last executing test programs: 10.99306251s ago: executing program 0 (id=1546): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x30, r2, 0x103, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x30}}, 0x0) 10.930627445s ago: executing program 4 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 10.765093578s ago: executing program 0 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=ANY=[@ANYBLOB="700000001000210400"/20, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002000000000000000000060001000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x70}}, 0x0) 8.412921392s ago: executing program 4 (id=1552): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc0305302, &(0x7f0000000180)) tkill(r0, 0x7) 8.044304501s ago: executing program 0 (id=1555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.861209619s ago: executing program 4 (id=1557): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00003c3000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) 7.176599299s ago: executing program 0 (id=1561): r0 = syz_open_dev$vim2m(&(0x7f0000000b80), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000bc0)={0x0, 0x1012}) 6.80881817s ago: executing program 0 (id=1564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0xa8403, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x2}, {}, {0x4}, {0x6, 0x8}]}) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450300b000000000002f9078ac1e0001e00000010000883e009c907800fe0000000000002e4904a3ff87f820a051b4bd0229284f8cbd69610e6b147dd6fd781d56b8c5c4671c5e9a267884a98454290b01094673bad24f44ba33bd733bea3fc530737102e91bd2a1df7b896fb6e2e41923fc6a367147e817845f00d084493b12fa611a3b092eaeb9437c21f449e3a3f58e6cfb0b91cffc33d243c9952013152be3f0bc4227e782e91b6fea2191fb03905cd3bdd704dc75b8a66be4df8dc0e8adfd94cca23d39e1852d2235706a2f6feca367ee58379a8d0748aad3d76e9c10cd7377623a05051a90553abd9c9d9793d68535a408aa0ebff209528b0f8216f439fae801d4145ae57155446d73257ef24858f26fffc14f54df0c6455cb70036bd7d8546c8d53ade4e740dc8aa9bbc0c7b36057a12dfdb3"], 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r4, 0x1, 0x28, 0x0, &(0x7f00000012c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket(0x2a, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) clock_nanosleep(0x9, 0x1, &(0x7f0000000080)={0x77359400}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@delchain={0x9c4, 0x65, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xf}, {0xa, 0xf}, {0x10, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @filter_kind_options=@f_flower={{0xb}, {0x134, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x936}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xfa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x38}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8574}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x850, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_FW_MASK={0x8}, @TCA_FW_POLICE={0x814, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0xb3, 0x7, 0xfffffe00, 0xf7, 0x7, 0x3, 0x91, 0x8, 0x19a000, 0xffff, 0xba6, 0x4, 0x2e24, 0x0, 0x1544, 0xf7, 0x0, 0x6, 0x6, 0x80, 0x0, 0x2, 0x8, 0x5, 0x5, 0x1, 0x8001, 0x80000001, 0x5, 0xfd26, 0x10, 0xfff, 0x8001, 0x1, 0x9, 0x1, 0x5, 0x1, 0x3, 0xa, 0x0, 0x80000001, 0xf5, 0x3, 0xb, 0xe, 0x6, 0x2, 0x4, 0xa, 0x1, 0x1ff, 0x6, 0x0, 0xe, 0x1, 0xd4, 0x9, 0x100, 0x5c76, 0xffffffff, 0xfff, 0x7fffffff, 0x1010, 0xfffff000, 0xb4, 0x6ac, 0xff, 0x81, 0x7, 0x7ff, 0x0, 0x1, 0xadc7, 0x3, 0xa5, 0x2c22, 0x9, 0x7, 0x2, 0x8, 0x8, 0x1, 0x1b6, 0xffff0000, 0x9, 0x80000001, 0x9, 0x4, 0x6, 0x9, 0x2, 0x9, 0x3, 0x45, 0xa, 0xfffffff8, 0x1000, 0x1, 0x5, 0x1, 0x4, 0x0, 0xfffffe01, 0x3, 0x6, 0x7, 0x1800, 0x0, 0x2, 0x3, 0x7, 0x2935, 0x0, 0x8, 0x7, 0x4, 0x3, 0x8, 0x3, 0x7, 0xe, 0xe6, 0x5, 0xf4a4, 0x0, 0x3, 0x7dc6d346, 0x8, 0x3, 0xfffffe00, 0x5, 0x7, 0x3, 0x3, 0x3000000, 0x0, 0x2, 0xffc0, 0x4, 0x5, 0x7f, 0x7, 0x10000, 0x7, 0x73f0, 0x7ff, 0x4, 0x3, 0x0, 0x3, 0xffffffff, 0x20000000, 0x80000000, 0x8653, 0xb, 0x3ff, 0x8, 0x0, 0x0, 0x6, 0x9, 0x8, 0x4, 0x7fffffff, 0x6, 0xa, 0x7f, 0x80000000, 0xaaf0, 0xeda1, 0xa, 0x7, 0x1, 0x0, 0x6, 0x3, 0x2, 0x9bd0, 0xb, 0x7, 0x7f, 0x2, 0x0, 0x2, 0x9, 0xff, 0x7, 0x8, 0x5, 0x9, 0xd53, 0x1, 0x7f, 0x2a9, 0x7, 0x80000000, 0xffffff81, 0x8, 0x0, 0x5, 0x2, 0x8001, 0x20000000, 0x2007, 0x8, 0x9, 0x9, 0x8001, 0x40, 0x1000, 0x8, 0xb, 0x3, 0xc8, 0x2, 0xffff8001, 0x6, 0x3ff, 0x9, 0x6fe, 0x4, 0x3, 0x7, 0x8, 0x5, 0xffff, 0x8, 0x3c600000, 0x1, 0x1, 0x8, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3, 0x0, 0xa4, 0x8, 0x6db, 0x8, 0x9, 0x3, 0x10, 0x10001, 0x2, 0x6, 0x401, 0xfff, 0x8, 0x70, 0xf95]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x1, 0x8, 0x7f, 0x7, 0x2, 0x55a2, 0x8000, 0x9, 0x0, 0x2, 0x5, 0xfffffff9, 0xb1, 0x1, 0x9, 0x0, 0x2, 0x8001, 0x7dc38342, 0x80, 0xc19, 0x4, 0xddc, 0x200, 0x3, 0x10, 0x1314, 0xe, 0x6, 0x7, 0x6, 0x8, 0x8001, 0x6399d7fe, 0x5, 0x7, 0x0, 0x7, 0x6, 0x1, 0xb, 0xd53, 0x6, 0x1, 0x1, 0x4, 0x401, 0x5, 0xe, 0x5, 0x1, 0x9, 0x2, 0xf86, 0x1f, 0x7, 0x10001, 0x80, 0x111, 0x10, 0xfff, 0x5, 0x9, 0x5, 0x3, 0xfffffffc, 0x80000000, 0x8001, 0x7, 0x0, 0x22f, 0xc, 0x6ed, 0x5, 0x1ff, 0xfffff3cd, 0x7f, 0x0, 0x954a, 0x6, 0x3, 0x81, 0x10001, 0x7fffffff, 0x4, 0xb, 0x8, 0x7, 0x8, 0x7, 0xffff7fff, 0x3, 0xc, 0x9, 0x6, 0x9, 0xb, 0xfffffffe, 0x2, 0x0, 0x2, 0x4, 0x0, 0x2, 0x3ff, 0xfffffffe, 0x1, 0xfff, 0x8, 0x1, 0x5, 0x80000000, 0x8, 0x7, 0xff, 0x5, 0xffb9, 0x2, 0x1b33, 0x6, 0x18, 0x0, 0xfff, 0xfffffffb, 0x4, 0x4, 0x4, 0x5, 0xa80, 0x3, 0x7, 0x6, 0x8bba, 0x9, 0xfffffffd, 0x7, 0x1, 0x401, 0x8, 0x1, 0x1, 0x7, 0x7, 0x4, 0x6, 0xd96, 0xfffffff8, 0x442093da, 0x4, 0x7, 0x2, 0x7ff, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8001, 0x6, 0x15, 0x7, 0xbd, 0x3, 0x1, 0x2, 0x2, 0x5, 0x5, 0x1, 0xfff, 0x6, 0x3, 0x3, 0xe503, 0xa82d, 0x383, 0xe, 0x9, 0x5, 0x9, 0x8000, 0x3, 0x8, 0x6, 0x3, 0x2, 0x6, 0x3, 0xfffffff9, 0xff, 0xec, 0x8, 0xe39, 0x9, 0x8, 0x6eae, 0x7a, 0x10001, 0xfb, 0x3, 0x5, 0x6, 0x7, 0x10000, 0x9b, 0x6, 0xffffffff, 0x400, 0xff, 0xff, 0x10000, 0x4, 0xee, 0x9, 0x7f, 0x8, 0x101, 0x7fffffff, 0x0, 0x8, 0x93, 0x3, 0x7, 0x10, 0x2, 0x4, 0xfffffffd, 0x7, 0x81, 0x4, 0x9, 0x4, 0x7, 0x2, 0xffff, 0x3, 0x7fffffff, 0x3c4, 0x9, 0x1, 0x2, 0xfffffff8, 0x9, 0x80000000, 0x5, 0x900, 0x4, 0xff, 0x7, 0x7, 0x5, 0x653c40ac, 0x97, 0x6db1, 0x80000000]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}]}}]}, 0x9c4}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c084}, 0x805) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff5}, {0x0, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.808682156s ago: executing program 2 (id=1565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002000000000000000000060001000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x70}}, 0x0) 6.740925255s ago: executing program 1 (id=1566): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'streebog512-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 5.739270615s ago: executing program 2 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000001, 0x28011, r0, 0x0) mprotect(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x0) 5.671765993s ago: executing program 3 (id=1568): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000110000290000000800000085f00000000000004b3c749dbdd4ef631d7049b97eaeee89899751d46c8926d0"], 0x18}}], 0x3, 0x0) 5.541087688s ago: executing program 1 (id=1569): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "30e8ea459325cbd0c306bda30a4efe5363df99ce2cb6f201bf459da93917483b2677ae77fa8bb738d5d799fbad56f57a4a2d80001a01fcf9c00f0d34e8e67a4e"}, 0x48, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r2, 0x1) 5.387105702s ago: executing program 3 (id=1570): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000), 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0xfffff8d4, 0x4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x72, 0x0, 0x80000000, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x4c}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) splice(r5, 0x0, r4, 0x0, 0x406f408, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="1f42cc32c2001d24cfbe4dbd338cdf694a73645f54e01da770db7df5764980c9c6c3a87db0f7fa32b89e760216aa08b52492ac15d3c3168b75ed80bc009b24c04d81cd4de2cbea4c87f93be637f434f2cb0a03dd7244261da8e1145467cf4beca313153eb0", 0x65, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x0, 0x7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) 5.372715098s ago: executing program 2 (id=1571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.226440791s ago: executing program 1 (id=1572): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330") ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000180)={0x0, 0xfffffffffffffdcc}) 3.928454265s ago: executing program 3 (id=1573): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() socket$inet_sctp(0x2, 0x0, 0x84) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x30d3, &(0x7f0000000380)) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) 3.583917244s ago: executing program 4 (id=1574): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.523054937s ago: executing program 1 (id=1575): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0) 3.481265513s ago: executing program 2 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 2.973746029s ago: executing program 3 (id=1577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002000000000000000000060001000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x70}}, 0x0) 2.903876905s ago: executing program 2 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x40000380) socket(0xa, 0x1, 0x0) epoll_create1(0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b12d25a80648c2594f90124fc601000404002003500053582c137153e370248048000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r3, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) 2.874510986s ago: executing program 4 (id=1579): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'streebog512-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 2.589045868s ago: executing program 4 (id=1580): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000987010073797a30"], 0xe8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.56586003s ago: executing program 3 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000001, 0x28011, r0, 0x0) mprotect(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x0) 1.565664501s ago: executing program 1 (id=1582): prlimit64(0x0, 0x0, &(0x7f00000005c0)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x181209940, &(0x7f00000004c0)="846b59f97221af3363c1f8523246bfa85737a4c4f27a", 0x16, &(0x7f0000000100), &(0x7f0000000500), &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001500010300000000000000000c"], 0x14}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff, r3}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0xfffffffffffffffb, 0x0, 0x100000000, 0x2, 0xef03, 0xfe60, 0x0, 0x0, 0x9, 0x80, 0x3ff, 0x5, 0x8b31000000000, 0x4, 0x3]}, 0x0) 1.557215378s ago: executing program 2 (id=1583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "f1"}]}], {0x14}}, 0x5c}}, 0x0) 1.389131982s ago: executing program 3 (id=1584): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00003c3000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) 145.883774ms ago: executing program 1 (id=1585): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=1586): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330") ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000180)={0x0, 0xfffffffffffffdcc}) kernel console output (not intermixed with test programs): 74] bridge_slave_1: entered allmulticast mode [ 466.205899][ T8074] bridge_slave_1: entered promiscuous mode [ 466.310491][ T1853] usb 1-1: Using ep0 maxpacket: 32 [ 466.347190][ T1853] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.404983][ T1853] usb 1-1: config 17 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 466.448164][ T1853] usb 1-1: config 17 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 466.540934][ T4611] Bluetooth: hci0: command 0x0c1a tx timeout [ 466.568290][ T1853] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.628783][ T1853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 466.760439][ T4611] Bluetooth: hci2: command 0x0c1a tx timeout [ 467.272627][ T8200] ip6gretap0 speed is unknown, defaulting to 1000 [ 467.349864][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.418414][ T8200] ip6gretap0 speed is unknown, defaulting to 1000 [ 467.454777][ T1853] usb 1-1: SerialNumber: syz [ 467.487048][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.550957][ T8203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 467.595982][ T8200] ip6gretap0 speed is unknown, defaulting to 1000 [ 467.855525][ T8224] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 467.863476][ T8224] netlink: 512 bytes leftover after parsing attributes in process `syz.4.724'. [ 468.727727][ T4611] Bluetooth: hci0: command 0x0c1a tx timeout [ 468.737419][ T1853] cdc_acm 1-1:17.0: skipping garbage [ 468.788544][ T4611] Bluetooth: hci2: command 0x0c1a tx timeout [ 468.833018][ T8200] ip6gretap0 speed is unknown, defaulting to 1000 [ 468.911753][ T8074] team0: Port device team_slave_0 added [ 468.977598][ T1853] cdc_acm 1-1:17.0: ttyACM0: USB ACM device [ 468.995539][ T8200] ip6gretap0 speed is