last executing test programs: 11m20.337166228s ago: executing program 32 (id=1596): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) 9m8.577196308s ago: executing program 4 (id=3461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 9m8.160832235s ago: executing program 4 (id=3474): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0xe3dd7ebc0b529a10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 9m6.658316785s ago: executing program 4 (id=3476): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0003050000001408b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m5.774930281s ago: executing program 2 (id=3477): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9m5.007584227s ago: executing program 3 (id=3481): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 9m4.634191949s ago: executing program 3 (id=3483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) 9m4.545010262s ago: executing program 4 (id=3485): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = dup(r0) getpeername$packet(r1, 0x0, 0x0) 9m4.287453808s ago: executing program 4 (id=3486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "fd82"}]}}, 0x0}, 0x0) 9m4.274028524s ago: executing program 3 (id=3487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 9m4.171956847s ago: executing program 5 (id=3489): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 9m3.914460397s ago: executing program 3 (id=3500): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)=0xffffffc0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x1, 0xf, 0x5, 0x1, 0x0, 0x4, 0x0}) 9m3.829999614s ago: executing program 5 (id=3491): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x8d) 9m3.821003986s ago: executing program 2 (id=3492): syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xee, 0x7, 0x9}}}}}]}}]}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) 9m3.592347916s ago: executing program 3 (id=3494): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 9m3.347491572s ago: executing program 5 (id=3496): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x3, 0x0, @ioapic={0x2, 0x2, 0x6, 0x4, 0x0, [{0x7, 0x5, 0x6, '\x00', 0x7}, {0x3, 0x7, 0x7, '\x00', 0x40}, {0x0, 0x7, 0x1, '\x00', 0x4}, {0x72, 0x7f, 0xd, '\x00', 0x1}, {0x9, 0x9, 0x1, '\x00', 0x6}, {0xb, 0x53, 0x4, '\x00', 0x6}, {0x7, 0x4, 0xf, '\x00', 0x5}, {0x7d, 0x80, 0x6, '\x00', 0xe}, {0x9, 0x6, 0x6}, {0x35, 0x6, 0x4, '\x00', 0xf}, {0x1, 0x5, 0x2, '\x00', 0xf}, {0x3, 0xc, 0x6, '\x00', 0x81}, {0x1, 0x3, 0x2, '\x00', 0x1}, {0x9, 0x3, 0x80, '\x00', 0x5}, {0x74, 0x6, 0x2, '\x00', 0x5}, {0xff, 0x8, 0x7, '\x00', 0xfc}, {0x6, 0x9, 0xf2, '\x00', 0x4}, {0xf, 0xde, 0x96, '\x00', 0x81}, {0x7, 0x2, 0x4f, '\x00', 0x8}, {0x1, 0x8, 0x3, '\x00', 0x80}, {0x74, 0xb, 0x8, '\x00', 0x8}, {0x8, 0x1, 0x9f, '\x00', 0x7}, {0x1, 0x8, 0x6, '\x00', 0xe2}, {0x40, 0xf8, 0x0, '\x00', 0x4}]}}) 9m3.28616021s ago: executing program 0 (id=3497): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) 9m3.15446783s ago: executing program 0 (id=3498): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 9m3.097328199s ago: executing program 2 (id=3499): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18) 9m2.946450889s ago: executing program 0 (id=3501): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r0, r0}, &(0x7f0000001480)=""/83, 0x53, &(0x7f0000000400)={&(0x7f00000002c0)={'sha384-generic\x00'}}) 9m2.940519389s ago: executing program 5 (id=3502): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842) 9m2.84460165s ago: executing program 2 (id=3503): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) 9m2.614066157s ago: executing program 0 (id=3504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) time(0x0) 9m2.604607201s ago: executing program 5 (id=3505): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x14040, 0x0, 0x0) 9m2.479609022s ago: executing program 2 (id=3506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) 9m2.361693968s ago: executing program 0 (id=3507): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x3, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0xfe}]}, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 9m2.344008846s ago: executing program 5 (id=3508): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) 9m2.114214291s ago: executing program 4 (id=3509): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 9m2.108242753s ago: executing program 0 (id=3510): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) 8m54.288453648s ago: executing program 3 (id=3511): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 8m52.711871716s ago: executing program 2 (id=3512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) 8m31.925386701s ago: executing program 33 (id=3510): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) 4m36.925769973s ago: executing program 34 (id=3508): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) 4m26.914952346s ago: executing program 35 (id=3509): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 4m26.852435194s ago: executing program 36 (id=3512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) 4m26.776716804s ago: executing program 37 (id=3511): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 56.372224393s ago: executing program 6 (id=5960): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) 48.806824554s ago: executing program 1 (id=6196): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1f) setresuid(0x0, r1, r1) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 48.366681039s ago: executing program 1 (id=6201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 44.853139092s ago: executing program 6 (id=5960): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) 37.076628858s ago: executing program 1 (id=6201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 35.749251147s ago: executing program 6 (id=5960): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) 24.942534652s ago: executing program 1 (id=6201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 22.949967646s ago: executing program 6 (id=5960): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) 14.01049462s ago: executing program 1 (id=6201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 13.131351124s ago: executing program 6 (id=5960): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) 3.437631173s ago: executing program 1 (id=6201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 2.515290601s ago: executing program 6 (id=5960): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) 1.460127686s ago: executing program 7 (id=6494): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88eeffffff1b0012800b00010067656e65766500000c00028008000100040000000a0001"], 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.311798386s ago: executing program 8 (id=6498): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x7, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.296770294s ago: executing program 9 (id=6499): openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 1.00673065s ago: executing program 9 (id=6500): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) 1.006583211s ago: executing program 8 (id=6501): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x0, r0, 0x34, {0x1, 0x7f}, 0x8}, 0x1) 835.436705ms ago: executing program 8 (id=6502): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000000, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 715.61574ms ago: executing program 9 (id=6503): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd120}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 471.220166ms ago: executing program 7 (id=6504): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3fa}}, [0xff, 0x80, 0x9, 0x8, 0x7, 0x101, 0x6, 0x3, 0x1, 0x5, 0x8000000000000001, 0x8, 0xa23a, 0x7ff, 0x8a1]}, &(0x7f00000002c0)=0xfc) 398.774422ms ago: executing program 7 (id=6505): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x80004, 0x1}) 326.436928ms ago: executing program 7 (id=6506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) ioctl$KVM_SET_MSRS(r2, 0x4018aee1, &(0x7f0000000040)=ANY=[]) 314.976695ms ago: executing program 8 (id=6507): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) read(r0, &(0x7f00000000c0)=""/113, 0x71) fcntl$getown(r0, 0x9) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 299.011087ms ago: executing program 9 (id=6508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) 213.781323ms ago: executing program 8 (id=6509): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 152.567533ms ago: executing program 7 (id=6510): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) r1 = fanotify_init(0x4, 0x800) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x641, 0x1020, r2, 0x0) 126.738805ms ago: executing program 9 (id=6511): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r1}, 0x20) 82.011519ms ago: executing program 7 (id=6512): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 71.87987ms ago: executing program 8 (id=6513): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) 0s ago: executing program 9 (id=6514): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): e [ 755.384197][ T3117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.416865][ T3117] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.423940][ T3117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.656961][T21178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.009820][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6015'. [ 756.046954][T21178] veth0_vlan: entered promiscuous mode [ 756.124850][T21178] veth1_vlan: entered promiscuous mode [ 756.186465][ T30] audit: type=1400 audit(2000001109.103:1018): avc: denied { getattr } for pid=21390 comm="syz.8.6017" lport=47075 faddr=::ffff:172.20.255.187 fport=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 756.250811][T21178] veth0_macvtap: entered promiscuous mode [ 756.259651][T21178] veth1_macvtap: entered promiscuous mode [ 756.294313][T21178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.308052][T21178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.318663][T21178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.339573][T21178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.370083][T21178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.389939][T21178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.403232][T21178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.415289][T21178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.433325][T21178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.443561][T21178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.454691][T21178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.466092][T21178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.489996][T15253] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 756.504042][T21178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.513740][T21178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.527209][T21178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.537124][ T5822] Bluetooth: hci2: command tx timeout [ 756.547744][T21178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.569912][ T5810] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 756.661657][T15253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.681206][T15253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.705650][T15253] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 756.713448][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.724900][T15253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.730194][ T5810] usb 10-1: Using ep0 maxpacket: 16 [ 756.745080][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.756713][T15253] usb 2-1: config 0 descriptor?? [ 756.762873][ T5810] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.801212][ T5810] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.829390][ T5810] usb 10-1: config 0 interface 0 has no altsetting 0 [ 756.843920][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.855360][ T5810] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 756.874558][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.882738][ T5810] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.911075][ T5810] usb 10-1: config 0 descriptor?? [ 757.346433][ T5810] hid (null): unknown global tag 0xe [ 757.382881][ T5810] cougar 0003:060B:500A.0050: unexpected long global item [ 757.383335][ T5810] cougar 0003:060B:500A.0050: parse failed [ 757.419947][ T5810] cougar 0003:060B:500A.0050: probe with driver cougar failed with error -22 [ 757.459581][ T30] audit: type=1400 audit(2000001110.373:1019): avc: denied { kexec_image_load } for pid=21452 comm="syz.8.6029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 757.610855][T15254] usb 10-1: USB disconnect, device number 38 [ 757.832329][ T5810] usb 2-1: USB disconnect, device number 41 [ 758.036546][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6035'. [ 758.190187][T15254] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 758.239294][T21494] netlink: 'syz.9.6037': attribute type 5 has an invalid length. [ 758.280463][ T2916] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.373621][T15254] usb 9-1: Using ep0 maxpacket: 32 [ 758.393887][T15254] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 758.430670][T15254] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 758.454644][T15254] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 758.473139][T15254] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.496238][T15254] usb 9-1: config 0 descriptor?? [ 758.525474][T21474] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 758.545267][T15254] hub 9-1:0.0: USB hub found [ 758.748419][T15254] hub 9-1:0.0: 1 port detected [ 758.816619][T11635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.826608][T11635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.835483][T11635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.846493][T11635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.858305][T11635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.904268][T21511] lo speed is unknown, defaulting to 1000 [ 758.950064][T15254] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 758.957600][T15254] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 758.968356][T15254] usbhid 9-1:0.0: can't add hid device: -71 [ 758.974380][T15254] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 759.013655][T15254] usb 9-1: USB disconnect, device number 30 [ 759.227517][ T2916] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.451459][ T2916] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.529331][ T2916] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.559483][T21511] chnl_net:caif_netlink_parms(): no params data found [ 759.715795][T21511] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.723563][T21511] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.731588][T21511] bridge_slave_0: entered allmulticast mode [ 759.739186][T21511] bridge_slave_0: entered promiscuous mode [ 759.750751][T21511] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.758853][T21511] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.766353][T21511] bridge_slave_1: entered allmulticast mode [ 759.774047][T21511] bridge_slave_1: entered promiscuous mode [ 759.857713][ T2916] bridge_slave_1: left allmulticast mode [ 759.866399][ T2916] bridge_slave_1: left promiscuous mode [ 759.872222][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.883361][ T2916] bridge_slave_0: left allmulticast mode [ 759.888997][ T2916] bridge_slave_0: left promiscuous mode [ 759.905185][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.565136][ T2916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.579984][ T2916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.603012][ T2916] bond0 (unregistering): Released all slaves [ 760.632270][T21511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.704496][T21511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.809161][T21511] team0: Port device team_slave_0 added [ 760.835006][T21511] team0: Port device team_slave_1 added [ 760.878485][T21511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.887715][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.924430][T21511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.940251][ T5822] Bluetooth: hci2: command tx timeout [ 760.956037][T21511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.963835][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.000034][T21511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.059910][T15254] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 761.129055][T21511] hsr_slave_0: entered promiscuous mode [ 761.148104][T21511] hsr_slave_1: entered promiscuous mode [ 761.168900][T21511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.193940][T21511] Cannot create hsr debugfs directory [ 761.230649][T15254] usb 10-1: Using ep0 maxpacket: 32 [ 761.263771][T15254] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.277521][T15254] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 761.298114][T15254] usb 10-1: config 0 interface 0 has no altsetting 0 [ 761.305408][T15254] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 761.314895][T15254] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.324080][ T2916] hsr_slave_0: left promiscuous mode [ 761.325703][T15254] usb 10-1: config 0 descriptor?? [ 761.344468][ T2916] hsr_slave_1: left promiscuous mode [ 761.354207][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.362392][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.370916][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.378422][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.406404][ T2916] veth1_macvtap: left promiscuous mode [ 761.413811][ T2916] veth0_macvtap: left promiscuous mode [ 761.419422][ T2916] veth1_vlan: left promiscuous mode [ 761.424803][ T2916] veth0_vlan: left promiscuous mode [ 761.555876][T21597] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 761.562408][T21597] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 761.572384][T21597] vhci_hcd vhci_hcd.0: Device attached [ 761.596059][T21597] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6) [ 761.602574][T21597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 761.615641][T21597] vhci_hcd vhci_hcd.0: Device attached [ 761.632158][T21597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 761.761021][T15256] vhci_hcd: vhci_device speed not set [ 761.768989][ T5810] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5810 comm: kworker/0:3) [ 761.820071][T15256] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 761.847359][T21619] vhci_hcd: connection closed [ 761.847654][T21617] vhci_hcd: connection reset by peer [ 761.858589][ T83] vhci_hcd: stop threads [ 761.869138][T15254] usbhid 10-1:0.0: can't add hid device: -71 [ 761.877724][ T83] vhci_hcd: release socket [ 761.882869][ T83] vhci_hcd: disconnect device [ 761.887726][T15254] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 761.896751][ T30] audit: type=1400 audit(2000001114.813:1020): avc: denied { module_load } for pid=21623 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 761.907221][T15254] usb 10-1: USB disconnect, device number 39 [ 761.922614][ T83] vhci_hcd: stop threads [ 761.926855][ T83] vhci_hcd: release socket [ 761.935894][ T83] vhci_hcd: disconnect device [ 762.052559][ T30] audit: type=1326 audit(2000001114.963:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21625 comm="syz.1.6076" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae2678e969 code=0x0 [ 762.136666][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 762.172027][ T2916] team0 (unregistering): Port device team_slave_0 removed [ 762.566353][T21630] bridge0: port 3(gretap0) entered blocking state [ 762.579279][T21630] bridge0: port 3(gretap0) entered disabled state [ 762.588734][T21630] gretap0: entered allmulticast mode [ 762.598068][T21630] gretap0: entered promiscuous mode [ 762.633998][T21631] gretap0: left allmulticast mode [ 762.643333][T21631] gretap0: left promiscuous mode [ 762.657531][T21631] bridge0: port 3(gretap0) entered disabled state [ 762.659613][T21635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.017038][ T5822] Bluetooth: hci2: command tx timeout [ 763.737166][T21511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 763.754377][T21511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 763.773123][ T30] audit: type=1326 audit(2000001116.683:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.7.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3958e969 code=0x7fc00000 [ 763.807233][T21511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 763.815613][T21683] netlink: 184 bytes leftover after parsing attributes in process `syz.9.6094'. [ 763.957075][T21511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 764.137804][T21511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.160738][T21511] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.207837][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.214965][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.238080][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.245219][T13692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.257562][T21697] syzkaller1: entered promiscuous mode [ 764.270917][T21697] syzkaller1: entered allmulticast mode [ 764.304719][T21697] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 348 [ 764.370810][ T30] audit: type=1326 audit(2000001117.293:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.7.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9a3958e969 code=0x7fc00000 [ 764.487423][T21709] veth1_macvtap: left promiscuous mode [ 764.512552][T21709] macsec0: entered promiscuous mode [ 764.539074][T21709] macsec0: entered allmulticast mode [ 764.601494][T21714] veth1_macvtap: entered promiscuous mode [ 764.630157][T21714] veth1_macvtap: entered allmulticast mode [ 764.656047][T21714] macsec0: left promiscuous mode [ 764.678667][T21714] macsec0: left allmulticast mode [ 764.722435][T21714] veth1_macvtap: left allmulticast mode [ 764.811172][T21511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.093720][ T5822] Bluetooth: hci2: command tx timeout [ 765.131496][ T3071] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 765.313659][ T3071] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.344442][ T3071] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 765.345410][T21738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.376445][ T3071] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 765.398797][T21511] veth0_vlan: entered promiscuous mode [ 765.407480][ T3071] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 765.429907][ T5810] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 765.443515][T21511] veth1_vlan: entered promiscuous mode [ 765.476421][T21511] veth0_macvtap: entered promiscuous mode [ 765.481549][ T3071] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 765.506697][ T3071] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 765.524816][ T3071] usb 10-1: Manufacturer: syz [ 765.526434][T21511] veth1_macvtap: entered promiscuous mode [ 765.545073][ T3071] usb 10-1: config 0 descriptor?? [ 765.576552][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.607447][ T5810] usb 9-1: Using ep0 maxpacket: 8 [ 765.627605][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.655712][ T30] audit: type=1400 audit(2000001118.573:1024): avc: denied { read } for pid=21771 comm="syz.7.6119" path="socket:[71994]" dev="sockfs" ino=71994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 765.679288][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.694918][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.705156][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.727837][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.767165][T21511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.812078][ T5810] usb 9-1: unable to get BOS descriptor or descriptor too short [ 765.832575][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.863980][ T5810] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 765.878820][ T5810] usb 9-1: can't read configurations, error -71 [ 765.887520][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.909211][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.926982][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.942479][ T3071] rc_core: IR keymap rc-hauppauge not found [ 765.944555][T21511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.968673][T21511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.977602][ T3071] Registered IR keymap rc-empty [ 765.979734][T21511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.989939][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.001847][T21511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.012548][T21511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.041048][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.070709][ T3071] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 766.113067][ T3071] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input69 [ 766.154893][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.160589][ T5863] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 766.176672][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.204128][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.244683][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.261443][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.263079][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.305177][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.335514][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.348740][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 766.364271][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.371603][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.389013][ T5863] usb 2-1: config 0 descriptor?? [ 766.420207][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.426003][ T5863] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 766.460516][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.513409][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.554219][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.592292][ T3071] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 766.641623][ T3071] mceusb 10-1:0.0: Registered 棽 with mce emulator interface version 1 [ 766.654402][ T3071] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 766.713193][ T3071] usb 10-1: USB disconnect, device number 40 [ 766.930259][T15256] vhci_hcd: vhci_device speed not set [ 767.148982][T21813] veth1_macvtap: left promiscuous mode [ 767.155381][T21813] macsec0: entered promiscuous mode [ 767.163725][T21813] macsec0: entered allmulticast mode [ 767.192710][T21813] veth1_macvtap: entered promiscuous mode [ 767.198478][T21813] veth1_macvtap: entered allmulticast mode [ 767.214906][T21813] macsec0: left promiscuous mode [ 767.220887][T21813] macsec0: left allmulticast mode [ 767.226603][T21813] veth1_macvtap: left allmulticast mode [ 767.239999][ T5863] gspca_stv06xx: I2C: Read error writing address: -71 [ 767.278623][ T5863] usb 2-1: USB disconnect, device number 42 [ 767.407366][T21829] openvswitch: netlink: IPv4 tun info is not correct [ 767.690302][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.057697][T11635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 768.076077][T11635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 768.084526][T11635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 768.093976][T11635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 768.101625][T11635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 768.110624][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.191468][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.206998][T21853] lo speed is unknown, defaulting to 1000 [ 768.286422][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.511272][ T13] bridge_slave_1: left allmulticast mode [ 768.517080][ T13] bridge_slave_1: left promiscuous mode [ 768.523649][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.535109][ T13] bridge_slave_0: left allmulticast mode [ 768.541638][ T13] bridge_slave_0: left promiscuous mode [ 768.547385][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.032604][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.048856][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.069385][ T13] bond0 (unregistering): Released all slaves [ 769.149901][T15256] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 769.251754][ T30] audit: type=1326 audit(2000001122.173:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 769.320383][T15256] usb 2-1: Using ep0 maxpacket: 16 [ 769.353992][T15256] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 769.368531][T15256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.414447][T15256] usb 2-1: config 0 has no interface number 0 [ 769.456649][T15256] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 769.527374][T15256] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 769.541218][T21853] chnl_net:caif_netlink_parms(): no params data found [ 769.582161][T15256] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 769.631567][T15256] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 769.675365][T15256] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 769.697422][T15256] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 769.768378][T15256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.817725][T15256] usb 2-1: config 0 descriptor?? [ 769.837140][T21858] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 769.891617][T21875] GUP no longer grows the stack in syz.9.6152 (21875): 200000004000-200000008000 (200000002000) [ 769.915812][T15256] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.936745][T21875] CPU: 0 UID: 0 PID: 21875 Comm: syz.9.6152 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 769.936773][T21875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 769.936785][T21875] Call Trace: [ 769.936791][T21875] [ 769.936799][T21875] dump_stack_lvl+0x16c/0x1f0 [ 769.936828][T21875] gup_vma_lookup+0x1d2/0x220 [ 769.936852][T21875] __get_user_pages+0x234/0x36f0 [ 769.936888][T21875] ? __pfx___get_user_pages+0x10/0x10 [ 769.936921][T21875] get_user_pages_remote+0x258/0xb20 [ 769.936947][T21875] ? __pfx_mtree_load+0x10/0x10 [ 769.936971][T21875] ? __pfx_get_user_pages_remote+0x10/0x10 [ 769.937006][T21875] __access_remote_vm+0x233/0x9d0 [ 769.937031][T21875] ? __pfx___access_remote_vm+0x10/0x10 [ 769.937058][T21875] proc_pid_cmdline_read+0x4de/0x900 [ 769.937084][T21875] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 769.937111][T21875] ? rw_verify_area+0xcf/0x680 [ 769.937132][T21875] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 769.937156][T21875] vfs_readv+0x6bc/0x8a0 [ 769.937184][T21875] ? __pfx_vfs_readv+0x10/0x10 [ 