [ 840.290874][T11876] veth1_vlan: entered promiscuous mode [ 840.519761][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.768476][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.915171][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.921549][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.080537][ T29] audit: type=1400 audit(870.758:832): avc: denied { map } for pid=12048 comm="syz.3.1363" path="socket:[41484]" dev="sockfs" ino=41484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 841.134432][ T29] audit: type=1400 audit(870.758:833): avc: denied { read } for pid=12048 comm="syz.3.1363" path="socket:[41484]" dev="sockfs" ino=41484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 841.176653][ T29] audit: type=1400 audit(870.853:834): avc: denied { read } for pid=12048 comm="syz.3.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 841.205023][ T5957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.272198][ T5957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.307051][T11876] veth0_macvtap: entered promiscuous mode [ 841.337651][T11876] veth1_macvtap: entered promiscuous mode [ 841.683517][ T29] audit: type=1400 audit(871.220:835): avc: denied { map } for pid=12052 comm="syz.2.1364" path="socket:[40413]" dev="sockfs" ino=40413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 842.064766][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.090350][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.143432][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.161302][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.171628][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.187907][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.199061][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.209658][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.221418][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.232046][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.242025][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.253331][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.266211][T11876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.352328][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.381460][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.426936][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.454484][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.477811][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.521745][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.532622][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.551639][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.569467][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.585217][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.608481][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.624480][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.663573][T11876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.708269][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 842.748803][T11876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.769858][T11876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.815683][T11876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.847429][T11876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.277475][ T5363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.310515][ T5363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.338902][ T29] audit: type=1400 audit(873.120:836): avc: denied { create } for pid=12067 comm="syz.2.1368" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 843.602930][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.439649][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.061850][ T29] audit: type=1400 audit(875.986:837): avc: denied { unlink } for pid=11646 comm="syz-executor" name="file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 846.251332][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 846.263958][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 846.273684][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 846.284320][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 846.292174][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 846.306077][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 846.356497][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1371'. [ 846.542717][ T29] audit: type=1400 audit(876.469:838): avc: denied { create } for pid=12086 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 847.105257][T12099] macvlan0: entered allmulticast mode [ 847.121237][T12099] veth1_vlan: entered allmulticast mode [ 847.365690][T12085] chnl_net:caif_netlink_parms(): no params data found [ 847.655967][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.668593][T12085] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.676669][T12085] bridge_slave_0: entered allmulticast mode [ 847.685296][T12085] bridge_slave_0: entered promiscuous mode [ 847.841874][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.896659][T12085] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.916011][T12085] bridge_slave_1: entered allmulticast mode [ 847.964357][T12085] bridge_slave_1: entered promiscuous mode [ 848.085555][T12085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.187365][T12085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.388913][ T5237] Bluetooth: hci4: command tx timeout [ 848.599246][T12085] team0: Port device team_slave_0 added [ 848.642853][T12085] team0: Port device team_slave_1 added [ 848.884037][T12085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.913198][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.970559][T12085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.003776][T12085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.011180][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.050909][T12085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.116722][ T29] audit: type=1400 audit(879.136:839): avc: denied { execute } for pid=12115 comm="syz.2.1375" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 849.296580][T12085] hsr_slave_0: entered promiscuous mode [ 849.334482][T12085] hsr_slave_1: entered promiscuous mode [ 849.367452][T12085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.395777][T12085] Cannot create hsr debugfs directory [ 849.597254][T12125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.988871][T12085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.161625][T12085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.338054][ T5237] Bluetooth: hci4: command tx timeout [ 850.605292][T12085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.794496][T12134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12134 comm=syz.2.1379 [ 852.316781][ T5237] Bluetooth: hci4: command tx timeout [ 852.682439][T12085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.079728][T12150] No control pipe specified [ 854.124329][ T29] audit: type=1326 audit(884.437:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.3.1383" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90a9d7def9 code=0x0 [ 854.315305][ T5237] Bluetooth: hci4: command tx timeout [ 854.755974][T12085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 854.797891][T12085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 854.828551][T12085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 854.973409][T12085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 855.555942][T12166] program syz.2.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.924742][ T29] audit: type=1400 audit(885.980:841): avc: denied { map } for pid=12161 comm="syz.2.1386" path="/proc/55/clear_refs" dev="proc" ino=41871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 856.134845][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 856.499599][T12085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.825314][T12085] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.185597][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.192831][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.365843][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.373067][ T8912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.989598][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 858.403412][T12085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.663276][T12085] veth0_vlan: entered promiscuous mode [ 859.600861][T12085] veth1_vlan: entered promiscuous mode [ 859.902820][T12085] veth0_macvtap: entered promiscuous mode [ 859.925890][T12085] veth1_macvtap: entered promiscuous mode [ 860.186628][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.204879][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.785266][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.817042][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.872484][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.925139][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.985138][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.037707][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.051633][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.098794][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.129634][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.160436][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.172821][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.183566][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.251143][T12085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.446987][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.507725][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.526683][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.543009][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.561917][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.603537][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.677285][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.704971][T11388] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 