unknown, defaulting to 1000 [ 469.012742][ T8074] team0: Port device team_slave_1 added [ 469.127428][ T1853] usb 1-1: USB disconnect, device number 13 [ 469.159449][ T30] audit: type=1400 audit(1727228356.269:739): avc: denied { accept } for pid=8227 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 469.406506][ T8200] ip6gretap0 speed is unknown, defaulting to 1000 [ 470.790197][ T4611] Bluetooth: hci0: command 0x0c1a tx timeout [ 470.854003][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.861678][ T4611] Bluetooth: hci2: command 0x0c1a tx timeout [ 470.928707][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.020263][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.079394][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.107315][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.182587][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.320949][ T5280] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 471.549589][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 471.804731][ T5280] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 471.832238][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.866583][ T5280] usb 3-1: Product: syz [ 471.873886][ T5280] usb 3-1: Manufacturer: syz [ 471.878751][ T5280] usb 3-1: SerialNumber: syz [ 471.888601][ T5280] usb 3-1: config 0 descriptor?? [ 472.492320][ T8074] hsr_slave_0: entered promiscuous mode [ 472.529822][ T8074] hsr_slave_1: entered promiscuous mode [ 472.569272][ T8074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.619697][ T8074] Cannot create hsr debugfs directory [ 472.796502][ T8248] ip6gretap0 speed is unknown, defaulting to 1000 [ 472.858688][ T5280] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 472.913297][ T5280] ums-sddr55 3-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 473.100595][ T8278] binder: 8277:8278 ioctl 4018620d 0 returned -22 [ 473.292180][ T8281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 473.337441][ T8281] overlayfs: missing 'lowerdir' [ 473.665736][ T30] audit: type=1400 audit(1727228360.759:740): avc: denied { map } for pid=8288 comm="syz.1.739" path="socket:[24073]" dev="sockfs" ino=24073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.714598][ T30] audit: type=1400 audit(1727228360.759:741): avc: denied { read } for pid=8288 comm="syz.1.739" path="socket:[24073]" dev="sockfs" ino=24073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.996667][ T8294] siw: device registration error -23 [ 474.104017][ T8294] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.741'. [ 476.743604][ T5279] usb 3-1: USB disconnect, device number 11 [ 477.359273][ T30] audit: type=1400 audit(1727228364.439:742): avc: denied { watch } for pid=8320 comm="syz.4.749" path="/43/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 477.374993][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.751'. [ 477.466075][ T30] audit: type=1400 audit(1727228364.509:743): avc: denied { watch_reads } for pid=8320 comm="syz.4.749" path="/43/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 477.614373][ T30] audit: type=1400 audit(1727228364.619:744): avc: denied { bind } for pid=8328 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 477.880346][ T8074] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.946332][ T8074] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.003649][ T8074] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.068362][ T8074] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.030242][ T30] audit: type=1400 audit(1727228366.879:745): avc: denied { create } for pid=8346 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 480.550843][ T30] audit: type=1400 audit(1727228366.889:746): avc: denied { connect } for pid=8346 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 480.641709][ T30] audit: type=1400 audit(1727228366.889:747): avc: denied { bind } for pid=8346 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.880342][ T8074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.332749][ T8074] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.218376][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.225729][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.380217][ T30] audit: type=1400 audit(1727228370.479:748): avc: denied { nlmsg_read } for pid=8363 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 483.422994][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.430337][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.447035][ T8364] overlayfs: failed to resolve './file0': -2 [ 485.272568][ T8074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.595192][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 486.630242][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.764'. [ 487.284212][ T30] audit: type=1400 audit(1727228374.389:749): avc: denied { write } for pid=8399 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 487.980506][ T5228] Bluetooth: hci2: command 0x0c1a tx timeout [ 488.188054][ T5280] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 488.299625][ T30] audit: type=1400 audit(1727228375.409:750): avc: denied { create } for pid=8407 comm="syz.2.769" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 488.409481][ T30] audit: type=1400 audit(1727228375.519:751): avc: denied { mounton } for pid=8407 comm="syz.2.769" path="/50/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 488.492498][ T8409] syz.2.769: attempt to access beyond end of device [ 488.492498][ T8409] loop5: rw=0, sector=16, nr_sectors = 8 limit=0 [ 488.524173][ T5280] usb 2-1: device descriptor read/all, error -71 [ 488.527156][ T8074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.592910][ T8409] REISERFS warning (device loop5): sh-2006 read_super_block: bread failed (dev loop5, block 2, size 4096) [ 488.671022][ T8409] syz.2.769: attempt to access beyond end of device [ 488.671022][ T8409] loop5: rw=0, sector=128, nr_sectors = 8 limit=0 [ 488.736410][ T8409] REISERFS warning (device loop5): sh-2006 read_super_block: bread failed (dev loop5, block 16, size 4096) [ 488.810228][ T8409] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 [ 489.350682][ T8074] veth0_vlan: entered promiscuous mode [ 489.665085][ T8074] veth1_vlan: entered promiscuous mode [ 489.857047][ T30] audit: type=1400 audit(1727228376.969:752): avc: denied { unlink } for pid=7173 comm="syz-executor" name="file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 490.125217][ T8074] veth0_macvtap: entered promiscuous mode [ 490.590996][ T8074] veth1_macvtap: entered promiscuous mode [ 491.328293][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.400533][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.440265][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.513010][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.551543][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.569128][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.812760][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.833024][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 491.846090][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 491.855638][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.453437][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.502737][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.560115][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.626315][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.683070][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.808917][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.897672][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.950330][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.984180][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.020130][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.043644][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.063181][ T5228] Bluetooth: hci3: command tx timeout [ 494.080133][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.105742][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.836802][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.057722][ T8461] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 495.101256][ T30] audit: type=1400 audit(1727228382.219:753): avc: denied { name_bind } for pid=8460 comm="syz.2.780" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 495.181219][ T8466] lo: entered allmulticast mode [ 495.209145][ T30] audit: type=1400 audit(1727228382.239:754): avc: denied { nlmsg_write } for pid=8460 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 495.216107][ T8074] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.285883][ T8074] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.314515][ T8074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.339034][ T8074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.429986][ T8438] ip6gretap0 speed is unknown, defaulting to 1000 [ 495.698677][ T8485] netlink: 'syz.4.784': attribute type 11 has an invalid length. [ 495.773203][ T8489] netlink: 'syz.4.784': attribute type 11 has an invalid length. [ 496.145960][ T5228] Bluetooth: hci3: command tx timeout [ 496.200572][ T8489] debugfs: Directory 'netdev:' with parent 'phy21' already present! [ 498.220926][ T5228] Bluetooth: hci3: command tx timeout [ 498.361263][ T8506] kernel read not supported for file /eth0 (pid: 8506 comm: syz.4.788) [ 498.440163][ T30] audit: type=1800 audit(1727228385.539:755): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.788" name="eth0" dev="mqueue" ino=21654 res=0 errno=0 [ 499.550100][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.557996][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.235882][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.300421][ T5228] Bluetooth: hci3: command tx timeout [ 500.609588][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.415026][ T8438] chnl_net:caif_netlink_parms(): no params data found [ 502.990162][ T5310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 503.090895][ T8552] syz.4.799 uses obsolete (PF_INET,SOCK_PACKET) [ 503.270297][ T5310] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 503.315780][ T5310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.388505][ T5310] usb 4-1: Product: syz [ 503.410702][ T5310] usb 4-1: Manufacturer: syz [ 503.431650][ T5310] usb 4-1: SerialNumber: syz [ 503.471923][ T5310] usb 4-1: config 0 descriptor?? [ 503.508664][ T5310] ch341 4-1:0.0: ch341-uart converter detected [ 503.618850][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.651729][ T8567] kernel read not supported for file /eth0 (pid: 8567 comm: syz.4.801) [ 503.665708][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.692244][ T30] audit: type=1800 audit(1727228390.799:756): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.801" name="eth0" dev="mqueue" ino=21654 res=0 errno=0 [ 503.731078][ T8438] bridge_slave_0: entered allmulticast mode [ 503.760251][ T8438] bridge_slave_0: entered promiscuous mode [ 503.821977][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.858335][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.877108][ T8438] bridge_slave_1: entered allmulticast mode [ 503.917327][ T8438] bridge_slave_1: entered promiscuous mode [ 504.781115][ T5310] usb 4-1: failed to send control message: -110 [ 504.787465][ T5310] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 505.012134][ T5310] usb 4-1: USB disconnect, device number 6 [ 505.043526][ T5310] ch341 4-1:0.0: device disconnected [ 505.176265][ T8438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.291036][ T8438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.224924][ T8438] team0: Port device team_slave_0 added [ 507.291057][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.297476][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.412195][ T8438] team0: Port device team_slave_1 added [ 508.755630][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.820476][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.236717][ T8438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.259684][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.299461][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.666365][ T8438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.050983][ T30] audit: type=1400 audit(1727228398.099:757): avc: denied { setopt } for pid=8620 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 511.574735][ T30] audit: type=1400 audit(1727228398.159:758): avc: denied { bind } for pid=8620 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 511.663332][ T30] audit: type=1400 audit(1727228398.229:759): avc: denied { nlmsg_read } for pid=8620 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 511.902998][ T8438] hsr_slave_0: entered promiscuous mode [ 511.975968][ T8438] hsr_slave_1: entered promiscuous mode [ 512.027496][ T8438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.076593][ T8438] Cannot create hsr debugfs directory [ 513.932161][ T5310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 514.160583][ T5310] usb 4-1: Using ep0 maxpacket: 16 [ 514.230289][ T5310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.800074][ T5310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.893451][ T5310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 514.970783][ T5310] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 515.064379][ T5310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.144840][ T5310] usb 4-1: config 0 descriptor?? [ 517.139284][ T5310] shield 0003:0955:7214.0004: unexpected long global item [ 517.315162][ T5310] shield 0003:0955:7214.0004: Parse failed [ 517.532020][ T5310] shield 0003:0955:7214.0004: probe with driver shield failed with error -22 [ 517.631466][ T8438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.640239][ T5310] usb 4-1: USB disconnect, device number 7 [ 517.692047][ T30] audit: type=1326 audit(1727228404.809:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 517.799015][ T30] audit: type=1326 audit(1727228404.809:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 517.953708][ T30] audit: type=1326 audit(1727228404.809:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 518.041429][ T30] audit: type=1326 audit(1727228404.809:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 518.184242][ T8438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.195499][ T30] audit: type=1326 audit(1727228404.819:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 518.283346][ T30] audit: type=1326 audit(1727228404.819:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 518.507790][ T30] audit: type=1326 audit(1727228404.829:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 518.680284][ T30] audit: type=1326 audit(1727228404.829:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57fed7c890 code=0x7ffc0000 [ 518.813331][ T8438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.893835][ T30] audit: type=1326 audit(1727228404.829:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 519.275928][ T30] audit: type=1326 audit(1727228404.829:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 520.887798][ T8438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.115127][ T1284] bridge_slave_1: left allmulticast mode [ 521.138011][ T1284] bridge_slave_1: left promiscuous mode [ 521.190878][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.238554][ T1284] bridge_slave_0: left allmulticast mode [ 521.259053][ T1284] bridge_slave_0: left promiscuous mode [ 521.292531][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.411860][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 524.326713][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 524.326737][ T30] audit: type=1400 audit(1727228411.439:824): avc: denied { setopt } for pid=8743 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.171027][ T8754] syz.2.843: attempt to access beyond end of device [ 526.171027][ T8754] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 526.337202][ T8754] gfs2: error -5 reading superblock [ 526.788416][ T30] audit: type=1400 audit(1727228413.889:825): avc: denied { setopt } for pid=8763 comm="syz.4.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 527.930453][ T1284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.997626][ T1284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.035398][ T1284] bond0 (unregistering): Released all slaves [ 529.675942][ T30] audit: type=1400 audit(1727228416.789:826): avc: denied { connect } for pid=8786 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 529.765551][ T8438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.849359][ T8438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.155565][ T8438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.180600][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 530.196628][ T8438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.190248][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 531.207547][ T8] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 531.218357][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.226573][ T8] usb 3-1: Product: syz [ 531.231368][ T8] usb 3-1: Manufacturer: syz [ 531.236877][ T8] usb 3-1: SerialNumber: syz [ 531.479843][ T8] usb 3-1: config 0 descriptor?? [ 531.490173][ T8] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 531.767783][ T1284] hsr_slave_0: left promiscuous mode [ 531.825425][ T1284] hsr_slave_1: left promiscuous mode [ 532.136142][ T30] audit: type=1400 audit(1727228419.209:827): avc: denied { ioctl } for pid=8812 comm="syz.4.862" path="socket:[27003]" dev="sockfs" ino=27003 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 533.249934][ T1284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.511751][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.583498][ T8] gp8psk: usb in 128 operation failed. [ 533.596331][ T8] gp8psk: usb in 137 operation failed. [ 533.603785][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 533.683396][ T8] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 533.695391][ T8] usb 3-1: media controller created [ 533.713933][ T1284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.015112][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.004251][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.038157][ T1284] veth1_macvtap: left promiscuous mode [ 535.085626][ T1284] veth0_macvtap: left promiscuous mode [ 535.113562][ T1284] veth1_vlan: left promiscuous mode [ 535.130767][ T1284] veth0_vlan: left promiscuous mode [ 535.207786][ T8] gp8psk_fe: Frontend revision 1 attached [ 535.280927][ T8] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 535.314639][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 536.448061][ T8843] autofs: Unknown parameter '0x0000000000000000' [ 536.585645][ T8] gp8psk: usb in 138 operation failed. [ 536.599548][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 536.616271][ T8] gp8psk: found Genpix USB device pID = 201 (hex) [ 536.658185][ T8] usb 3-1: USB disconnect, device number 12 [ 536.786239][ T30] audit: type=1400 audit(1727228423.899:828): avc: denied { getopt } for pid=8847 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 537.073851][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 537.792557][ T1284] team0 (unregistering): Port device team_slave_1 removed [ 537.900548][ T1284] team0 (unregistering): Port device team_slave_0 removed [ 539.465684][ T8846] netlink: 'syz.4.871': attribute type 8 has an invalid length. [ 539.767973][ T8848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 540.727849][ T8438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.071850][ T8438] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.159206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.166572][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.267014][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.274346][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.228359][ T30] audit: type=1400 audit(1727228429.339:829): avc: denied { getopt } for pid=8879 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 542.313706][ T8438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.701467][ T8904] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 543.867396][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.212943][ T8438] veth0_vlan: entered promiscuous mode [ 545.310662][ T1853] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 545.354880][ T8438] veth1_vlan: entered promiscuous mode [ 545.509970][ T8438] veth0_macvtap: entered promiscuous mode [ 545.534183][ T1853] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 545.550303][ T8438] veth1_macvtap: entered promiscuous mode [ 545.565630][ T1853] usb 4-1: string descriptor 0 read error: -22 [ 545.581600][ T1853] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.595802][ T1853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.641717][ T1853] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 545.655834][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.709868][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.740168][ T5309] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 545.740579][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.787451][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.805976][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.818853][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.833678][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.847938][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.868418][ T5275] usb 4-1: USB disconnect, device number 8 [ 545.909006][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.940543][ T5309] usb 2-1: Using ep0 maxpacket: 16 [ 545.978699][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.984750][ T5309] usb 2-1: config 0 has no interfaces? [ 545.999523][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.016556][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.033452][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.046782][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.061832][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.084632][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.089443][ T5309] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 546.118748][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.140434][ T5309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.162888][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.182961][ T5309] usb 2-1: config 0 descriptor?? [ 546.217387][ T8438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.260163][ T8438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.269055][ T8438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.278086][ T8438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.500263][ T5309] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 546.542519][ T8916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.562046][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.591172][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.599353][ T8916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.710123][ T5309] usb 5-1: Using ep0 maxpacket: 32 [ 546.725145][ T2506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.728722][ T5309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.734480][ T2506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.750167][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 547.288155][ T8916] batadv0: entered promiscuous mode [ 547.398640][ T8916] macvtap1: entered promiscuous mode [ 547.493065][ T8916] macvtap1: entered allmulticast mode [ 547.533672][ T8916] batadv0: entered allmulticast mode [ 547.557877][ T8916] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 547.690099][ T5309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.701320][ T5309] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 547.710546][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.731386][ T5309] usb 5-1: config 0 descriptor?? [ 547.743405][ T5309] hub 5-1:0.0: USB hub found [ 547.785549][ T8923] batadv0: left allmulticast mode [ 547.795517][ T8923] batadv0: left promiscuous mode [ 548.020308][ T5309] hub 5-1:0.0: 1 port detected [ 548.058801][ T47] usb 2-1: USB disconnect, device number 15 [ 548.875403][ T5309] hub 5-1:0.0: activate --> -90 [ 548.910273][ T4611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 548.925183][ T4611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 548.944912][ T4611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 548.958243][ T4611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 548.975527][ T4611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 548.983488][ T4611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.067280][ T8941] macvlan0: entered allmulticast mode [ 549.125226][ T5309] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 549.157568][ T8941] veth1_vlan: entered allmulticast mode [ 549.186185][ T5309] usb 5-1: USB disconnect, device number 5 [ 549.516910][ T8936] ip6gretap0 speed is unknown, defaulting to 1000 [ 549.959827][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.144523][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 550.235399][ T8941] veth1_vlan: left allmulticast mode [ 550.344299][ T8941] macvlan0 (unregistering): left allmulticast mode [ 551.022940][ T5228] Bluetooth: hci0: command tx timeout [ 551.251390][ T8958] siw: device registration error -23 [ 551.268209][ T8958] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.903'. [ 551.278639][ T8951] syz.1.902 (8951) used greatest stack depth: 21312 bytes left [ 551.336447][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.387844][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 551.555885][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.872302][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.670782][ T8972] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 556.414799][ T11] bridge_slave_1: left allmulticast mode [ 556.433058][ T11] bridge_slave_1: left promiscuous mode [ 556.439021][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.637738][ T11] bridge_slave_0: left allmulticast mode [ 556.753419][ T11] bridge_slave_0: left promiscuous mode [ 556.877454][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.057337][ T30] audit: type=1400 audit(1727228445.169:830): avc: denied { create } for pid=9021 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 558.271727][ T30] audit: type=1400 audit(1727228445.359:831): avc: denied { write } for pid=9021 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 559.432056][ T30] audit: type=1400 audit(1727228446.439:832): avc: denied { map } for pid=9030 comm="syz.4.923" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 559.840362][ T9035] sctp: failed to load transform for md5: -4 [ 559.895664][ T9034] sctp: failed to load transform for md5: -4 [ 561.262280][ T30] audit: type=1400 audit(1727228448.299:833): avc: denied { setopt } for pid=9054 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 561.539933][ T5310] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 561.701899][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.730920][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.748856][ T30] audit: type=1400 audit(1727228448.859:834): avc: denied { connect } for pid=9065 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 561.775206][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.804534][ T11] bond0 (unregistering): Released all slaves [ 561.822380][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.850670][ T5310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 561.883792][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.951582][ T8936] chnl_net:caif_netlink_parms(): no params data found [ 561.973476][ T5310] usb 3-1: config 0 descriptor?? [ 562.330044][ C1] hrtimer: interrupt took 52789 ns [ 564.577362][ T30] audit: type=1400 audit(1727228451.189:835): avc: denied { read } for pid=9072 comm="syz.4.