769.937215][T21875] ? kmem_cache_free+0x2d4/0x4d0 [ 769.937256][T21875] ? __fget_files+0x20e/0x3c0 [ 769.937290][T21875] ? do_preadv+0x1af/0x270 [ 769.937312][T21875] do_preadv+0x1af/0x270 [ 769.937340][T21875] ? __pfx_do_preadv+0x10/0x10 [ 769.937361][T21875] ? rcu_is_watching+0x12/0xc0 [ 769.937390][T21875] do_syscall_64+0xcd/0x260 [ 769.937415][T21875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.937433][T21875] RIP: 0033:0x7f7536d8e969 [ 769.937447][T21875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.937464][T21875] RSP: 002b:00007f7537b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 769.937481][T21875] RAX: ffffffffffffffda RBX: 00007f7536fb5fa0 RCX: 00007f7536d8e969 [ 769.937493][T21875] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 769.937505][T21875] RBP: 00007f7536e10ab1 R08: 0000000000000200 R09: 0000000000000000 [ 769.937517][T21875] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 769.937528][T21875] R13: 0000000000000000 R14: 00007f7536fb5fa0 R15: 00007ffc75bec288 [ 769.937552][T21875] [ 770.185334][ T30] audit: type=1326 audit(2000001123.083:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.208933][ T30] audit: type=1326 audit(2000001123.083:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.232451][ T30] audit: type=1326 audit(2000001123.083:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.240607][ T5822] Bluetooth: hci2: command tx timeout [ 770.255957][ T30] audit: type=1326 audit(2000001123.083:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.285490][ T30] audit: type=1326 audit(2000001123.083:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.309109][ T30] audit: type=1326 audit(2000001123.083:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.334816][ T30] audit: type=1326 audit(2000001123.083:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.359935][ T30] audit: type=1326 audit(2000001123.083:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.385862][ T30] audit: type=1326 audit(2000001123.083:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5f38e969 code=0x7fc00000 [ 770.400348][ T6146] udevd[6146]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.443997][ T5810] usb 2-1: USB disconnect, device number 43 [ 770.513735][ T13] hsr_slave_0: left promiscuous mode [ 770.557947][ T13] hsr_slave_1: left promiscuous mode [ 770.581317][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.588753][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.646333][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.693518][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.738410][ T13] veth1_macvtap: left promiscuous mode [ 770.752146][ T13] veth0_macvtap: left promiscuous mode [ 770.762540][ T13] veth1_vlan: left promiscuous mode [ 770.777228][ T13] veth0_vlan: left promiscuous mode [ 770.852224][T15245] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 771.104337][T15245] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 771.116205][T15245] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 771.131081][T15245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.144733][T15245] usb 9-1: config 0 descriptor?? [ 771.154544][T21894] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 771.440196][ T13] team0 (unregistering): Port device team_slave_1 removed [ 771.486768][ T13] team0 (unregistering): Port device team_slave_0 removed [ 771.585083][T15245] elan 0003:04F3:0755.0051: unknown main item tag 0x1 [ 771.602457][T15245] elan 0003:04F3:0755.0051: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 771.801019][ T3071] usb 9-1: USB disconnect, device number 33 [ 771.940055][T15256] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 771.965066][T21853] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.004892][T21853] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.024732][T21853] bridge_slave_0: entered allmulticast mode [ 772.034214][T21853] bridge_slave_0: entered promiscuous mode [ 772.051339][T21853] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.058446][T21853] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.066143][T21853] bridge_slave_1: entered allmulticast mode [ 772.083108][T21853] bridge_slave_1: entered promiscuous mode [ 772.126440][T15256] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 772.135956][T21911] lo speed is unknown, defaulting to 1000 [ 772.154785][T15256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.173018][T15256] usb 2-1: Product: syz [ 772.184874][T21853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.186526][T15256] usb 2-1: Manufacturer: syz [ 772.206241][T21923] loop6: detected capacity change from 0 to 7 [ 772.219900][T15256] usb 2-1: SerialNumber: syz [ 772.225353][T21853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.231199][T15256] usb 2-1: config 0 descriptor?? [ 772.263955][T15256] ch341 2-1:0.0: ch341-uart converter detected [ 772.290141][ T5822] Bluetooth: hci2: command tx timeout [ 772.326785][T21853] team0: Port device team_slave_0 added [ 772.336504][T21853] team0: Port device team_slave_1 added [ 772.466819][T15256] usb 2-1: failed to receive control message: -32 [ 772.481906][T15256] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 772.527953][T21853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.544994][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.571537][T21853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.614807][T21853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.626596][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.690145][T21853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.850834][T21853] hsr_slave_0: entered promiscuous mode [ 772.865231][T21853] hsr_slave_1: entered promiscuous mode [ 772.872085][T21914] lo speed is unknown, defaulting to 1000 [ 773.243507][T21960] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6176'. [ 773.428809][T21962] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6176'. [ 773.442365][T21962] nbd: device at index 64 is going down [ 773.852992][T21853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 773.898885][T21853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 773.939363][T21853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 773.989897][T21853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 774.142871][T21853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.179124][T21853] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.201684][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.208816][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.245468][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.252640][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.368748][T21853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 774.380454][ T5822] Bluetooth: hci2: command tx timeout [ 774.470483][T21991] netlink: 'syz.7.6186': attribute type 1 has an invalid length. [ 774.643482][T21999] syzkaller1: entered promiscuous mode [ 774.661741][T21999] syzkaller1: entered allmulticast mode [ 774.691567][T21853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.740630][T15245] usb 2-1: USB disconnect, device number 44 [ 774.774712][T15245] ch341 2-1:0.0: device disconnected [ 774.840713][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 774.840729][ T30] audit: type=1400 audit(2000001127.763:1093): avc: denied { setopt } for pid=22010 comm="syz.8.6191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 774.866536][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.890260][T15249] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 775.044570][T22023] sctp: [Deprecated]: syz.8.6194 (pid 22023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.044570][T22023] Use struct sctp_sack_info instead [ 775.099411][T15249] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 775.119988][T15249] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 775.172572][T15249] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 775.215677][T15249] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.255084][T22002] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 775.280408][T15249] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.402687][T18442] bond0: (slave syz_tun): Releasing backup interface [ 775.512572][T21853] veth0_vlan: entered promiscuous mode [ 775.556081][T21853] veth1_vlan: entered promiscuous mode [ 775.556724][T15249] usb 10-1: USB disconnect, device number 41 [ 775.647388][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6202'. [ 775.692929][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.763259][T22049] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.770753][T22049] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.879179][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.962557][T21853] veth0_macvtap: entered promiscuous mode [ 775.981479][T21853] veth1_macvtap: entered promiscuous mode [ 776.025867][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.202800][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.263232][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.298413][T11635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 776.307463][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.308070][T11635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.317970][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.335263][T11635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.365438][T11635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 776.375106][T11635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 776.384696][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.397023][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.407878][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.423569][T21853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.460653][ T5822] Bluetooth: hci2: command tx timeout [ 776.509491][T22057] lo speed is unknown, defaulting to 1000 [ 776.509717][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.571058][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.581514][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.610523][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.642158][T21853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.664073][T21853] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.689697][T21853] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.709913][T21853] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.730781][T21853] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.855106][T22067] lo speed is unknown, defaulting to 1000 [ 777.161911][ T82] bridge_slave_1: left allmulticast mode [ 777.177933][ T82] bridge_slave_1: left promiscuous mode [ 777.200370][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.218942][ T82] bridge_slave_0: left allmulticast mode [ 777.238962][ T82] bridge_slave_0: left promiscuous mode [ 777.261208][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.357878][T22097] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 777.391878][T22097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 777.421800][T22097] overlayfs: failed to set uuid (548/file1, err=-13); falling back to uuid=null. [ 777.879757][T22110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.122444][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.153950][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.171055][ T82] bond0 (unregistering): Released all slaves [ 778.281048][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.305013][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.452007][ T5822] Bluetooth: hci1: command tx timeout [ 778.476752][T22124] sctp: [Deprecated]: syz.9.6219 (pid 22124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.476752][T22124] Use struct sctp_sack_info instead [ 778.547470][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.599732][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.718041][T22067] chnl_net:caif_netlink_parms(): no params data found [ 778.932552][ T82] hsr_slave_0: left promiscuous mode [ 778.948036][ T82] hsr_slave_1: left promiscuous mode [ 778.957116][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.971074][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.326334][ T82] team0 (unregistering): Port device team_slave_1 removed [ 779.364030][ T82] team0 (unregistering): Port device team_slave_0 removed [ 779.785335][ T30] audit: type=1400 audit(2000001132.703:1094): avc: denied { unmount } for pid=22161 comm="syz.7.6227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 779.951037][T22067] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.958169][T22067] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.965963][T22067] bridge_slave_0: entered allmulticast mode [ 779.973493][T22067] bridge_slave_0: entered promiscuous mode [ 780.004739][T22067] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.013434][T22067] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.030114][T22067] bridge_slave_1: entered allmulticast mode [ 780.037485][T22067] bridge_slave_1: entered promiscuous mode [ 780.056023][T11635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.080742][T11635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.088493][T11635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.097264][T11635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.104790][T11635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.128156][T22067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.159929][T22170] lo speed is unknown, defaulting to 1000 [ 780.175746][T22067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.405291][ T82] IPVS: stop unused estimator thread 0... [ 780.430298][T22067] team0: Port device team_slave_0 added [ 780.446407][T22067] team0: Port device team_slave_1 added [ 780.530402][T11635] Bluetooth: hci1: command tx timeout [ 780.570083][ T5810] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 780.581473][T22067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.588442][T22067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.615277][T22067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.663719][ T82] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.686976][T22067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.694068][T22067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.720549][T22067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.754569][ T5810] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.766018][ T5810] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.776970][ T5810] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 780.786253][ T5810] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.805657][ T5810] usb 9-1: config 0 descriptor?? [ 780.814350][ T82] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.853324][T22067] hsr_slave_0: entered promiscuous mode [ 780.859402][T22067] hsr_slave_1: entered promiscuous mode [ 780.866269][T22067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.874056][T22067] Cannot create hsr debugfs directory [ 780.898981][ T82] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.973672][ T82] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.196938][T22170] chnl_net:caif_netlink_parms(): no params data found [ 781.246646][ T5810] cm6533_jd 0003:0D8C:0022.0052: No inputs registered, leaving [ 781.285023][ T5810] cm6533_jd 0003:0D8C:0022.0052: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 781.475749][ T82] bridge_slave_1: left allmulticast