862.929517][ T5235] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 862.966176][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.978662][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.989862][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.000512][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.011697][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.738250][T11388] usb 3-1: device descriptor read/64, error -71 [ 863.747752][ T29] audit: type=1400 audit(893.927:842): avc: denied { connect } for pid=12208 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 863.777376][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.795260][ T29] audit: type=1400 audit(893.948:843): avc: denied { write } for pid=12208 comm="syz.3.1395" laddr=fe80::9c90:30ff:feb2:5a lport=12 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 863.813935][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.864109][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 863.882589][T12085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.885620][ T29] audit: type=1400 audit(893.969:844): avc: denied { read } for pid=12208 comm="syz.3.1395" laddr=fe80::9c90:30ff:feb2:5a lport=12 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 863.917863][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 863.929195][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 863.935073][T12085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.941294][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.963514][ T5235] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.975027][T12085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.990003][T12085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.004190][T12085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.004669][T11388] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 864.083752][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.124094][ T5235] usb 5-1: config 0 descriptor?? [ 864.237386][T11388] usb 3-1: device descriptor read/64, error -71 [ 864.368138][T11388] usb usb3-port1: attempt power cycle [ 864.388187][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.418711][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.546450][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.556535][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.604416][ T5235] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 864.652603][ T5235] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 864.831521][T11388] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 864.949531][T11388] usb 3-1: device descriptor read/8, error -71 [ 865.145931][T12219] Bluetooth: MGMT ver 1.23 [ 866.135036][T12226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.336345][T12226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.129955][T11388] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 868.403269][ T5274] usb 5-1: USB disconnect, device number 23 [ 868.803113][T12241] netlink: 'syz.4.1401': attribute type 21 has an invalid length. [ 868.811297][T12241] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1401'. [ 868.821064][T12241] netlink: 'syz.4.1401': attribute type 5 has an invalid length. [ 868.830182][T12241] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1401'. [ 870.620932][T12251] No such timeout policy "syz1" [ 871.674049][T12255] sctp: [Deprecated]: syz.4.1403 (pid 12255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.674049][T12255] Use struct sctp_sack_info instead [ 871.893430][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 872.683790][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 872.920598][ T29] audit: type=1400 audit(904.163:845): avc: denied { name_bind } for pid=12270 comm="syz.3.1408" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 872.952288][ T9] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 872.976264][T12267] netlink: zone id is out of range [ 872.990193][T12267] netlink: zone id is out of range [ 873.011924][ T9] usb 3-1: New USB device strings: Mfr=1, Product=19, SerialNumber=3 [ 873.016422][T12267] netlink: zone id is out of range [ 873.028068][T12267] netlink: zone id is out of range [ 873.033370][T12267] netlink: zone id is out of range [ 873.039175][T12267] netlink: zone id is out of range [ 873.048764][T12267] netlink: zone id is out of range [ 873.058634][T12267] netlink: zone id is out of range [ 873.063984][T12267] netlink: zone id is out of range [ 873.069359][T12267] netlink: zone id is out of range [ 873.129627][ T9] usb 3-1: Product: syz [ 873.159288][ T9] usb 3-1: Manufacturer: syz [ 873.171397][ T9] usb 3-1: SerialNumber: syz [ 873.222181][ T9] usb 3-1: config 0 descriptor?? [ 873.255522][ T9] go7007 3-1:0.0: Sensoray 2250 found [ 873.261268][ T9] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 874.365508][ T29] audit: type=1400 audit(905.559:846): avc: denied { name_connect } for pid=12275 comm="syz.1.1409" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 875.185303][ T5363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.582780][ T8714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 875.608082][ T8714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 875.617593][ T8714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 875.628363][ T8714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 875.637101][ T8714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 875.646634][ T8714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.829918][T12274] usb 3-1: USB disconnect, device number 30 [ 876.222569][ T5363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.657575][ T5363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.717736][T12301] bridge0: port 3(syz_tun) entered blocking state [ 876.741534][T12301] bridge0: port 3(syz_tun) entered disabled state [ 876.861434][T12301] syz_tun: entered allmulticast mode [ 876.895133][T12301] syz_tun: entered promiscuous mode [ 876.906307][T12301] bridge0: port 3(syz_tun) entered blocking state [ 876.912892][T12301] bridge0: port 3(syz_tun) entered forwarding state [ 877.426955][T12297] wg2: entered promiscuous mode [ 877.431859][T12297] wg2: entered allmulticast mode [ 877.634062][ T8714] Bluetooth: hci0: command tx timeout [ 877.756442][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 877.776867][ T5363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.327413][T12312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32792 sclass=netlink_route_socket pid=12312 comm=syz.3.1416 [ 879.750327][ T8714] Bluetooth: hci0: command tx timeout [ 881.486718][ T29] audit: type=1326 audit(1142.173:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.1.1419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a5d57def9 code=0x0 [ 881.733132][ T8714] Bluetooth: hci0: command tx timeout [ 882.543055][T12311] block nbd3: shutting down sockets [ 882.569376][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1420'. [ 882.750830][T12287] chnl_net:caif_netlink_parms(): no params data found [ 882.807186][ T5363] bridge_slave_1: left allmulticast mode [ 882.815968][ T5363] bridge_slave_1: left promiscuous mode [ 882.834215][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.868942][ T5363] bridge_slave_0: left allmulticast mode [ 882.885000][ T5363] bridge_slave_0: left promiscuous mode [ 882.891518][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.731348][ T8714] Bluetooth: hci0: command tx timeout [ 884.476708][ T5363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.556184][ T5363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.576409][ T5363] bond0 (unregistering): Released all slaves [ 885.335074][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 885.391244][T12287] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.412196][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.441212][T12287] bridge_slave_0: entered allmulticast mode [ 885.464985][T12287] bridge_slave_0: entered promiscuous mode [ 885.487051][T12287] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.494241][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.535035][T12287] bridge_slave_1: entered allmulticast mode [ 885.694615][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 885.712367][ T25] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 885.720929][ T25] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 885.729649][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 885.738940][T12287] bridge_slave_1: entered promiscuous mode [ 885.739515][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 886.239890][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 886.267671][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 886.631744][T12377] binder: 12364:12377 unknown command 536871296 [ 886.647394][ T25] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 886.685250][T12377] binder: 12364:12377 ioctl c0306201 20000480 returned -22 [ 886.724571][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.763353][ T25] usb 2-1: config 0 descriptor?? [ 887.074642][ T25] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 888.153867][ T25] usb 2-1: USB disconnect, device number 19 [ 888.228965][ T25] usblp0: removed [ 888.835379][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.959558][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.013297][ T25] IPVS: starting estimator thread 0... [ 889.190595][T12405] IPVS: using max 30 ests per chain, 72000 per kthread [ 889.261678][ T5363] hsr_slave_0: left promiscuous mode [ 889.362186][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 889.393041][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 889.400188][ T5363] hsr_slave_1: left promiscuous mode [ 889.413579][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 889.426049][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 889.454011][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 