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 566.012410][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.067044][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.099064][ T8936] bridge_slave_0: entered allmulticast mode [ 566.143144][ T8936] bridge_slave_0: entered promiscuous mode [ 566.275779][ T941] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 567.125240][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.136838][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.158689][ T8936] bridge_slave_1: entered allmulticast mode [ 567.168722][ T8936] bridge_slave_1: entered promiscuous mode [ 567.350101][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 567.367968][ T941] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 567.399867][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.410528][ T11] hsr_slave_0: left promiscuous mode [ 567.430064][ T941] usb 4-1: Product: syz [ 567.434310][ T941] usb 4-1: Manufacturer: syz [ 567.459505][ T11] hsr_slave_1: left promiscuous mode [ 567.485316][ T941] usb 4-1: SerialNumber: syz [ 567.506690][ T941] usb 4-1: config 0 descriptor?? [ 567.552782][ T941] appledisplay 4-1:0.0: Could not find int-in endpoint [ 567.569270][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.583336][ T941] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 567.598538][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.641485][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.648967][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.846194][ T11] veth1_macvtap: left promiscuous mode [ 567.882687][ T11] veth0_macvtap: left promiscuous mode [ 567.907128][ T11] veth1_vlan: left promiscuous mode [ 567.928777][ T11] veth0_vlan: left promiscuous mode [ 568.555057][ T5310] usbhid 3-1:0.0: can't add hid device: -71 [ 568.588118][ T5310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 568.626814][ T5310] usb 3-1: USB disconnect, device number 13 [ 568.715638][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.724421][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.046027][ T1853] usb 4-1: USB disconnect, device number 9 [ 569.673325][ T9127] Cannot find add_set index 0 as target [ 570.775863][ T30] audit: type=1326 audit(1727228457.889:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.3.947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30e817def9 code=0x0 [ 571.140837][ T11] team0 (unregistering): Port device team_slave_1 removed [ 571.226410][ T11] team0 (unregistering): Port device team_slave_0 removed [ 572.281634][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.448897][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.756778][ T8936] team0: Port device team_slave_0 added [ 572.801315][ T8936] team0: Port device team_slave_1 added [ 573.697711][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.750102][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.960393][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.063611][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.109654][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.187900][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.417581][ T8936] hsr_slave_0: entered promiscuous mode [ 574.438843][ T8936] hsr_slave_1: entered promiscuous mode [ 576.204413][ T9188] netlink: 288 bytes leftover after parsing attributes in process `syz.1.960'. [ 579.169007][ T30] audit: type=1400 audit(1727228466.279:837): avc: denied { append } for pid=9200 comm="syz.1.963" name="event3" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 580.287501][ T8936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 580.349843][ T8936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 580.393057][ T8936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 580.455633][ T8936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 580.873811][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.954813][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.010727][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.018128][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.098564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.106028][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.224658][ T1853] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 581.440864][ T1853] usb 5-1: Using ep0 maxpacket: 32 [ 581.499407][ T30] audit: type=1400 audit(1727228468.509:838): avc: denied { map } for pid=9227 comm="syz.2.971" path="/dev/video1" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 581.614350][ T1853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 581.817731][ T1853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 581.907304][ T1853] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 581.980884][ T1853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.089340][ T1853] usb 5-1: config 0 descriptor?? [ 582.154119][ T9223] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 582.203844][ T1853] hub 5-1:0.0: USB hub found [ 582.385002][ T9242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.973'. [ 582.463172][ T1853] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 582.476554][ T9223] warning: `syz.4.970' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 582.828907][ T1853] hid-generic 0003:046D:C314.0005: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 582.968617][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.253824][ T8936] veth0_vlan: entered promiscuous mode [ 583.314790][ T941] usb 5-1: USB disconnect, device number 6 [ 583.372031][ T8936] veth1_vlan: entered promiscuous mode [ 583.525305][ T9259] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 583.546649][ T8936] veth0_macvtap: entered promiscuous mode [ 583.596702][ T8936] veth1_macvtap: entered promiscuous mode [ 583.733028][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.771212][ T4611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 583.794810][ T4611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.804184][ T4611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.825542][ T4611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.834060][ T4611] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 583.842885][ T4611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 583.851878][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.957947][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.047994][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.048029][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.048056][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.048080][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.048104][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.050777][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.056475][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.056507][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.056524][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.056548][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.056567][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.056592][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.056610][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.056634][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.059015][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.423103][ T8936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.484639][ T8936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.523301][ T8936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.564654][ T8936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.781357][ T9264] ip6gretap0 speed is unknown, defaulting to 1000 [ 585.352878][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.360764][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.668280][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.719653][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.099600][ T5228] Bluetooth: hci3: command tx timeout [ 586.432481][ T9264] chnl_net:caif_netlink_parms(): no params data found [ 587.292328][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.303431][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.318567][ T9264] bridge_slave_0: entered allmulticast mode [ 587.348086][ T9264] bridge_slave_0: entered promiscuous mode [ 587.383059][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.431913][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.451709][ T9264] bridge_slave_1: entered allmulticast mode [ 587.488691][ T9264] bridge_slave_1: entered promiscuous mode [ 587.533182][ T9316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.985'. [ 587.801920][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.852053][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.056031][ T9264] team0: Port device team_slave_0 added [ 588.104201][ T9264] team0: Port device team_slave_1 added [ 588.169734][ T9329] siw: device registration error -23 [ 588.227796][ T9329] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.990'. [ 588.270463][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.284208][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.353854][ T5228] Bluetooth: hci3: command tx timeout [ 588.371079][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.419808][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.466843][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.533205][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.825134][ T9264] hsr_slave_0: entered promiscuous mode [ 589.859540][ T9264] hsr_slave_1: entered promiscuous mode [ 589.894655][ T9264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.894766][ T9264] Cannot create hsr debugfs directory [ 589.908199][ T9355] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 590.703516][ T5228] Bluetooth: hci3: command tx timeout [ 591.667193][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 592.946222][ T5228] Bluetooth: hci3: command tx timeout [ 593.053782][ T9264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.394196][ T9264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.628288][ T9264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.887837][ T9264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.245246][ T9418] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 594.641399][ T9264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 594.729307][ T9264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 594.887991][ T9427] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.1014'. [ 595.048303][ T9264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 595.730500][ T9264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 596.240211][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.922221][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.005261][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.012594][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.049587][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.056921][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.596186][ T30] audit: type=1400 audit(1727228484.548:839): avc: denied { listen } for pid=9452 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 598.946576][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.667100][ T9465] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 599.750704][ T9264] veth0_vlan: entered promiscuous mode [ 599.805083][ T9264] veth1_vlan: entered promiscuous mode [ 599.931354][ T9264] veth0_macvtap: entered promiscuous mode [ 600.005218][ T9264] veth1_macvtap: entered promiscuous mode [ 