mode [ 781.489048][ T82] bridge_slave_1: left promiscuous mode [ 781.494825][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.505260][ T82] bridge_slave_0: left allmulticast mode [ 781.511132][ T82] bridge_slave_0: left promiscuous mode [ 781.516815][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.562565][T15256] usb 9-1: USB disconnect, device number 34 [ 781.784138][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.795060][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.804559][ T82] bond0 (unregistering): Released all slaves [ 781.917055][T22170] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.924223][T22170] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.932109][T22170] bridge_slave_0: entered allmulticast mode [ 781.938788][T22170] bridge_slave_0: entered promiscuous mode [ 781.948735][T22170] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.956029][T22170] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.963244][T22170] bridge_slave_1: entered allmulticast mode [ 781.970559][T22170] bridge_slave_1: entered promiscuous mode [ 782.056429][T22170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.078981][T22170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.134429][T11635] Bluetooth: hci2: command tx timeout [ 782.245920][T22170] team0: Port device team_slave_0 added [ 782.283505][ T82] hsr_slave_0: left promiscuous mode [ 782.289365][ T82] hsr_slave_1: left promiscuous mode [ 782.296287][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.303735][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.313592][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.321492][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.347695][ T82] veth1_macvtap: left promiscuous mode [ 782.363816][ T82] veth0_macvtap: left promiscuous mode [ 782.369444][ T82] veth1_vlan: left promiscuous mode [ 782.378629][ T82] veth0_vlan: left promiscuous mode [ 782.617387][T11635] Bluetooth: hci1: command tx timeout [ 782.742067][ T82] team0 (unregistering): Port device team_slave_1 removed [ 782.774533][ T82] team0 (unregistering): Port device team_slave_0 removed [ 783.070739][T22224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6239'. [ 783.099137][T22170] team0: Port device team_slave_1 added [ 783.185844][T22170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.193672][T22170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.222655][T22170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.242103][T22067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 783.270174][T22067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 783.290357][T22170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.297301][T22170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.343835][T22170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.356402][T22067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 783.371858][T22067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 783.428468][T22232] SELinux: failed to load policy [ 783.483768][T22170] hsr_slave_0: entered promiscuous mode [ 783.498055][T22170] hsr_slave_1: entered promiscuous mode [ 783.827692][T22067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.888973][T22067] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.923775][T22067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 783.953636][T22067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.992913][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.000081][T13692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.041546][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.048693][T13692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.210367][T11635] Bluetooth: hci2: command tx timeout [ 784.486010][T22067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.534276][T22170] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 784.561543][T22170] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 784.581058][T22170] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 784.603716][T22170] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 784.682016][T22067] veth0_vlan: entered promiscuous mode [ 784.692148][T11635] Bluetooth: hci1: command tx timeout [ 784.742310][T22067] veth1_vlan: entered promiscuous mode [ 784.787607][T22170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.809001][T22067] veth0_macvtap: entered promiscuous mode [ 784.838892][T22067] veth1_macvtap: entered promiscuous mode [ 784.873186][T22170] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.904504][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.911624][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.972316][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.979452][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.073669][T22067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.085365][T22067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.103147][T22067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.115207][T22067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.126602][T22067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.138632][T22067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.153778][T22067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.178560][T22067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.213002][T22067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.233121][T22067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.250246][T22067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.271009][T22067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.306827][T22067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.330379][T22067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.339085][T22067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.369889][T22067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.594729][T22336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22336 comm=syz.8.6265 [ 785.615076][ T3117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.645464][ T3117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.681308][T13692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.712921][T13692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.863366][T22170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.291063][T11635] Bluetooth: hci2: command tx timeout [ 786.376264][T22170] veth0_vlan: entered promiscuous mode [ 786.406480][T22170] veth1_vlan: entered promiscuous mode [ 786.468339][T22170] veth0_macvtap: entered promiscuous mode [ 786.497189][T22170] veth1_macvtap: entered promiscuous mode [ 786.559003][T22170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.591827][T22170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.634166][T22170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.659741][T22170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.674981][T22170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.685958][T22170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.699662][T22170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.715698][T22170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.744755][T22170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.927475][T22170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.970704][T22170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.991517][T22170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.005063][T22170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.018662][T22170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.042255][T22170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.057711][T22170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.139041][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.228404][T22170] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.262955][T22170] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.284803][T22170] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.309949][T22170] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.501777][T15249] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 787.518903][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.558594][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.644453][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.670249][T15249] usb 10-1: Using ep0 maxpacket: 16 [ 787.675571][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.689814][T15249] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.740965][T15249] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.755795][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.767479][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.769759][T15249] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 787.788968][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.811941][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.834784][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.873138][T15249] usb 10-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 787.876158][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.915675][T15249] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.957657][T15249] usb 10-1: config 0 descriptor?? [ 788.049004][T22411] lo speed is unknown, defaulting to 1000 [ 788.108117][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.241582][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.428308][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x2 [ 788.453146][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.473852][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.503514][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.531320][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.539019][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.554831][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.565216][ T82] bridge_slave_1: left allmulticast mode [ 788.573558][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.575629][ T82] bridge_slave_1: left promiscuous mode [ 788.587298][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.594466][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.602194][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.611727][ T82] bridge_slave_0: left allmulticast mode [ 788.617424][T15249] hid-multitouch 0003:045E:9994.0053: unknown main item tag 0x0 [ 788.623085][ T82] bridge_slave_0: left promiscuous mode [ 788.631591][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.633757][T15249] hid-multitouch 0003:045E:9994.0053: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.9-1/input0 [ 788.658768][T15249] usb 10-1: USB disconnect, device number 42 [ 788.915895][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.926064][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.937488][ T82] bond0 (unregistering): Released all slaves [ 789.117160][T22411] chnl_net:caif_netlink_parms(): no params data found [ 789.349104][T13727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 789.358867][T13727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 789.367605][T13727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 789.375398][T13727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 789.398595][T13727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 789.401211][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6286'. [ 789.548372][T22462] vlan2: entered allmulticast mode [ 789.564176][T22462] erspan0: entered allmulticast mode [ 789.720677][ T82] hsr_slave_0: left promiscuous mode [ 789.733308][ T82] hsr_slave_1: left promiscuous mode [ 789.747031][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.762972][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.779571][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.787154][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.815823][ T82] veth1_macvtap: left promiscuous mode [ 789.825464][ T82] veth0_macvtap: left promiscuous mode [ 789.831578][ T82] veth1_vlan: left promiscuous mode [ 789.836947][ T82] veth0_vlan: left promiscuous mode [ 789.889990][T15247] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 789.890421][T13727] Bluetooth: hci1: command tx timeout [ 789.898002][T11635] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 790.071551][T15247] usb 9-1: Using ep0 maxpacket: 16 [ 790.091565][T15247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.103521][T15247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.113382][T15247] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 790.122679][T15247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.136440][T15247] usb 9-1: config 0 descriptor?? [ 790.379284][ T82] team0 (unregistering): Port device team_slave_1 removed [ 790.416591][ T82] team0 (unregistering): Port device team_slave_0 removed [ 790.584910][T15247] input: HID 05ac:8241 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:8241.0054/input/input71 [ 790.694353][T15247] appleir 0003:05AC:8241.0054: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 790.767800][T22411] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.776418][T22411] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.784075][T22411] bridge_slave_0: entered allmulticast mode [ 790.791778][T22411] bridge_slave_0: entered promiscuous mode [ 790.799560][T22411] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.807185][T22411] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.815876][T22411] bridge_slave_1: entered allmulticast mode [ 790.823243][T22411] bridge_slave_1: entered promiscuous mode [ 790.929000][T22411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.945286][T22411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.960915][T22454] lo speed is unknown, defaulting to 1000 [ 791.053949][T22411] team0: Port device team_slave_0 added [ 791.075049][T22411] team0: Port device team_slave_1 added [ 791.166925][T22411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.193946][T22411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.219852][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.270046][T22411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.294373][T22411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.311591][T22411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.337469][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.389919][T22411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.413765][T11635] Bluetooth: hci2: command tx timeout [ 791.571876][ T82] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.633352][T22411] hsr_slave_0: entered promiscuous mode [ 791.640071][T22411] hsr_slave_1: entered promiscuous mode [ 791.646340][T22411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.655075][T22411] Cannot create hsr debugfs directory [ 791.680740][ T82] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.764872][ T82] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.836106][ T82] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.969979][T11635] Bluetooth: hci1: command tx timeout [ 792.024573][T22454] chnl_net:caif_netlink_parms(): no params data found [ 792.076136][T22509] [U]  [ 792.472990][T15247] usb 9-1: USB disconnect, device number 35 [ 792.607173][ T82] bridge_slave_1: left allmulticast mode [ 792.616268][ T82] bridge_slave_1: left promiscuous mode [ 792.632024][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.652151][ T82] bridge_slave_0: left allmulticast mode [ 792.657817][ T82] bridge_slave_0: left promiscuous mode [ 792.681321][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.040032][T13701] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 793.078155][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.088396][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.098143][ T82] bond0 (unregistering): Released all slaves [ 793.107917][T22454] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.115076][T22454] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.123699][T22454] bridge_slave_0: entered allmulticast mode [ 793.134546][T22454] bridge_slave_0: entered promiscuous mode [ 793.151221][T22454] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.167573][T22454] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.180491][T22454] bridge_slave_1: entered allmulticast mode [ 793.187814][T22454] bridge_slave_1: entered promiscuous mode [ 793.202797][T13701] usb 9-1: Using ep0 maxpacket: 16 [ 793.223975][T13701] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.239959][T13701] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.251090][T15248] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 793.267670][T13701] usb 9-1: config 0 interface 0 has no altsetting 0 [ 793.279736][ T30] audit: type=1326 audit(2000001146.193:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22560 comm="syz.7.