889.463631][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.471592][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 889.516260][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.619683][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.674424][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.863119][ T5363] veth1_macvtap: left promiscuous mode [ 889.868871][ T5363] veth0_macvtap: left promiscuous mode [ 889.879514][ T5363] veth1_vlan: left promiscuous mode [ 889.893287][ T5363] veth0_vlan: left promiscuous mode [ 891.566910][ T5237] Bluetooth: hci1: command tx timeout [ 893.080789][T12433] vivid-004: ================= START STATUS ================= [ 893.130016][T12433] vivid-004: Radio HW Seek Mode: Bounded [ 893.136921][T12433] vivid-004: Radio Programmable HW Seek: false [ 893.149475][T12433] vivid-004: RDS Rx I/O Mode: Block I/O [ 893.157065][T12433] vivid-004: Generate RBDS Instead of RDS: false [ 893.169043][T12433] vivid-004: RDS Reception: true [ 893.180083][T12433] vivid-004: RDS Program Type: 0 inactive [ 893.208510][T12433] vivid-004: RDS PS Name: inactive [ 893.217347][T12433] vivid-004: RDS Radio Text: inactive [ 893.253965][T12433] vivid-004: RDS Traffic Announcement: false inactive [ 893.327637][T12433] vivid-004: RDS Traffic Program: false inactive [ 893.338766][T12433] vivid-004: RDS Music: false inactive [ 893.345387][T12433] vivid-004: ================== END STATUS ================== [ 893.396926][T12450] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1438'. [ 893.571937][ T5237] Bluetooth: hci1: command tx timeout [ 894.049407][T12455] fuse: Bad value for 'user_id' [ 894.054359][T12455] fuse: Bad value for 'user_id' [ 895.686537][ T5237] Bluetooth: hci1: command tx timeout [ 896.471782][ T5237] Bluetooth: hci2: command tx timeout [ 897.669598][ T5237] Bluetooth: hci1: command tx timeout [ 898.435321][ T5363] team0 (unregistering): Port device team_slave_1 removed [ 898.473302][ T29] audit: type=1400 audit(1159.989:848): avc: denied { append } for pid=12473 comm="syz.3.1444" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 898.641767][ T5363] team0 (unregistering): Port device team_slave_0 removed [ 899.417121][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 899.423524][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.404221][T12287] team0: Port device team_slave_0 added [ 900.441201][T12287] team0: Port device team_slave_1 added [ 900.614865][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.668610][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.835370][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.926397][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.073002][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.183769][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.614437][T12287] hsr_slave_0: entered promiscuous mode [ 906.632212][T12287] hsr_slave_1: entered promiscuous mode [ 906.648876][T12287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.660932][T11388] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 906.694310][T12287] Cannot create hsr debugfs directory [ 906.869712][T11388] usb 5-1: Using ep0 maxpacket: 8 [ 906.882017][T12517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.927954][T11388] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 906.964043][T11388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.040418][T11388] usb 5-1: Product: syz [ 907.053220][T11388] usb 5-1: Manufacturer: syz [ 907.057865][T11388] usb 5-1: SerialNumber: syz [ 907.106047][T11388] usb 5-1: config 0 descriptor?? [ 907.448090][T11388] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 907.578903][ T5363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.132025][ T5363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.520214][ T5363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.695786][T12407] chnl_net:caif_netlink_parms(): no params data found [ 908.939431][ T5363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.405058][T11388] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 910.430745][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.452559][T11388] usb 5-1: USB disconnect, device number 24 [ 910.468477][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.583252][T12407] bridge_slave_0: entered allmulticast mode [ 910.611110][T12407] bridge_slave_0: entered promiscuous mode [ 910.626927][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.642419][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.652620][T12407] bridge_slave_1: entered allmulticast mode [ 910.662407][T12407] bridge_slave_1: entered promiscuous mode [ 910.731664][ T5363] bridge_slave_1: left allmulticast mode [ 910.752159][ T5363] bridge_slave_1: left promiscuous mode [ 910.785968][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.826275][ T5363] bridge_slave_0: left allmulticast mode [ 910.849012][ T5363] bridge_slave_0: left promiscuous mode [ 910.877590][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.199547][ T5237] Bluetooth: hci6: command 0x0406 tx timeout [ 914.717622][T12572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1462'. [ 914.801645][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1462'. [ 914.868748][ T29] audit: type=1326 audit(1176.995:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ec37def9 code=0x7ffc0000 [ 914.891623][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.689161][ T29] audit: type=1326 audit(1177.006:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ec37def9 code=0x7ffc0000 [ 915.800114][ T29] audit: type=1326 audit(1177.006:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9ec37c890 code=0x7ffc0000 [ 915.853142][T12577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.932490][ T29] audit: type=1326 audit(1177.016:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd9ec37f727 code=0x7ffc0000 [ 916.028447][ T29] audit: type=1326 audit(1177.016:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9ec37def9 code=0x7ffc0000 [ 916.052791][T11388] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 916.133372][ T29] audit: type=1326 audit(1177.016:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd9ec37f727 code=0x7ffc0000 [ 916.227834][ T29] audit: type=1326 audit(1177.016:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd9ec37cb8a code=0x7ffc0000 [ 916.298699][ T29] audit: type=1326 audit(1177.016:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ec37def9 code=0x7ffc0000 [ 916.310677][T11388] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 916.402319][T11388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.421724][ T29] audit: type=1326 audit(1177.016:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ec37def9 code=0x7ffc0000 [ 916.459097][T11388] usb 5-1: config 0 descriptor?? [ 916.527505][T11388] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 916.595596][ T29] audit: type=1326 audit(1177.027:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.4.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9ec37def9 code=0x7ffc0000 [ 916.715724][T11388] gspca_sunplus: reg_w_riv err -71 [ 916.758393][T11388] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 916.799452][T11388] usb 5-1: USB disconnect, device number 25 [ 916.983964][T12581] overlayfs: overlapping lowerdir path [ 917.962201][ T5363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.025304][ T5363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.092325][ T5363] bond0 (unregistering): Released all slaves [ 918.166273][ T5363] bond1 (unregistering): Released all slaves [ 918.408951][T12590] input: syz1 as /devices/virtual/input/input22 [ 919.936080][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 919.936107][ T29] audit: type=1400 audit(1182.318:904): avc: denied { mount } for pid=12597 comm="syz.4.1469" name="/" dev="gadgetfs" ino=44302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 920.663356][T12590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.696149][ T5363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.709965][ T5363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.732275][ T5363] bond0 (unregistering): Released all slaves [ 920.952038][T12596] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 920.961795][T12596] bond0: (slave bond_slave_0): Releasing backup interface [ 921.124018][ T29] audit: type=1400 audit(1183.788:905): avc: denied { unmount } for pid=11876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 921.353506][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.407498][T12605] tmpfs: Unknown parameter 'nr_inodŠóçl[˜o•7Ø5Y³ûîùÿ‡QKwåÕ>å™Ûu]œ 0oøNy [ 921.407498][T12605] NáìcäZÔ¶±Î' [ 921.408718][T12287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 921.575885][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.683659][T12287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 921.851723][T12407] team0: Port device team_slave_0 added [ 921.870555][T12287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 921.967289][T12407] team0: Port device team_slave_1 added [ 922.009295][T12287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 922.429406][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.476100][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.614915][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.656909][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.665723][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.760726][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.581804][T12626] omfs: Invalid superblock (0) [ 931.031705][ T8714] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 931.041576][ T8714] Bluetooth: hci2: Injecting HCI hardware error event [ 931.087824][ T8714] Bluetooth: hci2: hardware error 0x00 [ 931.724437][T12652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 932.867869][T12663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 933.086048][T12669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 