600.099205][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.144348][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.176365][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.204921][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.226616][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.228733][ T5280] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 600.252638][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.273779][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.302427][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.334889][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.356178][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.394930][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.483099][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.502089][ T5280] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 600.518706][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.530112][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.549305][ T5280] usb 5-1: Product: syz [ 600.549878][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.561524][ T5280] usb 5-1: Manufacturer: syz [ 600.579599][ T5280] usb 5-1: SerialNumber: syz [ 600.587450][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.599389][ T5280] usb 5-1: config 0 descriptor?? [ 600.638699][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.660388][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.669222][ T5280] ch341 5-1:0.0: ch341-uart converter detected [ 600.685645][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.732331][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.749322][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.773193][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.796363][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.851200][ T9264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.874674][ T9264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.887221][ T9264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.896629][ T9264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.290366][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.298345][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.324118][ T5280] usb 5-1: failed to send control message: -71 [ 601.330519][ T5280] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 601.388562][ T5280] usb 5-1: USB disconnect, device number 7 [ 601.420474][ T5280] ch341 5-1:0.0: device disconnected [ 601.461916][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.498387][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.426261][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1039'. [ 603.635317][ T5279] libceph: connect (1)[c::]:6789 error -101 [ 603.679755][ T5279] libceph: mon0 (1)[c::]:6789 connect error [ 603.687403][ T9504] ceph: No mds server is up or the cluster is laggy [ 604.178810][ T5279] libceph: connect (1)[c::]:6789 error -101 [ 604.195895][ T9518] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 604.283312][ T2537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.287213][ T5279] libceph: mon0 (1)[c::]:6789 connect error [ 604.706171][ T2537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.968257][ T2537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.251782][ T2537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.470509][ T5275] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 605.641381][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 605.752709][ T5275] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 605.784543][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.792635][ T5275] usb 5-1: Product: syz [ 605.820745][ T5275] usb 5-1: Manufacturer: syz [ 605.825445][ T5275] usb 5-1: SerialNumber: syz [ 605.835020][ T2537] bridge_slave_1: left allmulticast mode [ 605.849736][ T2537] bridge_slave_1: left promiscuous mode [ 605.883619][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.898046][ T5275] usb 5-1: config 0 descriptor?? [ 605.931359][ T5275] ch341 5-1:0.0: ch341-uart converter detected [ 605.967230][ T2537] bridge_slave_0: left allmulticast mode [ 605.978359][ T2537] bridge_slave_0: left promiscuous mode [ 606.008215][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.678167][ T9548] netlink: 'syz.2.1057': attribute type 1 has an invalid length. [ 606.829676][ T5275] usb 5-1: failed to send control message: -71 [ 606.850724][ T5275] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 606.852320][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 606.889909][ T4611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 606.909083][ T5275] usb 5-1: USB disconnect, device number 8 [ 606.915914][ T4611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 606.932374][ T5275] ch341 5-1:0.0: device disconnected [ 606.953014][ T4611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 606.980861][ T4611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 606.990883][ T4611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 609.338272][ T4611] Bluetooth: hci4: command tx timeout [ 609.589684][ T2537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.610941][ T2537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.647858][ T2537] bond0 (unregistering): Released all slaves [ 609.908220][ T8] ip6gretap0 speed is unknown, defaulting to 1000 [ 609.924546][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1064'. [ 610.735866][ T5279] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 611.123833][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 611.194884][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.231702][ T5279] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 611.591874][ T4611] Bluetooth: hci4: command tx timeout [ 612.345922][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.358435][ T5279] usb 4-1: config 0 descriptor?? [ 612.371826][ T2537] hsr_slave_0: left promiscuous mode [ 612.773135][ T2537] hsr_slave_1: left promiscuous mode [ 612.797010][ T5279] hub 4-1:0.0: USB hub found [ 613.010543][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.080762][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.202081][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.259981][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.517651][ T2537] veth1_macvtap: left promiscuous mode [ 613.530327][ T5279] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 613.565556][ T5279] usbhid 4-1:0.0: can't add hid device: -71 [ 613.571693][ T5279] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 613.577384][ T2537] veth0_macvtap: left promiscuous mode [ 613.631931][ T5279] usb 4-1: USB disconnect, device number 10 [ 613.640082][ T2537] veth1_vlan: left promiscuous mode [ 613.645647][ T2537] veth0_vlan: left promiscuous mode [ 613.924356][ T4611] Bluetooth: hci4: command tx timeout [ 613.969726][ T9619] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 614.013236][ T30] audit: type=1326 audit(1727228498.772:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9616 comm="syz.2.1076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x0 [ 614.625718][ T5279] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 614.670971][ T30] audit: type=1326 audit(1727228499.381:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.3.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a9d7def9 code=0x0 [ 614.870429][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 614.926630][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 614.950174][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 614.982884][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 615.014533][ T5279] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 615.046739][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.098493][ T5279] usb 3-1: config 0 descriptor?? [ 615.127958][ T9621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.780727][ T5279] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 615.823106][ T5279] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 615.930154][ T5279] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 616.175025][ T5228] Bluetooth: hci4: command tx timeout [ 616.679557][ T2537] team0 (unregistering): Port device team_slave_1 removed [ 616.906430][ T2537] team0 (unregistering): Port device team_slave_0 removed [ 617.288253][ T5310] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 618.431623][ T5228] Bluetooth: hci4: command 0x0405 tx timeout [ 619.156745][ T5279] usb 3-1: USB disconnect, device number 14 [ 619.484548][ T9657] netlink: 'syz.3.1085': attribute type 4 has an invalid length. [ 619.530126][ T9657] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1085'. [ 620.929373][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 621.293221][ T9549] chnl_net:caif_netlink_parms(): no params data found [ 622.025220][ T30] audit: type=1400 audit(1727228506.091:842): avc: denied { read } for pid=9686 comm="syz.0.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 623.324922][ T9695] bridge0: entered promiscuous mode [ 623.343722][ T9695] macsec1: entered promiscuous mode [ 623.464938][ T9695] bridge0: left promiscuous mode [ 623.666079][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.956855][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.964256][ T9549] bridge_slave_0: entered allmulticast mode [ 624.055429][ T9549] bridge_slave_0: entered promiscuous mode [ 624.086303][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.093851][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.101554][ T9549] bridge_slave_1: entered allmulticast mode [ 624.111907][ T9549] bridge_slave_1: entered promiscuous mode [ 624.120732][ T9717] netlink: 'syz.4.1097': attribute type 4 has an invalid length. [ 624.185445][ T9717] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1097'. [ 624.673748][ T9549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.741059][ T9549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.270926][ T9549] team0: Port device team_slave_0 added [ 626.248727][ T9549] team0: Port device team_slave_1 added [ 627.302004][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.302033][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.302076][ T9549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.325070][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.325100][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.325144][ T9549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.711048][ T9549] hsr_slave_0: entered promiscuous mode [ 627.733975][ T9549] hsr_slave_1: entered promiscuous mode [ 627.744596][ T9549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.744634][ T9549] Cannot create hsr debugfs directory [ 628.379363][ T30] audit: type=1326 audit(1727228512.026:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.0.1111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d397def9 code=0x0 [ 629.275529][ T30] audit: type=1400 audit(1727228512.801:844): avc: denied { write } for pid=9781 comm="syz.2.1113" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 630.624103][ T30] audit: type=1326 audit(1727228514.103:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.4.1116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f609ff7def9 code=0x0 [ 632.810330][ T9549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 633.122153][ T9549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 633.373174][ T9549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 633.999653][ T9549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 634.063292][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.069789][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.900562][ T30] audit: type=1400 audit(1727228518.256:846): avc: denied { connect } for pid=9825 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 638.287073][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.420460][ T9549] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.532655][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. [ 638.685116][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.692503][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.804490][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.811896][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.996089][ T30] audit: type=1400 audit(1727228524.607:847): avc: denied { write } for pid=9886 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 642.284465][ T9549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.458492][ T30] audit: type=1400 audit(1727228525.022:848): avc: denied { map } for pid=9886 comm="syz.3.1136" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 642.590153][ T30] audit: type=1400 audit(1727228525.022:849): avc: denied { execute } for pid=9886 comm="syz.3.1136" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 642.662906][ T9549] veth0_vlan: entered promiscuous mode [ 642.788223][ T9549] veth1_vlan: entered promiscuous mode [ 643.024100][ T9549] veth0_macvtap: entered promiscuous mode [ 643.110701][ T9549] veth1_macvtap: entered promiscuous mode [ 