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3958e969 code=0x7ffc0000 [ 793.303575][T13701] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 793.314856][T13701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.324956][ T30] audit: type=1326 audit(2000001146.193:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22560 comm="syz.7.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3958e969 code=0x7ffc0000 [ 793.360756][T13701] usb 9-1: config 0 descriptor?? [ 793.373656][ T30] audit: type=1326 audit(2000001146.193:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22560 comm="syz.7.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f9a3958e969 code=0x7ffc0000 [ 793.404323][T15248] usb 10-1: Using ep0 maxpacket: 8 [ 793.405752][ T30] audit: type=1326 audit(2000001146.193:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22560 comm="syz.7.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3958e969 code=0x7ffc0000 [ 793.424617][T15248] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 793.433790][ T30] audit: type=1326 audit(2000001146.193:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22560 comm="syz.7.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3958e969 code=0x7ffc0000 [ 793.469097][T15248] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 793.491414][T11635] Bluetooth: hci2: command tx timeout [ 793.499349][T15248] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 793.515175][T15248] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 793.529476][T15248] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 793.542554][T15248] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 793.551848][T15248] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.578781][T15248] usb 10-1: config 0 descriptor?? [ 793.585562][T22557] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 793.621085][T22454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.647604][T22454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.735247][T22454] team0: Port device team_slave_0 added [ 793.801359][T13701] hid (null): global environment stack underflow [ 793.813574][T22454] team0: Port device team_slave_1 added [ 793.947439][T22454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.966820][T22454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.012918][T22454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.049963][T15254] usb 9-1: USB disconnect, device number 36 [ 794.056091][T13727] Bluetooth: hci1: command tx timeout [ 794.175043][T22454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.196023][T22454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.230730][T22454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.260837][ T82] hsr_slave_0: left promiscuous mode [ 794.267374][ T82] hsr_slave_1: left promiscuous mode [ 794.274358][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.282278][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.294783][T15247] usb 10-1: USB disconnect, device number 43 [ 794.303409][T11635] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 794.334534][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.344852][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.365952][ T82] veth1_macvtap: left promiscuous mode [ 794.371891][ T82] veth0_macvtap: left promiscuous mode [ 794.377452][ T82] veth1_vlan: left promiscuous mode [ 794.383181][ T82] veth0_vlan: left promiscuous mode [ 794.740247][ T82] team0 (unregistering): Port device team_slave_1 removed [ 794.775830][ T82] team0 (unregistering): Port device team_slave_0 removed [ 795.416742][T22454] hsr_slave_0: entered promiscuous mode [ 795.429575][T22454] hsr_slave_1: entered promiscuous mode [ 795.459421][T22411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 795.510141][T22411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 795.519686][T22625] input: syz0 as /devices/virtual/input/input72 [ 795.522458][T22411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 795.550734][T22411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 795.577327][T11635] Bluetooth: hci2: command tx timeout [ 795.809668][T22411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.903668][T22411] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.916639][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.923844][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.972059][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.979213][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.142517][T11635] Bluetooth: hci1: command tx timeout [ 796.307375][T22454] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 796.350639][T22454] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 796.375083][T22454] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 796.401118][T22454] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 796.427924][T22411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.590987][T22411] veth0_vlan: entered promiscuous mode [ 796.627072][T22411] veth1_vlan: entered promiscuous mode [ 796.664868][T22454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.712727][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6340'. [ 796.724055][T22454] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.757547][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.764658][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.792378][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.799558][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.882656][T22411] veth0_macvtap: entered promiscuous mode [ 796.924457][T22411] veth1_macvtap: entered promiscuous mode [ 797.011472][T22411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.075950][T22411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.099479][T22411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.119920][T22411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.140102][T22411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.170713][T22411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.182319][T22411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.232765][T22411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.263257][T22411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.289869][T22411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.329704][T22411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.351556][T22411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.418451][T22411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.444706][T22411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.480178][T22411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.512214][T22411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.546894][T22454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.650796][T11635] Bluetooth: hci2: command tx timeout [ 797.713917][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.762238][T10052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.779580][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.807809][T10052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.902965][T15254] IPVS: starting estimator thread 0... [ 797.911419][T22720] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 798.020045][T22726] IPVS: using max 42 ests per chain, 100800 per kthread [ 798.032123][T22732] program syz.8.6356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 798.268963][T22454] veth0_vlan: entered promiscuous mode [ 798.295734][T22454] veth1_vlan: entered promiscuous mode [ 798.386731][T22454] veth0_macvtap: entered promiscuous mode [ 798.413812][T22454] veth1_macvtap: entered promiscuous mode [ 798.478601][T22454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.532252][T22454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.579923][T22454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.603688][T22454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.634044][T22454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.669939][T22454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.710192][T22454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.729966][T22454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.751512][T22454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.797128][T22454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.839905][T22454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.849865][T22454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.862894][T22454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.899968][T22454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.917640][T22454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.961073][T22454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.075396][T22454] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.115210][T22454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.156273][T22454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.166430][T22454] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.270350][T13701] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 799.308025][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.453376][T13701] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.468424][T13701] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 799.500918][T13701] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 799.550710][T13701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 799.558753][T13701] usb 9-1: SerialNumber: syz [ 799.606029][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.788288][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.795952][T13727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 799.813864][T13727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 799.826894][T13727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 799.838712][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.850402][T13701] usb 9-1: 0:2 : does not exist [ 799.862342][T13727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 799.874439][T15247] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 799.875804][T13701] usb 9-1: USB disconnect, device number 37 [ 799.890497][T13727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 799.906854][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.945507][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.995540][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.050689][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.072778][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.080322][T15247] usb 10-1: Using ep0 maxpacket: 16 [ 800.082903][T22800] lo speed is unknown, defaulting to 1000 [ 800.093829][T15247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.126403][T15247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.142603][T15247] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 800.152143][T15247] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.180757][T15247] usb 10-1: config 0 descriptor?? [ 800.286202][ T12] bridge_slave_1: left allmulticast mode [ 800.303908][ T12] bridge_slave_1: left promiscuous mode [ 800.320379][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.332893][ T12] bridge_slave_0: left allmulticast mode [ 800.338556][ T12] bridge_slave_0: left promiscuous mode [ 800.360038][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.622993][T15247] playstation 0003:054C:05C4.0056: unknown main item tag 0x0 [ 800.644249][T15247] playstation 0003:054C:05C4.0056: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.9-1/input0 [ 800.709253][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.719095][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.727767][T15248] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 800.736797][ T12] bond0 (unregistering): Released all slaves [ 800.822513][T15247] playstation 0003:054C:05C4.0056: Failed to retrieve feature with reportID 18: -71 [ 800.847246][T15247] playstation 0003:054C:05C4.0056: Failed to retrieve DualShock4 pairing info: -71 [ 800.862261][T15247] playstation 0003:054C:05C4.0056: Failed to get MAC address from DualShock4 [ 800.876640][T15247] playstation 0003:054C:05C4.0056: Failed to create dualshock4. [ 800.884679][T15248] usb 9-1: Using ep0 maxpacket: 32 [ 800.891548][T15248] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.903148][T15248] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.914619][T15247] playstation 0003:054C:05C4.0056: probe with driver playstation failed with error -71 [ 800.928412][T15248] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 800.938970][T15247] usb 10-1: USB disconnect, device number 44 [ 800.945484][T15248] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.959807][T15248] usb 9-1: config 0 descriptor?? [ 801.128732][T22800] chnl_net:caif_netlink_parms(): no params data found [ 801.377179][T22800] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.385504][T22800] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.398525][T22800] bridge_slave_0: entered allmulticast mode [ 801.428049][T22800] bridge_slave_0: entered promiscuous mode [ 801.442864][T15248] savu 0003:1E7D:2D5A.0057: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 801.445851][T22800] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.467473][T22800] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.515306][T22800] bridge_slave_1: entered allmulticast mode [ 801.535480][T22800] bridge_slave_1: entered promiscuous mode [ 801.549668][ T12] hsr_slave_0: left promiscuous mode [ 801.559567][ T12] hsr_slave_1: left promiscuous mode [ 801.569477][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.577725][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.591675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.599176][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.631917][ T12] veth1_macvtap: left promiscuous mode [ 801.637496][ T12] veth0_macvtap: left promiscuous mode [ 801.646942][ T12] veth1_vlan: left promiscuous mode [ 801.656665][ T12] veth0_vlan: left promiscuous mode [ 801.684096][T15248] usb 9-1: USB disconnect, device number 38 [ 801.970128][T13727] Bluetooth: hci1: command tx timeout [ 802.164154][T11635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 