933.109431][T12669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 933.113083][ T8714] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 933.123906][T12669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 933.144645][T12669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 933.159846][T12669] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 933.170759][T12669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 933.613624][T12407] hsr_slave_0: entered promiscuous mode [ 933.693830][T12407] hsr_slave_1: entered promiscuous mode [ 933.753610][T12407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.831933][T12407] Cannot create hsr debugfs directory [ 933.992899][T12669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 934.017643][T12669] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 934.028137][T12669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 934.044766][T12669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 934.080415][T12669] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 934.092064][T12669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 934.784758][ T5363] hsr_slave_0: left promiscuous mode [ 934.838914][ T5363] hsr_slave_1: left promiscuous mode [ 934.895852][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.903286][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.937689][T12694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=12694 comm=syz.3.1484 [ 935.007253][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.026265][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.153907][T12669] Bluetooth: hci7: command tx timeout [ 935.170089][ T5363] hsr_slave_0: left promiscuous mode [ 935.193500][ T5363] hsr_slave_1: left promiscuous mode [ 935.212635][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.284783][ T29] audit: type=1400 audit(1198.642:906): avc: denied { ioctl } for pid=12691 comm="syz.3.1484" path="/dev/uhid" dev="devtmpfs" ino=1083 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 935.294354][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.345827][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.360989][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.382190][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.395971][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.404312][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.425806][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.436806][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.475350][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.504892][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.532764][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.547602][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.568035][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.608944][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.628606][ T5363] veth1_macvtap: left promiscuous mode [ 935.634193][ T5363] veth0_macvtap: left promiscuous mode [ 935.656012][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.676673][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.684115][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.691777][ T5363] veth1_vlan: left promiscuous mode [ 935.704961][ T5363] veth0_vlan: left promiscuous mode [ 935.723170][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.734705][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.754571][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.772995][ T5363] veth1_macvtap: left promiscuous mode [ 935.781559][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.798960][ T5363] veth0_macvtap: left promiscuous mode [ 935.814156][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.822040][ T5363] veth1_vlan: left promiscuous mode [ 935.827348][ T5363] veth0_vlan: left promiscuous mode [ 935.832697][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.845977][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.872736][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.890164][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.920177][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.967709][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 935.996138][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.050253][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.064470][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.065972][T12669] Bluetooth: hci0: command tx timeout [ 936.080619][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.141588][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.189958][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.197422][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.243979][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.269941][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.295076][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.302525][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.320948][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.335160][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.345891][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.353477][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.360892][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.368628][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.376657][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.394460][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.416027][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.437319][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.445085][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.456973][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.464404][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.472454][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.480300][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.488121][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.501936][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.509543][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.534078][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.541552][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.557075][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.568721][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.576554][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.584025][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.591561][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.599050][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.607823][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.615555][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.637033][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.644610][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.662323][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.682609][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.690143][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.697604][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.705669][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.713301][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.730758][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.738582][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.756242][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.773947][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.781456][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.788895][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.814843][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.828008][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.835461][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.844894][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.852677][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.860217][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.867716][T12273] hid-generic 0005:0004:0009.000C: unknown main item tag 0x0 [ 936.894770][T12273] hid-generic 0005:0004:0009.000C: hidraw0: BLUETOOTH HID v1.00 Device [syz1] on syz0 [ 937.142876][T12669] Bluetooth: hci7: command tx timeout [ 937.731114][ T5363] team0 (unregistering): Port device team_slave_1 removed [ 937.880452][ T5363] team0 (unregistering): Port device team_slave_0 removed [ 938.047497][T12669] Bluetooth: hci0: command tx timeout [ 938.174279][T12669] Bluetooth: hci6: unexpected event for opcode 0x0c25 [ 939.124293][T12669] Bluetooth: hci7: command tx timeout [ 939.617532][ T5363] team0 (unregistering): Port device team_slave_1 removed [ 939.691645][ T5363] team0 (unregistering): Port device team_slave_0 removed [ 940.041348][T12669] Bluetooth: hci0: command tx timeout [ 941.217993][T12669] Bluetooth: hci7: command tx timeout [ 942.010954][T12669] Bluetooth: hci0: command tx timeout [ 942.101755][T12732] Cannot find del_set index 0 as target [ 942.652249][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 942.666218][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 942.676162][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 942.690979][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 942.706747][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 942.720554][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 943.152396][T12666] chnl_net:caif_netlink_parms(): no params data found [ 943.456956][T12683] chnl_net:caif_netlink_parms(): no params data found [ 943.687757][T12760] wg2: entered promiscuous mode [ 943.692668][T12760] wg2: entered allmulticast mode [ 943.877140][T12666] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.886309][T12666] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.900662][T12666] bridge_slave_0: entered allmulticast mode [ 943.937236][T12666] bridge_slave_0: entered promiscuous mode [ 943.963604][T12666] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.970807][T12666] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.000061][T12666] bridge_slave_1: entered allmulticast mode [ 944.009218][T12666] bridge_slave_1: entered promiscuous mode [ 944.355322][T12745] chnl_net:caif_netlink_parms(): no params data found [ 944.464814][T12666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.509755][T12666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.770916][ T5237] Bluetooth: hci2: command tx timeout [ 944.772462][ T8714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 944.797408][ T8714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 944.806602][ T8714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 944.818989][ T8714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 944.823613][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.829943][ T8714] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 944.846934][ T8714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 944.875570][T12683] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.917752][T12683] bridge_slave_0: entered allmulticast mode [ 944.947644][T12683] bridge_slave_0: entered promiscuous mode [ 945.086427][T12666] team0: Port device team_slave_0 added [ 945.094126][ T5363] IPVS: stop unused estimator thread 0... [ 945.216224][T12683] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.233045][T12683] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.256596][T12683] bridge_slave_1: entered allmulticast mode [ 945.258211][ T5277] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 945.267948][T12683] bridge_slave_1: entered promiscuous mode [ 945.316441][T12666] team0: Port device team_slave_1 added [ 945.385432][T12683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.478612][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 945.505454][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 945.527116][ T5277] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 945.547828][T12666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.565919][ T5277] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 945.582399][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.613878][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 945.631936][ T5277] usb 4-1: Product: syz [ 945.636150][ T5277] usb 4-1: Manufacturer: syz [ 945.651297][ T5277] usb 4-1: SerialNumber: syz [ 945.661304][T12666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.682801][T12683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.683249][ T5277] usb 4-1: config 0 descriptor?? [ 945.767757][T12666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.775850][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.803728][T12666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.838393][T12745] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.847614][T12745] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.856135][T12745] bridge_slave_0: entered allmulticast mode [ 945.864632][T12745] bridge_slave_0: entered promiscuous mode [ 945.909016][T12745] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.925180][T12745] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.932553][T12745] bridge_slave_1: entered allmulticast mode [ 945.941649][T12745] bridge_slave_1: entered promiscuous mode [ 946.012763][T12683] team0: Port device team_slave_0 added [ 946.060471][T12273] usb 4-1: USB disconnect, device number 25 [ 946.138749][T12683] team0: Port device team_slave_1 added [ 946.180300][T12666] hsr_slave_0: entered promiscuous mode [ 946.187665][T12666] hsr_slave_1: entered promiscuous mode [ 946.223226][T12745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.307581][T12745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.343193][T12683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.350399][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.400676][T12683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.414963][T12683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.422115][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.449903][T12683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.571260][T12745] team0: Port device team_slave_0 added [ 946.582826][T12745] team0: Port device team_slave_1 added [ 946.735609][ T8714] Bluetooth: hci2: command tx timeout [ 946.813526][ T8714] Bluetooth: hci4: command tx timeout [ 946.868921][T12745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.875901][T12745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.903851][T12745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.955562][T12683] hsr_slave_0: entered promiscuous mode [ 946.993099][T12683] hsr_slave_1: entered promiscuous mode [ 947.011290][T12683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.021407][T12683] Cannot create hsr debugfs directory [ 947.041226][T12745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.048352][T12745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.163642][T12805] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1505'. [ 947.395487][T12745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.332955][T12745] hsr_slave_0: entered promiscuous mode [ 948.363932][T12745] hsr_slave_1: entered promiscuous mode [ 948.379837][T12745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.391724][T12745] Cannot create hsr debugfs directory [ 948.716788][ T8714] Bluetooth: hci2: command tx timeout [ 948.802643][ T8714] Bluetooth: hci4: command tx timeout [ 949.173339][T12774] chnl_net:caif_netlink_parms(): no params data found [ 949.256881][ T5363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.252009][ T5363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.709564][ T8714] Bluetooth: hci2: command tx timeout [ 950.760234][ T5363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.775088][ T8714] Bluetooth: hci4: command tx timeout [ 950.969248][ T5363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.172939][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.180861][T12843] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 951.180861][T12843] The task syz.3.1510 (12843) triggered the difference, watch for misbehavior. [ 951.211801][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.219116][T12774] bridge_slave_0: entered allmulticast mode [ 951.247272][T12774] bridge_slave_0: entered promiscuous mode [ 951.272323][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.280715][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.288466][T12774] bridge_slave_1: entered allmulticast mode [ 951.296483][T12774] bridge_slave_1: entered promiscuous mode [ 951.455400][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.499056][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.721919][T12774] team0: Port device team_slave_0 added [ 951.742797][T12774] team0: Port device team_slave_1 added [ 951.767058][T12666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 951.785076][T12666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.975881][T12666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 952.160765][ T5363] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.216291][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.247945][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.276092][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.291037][T12666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 952.413411][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.424629][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.482846][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.633629][ T5363] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.650968][T12860] syz.3.1513: attempt to access beyond end of device [ 952.650968][T12860] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 952.723970][T12860] SQUASHFS error: Failed to read block 0x0: -5 [ 952.734441][T12860] unable to read squashfs_super_block [ 952.755125][ T8714] Bluetooth: hci4: command tx timeout [ 952.948799][ T5363] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.137911][T12774] hsr_slave_0: entered promiscuous mode [ 953.160960][T12774] hsr_slave_1: entered promiscuous mode [ 953.175562][T12774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.183127][T12774] Cannot create hsr debugfs directory [ 953.242904][ T5363] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.101138][T12683] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 954.152098][T12683] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 954.230432][ T5363] bridge_slave_1: left allmulticast mode [ 954.244642][ T5363] bridge_slave_1: left promiscuous mode [ 954.263157][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.281994][ T5363] bridge_slave_0: left allmulticast mode [ 954.287686][ T5363] bridge_slave_0: left promiscuous mode [ 954.313069][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.339488][ T5363] bridge_slave_1: left allmulticast mode [ 954.345198][ T5363] bridge_slave_1: left promiscuous mode [ 954.364509][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.394374][ T5363] bridge_slave_0: left allmulticast mode [ 954.400161][ T5363] bridge_slave_0: left promiscuous mode [ 954.431662][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.484415][ T5363] bridge_slave_1: left allmulticast mode [ 954.497957][ T5363] bridge_slave_1: left promiscuous mode [ 954.503765][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.540165][ T5363] bridge_slave_0: left allmulticast mode [ 954.564894][ T5363] bridge_slave_0: left promiscuous mode [ 954.573670][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.624236][ T5363] bridge_slave_1: left allmulticast mode [ 954.629932][ T5363] bridge_slave_1: left promiscuous mode [ 954.638338][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.666373][ T5363] bridge_slave_0: left allmulticast mode [ 954.690816][ T5363] bridge_slave_0: left promiscuous mode [ 954.696737][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.868590][ T5363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.893367][ T5363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.914297][ T5363] bond0 (unregistering): Released all slaves [ 956.198045][ T5363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.208893][ T5363] bond0 (unregistering): Released all slaves [ 956.472373][ T5363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.483505][ T5363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.495548][ T5363] bond0 (unregistering): Released all slaves [ 956.509425][ T5363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.523060][ T5363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.534997][ T5363] bond0 (unregistering): Released all slaves [ 956.600395][T12683] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 956.623113][T12683] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 957.232221][T12887] netlink: 'syz.3.1517': attribute type 10 has an invalid length. [ 957.252271][T12887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 957.305385][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.636083][T12666] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.711039][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.718302][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.909140][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.916351][T11320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.947143][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.953501][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.113126][T12904] overlayfs: missing 'lowerdir' [ 958.183727][ T5363] hsr_slave_0: left promiscuous mode [ 958.222803][ T5363] hsr_slave_1: left promiscuous mode [ 958.229628][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.241568][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.274517][ T5363] hsr_slave_0: left promiscuous mode [ 958.311524][ T5363] hsr_slave_1: left promiscuous mode [ 958.351871][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.373574][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.408007][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.431784][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.453714][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 958.464447][ T5363] hsr_slave_0: left promiscuous mode [ 958.490989][ T5363] hsr_slave_1: left promiscuous mode [ 958.505010][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.517856][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.536263][ T5363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.546417][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.583539][ T5363] hsr_slave_0: left promiscuous mode [ 958.602515][ T5363] hsr_slave_1: left promiscuous mode [ 958.615690][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.625296][ T5363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.641867][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 958.671188][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 958.692183][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 958.714655][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.747658][ T25] usb 4-1: config 0 descriptor?? [ 958.771221][ T5363] veth1_macvtap: left promiscuous mode [ 958.778710][ T5363] veth0_macvtap: left promiscuous mode [ 958.790345][ T5363] veth1_vlan: left promiscuous mode [ 958.795992][ T5363] veth0_vlan: left promiscuous mode [ 958.810367][ T5363] veth1_macvtap: left promiscuous mode [ 958.819729][ T5363] veth0_macvtap: left promiscuous mode [ 958.826905][ T5363] veth1_vlan: left promiscuous mode [ 958.833514][ T5363] veth0_vlan: left promiscuous mode [ 959.042941][ T25] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 959.828449][ T5363] team0 (unregistering): Port device team_slave_1 removed [ 959.947890][ T5363] team0 (unregistering): Port device team_slave_0 removed [ 960.753621][T11388] usb 4-1: USB disconnect, device number 26 [ 960.778617][T11388] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 961.551594][ T5363] team0 (unregistering): Port device team_slave_1 removed [ 961.636163][ T5363] team0 (unregistering): Port device team_slave_0 removed [ 963.305596][ T5363] team0 (unregistering): Port device team_slave_1 removed [ 963.396519][ T5363] team0 (unregistering): Port device team_slave_0 removed [ 964.581103][ T5363] team0 (unregistering): Port device team_slave_1 removed [ 964.637964][ T5363] team0 (unregistering): Port device team_slave_0 removed [ 965.135247][T12745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 965.168073][T12745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 965.365863][T12745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 965.384885][T12745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 965.650945][T12683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.873897][T12683] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.928174][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.935441][ T8912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.165375][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.172674][ T8912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.266302][T12666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.792108][T12745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.835812][T12666] veth0_vlan: entered promiscuous mode [ 966.842097][T12774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 966.870380][T12774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 966.939483][T12774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 966.969943][T12774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 967.032202][T12666] veth1_vlan: entered promiscuous mode [ 967.077126][T12745] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.100193][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.107450][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.183847][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.191133][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.496872][T12666] veth0_macvtap: entered promiscuous mode [ 967.574428][T12683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.614138][T12666] veth1_macvtap: entered promiscuous mode [ 967.717899][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.748229][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.769228][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.780610][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.790781][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.801631][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.813502][T12666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.872653][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.890419][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.910245][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.938730][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.951308][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.962088][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.974009][T12666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.032419][T12666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.041851][T12666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.050868][T12666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.062115][T12666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.097169][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.166396][T12683] veth0_vlan: entered promiscuous mode [ 968.204970][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.226200][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.233335][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.251967][T12683] veth1_vlan: entered promiscuous mode [ 968.277626][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.284823][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.309540][T12745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.516662][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.567670][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.711595][T12683] veth0_macvtap: entered promiscuous mode [ 968.773165][T12683] veth1_macvtap: entered promiscuous mode [ 968.810018][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.852697][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.873193][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.882304][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.893421][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.909366][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.922896][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.935204][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.945100][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.955561][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.968285][T12683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.033194][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.057215][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.077981][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.089456][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.109523][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.129720][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.156444][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.177465][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.198593][T12683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.261830][T12683] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.282580][T12683] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.301380][T12683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.318724][T12683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.448016][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.554119][T12745] veth0_vlan: entered promiscuous mode [ 969.631598][T12745] veth1_vlan: entered promiscuous mode [ 969.764681][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.798062][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.845592][T12745] veth0_macvtap: entered promiscuous mode [ 969.861309][T12774] veth0_vlan: entered promiscuous mode [ 969.915528][T12745] veth1_macvtap: entered promiscuous mode [ 969.934250][T12774] veth1_vlan: entered promiscuous mode [ 970.031676][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.063559][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.085316][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.097297][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.108422][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.119021][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.138552][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.158297][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.177012][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.187735][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.199069][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.217259][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.230574][T12745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.265639][T12774] veth0_macvtap: entered promiscuous mode [ 970.296041][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.323885][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.343842][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.357192][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.377263][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.396074][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.406775][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.425747][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.443964][T12745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.454944][T12745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.468609][T12745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.525159][T12774] veth1_macvtap: entered promiscuous mode [ 970.589998][T12745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.630026][T12745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.652587][T12745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.690346][T12745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.797951][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.834393][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.853535][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.891566][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.906517][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.921621][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.935791][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.947245][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.964954][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.007817][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.040943][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.078999][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.099930][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.176469][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.205283][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.226760][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.240635][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.252650][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.263269][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.274639][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.285250][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.295493][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.307131][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.343246][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.356925][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.372240][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.395024][T12774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.404091][T12774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.434367][T12774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.454660][T12774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.723525][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.763399][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.843316][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.854033][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.957184][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.003593][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.061491][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.077662][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.429756][ T29] audit: type=1400 audit(1237.642:907): avc: denied { watch watch_reads } for pid=13019 comm="syz.2.1428" path="pipe:[44722]" dev="pipefs" ino=44722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 979.258739][T13073] delete_channel: no stack [ 979.265412][ T29] audit: type=1400 audit(1244.823:908): avc: denied { write } for pid=13068 comm="syz.2.1539" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 979.287940][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.130344][ T29] audit: type=1800 audit(1245.726:909): pid=13088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1541" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 980.378971][ T940] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 980.495788][T13095] netlink: 'syz.2.1543': attribute type 1 has an invalid length. [ 980.551345][T13095] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.1543'. [ 980.598948][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 980.629830][ T940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 980.667338][T13099] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1544'. [ 980.694372][ T940] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 980.703700][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.721263][ T940] usb 4-1: Product: syz [ 980.741293][ T940] usb 4-1: Manufacturer: syz [ 980.758410][ T940] usb 4-1: SerialNumber: syz [ 980.771687][ T940] usb 4-1: config 0 descriptor?? [ 980.783943][ T940] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 980.807209][ T940] usb 4-1: Detected FT232R [ 981.030980][ T940] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 981.113565][ T30] INFO: task syz.1.1361:11972 blocked for more than 143 seconds. [ 981.121393][ T30] Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 981.150473][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 981.178044][ T30] task:syz.1.1361 state:D stack:27552 pid:11972 tgid:11965 ppid:8426 flags:0x00000004 [ 981.213547][ T30] Call Trace: [ 981.225219][ T30] [ 981.237797][ T30] __schedule+0xe37/0x5490 [ 981.273881][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 981.293438][ T30] ? __pfx___schedule+0x10/0x10 [ 981.327576][ T30] ? schedule+0x298/0x350 [ 981.352543][ T940] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 981.370762][T12274] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 981.378992][ T30] ? __pfx_lock_release+0x10/0x10 [ 981.384079][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 981.429641][ T30] ? __mutex_trylock_common+0x78/0x250 [ 981.435203][ T30] schedule+0xe7/0x350 [ 981.475869][ T30] schedule_preempt_disabled+0x13/0x30 [ 981.484687][ T30] __mutex_lock+0x5b8/0x9c0 [ 981.503275][ T30] ? nfsd_nl_threads_get_doit+0x1c6/0x7d0 [ 981.509067][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 981.540882][ T30] ? skb_put+0x138/0x1b0 [ 981.550867][ T30] ? __nlmsg_put+0x152/0x1c0 [ 981.568916][ T30] ? nfsd_nl_threads_get_doit+0x1c6/0x7d0 [ 981.578909][ T30] nfsd_nl_threads_get_doit+0x1c6/0x7d0 [ 981.594083][ T30] ? hlock_class+0x4e/0x130 [ 981.601297][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 981.607421][ T30] ? kmem_cache_free+0x12f/0x3a0 [ 981.617287][ T30] ? kfree_skbmem+0x1a4/0x1f0 [ 981.622015][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 981.638655][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 981.644273][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 981.665567][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 981.670927][ T30] genl_rcv_msg+0x565/0x800 [ 981.684946][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 981.690040][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 981.702808][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 981.709186][ T30] netlink_rcv_skb+0x16b/0x440 [ 981.730334][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 981.741743][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.747108][ T30] ? down_read+0xc9/0x330 [ 981.767573][ T30] ? __pfx_down_read+0x10/0x10 [ 981.772498][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 981.778978][ T30] genl_rcv+0x28/0x40 [ 981.785015][ T30] netlink_unicast+0x53c/0x7f0 [ 981.792399][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 981.797837][ T30] netlink_sendmsg+0x8b8/0xd70 [ 981.802762][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.810528][ T30] ? __import_iovec+0x1fd/0x6e0 [ 981.815479][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 981.821003][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 981.827011][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.832392][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 981.843207][ T30] ? try_to_wake_up+0xc08/0x13e0 [ 981.858605][ T30] ___sys_sendmsg+0x135/0x1e0 [ 981.863385][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.869525][ T30] ? find_held_lock+0x2d/0x110 [ 981.874816][ T30] ? __pfx_futex_wake+0x10/0x10 [ 981.881170][ T30] ? __fget_light+0x173/0x210 [ 981.887780][ T30] __sys_sendmsg+0x117/0x1f0 [ 981.892472][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.898373][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 981.903983][ T30] do_syscall_64+0xcd/0x250 [ 981.909457][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.917493][ T30] RIP: 0033:0x7fcf4037def9 [ 981.922657][ T30] RSP: 002b:00007fcf4120e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.931133][ T30] RAX: ffffffffffffffda RBX: 00007fcf40536058 RCX: 00007fcf4037def9 [ 981.939990][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000008 [ 981.954674][ T30] RBP: 00007fcf403f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 981.964140][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.972753][ T30] R13: 0000000000000000 R14: 00007fcf40536058 R15: 00007ffd825a4ad8 [ 981.983011][ T30] [ 982.017134][ T30] [ 982.017134][ T30] Showing all locks held in the system: [ 982.049393][ T30] 3 locks held by kworker/1:0/25: [ 982.054513][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 982.121848][ T30] #1: ffffc900001f7d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 982.179129][ T30] #2: ffffffff8ddc5e38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 982.236158][ T30] 1 lock held by khungtaskd/30: [ 982.241153][ T30] #0: ffffffff8ddba6a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 982.313125][ T30] 4 locks held by kworker/0:2/940: [ 982.318289][ T30] #0: ffff8880b883eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 982.427154][ T30] #1: ffffc900035b7d80 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 982.493790][ T30] #2: ffff8880b882a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 982.503115][ T30] #3: ffffffff9a5e7d78 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x199/0x540 [ 982.579520][ T30] 4 locks held by kworker/u8:7/2928: [ 982.584863][ T30] 2 locks held by getty/4972: [ 982.646560][ T30] #0: ffff888030cde0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 982.684549][ T30] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 982.713114][ T30] 2 locks held by syz.4.1343/11794: [ 982.718362][ T30] #0: ffffffff8fb686f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 982.770171][ T30] #1: ffffffff8e1c7a08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 982.808130][ T30] 2 locks held by syz.1.1361/11972: [ 982.813374][ T30] #0: ffffffff8fb686f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 982.831598][ T30] #1: ffffffff8e1c7a08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c6/0x7d0 [ 982.841843][ T30] 5 locks held by kworker/0:6/12274: [ 982.848455][ T30] #0: ffff888022aa7948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 982.874880][ T30] #1: ffffc90008c87d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 982.897778][ T30] #2: ffff8880292a7190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 982.912485][ T30] #3: ffff888029362518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10 [ 982.925735][ T30] #4: ffff888028a1ce68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10 [ 982.947226][ T30] 3 locks held by syz-executor/12666: [ 982.954389][ T30] #0: ffff88805fdbcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 982.970940][ T30] #1: ffff88805fdbc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 982.980892][ T30] #2: ffffffff8fd32068 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 982.991019][ T30] 1 lock held by syz.1.1538/13067: [ 982.996151][ T30] #0: ffffffff8ddc5e38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 983.006386][ T30] 3 locks held by syz.3.1542/13087: [ 983.011663][ T30] #0: ffff888030344d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 983.024411][ T30] #1: ffff888030344078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 983.034266][ T30] #2: ffffffff8fd32068 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 983.057106][ T30] 3 locks held by syz.4.1546/13105: [ 983.062354][ T30] #0: ffff888034028d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 983.077963][ T30] #1: ffff888034028078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 983.087774][ T30] #2: ffffffff8fd32068 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 983.097930][ T30] 3 locks held by syz.2.1547/13108: [ 983.103141][ T30] #0: ffff88804aff4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 983.112852][ T30] #1: ffff88804aff4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 983.125915][ T30] #2: ffffffff8fd32068 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 983.138059][ T30] 1 lock held by dhcpcd-run-hook/13132: [ 983.144084][ T30] [ 983.148827][ T30] ============================================= [ 983.148827][ T30] [ 983.163068][ T30] NMI backtrace for cpu 1 [ 983.167449][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 983.177633][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 983.187709][ T30] Call Trace: [ 983.191088][ T30] [ 983.194042][ T30] dump_stack_lvl+0x116/0x1f0 [ 983.198750][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 983.203721][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 983.209739][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 983.215761][ T30] watchdog+0xf0c/0x1240 [ 983.220035][ T30] ? __pfx_watchdog+0x10/0x10 [ 983.224733][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 983.229963][ T30] ? __kthread_parkme+0x148/0x220 [ 983.235015][ T30] ? __pfx_watchdog+0x10/0x10 [ 983.239710][ T30] kthread+0x2c1/0x3a0 [ 983.243801][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 983.249028][ T30] ? __pfx_kthread+0x10/0x10 [ 983.253651][ T30] ret_from_fork+0x45/0x80 [ 983.258102][ T30] ? __pfx_kthread+0x10/0x10 [ 983.262721][ T30] ret_from_fork_asm+0x1a/0x30 [ 983.267525][ T30] [ 983.272960][ T30] Sending NMI from CPU 1 to CPUs 0: [ 983.279693][ C0] NMI backtrace for cpu 0 [ 983.279723][ C0] CPU: 0 UID: 0 PID: 5363 Comm: kworker/u8:12 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 983.279751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 983.279765][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 983.279800][ C0] RIP: 0010:ieee80211_sta_get_rates+0x37e/0x650 [ 983.279828][ C0] Code: af f8 f6 45 39 e7 75 82 e8 8f ad f8 f6 49 8d 7e 04 48 89 fa 48 c1 ea 03 42 0f b6 0c 2a 48 89 fa 83 e2 07 83 c2 01 38 ca 7c 08 <84> c9 0f 85 ff 01 00 00 45 0f b7 76 04 44 8b 7c 24 20 44 89 f7 44 [ 983.279851][ C0] RSP: 0018:ffffc9000c51f950 EFLAGS: 00000202 [ 983.279869][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 983.279883][ C0] RDX: 0000000000000001 RSI: ffffffff8a932b51 RDI: ffff88805f0e5c48 [ 983.279899][ C0] RBP: 0000000000000001 R08: 0000000000000004 R09: 0000000000000000 [ 983.279913][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 983.279927][ C0] R13: dffffc0000000000 R14: ffff88805f0e5c44 R15: 0000000000000000 [ 983.279943][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 983.279966][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 983.279983][ C0] CR2: 00007f0300646fe4 CR3: 000000007cc44000 CR4: 00000000003506f0 [ 983.279998][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 983.280012][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 983.280027][ C0] Call Trace: [ 983.280034][ C0] [ 983.280042][ C0] ? show_regs+0x8c/0xa0 [ 983.280079][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 983.280116][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 983.280150][ C0] ? nmi_handle+0x1a9/0x5c0 [ 983.280173][ C0] ? ieee80211_sta_get_rates+0x37e/0x650 [ 983.280199][ C0] ? default_do_nmi+0x6a/0x160 [ 983.280230][ C0] ? exc_nmi+0x170/0x1e0 [ 983.280259][ C0] ? end_repeat_nmi+0xf/0x53 [ 983.280286][ C0] ? ieee80211_sta_get_rates+0x361/0x650 [ 983.280311][ C0] ? ieee80211_sta_get_rates+0x37e/0x650 [ 983.280337][ C0] ? ieee80211_sta_get_rates+0x37e/0x650 [ 983.280364][ C0] ? ieee80211_sta_get_rates+0x37e/0x650 [ 983.280389][ C0] [ 983.280396][ C0] [ 983.280410][ C0] ieee80211_ibss_rx_queued_mgmt+0x1039/0x2f40 [ 983.280444][ C0] ? hlock_class+0x4e/0x130 [ 983.280477][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 983.280508][ C0] ? lock_acquire+0x1b1/0x560 [ 983.280543][ C0] ? find_held_lock+0x2d/0x110 [ 983.280570][ C0] ? find_held_lock+0x2d/0x110 [ 983.280599][ C0] ? kcov_remote_start+0x370/0x6e0 [ 983.280627][ C0] ? mark_held_locks+0x9f/0xe0 [ 983.280662][ C0] ? kcov_remote_start+0x3cf/0x6e0 [ 983.280691][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 983.280728][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 983.280765][ C0] cfg80211_wiphy_work+0x445/0x760 [ 983.280798][ C0] process_one_work+0x9c5/0x1b40 [ 983.280827][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 983.280857][ C0] ? __pfx_process_one_work+0x10/0x10 [ 983.280900][ C0] ? assign_work+0x1a0/0x250 [ 983.280937][ C0] worker_thread+0x6c8/0xf00 [ 983.280965][ C0] ? __kthread_parkme+0x148/0x220 [ 983.280995][ C0] ? __pfx_worker_thread+0x10/0x10 [ 983.281017][ C0] kthread+0x2c1/0x3a0 [ 983.281043][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 983.281078][ C0] ? __pfx_kthread+0x10/0x10 [ 983.281107][ C0] ret_from_fork+0x45/0x80 [ 983.281142][ C0] ? __pfx_kthread+0x10/0x10 [ 983.281170][ C0] ret_from_fork_asm+0x1a/0x30 [ 983.281213][ C0] [ 983.627100][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.741257][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 983.748130][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 983.758289][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 983.768342][ T30] Call Trace: [ 983.771611][ T30] [ 983.774529][ T30] dump_stack_lvl+0x3d/0x1f0 [ 983.779112][ T30] panic+0x6dc/0x7c0 [ 983.783006][ T30] ? __pfx_panic+0x10/0x10 [ 983.787414][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 983.792776][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 983.798762][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 983.804140][ T30] ? watchdog+0xd76/0x1240 [ 983.808543][ T30] ? watchdog+0xd69/0x1240 [ 983.812947][ T30] watchdog+0xd87/0x1240 [ 983.817179][ T30] ? __pfx_watchdog+0x10/0x10 [ 983.821840][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 983.827033][ T30] ? __kthread_parkme+0x148/0x220 [ 983.832051][ T30] ? __pfx_watchdog+0x10/0x10 [ 983.836710][ T30] kthread+0x2c1/0x3a0 [ 983.840766][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 983.845953][ T30] ? __pfx_kthread+0x10/0x10 [ 983.850552][ T30] ret_from_fork+0x45/0x80 [ 983.854960][ T30] ? __pfx_kthread+0x10/0x10 [ 983.859535][ T30] ret_from_fork_asm+0x1a/0x30 [ 983.864298][ T30] [ 983.867534][ T30] Kernel Offset: disabled [ 983.871848][ T30] Rebooting in 86400 seconds..