643.292327][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.331122][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.390212][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.515501][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.553968][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.588721][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.762402][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.797980][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.853220][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.953460][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.211719][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.240383][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.253798][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.232032][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.289770][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.357203][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.405022][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.440109][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.483211][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.515238][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.548262][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.754718][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.210545][ T9549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.911654][ T9549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.009880][ T9549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.030946][ T9549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.909453][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.017550][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.359450][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.403146][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.855322][ T9978] netlink: 'syz.4.1154': attribute type 4 has an invalid length. [ 651.879687][ T9978] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1154'. [ 652.767084][T10001] SET target dimension over the limit! [ 654.482571][T10016] No control pipe specified [ 655.363876][ T30] audit: type=1400 audit(1727228536.144:850): avc: denied { connect } for pid=10013 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 656.461799][ T30] audit: type=1400 audit(1727228537.787:851): avc: denied { ioctl } for pid=10020 comm="syz.1.1162" path="socket:[33349]" dev="sockfs" ino=33349 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 659.087103][ T30] audit: type=1400 audit(1727228540.362:852): avc: denied { mount } for pid=10049 comm="syz.4.1169" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 660.649962][T10065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1173'. [ 661.975885][ T30] audit: type=1326 audit(1727228543.048:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.2.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x0 [ 662.154497][ T30] audit: type=1400 audit(1727228543.205:854): avc: denied { add_name } for pid=10081 comm="syz.0.1177" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 662.188472][ T30] audit: type=1400 audit(1727228543.205:855): avc: denied { create } for pid=10081 comm="syz.0.1177" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 662.222140][ T30] audit: type=1400 audit(1727228543.205:856): avc: denied { associate } for pid=10081 comm="syz.0.1177" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 662.235541][T10071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 662.265362][T10071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 662.272014][T10071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 662.286392][T10071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 662.308597][T10071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 662.326482][T10071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 662.340639][T10071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 662.362861][T10071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 663.748588][ T4611] Bluetooth: hci2: command 0x0c1a tx timeout [ 663.780319][ T5279] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 666.309428][ T5228] Bluetooth: hci4: command 0x0405 tx timeout [ 666.316258][ T4611] Bluetooth: hci3: command 0x0c1a tx timeout [ 667.331974][ T5279] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 667.344170][ T5279] usb 4-1: can't read configurations, error -71 [ 667.385227][ T30] audit: type=1326 audit(1727228548.023:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.0.1185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d397def9 code=0x0 [ 667.508481][ T30] audit: type=1400 audit(1727228548.106:858): avc: denied { read } for pid=10108 comm="syz.1.1184" path="socket:[33448]" dev="sockfs" ino=33448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 668.330186][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 668.525745][ T4611] Bluetooth: hci3: command 0x0c1a tx timeout [ 668.531826][ T5228] Bluetooth: hci4: command 0x0405 tx timeout [ 670.779797][ T5228] Bluetooth: hci4: command 0x0405 tx timeout [ 670.786090][ T4611] Bluetooth: hci3: command 0x0c1a tx timeout [ 671.111824][ T4611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 671.128478][ T4611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 671.180410][ T4611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.195943][ T4611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.214746][ T4611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 671.225688][ T4611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.452830][T10176] netlink: 'syz.0.1200': attribute type 13 has an invalid length. [ 672.192151][T10186] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 674.636263][ T5228] Bluetooth: hci6: command tx timeout [ 675.483878][ T4611] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 675.580714][T10169] chnl_net:caif_netlink_parms(): no params data found [ 676.158770][T10169] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.191760][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.240578][T10169] bridge_slave_0: entered allmulticast mode [ 676.249353][T10169] bridge_slave_0: entered promiscuous mode [ 676.296373][T10169] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.303670][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.370597][T10169] bridge_slave_1: entered allmulticast mode [ 676.415014][T10169] bridge_slave_1: entered promiscuous mode [ 676.848936][ T4611] Bluetooth: hci6: command tx timeout [ 676.958956][T10169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.158554][T10169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.640019][T10169] team0: Port device team_slave_0 added [ 677.758075][T10169] team0: Port device team_slave_1 added [ 677.984073][ T30] audit: type=1400 audit(1727228557.816:859): avc: denied { name_bind } for pid=10237 comm="syz.1.1212" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 678.196797][T10169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.282282][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.404627][T10169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.713484][T10169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.742200][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.826840][T10169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.100258][ T4611] Bluetooth: hci6: command tx timeout [ 679.369074][T10169] hsr_slave_0: entered promiscuous mode [ 679.434630][T10169] hsr_slave_1: entered promiscuous mode [ 679.465356][T10169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.505516][T10169] Cannot create hsr debugfs directory [ 681.357074][ T5228] Bluetooth: hci6: command tx timeout [ 681.864680][T10169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.236296][T10169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.634255][T10169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.848573][ T30] audit: type=1400 audit(1727228563.234:860): avc: denied { bind } for pid=10279 comm="syz.3.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 683.891965][ T30] audit: type=1400 audit(1727228563.234:861): avc: denied { node_bind } for pid=10279 comm="syz.3.1223" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 683.895136][T10169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.935690][ T30] audit: type=1400 audit(1727228563.243:862): avc: denied { shutdown } for pid=10279 comm="syz.3.1223" laddr=ff02::1 lport=39921 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 685.734826][T10169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 685.978339][T10169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 686.046162][T10169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 686.117568][T10169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.977471][T10169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.674804][T10169] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.766900][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.774833][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.911323][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.918713][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.304450][T10169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.161789][T10169] veth0_vlan: entered promiscuous mode [ 692.255277][T10169] veth1_vlan: entered promiscuous mode [ 692.389539][ T5228] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 692.435516][T10169] veth0_macvtap: entered promiscuous mode [ 692.454395][ T4611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 692.474244][ T4611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 692.479138][T10169] veth1_macvtap: entered promiscuous mode [ 692.489776][ T4611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 692.499325][ T4611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 692.509611][ T4611] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 692.519581][ T4611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 692.625108][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.645724][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.658589][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.669762][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.682727][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.693960][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.705845][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.716931][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.727415][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.743558][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.755647][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.766975][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.780768][T10169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.824771][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.846170][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.857013][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.867770][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.879311][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.899111][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.921325][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.934482][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.947303][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.972174][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.991730][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.009655][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.027913][T10169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.132820][T10169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.155014][T10169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.170554][T10169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.190315][T10169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.820016][ T5228] Bluetooth: hci7: command tx timeout [ 695.137077][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.177885][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.577859][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.655009][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.756967][T10343] chnl_net:caif_netlink_parms(): no params data found [ 697.468375][ T5228] Bluetooth: hci7: command tx timeout [ 697.600341][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.616958][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.635417][T10343] bridge_slave_0: entered allmulticast mode [ 697.656107][T10343] bridge_slave_0: entered promiscuous mode [ 697.704987][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.712251][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.747305][T10343] bridge_slave_1: entered allmulticast mode [ 697.760067][T10343] bridge_slave_1: entered promiscuous mode [ 697.956377][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 697.976776][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.026871][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.334267][T10343] team0: Port device team_slave_0 added [ 698.431355][T10343] team0: Port device team_slave_1 added [ 698.619689][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.636540][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.692244][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.620206][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.634350][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.642703][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.663834][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.066726][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.078895][ T5228] Bluetooth: hci7: command tx timeout [ 702.990531][T10343] hsr_slave_0: entered promiscuous mode [ 703.053075][T10343] hsr_slave_1: entered promiscuous mode [ 703.116961][T10343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.281928][ T5228] Bluetooth: hci7: command tx timeout [ 703.287588][T10343] Cannot create hsr debugfs directory [ 705.188076][T10343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.202424][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 705.518930][T10343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.605967][T10343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.966332][T10343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.015020][T10452] netlink: 'syz.4.1266': attribute type 8 has an invalid length. [ 709.585732][T10343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 709.634908][T10343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 709.683073][T10343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 709.760886][T10343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 710.435113][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.526820][T10343] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.577485][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.584863][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.647992][ T2506] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.655366][ T2506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.675313][ T5288] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 711.158332][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 711.166476][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.177476][ T5288] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 711.187181][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.199632][ T5288] usb 1-1: config 0 descriptor?? [ 711.209592][ T5288] hub 1-1:0.0: bad descriptor, ignoring hub [ 711.216220][ T5288] hub 1-1:0.0: probe with driver hub failed with error -5 [ 711.237544][ T5288] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 711.584937][ T8] usb 1-1: USB disconnect, device number 14 [ 711.922673][T10343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.118132][T10343] veth0_vlan: entered promiscuous mode [ 712.191114][T10343] veth1_vlan: entered promiscuous mode [ 712.263150][T10496] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 712.490150][T10343] veth0_macvtap: entered promiscuous mode [ 712.533550][T10343] veth1_macvtap: entered promiscuous mode [ 712.708269][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.734239][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.749578][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.770000][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.669316][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.702440][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.724316][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.750488][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.774018][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.795442][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.817817][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.853050][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.877780][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.917044][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.186605][T10343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.245620][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 716.297535][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.365692][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.418034][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.462346][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.504814][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.521480][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.553117][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.579790][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.602658][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.613569][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.624497][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.650231][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.682109][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.714060][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.762798][T10343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.832053][T10343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.866508][T10343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.896567][T10343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.939191][T10343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.437112][T10540] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 717.771125][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.810023][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.161217][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.215440][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.538005][T10547] sctp: [Deprecated]: syz.4.1292 (pid 10547) Use of int in max_burst socket option deprecated. [ 718.538005][T10547] Use struct sctp_assoc_value instead [ 719.676209][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 722.305864][T10588] input: syz1 as /devices/virtual/input/input6 [ 722.378568][ T30] audit: type=1400 audit(1727228598.797:863): avc: denied { read } for pid=4658 comm="acpid" name="event4" dev="devtmpfs" ino=2443 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 722.488068][ T30] audit: type=1400 audit(1727228598.825:864): avc: denied { open } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2443 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 722.664424][ T30] audit: type=1400 audit(1727228598.834:865): avc: denied { ioctl } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2443 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 726.687669][T10627] trusted_key: encrypted_key: key user:syz not found [ 728.265563][ T30] audit: type=1326 audit(1727228604.225:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10630 comm="syz.1.1316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0c37def9 code=0x0 [ 728.429645][T10640] No control pipe specified [ 731.799910][ T30] audit: type=1400 audit(1727228607.473:867): avc: denied { mount } for pid=10664 comm="syz.3.1325" name="/" dev="gadgetfs" ino=36663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 739.023762][ T30] audit: type=1400 audit(1727228614.156:868): avc: denied { mount } for pid=10711 comm="syz.1.1338" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 741.201765][ T30] audit: type=1400 audit(1727228614.673:869): avc: denied { write } for pid=10720 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 741.737449][ T30] audit: type=1326 audit(1727228616.657:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 741.838520][ T30] audit: type=1326 audit(1727228616.657:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 742.039204][ T30] audit: type=1326 audit(1727228616.667:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 742.175256][ T30] audit: type=1326 audit(1727228616.667:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 742.272507][ T30] audit: type=1326 audit(1727228616.694:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 742.298423][ T30] audit: type=1326 audit(1727228616.694:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 742.374500][ T30] audit: type=1326 audit(1727228616.694:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 742.420917][ T5280] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 742.651797][ T30] audit: type=1326 audit(1727228616.694:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x7ffc0000 [ 742.719033][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 742.842356][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.876016][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.927209][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 742.972200][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.019987][ T5280] usb 1-1: config 0 descriptor?? [ 743.047787][ T5280] hub 1-1:0.0: USB hub found [ 743.296356][ T5280] hub 1-1:0.0: 1 port detected [ 743.467597][T10736] syz.2.1341: attempt to access beyond end of device [ 743.467597][T10736] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 743.781094][T10736] gfs2: error -5 reading superblock [ 744.839180][ T5280] hub 1-1:0.0: activate --> -90 [ 745.178748][T10759] pimreg26: entered allmulticast mode [ 745.195142][T10758] pimreg26: left allmulticast mode [ 745.304969][ T5310] usb 1-1: USB disconnect, device number 15 [ 745.550473][ T5288] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 746.618774][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 746.631834][ T5288] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.662134][ T5288] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 746.716479][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 747.017511][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 747.038444][ T5288] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.060061][ T5288] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 747.073867][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.081939][ T5288] usb 4-1: Product: syz [ 747.091992][ T5288] usb 4-1: Manufacturer: syz [ 747.220325][ T5288] usb 4-1: SerialNumber: syz [ 748.144095][ T5288] usb 4-1: config 0 descriptor?? [ 748.510918][ T5288] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 748.563133][ T5288] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 748.611559][ T5288] usb 4-1: USB disconnect, device number 13 [ 748.729140][T10783] bpq0: entered allmulticast mode [ 748.897611][T10787] Bluetooth: MGMT ver 1.23 [ 748.911210][T10787] Bluetooth: hci3: service_discovery: expected 52 bytes, got 7 bytes [ 750.093961][T10796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.880506][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 752.915938][ T30] audit: type=1400 audit(1727228626.940:944): avc: denied { bind } for pid=10795 comm="syz.1.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 753.838888][T10816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1368'. [ 754.392443][ T30] audit: type=1326 audit(1727228628.343:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10825 comm="syz.1.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0c37def9 code=0x0 [ 754.499429][T10828] netlink: 'syz.4.1371': attribute type 5 has an invalid length. [ 755.957840][T10824] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 755.964549][T10824] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 756.152876][ T5280] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 756.247322][T10824] vhci_hcd vhci_hcd.0: Device attached [ 756.254997][ T30] audit: type=1326 audit(1727228630.050:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.2.1372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x0 [ 757.539804][ T30] audit: type=1400 audit(1727228630.410:947): avc: denied { accept } for pid=10840 comm="syz.1.