802.179095][T11635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 802.187837][ T12] team0 (unregistering): Port device team_slave_1 removed [ 802.196338][T11635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 802.214718][T11635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 802.226309][T11635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 802.274034][ T12] team0 (unregistering): Port device team_slave_0 removed [ 802.344678][T22848] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6381'. [ 802.721657][T22800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.739472][T22841] lo speed is unknown, defaulting to 1000 [ 802.750185][T22800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.873083][T22800] team0: Port device team_slave_0 added [ 802.900611][T22800] team0: Port device team_slave_1 added [ 802.934152][ T3117] Bluetooth: hci4: Frame reassembly failed (-84) [ 802.984065][T22800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.000154][T22800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.034021][T22800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.061717][T22800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.069249][T22800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.097005][T22800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.187448][T22800] hsr_slave_0: entered promiscuous mode [ 803.195620][T22800] hsr_slave_1: entered promiscuous mode [ 803.202276][T22800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.210457][T22800] Cannot create hsr debugfs directory [ 803.285102][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.398902][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.433259][T22841] chnl_net:caif_netlink_parms(): no params data found [ 803.494634][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.575312][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.642796][T22841] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.651161][T22841] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.658298][T22841] bridge_slave_0: entered allmulticast mode [ 803.667512][T22841] bridge_slave_0: entered promiscuous mode [ 803.697725][T22841] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.706721][T22841] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.714298][T22841] bridge_slave_1: entered allmulticast mode [ 803.727628][T22841] bridge_slave_1: entered promiscuous mode [ 803.816347][T22841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.864401][T22841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.928559][T22841] team0: Port device team_slave_0 added [ 804.053240][T11635] Bluetooth: hci1: command tx timeout [ 804.083035][T22841] team0: Port device team_slave_1 added [ 804.246218][T22841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.256554][T22841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.285286][T22841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.295932][T11635] Bluetooth: hci2: command tx timeout [ 804.316193][ T12] bridge_slave_1: left allmulticast mode [ 804.329927][ T12] bridge_slave_1: left promiscuous mode [ 804.336942][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.359491][ T12] bridge_slave_0: left allmulticast mode [ 804.374104][ T12] bridge_slave_0: left promiscuous mode [ 804.390113][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.841107][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.852683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.862558][ T12] bond0 (unregistering): Released all slaves [ 804.873215][T22841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.881307][T22841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.908116][T22841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.997060][T22841] hsr_slave_0: entered promiscuous mode [ 805.004925][T22841] hsr_slave_1: entered promiscuous mode [ 805.011674][T11635] Bluetooth: hci4: command 0xfc11 tx timeout [ 805.024100][T22841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 805.031266][T13727] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 805.044291][T22841] Cannot create hsr debugfs directory [ 805.351381][T15248] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 805.389584][T15248] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 805.507246][T22800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.566689][T22800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.593451][T22800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.686768][T22800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.871112][ T12] hsr_slave_0: left promiscuous mode [ 805.879592][ T12] hsr_slave_1: left promiscuous mode [ 805.891745][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.899593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.910546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.918149][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.942741][ T12] veth1_macvtap: left promiscuous mode [ 805.948415][ T12] veth0_macvtap: left promiscuous mode [ 805.954534][ T12] veth1_vlan: left promiscuous mode [ 805.960331][ T12] veth0_vlan: left promiscuous mode [ 806.130429][T13727] Bluetooth: hci1: command tx timeout [ 806.373607][T13727] Bluetooth: hci2: command tx timeout [ 806.654737][ T12] team0 (unregistering): Port device team_slave_1 removed [ 806.693687][ T12] team0 (unregistering): Port device team_slave_0 removed [ 807.206086][T22800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.242095][T22800] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.268777][T10052] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.275917][T10052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.341131][T13697] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.348247][T13697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.478875][T22800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 807.509912][T22800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.643777][T22841] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 807.679682][T22841] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 807.768814][T22978] bridge0: entered promiscuous mode [ 807.790730][T22978] macvlan2: entered promiscuous mode [ 807.830790][T22985] macvlan3: entered promiscuous mode [ 807.885032][T22841] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 807.923785][T22841] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 808.006456][T22800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.158103][T22800] veth0_vlan: entered promiscuous mode [ 808.185848][T22800] veth1_vlan: entered promiscuous mode [ 808.211263][T13727] Bluetooth: hci1: command tx timeout [ 808.217043][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.269950][T15247] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 808.270271][T22800] veth0_macvtap: entered promiscuous mode [ 808.301315][T22800] veth1_macvtap: entered promiscuous mode [ 808.336595][T22841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.388304][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.415715][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.431983][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.439938][T15247] usb 9-1: Using ep0 maxpacket: 32 [ 808.444644][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.457507][T13727] Bluetooth: hci2: command tx timeout [ 808.459517][T15247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.473996][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.484694][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.501122][T22800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.518077][T15247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.520947][T22841] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.558074][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.600071][T15247] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 808.609197][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.629883][T15247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.650742][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.665003][T15247] usb 9-1: config 0 descriptor?? [ 808.670942][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.692732][T22800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.728155][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.735309][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.794962][T22800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.807172][T22800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.816804][T22800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.829370][T22800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.845999][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.853156][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.088987][T13692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.117396][T13692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.140265][T15247] savu 0003:1E7D:2D5A.0059: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 809.221780][T13697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.229622][T13697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.365071][T22841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.433863][ T3071] usb 9-1: USB disconnect, device number 39 [ 809.645014][T22841] veth0_vlan: entered promiscuous mode [ 809.662021][T22841] veth1_vlan: entered promiscuous mode [ 809.683152][T22841] veth0_macvtap: entered promiscuous mode [ 809.691551][T22841] veth1_macvtap: entered promiscuous mode [ 809.705935][T22841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.716821][T22841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.727059][T22841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.739146][T22841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.751341][T22841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.763132][T22841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.773074][T22841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.784164][T22841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.794956][T22841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.807089][T22841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.817844][T22841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.829412][T22841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.839988][T22841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.849807][T22841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.860422][T22841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.871325][T22841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.886260][T22841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.895453][T22841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.905792][T22841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.915003][T22841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.029161][T13692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.133114][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.148278][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.173439][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.181967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.206658][T13692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.642581][T13692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.777905][T11635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 810.802270][T11635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.820753][T11635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.828592][T11635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.841606][T11635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 810.880146][T13692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.980071][T23071] lo speed is unknown, defaulting to 1000 [ 811.154436][T13692] bridge_slave_1: left allmulticast mode [ 811.160733][T13692] bridge_slave_1: left promiscuous mode [ 811.169203][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.179510][T13692] bridge_slave_0: left allmulticast mode [ 811.185765][T13692] bridge_slave_0: left promiscuous mode [ 811.192015][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.464342][T13692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.474750][T13692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.484234][T13692] bond0 (unregistering): Released all slaves [ 811.824538][T23071] chnl_net:caif_netlink_parms(): no params data found [ 811.975778][T23098] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6445'. [ 812.160395][T13692] hsr_slave_0: left promiscuous mode [ 812.178197][T13692] hsr_slave_1: left promiscuous mode [ 812.195271][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.210336][T13692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.261049][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.268472][T13692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.332562][T13692] veth1_macvtap: left promiscuous mode [ 812.338111][T13692] veth0_macvtap: left promiscuous mode [ 812.353142][T13692] veth1_vlan: left promiscuous mode [ 812.358491][T13692] veth0_vlan: left promiscuous mode [ 812.372517][T11635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 812.387136][T11635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 812.398116][T11635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 812.409086][T11635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 812.416940][T11635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 812.519922][T15249] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 812.684015][T15249] usb 9-1: Using ep0 maxpacket: 16 [ 812.706990][T15249] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 812.722534][T15249] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 812.736819][T15249] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 812.751863][T15249] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 812.760115][T15249] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 812.775481][T15249] usb 9-1: config 0 has no interface number 0 [ 812.781674][T15249] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 812.794151][T15249] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 812.813162][T15249] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 812.823172][T15249] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.847736][T13692] team0 (unregistering): Port device team_slave_1 removed [ 812.855248][T15249] usb 9-1: config 0 interface 125 has no altsetting 0 [ 812.869075][T15249] usb 9-1: config 0 interface 125 has no altsetting 2 [ 812.883045][T15249] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 812.897984][T15249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.912182][T15249] usb 9-1: Product: syz [ 812.916383][T15249] usb 9-1: Manufacturer: syz [ 812.924057][T15249] usb 9-1: SerialNumber: syz [ 812.929074][T13692] team0 (unregistering): Port device team_slave_0 removed [ 812.943853][T11635] Bluetooth: hci1: command tx timeout [ 812.952269][T15249] usb 9-1: config 0 descriptor?? [ 812.960838][T15249] usb 9-1: selecting invalid altsetting 2 [ 813.385217][T23114] lo speed is unknown, defaulting to 1000 [ 813.386786][T23071] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.402210][T23071] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.433216][T23071] bridge_slave_0: entered allmulticast mode [ 813.446479][T23071] bridge_slave_0: entered promiscuous mode [ 813.469953][T23071] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.478131][T23071] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.500147][T23071] bridge_slave_1: entered allmulticast mode [ 813.521152][T23071] bridge_slave_1: entered promiscuous mode [ 813.627223][T23071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.675079][T23071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.751638][T23071] team0: Port device team_slave_0 added [ 813.763906][T23071] team0: Port device team_slave_1 added [ 813.772505][T23110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.792357][T23110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.813215][ C0] usb 9-1: async_complete: urb error -71 [ 813.818966][ C0] usb 9-1: async_complete: urb error -71 [ 813.845023][T15249] get_1284_register: usb error -71 [ 813.861130][T15249] uss720 9-1:0.125: probe with driver uss720 failed with error -71 [ 813.876559][T23071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.885019][T15249] usb 9-1: USB disconnect, device number 40 [ 813.896976][T23071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.943990][T23071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.990552][ T5854] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 814.018999][T13692] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.039117][T23071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.046955][T23071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.081715][T23071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.139807][T13692] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.171913][ T5854] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.193195][ T5854] usb 10-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 814.216923][ T5854] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 814.217765][T23071] hsr_slave_0: entered promiscuous mode [ 814.231133][ T5854] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 814.234713][T23071] hsr_slave_1: entered promiscuous mode [ 814.245891][ T5854] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 814.279353][T13692] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.302527][ T5854] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 814.318022][ T5854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.335080][ T5854] usb 10-1: Product: syz [ 814.339468][ T5854] usb 10-1: Manufacturer: syz [ 814.344629][ T5854] usb 10-1: SerialNumber: syz [ 814.450476][T11635] Bluetooth: hci2: command tx timeout [ 814.485619][T13692] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.793876][T23114] chnl_net:caif_netlink_parms(): no params data found [ 814.931415][T13692] bridge_slave_1: left allmulticast mode [ 814.937776][T13692] bridge_slave_1: left promiscuous mode [ 814.946390][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.955093][T13692] bridge_slave_0: left allmulticast mode [ 814.961631][T13692] bridge_slave_0: left promiscuous mode [ 814.967328][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.014211][T11635] Bluetooth: hci1: command tx timeout [ 815.249178][T13692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.259695][T13692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.272779][T13692] bond0 (unregistering): Released all slaves [ 815.386465][ T5854] cdc_ncm 10-1:1.0: bind() failure [ 815.389986][T23114] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.398472][ T5854] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 815.406687][T23114] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.406840][T23114] bridge_slave_0: entered allmulticast mode [ 815.414657][ T5854] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 815.425812][T23114] bridge_slave_0: entered promiscuous mode [ 815.429238][ T5854] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 815.445510][T23114] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.460351][ T5854] usb 10-1: USB disconnect, device number 45 [ 815.464614][T23114] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.473656][T23114] bridge_slave_1: entered allmulticast mode [ 815.499696][T23114] bridge_slave_1: entered promiscuous mode [ 815.609774][T23174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 815.618010][T23174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 815.628883][T23174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 815.636349][T23174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 815.644172][T23174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 815.652303][T23174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 815.708207][T23114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.817468][T23114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.985097][T23188] netlink: 'syz.8.6463': attribute type 6 has an invalid length. [ 816.007494][T23114] team0: Port device team_slave_0 added [ 816.020621][T23188] netlink: 'syz.8.6463': attribute type 3 has an invalid length. [ 816.032329][T23188] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.6463'. [ 816.061040][T23114] team0: Port device team_slave_1 added [ 816.319370][T13692] hsr_slave_0: left promiscuous mode [ 816.349970][T13692] hsr_slave_1: left promiscuous mode [ 816.360606][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.376504][T13692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.387206][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.404489][T13692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.451448][T13692] veth1_macvtap: left promiscuous mode [ 816.456989][T13692] veth0_macvtap: left promiscuous mode [ 816.470642][T13692] veth1_vlan: left promiscuous mode [ 816.475971][T13692] veth0_vlan: left promiscuous mode [ 816.535430][T11635] Bluetooth: hci2: command tx timeout [ 816.634978][T23217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.926473][T13692] team0 (unregistering): Port device team_slave_1 removed [ 816.962264][T13692] team0 (unregistering): Port device team_slave_0 removed [ 817.070286][ T5854] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 817.090020][T11635] Bluetooth: hci1: command tx timeout [ 817.224646][ T5854] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 817.239265][ T5854] usb 10-1: config 0 has no interface number 0 [ 817.251847][ T5854] usb 10-1: config 0 interface 41 has no altsetting 0 [ 817.264926][ T5854] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 817.274198][ T5854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.285681][ T5854] usb 10-1: Product: syz [ 817.290091][ T5854] usb 10-1: Manufacturer: syz [ 817.294833][ T5854] usb 10-1: SerialNumber: syz [ 817.306333][ T5854] usb 10-1: config 0 descriptor?? [ 817.354899][T23114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.362402][T23114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.388479][T23114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.462888][T23114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.471525][T23114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.498505][T23114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.607827][T23071] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 817.651667][T23071] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 817.661478][T23071] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 817.691260][T23114] hsr_slave_0: entered promiscuous mode [ 817.702082][T23114] hsr_slave_1: entered promiscuous mode [ 817.710426][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6474'. [ 817.720618][T23114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.740168][T23114] Cannot create hsr debugfs directory [ 817.748369][T23071] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 818.037059][T23071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.055163][T23071] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.084685][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.091823][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.102028][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.109095][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.159800][T23071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 818.324766][T23114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 818.334148][T23114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 818.346704][T23114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 818.356547][T23114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.366686][ T5854] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 818.388855][ T5854] usb 10-1: USB disconnect, device number 46 [ 818.418085][T23071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.487455][T23071] veth0_vlan: entered promiscuous mode [ 818.507113][T23071] veth1_vlan: entered promiscuous mode [ 818.532155][T23114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.553577][T23114] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.565924][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.572999][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.592717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.599869][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.615149][T11635] Bluetooth: hci2: command tx timeout [ 818.648430][T23071] veth0_macvtap: entered promiscuous mode [ 818.696539][T23071] veth1_macvtap: entered promiscuous mode [ 818.740907][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.752015][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.766432][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.777761][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.791647][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.802202][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.814768][T23071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.839069][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.869912][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.879741][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.900684][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.921627][T23071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.944150][T23071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.954507][T23071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.978684][T23071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.997677][T23071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.153516][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.170333][T11635] Bluetooth: hci1: command tx timeout [ 819.184894][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.226285][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.249789][T23114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.258504][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.545678][T23114] veth0_vlan: entered promiscuous mode [ 819.559535][T23114] veth1_vlan: entered promiscuous mode [ 819.595851][T23114] veth0_macvtap: entered promiscuous mode [ 819.606054][T23114] veth1_macvtap: entered promiscuous mode [ 819.623777][T23114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.635146][T23114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.647971][T23114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.664519][T23114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.674491][T23114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.685461][T23114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.697982][T23114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.712269][T23114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.723418][T23114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.741508][T23114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.752083][T23114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.766696][T23114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.778437][T23114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.792947][T23114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.803975][T23114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.817503][T23114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.844404][T23114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.857568][T23114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.869641][T23114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.883442][T23114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.989407][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.031379][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.116250][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.143324][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.271626][T23309] loop8: detected capacity change from 0 to 7 [ 820.296241][ T5799] Dev loop8: unable to read RDB block 7 [ 820.310086][ T5799] loop8: unable to read partition table [ 820.315820][ T5799] loop8: partition table beyond EOD, truncated [ 820.343306][T23309] Dev loop8: unable to read RDB block 7 [ 820.354927][T23309] loop8: unable to read partition table [ 820.361329][T23309] loop8: partition table beyond EOD, truncated [ 820.377452][T23309] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 820.562984][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.549366][T13727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 821.562592][T13727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 821.573395][T13727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 821.583815][T13727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 821.592789][T13727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 821.632305][T23369] lo speed is unknown, defaulting to 1000 [ 821.825925][T23369] chnl_net:caif_netlink_parms(): no params data found [ 821.884770][T23369] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.892368][T23369] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.899452][T23369] bridge_slave_0: entered allmulticast mode [ 821.906666][T23369] bridge_slave_0: entered promiscuous mode [ 821.914470][T23369] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.921654][T23369] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.928733][T23369] bridge_slave_1: entered allmulticast mode [ 821.935445][T23369] bridge_slave_1: entered promiscuous mode [ 821.956502][T23369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.967376][T23369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.996099][T23369] team0: Port device team_slave_0 added [ 822.003996][T23369] team0: Port device team_slave_1 added [ 822.027467][T23369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.034484][T23369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.061363][T23369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.087149][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.101787][T23369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.108762][T23369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.137121][T23369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.167764][T23369] hsr_slave_0: entered promiscuous mode [ 822.174242][T23369] hsr_slave_1: entered promiscuous mode [ 822.180914][T23369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.188474][T23369] Cannot create hsr debugfs directory [ 822.209352][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.288215][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.422744][ T36] bridge_slave_1: left allmulticast mode [ 822.428427][ T36] bridge_slave_1: left promiscuous mode [ 822.434965][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.443776][ T36] bridge_slave_0: left allmulticast mode [ 822.449394][ T36] bridge_slave_0: left promiscuous mode [ 822.455883][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.540582][T23383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.545746][T23381] netlink: 11 bytes leftover after parsing attributes in process `syz.7.6494'. [ 822.855117][T11635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 822.877441][T11635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 822.892321][T11635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 822.910080][T11635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 822.917569][T11635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 823.357927][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.367857][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.377697][ T36] bond0 (unregistering): Released all slaves [ 823.584423][T23407] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 823.650730][T13727] Bluetooth: hci1: command tx timeout [ 823.762962][T23390] lo speed is unknown, defaulting to 1000 [ 928.989788][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 928.996757][ C0] rcu: 1-...!: (0 ticks this GP) idle=bf04/1/0x4000000000000000 softirq=151763/151763 fqs=0 [ 929.007920][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23390/1:b..l P13723/1:b..l [ 929.017140][ C0] rcu: (detected by 0, t=10502 jiffies, g=90853, q=545 ncpus=2) [ 929.024862][ C0] Sending NMI from CPU 0 to CPUs 1: [ 929.024885][ C1] NMI backtrace for cpu 1 [ 929.024897][ C1] CPU: 1 UID: 0 PID: 13692 Comm: kworker/u8:9 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 929.024915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 929.024925][ C1] Workqueue: krdsd rds_connect_worker [ 929.024942][ C1] RIP: 0010:lock_acquire+0x15f/0x350 [ 929.024962][ C1] Code: c7 c7 e4 20 cd 8d e8 00 ca d4 09 45 89 e0 89 e9 44 89 ea 65 ff 05 b9 3a 0c 12 48 81 24 24 00 02 00 00 44 89 f6 48 89 df 6a 00 <6a> 00 6a 00 ff b4 24 88 00 00 00 41 0f 94 c1 41 57 45 0f b6 c9 e8 [ 929.024976][ C1] RSP: 0018:ffffc90000a08cb8 EFLAGS: 00000046 [ 929.024986][ C1] RAX: 0000000000000001 RBX: ffffffff9adcc780 RCX: 0000000000000000 [ 929.024995][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9adcc780 [ 929.025003][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 929.025011][ C1] R10: 0000000000000001 R11: ffffffff9adcc768 R12: 0000000000000001 [ 929.025019][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 929.025028][ C1] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 929.025042][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 929.025051][ C1] CR2: 0000200000000200 CR3: 0000000029f87000 CR4: 00000000003526f0 [ 929.025060][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 929.025068][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 929.025076][ C1] Call Trace: [ 929.025082][ C1] [ 929.025089][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 929.025105][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 929.025119][ C1] ? debug_object_deactivate+0x135/0x3a0 [ 929.025144][ C1] debug_object_deactivate+0x135/0x3a0 [ 929.025162][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 929.025181][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 929.025201][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 929.025217][ C1] __hrtimer_run_queues+0x46f/0xad0 [ 929.025233][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 929.025246][ C1] ? read_tsc+0x9/0x20 [ 929.025266][ C1] hrtimer_interrupt+0x397/0x8e0 [ 929.025284][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 929.025299][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 929.025315][ C1] [ 929.025320][ C1] [ 929.025325][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 929.025339][ C1] RIP: 0010:stack_access_ok+0xc/0x200 [ 929.025355][ C1] Code: ba fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 <41> 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 48 [ 929.025367][ C1] RSP: 0018:ffffc9001279f5a8 EFLAGS: 00000246 [ 929.025378][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91179264 [ 929.025386][ C1] RDX: 0000000000000008 RSI: ffffc9001279ff50 RDI: ffffc9001279f628 [ 929.025395][ C1] RBP: ffffc9001279f670 R08: ffffffff91179268 R09: 0000000000000000 [ 929.025403][ C1] R10: 0000000000000002 R11: 0000000000005f54 R12: ffffc9001279f678 [ 929.025411][ C1] R13: ffffc9001279f628 R14: ffffc9001279ff58 R15: ffffc9001279f65c [ 929.025426][ C1] unwind_next_frame+0xb7d/0x20a0 [ 929.025441][ C1] ? ret_from_fork+0x45/0x80 [ 929.025455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 929.025471][ C1] arch_stack_walk+0x94/0x100 [ 929.025489][ C1] ? __pfx_kthread+0x10/0x10 [ 929.025501][ C1] ? ret_from_fork+0x45/0x80 [ 929.025514][ C1] stack_trace_save+0x8e/0xc0 [ 929.025530][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 929.025547][ C1] ? kasan_save_stack+0x42/0x60 [ 929.025565][ C1] ? kasan_save_stack+0x33/0x60 [ 929.025583][ C1] kasan_save_stack+0x33/0x60 [ 929.025600][ C1] ? kasan_save_stack+0x33/0x60 [ 929.025618][ C1] ? kasan_record_aux_stack+0xb8/0xd0 [ 929.025633][ C1] ? kmem_cache_free+0x160/0x4d0 [ 929.025651][ C1] ? __sk_destruct+0x5b3/0x980 [ 929.025668][ C1] ? sk_destruct+0xc2/0xf0 [ 929.025679][ C1] ? __sk_free+0xf4/0x3e0 [ 929.025689][ C1] ? sk_free+0x6a/0x90 [ 929.025699][ C1] ? tcp_close+0xd3/0x120 [ 929.025716][ C1] ? inet_release+0x13c/0x280 [ 929.025732][ C1] ? sock_release+0x8e/0x1d0 [ 929.025747][ C1] ? rds_tcp_conn_path_connect+0x4aa/0x7f0 [ 929.025764][ C1] ? rds_connect_worker+0x1ac/0x2c0 [ 929.025776][ C1] ? process_one_work+0x9cc/0x1b70 [ 929.025790][ C1] ? worker_thread+0x6c8/0xf10 [ 929.025802][ C1] ? kthread+0x3c2/0x780 [ 929.025812][ C1] ? ret_from_fork+0x45/0x80 [ 929.025834][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 929.025850][ C1] kmem_cache_free+0x160/0x4d0 [ 929.025867][ C1] ? security_sk_free+0x9d/0x1a0 [ 929.025882][ C1] ? __sk_destruct+0x5b3/0x980 [ 929.025901][ C1] __sk_destruct+0x5b3/0x980 [ 929.025920][ C1] sk_destruct+0xc2/0xf0 [ 929.025931][ C1] __sk_free+0xf4/0x3e0 [ 929.025943][ C1] sk_free+0x6a/0x90 [ 929.025953][ C1] tcp_close+0xd3/0x120 [ 929.025970][ C1] inet_release+0x13c/0x280 [ 929.025987][ C1] sock_release+0x8e/0x1d0 [ 929.026002][ C1] rds_tcp_conn_path_connect+0x4aa/0x7f0 [ 929.026020][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 929.026043][ C1] rds_connect_worker+0x1ac/0x2c0 [ 929.026057][ C1] process_one_work+0x9cc/0x1b70 [ 929.026073][ C1] ? __pfx_process_one_work+0x10/0x10 [ 929.026088][ C1] ? assign_work+0x1a0/0x250 [ 929.026100][ C1] worker_thread+0x6c8/0xf10 [ 929.026117][ C1] ? __pfx_worker_thread+0x10/0x10 [ 929.026134][ C1] kthread+0x3c2/0x780 [ 929.026146][ C1] ? __pfx_kthread+0x10/0x10 [ 929.026156][ C1] ? __pfx_kthread+0x10/0x10 [ 929.026167][ C1] ? __pfx_kthread+0x10/0x10 [ 929.026178][ C1] ? __pfx_kthread+0x10/0x10 [ 929.026189][ C1] ? rcu_is_watching+0x12/0xc0 [ 929.026204][ C1] ? __pfx_kthread+0x10/0x10 [ 929.026216][ C1] ret_from_fork+0x45/0x80 [ 929.026227][ C1] ? __pfx_kthread+0x10/0x10 [ 929.026238][ C1] ret_from_fork_asm+0x1a/0x30 [ 929.026260][ C1] [ 929.026883][ C0] task:syz-executor state:R running task stack:24152 pid:13723 tgid:13723 ppid:13712 task_flags:0x400140 flags:0x00004000 [ 929.613825][ C0] Call Trace: [ 929.617102][ C0] [ 929.620033][ C0] __schedule+0x116f/0x5de0 [ 929.624536][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 929.629478][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 929.634686][ C0] ? __pfx___schedule+0x10/0x10 [ 929.639621][ C0] ? page_table_check_set+0x96f/0xb50 [ 929.644989][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 929.650017][ C0] ? find_held_lock+0x2b/0x80 [ 929.654689][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 929.660055][ C0] preempt_schedule_common+0x44/0xc0 [ 929.665336][ C0] preempt_schedule_thunk+0x16/0x30 [ 929.670530][ C0] _raw_spin_unlock+0x3e/0x50 [ 929.675202][ C0] copy_page_range+0x1952/0x5fe0 [ 929.680162][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 929.685452][ C0] ? __pfx___might_resched+0x10/0x10 [ 929.690732][ C0] ? __pfx_mas_store+0x10/0x10 [ 929.695492][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 929.700688][ C0] ? copy_process+0x85dd/0x91a0 [ 929.705536][ C0] ? down_write+0x14d/0x200 [ 929.710040][ C0] ? up_write+0x1b2/0x520 [ 929.714365][ C0] copy_process+0x862b/0x91a0 [ 929.719067][ C0] ? __pfx_copy_process+0x10/0x10 [ 929.724101][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 929.729136][ C0] kernel_clone+0xfc/0x960 [ 929.733552][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 929.738582][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 929.743868][ C0] __do_sys_clone+0xce/0x120 [ 929.748459][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 929.753669][ C0] ? do_user_addr_fault+0x843/0x1370 [ 929.758958][ C0] do_syscall_64+0xcd/0x260 [ 929.763477][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.769366][ C0] RIP: 0033:0x7f7536d851d3 [ 929.773772][ C0] RSP: 002b:00007ffc75bec508 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 929.782180][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7536d851d3 [ 929.790142][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 929.798103][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 929.806067][ C0] R10: 0000555574a7f7d0 R11: 0000000000000246 R12: 0000000000000000 [ 929.814032][ C0] R13: 00000000000927c0 R14: 00000000000c924f R15: 00007ffc75bec6a0 [ 929.822008][ C0] [ 929.825023][ C0] task:syz-executor state:R running task stack:27080 pid:23390 tgid:23390 ppid:23377 task_flags:0x400140 flags:0x00004002 [ 929.838507][ C0] Call Trace: [ 929.841777][ C0] [ 929.844711][ C0] __schedule+0x116f/0x5de0 [ 929.849214][ C0] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 929.854843][ C0] ? delete_node+0x207/0x8d0 [ 929.859430][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 929.865417][ C0] ? __pfx___schedule+0x10/0x10 [ 929.870272][ C0] ? mark_held_locks+0x49/0x80 [ 929.875040][ C0] preempt_schedule_irq+0x51/0x90 [ 929.880063][ C0] irqentry_exit+0x36/0x90 [ 929.884477][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 929.890466][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 929.895666][ C0] Code: fe 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 f2 ec 0e 0f 82 74 02 00 00 8b 35 da 21 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 fe 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 929.915271][ C0] RSP: 0018:ffffc900046cf6d0 EFLAGS: 00000206 [ 929.921331][ C0] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 000000009e84bfc7 [ 929.929295][ C0] RDX: 0000000000000000 RSI: ffffffff8dbbbc4f RDI: ffffffff8bf482a0 [ 929.937256][ C0] RBP: 0000000000000002 R08: 2a3e41e1447df377 R09: 0000000000000000 [ 929.945217][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 929.953177][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 929.961157][ C0] ? kernfs_root+0xee/0x2a0 [ 929.965659][ C0] kernfs_root+0x34/0x2a0 [ 929.969979][ C0] ? kernfs_root+0x23/0x2a0 [ 929.974477][ C0] kernfs_link_sibling+0x269/0x760 [ 929.979593][ C0] kernfs_add_one+0x20a/0x840 [ 929.984268][ C0] __kernfs_create_file+0x295/0x350 [ 929.989467][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 929.994845][ C0] internal_create_group+0x578/0xf30 [ 930.000131][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 930.005929][ C0] ? __pfx_kobject_add+0x10/0x10 [ 930.010906][ C0] internal_create_groups+0x9d/0x150 [ 930.016187][ C0] ib_setup_port_attrs+0x41f/0x600 [ 930.021299][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 930.026952][ C0] ? __init_waitqueue_head+0xca/0x150 [ 930.032324][ C0] add_one_compat_dev+0x558/0x7d0 [ 930.037353][ C0] rdma_dev_init_net+0x2b1/0x530 [ 930.042289][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 930.047751][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 930.053207][ C0] ops_init+0x1df/0x5f0 [ 930.057364][ C0] setup_net+0x21e/0x850 [ 930.061604][ C0] ? __pfx_setup_net+0x10/0x10 [ 930.066359][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 930.071731][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 930.077280][ C0] ? debug_mutex_init+0x37/0x70 [ 930.082146][ C0] copy_net_ns+0x2a6/0x5f0 [ 930.086577][ C0] create_new_namespaces+0x3ea/0xad0 [ 930.091878][ C0] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 930.097520][ C0] ksys_unshare+0x45b/0xa40 [ 930.102036][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 930.107069][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 930.112365][ C0] ? dnotify_flush+0x79/0x4c0 [ 930.117045][ C0] __x64_sys_unshare+0x31/0x40 [ 930.121811][ C0] do_syscall_64+0xcd/0x260 [ 930.126315][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.132200][ C0] RIP: 0033:0x7ff892b90167 [ 930.136608][ C0] RSP: 002b:00007ffcad7e6a68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 930.145028][ C0] RAX: ffffffffffffffda RBX: 00007ff892db5f40 RCX: 00007ff892b90167 [ 930.153009][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 930.160981][ C0] RBP: 00007ff892db6738 R08: 0000000000000000 R09: 0000000000000000 [ 930.168947][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 930.176911][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 930.184894][ C0] [ 930.187906][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g90853 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 930.200220][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=62943 [ 930.208094][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g90853 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 930.219455][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 930.229412][ C0] rcu: RCU grace-period kthread stack dump: [ 930.235290][ C0] task:rcu_preempt state:I stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 930.247202][ C0] Call Trace: [ 930.250473][ C0] [ 930.253399][ C0] __schedule+0x116f/0x5de0 [ 930.257906][ C0] ? find_held_lock+0x2b/0x80 [ 930.262582][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 930.267523][ C0] ? __pfx___schedule+0x10/0x10 [ 930.272375][ C0] ? find_held_lock+0x2b/0x80 [ 930.277052][ C0] ? schedule+0x2d7/0x3a0 [ 930.281379][ C0] schedule+0xe7/0x3a0 [ 930.285443][ C0] schedule_timeout+0x123/0x290 [ 930.290287][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 930.295653][ C0] ? __pfx_process_timeout+0x10/0x10 [ 930.300941][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 930.306742][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 930.312204][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 930.316975][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 930.322263][ C0] ? rcu_gp_init+0xc76/0x15a0 [ 930.326941][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 930.331797][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 930.337602][ C0] rcu_gp_kthread+0x270/0x380 [ 930.342280][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 930.347479][ C0] ? rcu_is_watching+0x12/0xc0 [ 930.352238][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 930.357463][ C0] ? __kthread_parkme+0x19e/0x250 [ 930.362494][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 930.367690][ C0] kthread+0x3c2/0x780 [ 930.371753][ C0] ? __pfx_kthread+0x10/0x10 [ 930.376333][ C0] ? __pfx_kthread+0x10/0x10 [ 930.380916][ C0] ? __pfx_kthread+0x10/0x10 [ 930.385500][ C0] ? __pfx_kthread+0x10/0x10 [ 930.390081][ C0] ? rcu_is_watching+0x12/0xc0 [ 930.394847][ C0] ? __pfx_kthread+0x10/0x10 [ 930.399437][ C0] ret_from_fork+0x45/0x80 [ 930.403847][ C0] ? __pfx_kthread+0x10/0x10 [ 930.408431][ C0] ret_from_fork_asm+0x1a/0x30 [ 930.413205][ C0]