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 758.350043][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 758.392919][ T5280] usb 4-1: config 0 interface 0 has no altsetting 0 [ 758.430940][ T5280] usb 4-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=1e.0b [ 758.453673][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.482849][ T5280] usb 4-1: Product: syz [ 758.487465][ T5280] usb 4-1: Manufacturer: syz [ 758.510815][ T5280] usb 4-1: SerialNumber: syz [ 758.558376][ T5275] usb 14-1: SetAddress Request (2) to port 0 [ 758.565279][ T5275] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 758.592938][ T5280] usb 4-1: config 0 descriptor?? [ 758.617359][ T5280] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 758.636273][ T5280] usb 4-1: selecting invalid altsetting 0 [ 758.651938][T10841] vhci_hcd: connection closed [ 758.657369][ T2042] pvrusb2: Invalid write control endpoint [ 758.663146][ T29] vhci_hcd: stop threads [ 758.680705][ T29] vhci_hcd: release socket [ 758.689173][ T29] vhci_hcd: disconnect device [ 758.867253][ T5280] usb 4-1: USB disconnect, device number 14 [ 759.108533][ T2042] pvrusb2: Invalid write control endpoint [ 759.111670][ T30] audit: type=1326 audit(1727228632.699:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.1.1384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0c37def9 code=0x0 [ 759.126752][ T2042] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 759.169320][ T2042] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 759.182213][ T2042] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 759.224230][ T2042] pvrusb2: Device being rendered inoperable [ 759.269664][ T2042] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 759.370799][ T2042] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 759.454388][ T2042] pvrusb2: Attached sub-driver cx25840 [ 759.710929][ T2042] pvrusb2: Attempted to execute control transfer when device not ok [ 759.728262][ T30] audit: type=1400 audit(1727228633.271:949): avc: denied { accept } for pid=10871 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 759.788359][ T2042] pvrusb2: Attempted to execute control transfer when device not ok [ 759.827850][ T2042] pvrusb2: Attempted to execute control transfer when device not ok [ 759.872208][ T2042] pvrusb2: Attempted to execute control transfer when device not ok [ 759.930939][ T2042] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 759.993151][ T30] audit: type=1400 audit(1727228633.317:950): avc: denied { accept } for pid=10871 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 760.625453][ T2042] TUNER: Unable to find symbol tda829x_probe() [ 760.882355][ T2042] DVB: Unable to find symbol tda9887_attach() [ 760.943777][ T2042] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 760.985984][ T2042] pvrusb2: Attached sub-driver tuner [ 761.029715][ T2042] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 763.966305][ T2042] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 765.249319][ T5275] usb 14-1: device descriptor read/8, error -110 [ 765.852182][ T5275] usb usb14-port1: attempt power cycle [ 766.753512][ T5275] usb usb14-port1: unable to enumerate USB device [ 767.295902][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 767.312758][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 771.884163][ T30] audit: type=1326 audit(1727228644.486:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.3.1407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a9d7def9 code=0x0 [ 771.987818][ T30] audit: type=1326 audit(1727228644.587:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.4.1411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f731817def9 code=0x0 [ 772.050069][T10943] syz_tun: entered promiscuous mode [ 772.060759][T10943] vlan2: entered promiscuous mode [ 772.240572][T10943] syz_tun: left promiscuous mode [ 775.515453][ T5275] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 775.742556][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 776.519235][ T5275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.565975][ T5275] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 776.575134][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.633605][ T5275] usb 3-1: Product: syz [ 776.637909][ T5275] usb 3-1: Manufacturer: syz [ 776.685043][ T5275] usb 3-1: SerialNumber: syz [ 776.751216][ T5275] usb 3-1: config 0 descriptor?? [ 777.136843][ T5275] usb 3-1: Not enough endpoints found in device, aborting! [ 777.303963][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 777.604830][ T9] usb 3-1: USB disconnect, device number 15 [ 778.807936][ T5275] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 778.843556][ T30] audit: type=1326 audit(1727228650.910:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f731817def9 code=0x0 [ 778.921713][ T30] audit: type=1326 audit(1727228650.956:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.1.1433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0c37def9 code=0x0 [ 778.940811][T11007] geneve2: entered promiscuous mode [ 778.967453][T11007] geneve2: entered allmulticast mode [ 779.045062][ T5275] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 779.058742][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.066959][ T5275] usb 4-1: Product: syz [ 779.093590][ T5275] usb 4-1: Manufacturer: syz [ 779.099609][ T5275] usb 4-1: SerialNumber: syz [ 779.136882][ T5275] usb 4-1: config 0 descriptor?? [ 779.150665][ T5275] ch341 4-1:0.0: ch341-uart converter detected [ 779.424942][ T5288] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 779.482869][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 779.518814][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 779.538900][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 779.569738][T11020] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1437'. [ 779.683379][T11019] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 779.703996][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.735196][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 779.773010][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 779.799328][ T5275] usb 4-1: failed to send control message: -71 [ 779.816339][ T5275] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 779.842624][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.873257][ T5288] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.874027][ T5275] usb 4-1: USB disconnect, device number 15 [ 779.905657][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.914954][ T5275] ch341 4-1:0.0: device disconnected [ 779.948224][ T5288] usb 2-1: config 0 descriptor?? [ 779.959315][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 779.965455][T11011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 779.973212][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 779.984414][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 779.997800][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.008203][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.018288][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.034347][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.059520][T11019] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.066358][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 780.274406][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 780.297004][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.340900][ T9] usb 1-1: config 0 descriptor?? [ 780.365920][ T9] cp210x 1-1:0.0: cp210x converter detected [ 781.657414][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 781.665562][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 781.682800][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 781.697872][ T9] usb 1-1: USB disconnect, device number 16 [ 781.716527][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 781.729086][ T9] cp210x 1-1:0.0: device disconnected [ 781.919454][ T30] audit: type=1400 audit(1727228653.753:955): avc: denied { append } for pid=11026 comm="syz.2.1440" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 782.002992][ T30] audit: type=1400 audit(1727228653.817:956): avc: denied { ioctl } for pid=11026 comm="syz.2.1440" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 782.326378][ T5288] usbhid 2-1:0.0: can't add hid device: -71 [ 782.370189][ T5288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 782.446567][ T5288] usb 2-1: USB disconnect, device number 16 [ 782.656756][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 783.057782][T11050] netlink: 'syz.1.1449': attribute type 2 has an invalid length. [ 783.102096][ T30] audit: type=1326 audit(1727228654.842:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.0.1448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d397def9 code=0x0 [ 783.396715][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 784.473599][ T5275] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 784.717940][ T5275] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 784.746976][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.798571][ T5275] usb 4-1: Product: syz [ 784.812540][ T5275] usb 4-1: Manufacturer: syz [ 784.820076][ T5275] usb 4-1: SerialNumber: syz [ 784.879009][ T5275] usb 4-1: config 0 descriptor?? [ 784.898617][ T5275] ch341 4-1:0.0: ch341-uart converter detected [ 785.011437][ T5288] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 785.034119][ T30] audit: type=1400 audit(1727228656.596:958): avc: denied { mount } for pid=11046 comm="syz.2.1447" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 785.267667][ T5288] usb 2-1: config 0 has no interfaces? [ 785.284495][ T5288] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 785.296307][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.333532][ T5288] usb 2-1: config 0 descriptor?? [ 785.453816][ T5275] usb 4-1: failed to send control message: -71 [ 785.470388][ T5275] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 785.499533][ T5275] usb 4-1: USB disconnect, device number 16 [ 785.520434][ T5275] ch341 4-1:0.0: device disconnected [ 785.632799][ T30] audit: type=1400 audit(1727228657.168:959): avc: denied { unmount } for pid=7173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 785.809472][ T5288] usb 2-1: USB disconnect, device number 17 [ 785.859479][ T30] audit: type=1400 audit(1727228657.371:960): avc: denied { read } for pid=11073 comm="syz.0.1456" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 785.933417][ T30] audit: type=1400 audit(1727228657.371:961): avc: denied { open } for pid=11073 comm="syz.0.1456" path="/128/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 785.967086][ T5275] IPVS: starting estimator thread 0... [ 786.003186][T11077] block device autoloading is deprecated and will be removed. [ 786.022302][ T30] audit: type=1400 audit(1727228657.537:962): avc: denied { read } for pid=11080 comm="syz.4.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 786.077201][T11079] IPVS: using max 19 ests per chain, 45600 per kthread [ 786.121342][T11074] 9pnet_fd: Insufficient options for proto=fd [ 786.445658][ T5288] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 787.447671][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 787.800394][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 787.888819][ T5288] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 787.958010][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.973199][ T30] audit: type=1326 audit(1727228659.328:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.2.1464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x0 [ 788.192279][ T5288] usb 1-1: config 0 descriptor?? [ 788.806421][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 788.832618][ T5288] ath6kl: Failed to submit usb control message: -32 [ 788.862586][ T5288] ath6kl: unable to send the bmi data to the device: -32 [ 788.880266][ T5288] ath6kl: Unable to send get target info: -32 [ 788.897435][ T5288] ath6kl: Failed to init ath6kl core: -32 [ 788.927902][ T5288] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 788.964032][ T5288] usb 1-1: USB disconnect, device number 17 [ 789.295996][ T30] audit: type=1400 audit(1727228660.555:964): avc: denied { module_request } for pid=11117 comm="syz.2.1470" kmod="net-pf-2-proto-9-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 789.674015][ T5275] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 790.935578][ T5275] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 790.963273][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.993380][ T5275] usb 2-1: Product: syz [ 791.001834][ T5275] usb 2-1: Manufacturer: syz [ 791.012979][ T5275] usb 2-1: SerialNumber: syz [ 791.038942][ T5275] usb 2-1: config 0 descriptor?? [ 791.058403][ T5275] ch341 2-1:0.0: ch341-uart converter detected [ 792.606431][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 792.721224][ T5275] usb 2-1: failed to send control message: -110 [ 793.631604][ T5275] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 793.859133][ T30] audit: type=1326 audit(1727228664.773:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11152 comm="syz.2.1480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x0 [ 793.936073][ T5288] usb 2-1: USB disconnect, device number 18 [ 793.966066][ T5288] ch341 2-1:0.0: device disconnected [ 794.100114][ T5228] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 795.248311][T11177] No control pipe specified [ 797.897178][ T30] audit: type=1400 audit(1727228668.475:966): avc: denied { unmount } for pid=10343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 798.194142][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 799.543995][ T5275] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 801.033235][T11214] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 801.041214][T11214] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1495'. [ 801.084624][ T5275] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 801.104088][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.112155][ T5275] usb 1-1: Product: syz [ 801.138960][ T5275] usb 1-1: Manufacturer: syz [ 801.143649][ T5275] usb 1-1: SerialNumber: syz [ 801.180692][ T5275] usb 1-1: config 0 descriptor?? [ 801.202714][ T5275] ch341 1-1:0.0: ch341-uart converter detected [ 801.261204][T11220] No control pipe specified [ 802.613790][T11197] fuse: Bad value for 'fd' [ 802.718483][ T5275] usb 1-1: failed to send control message: -110 [ 802.724921][ T5275] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 802.846859][ T30] audit: type=1326 audit(1727228673.062:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.2.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fed7def9 code=0x0 [ 802.948449][ T5275] usb 1-1: USB disconnect, device number 18 [ 802.983252][ T5275] ch341 1-1:0.0: device disconnected [ 804.345165][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 804.440632][T11246] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.1507'. [ 806.938167][T11266] No control pipe specified [ 808.418828][ T5228] Bluetooth: hci6: command 0x0406 tx timeout [ 808.738645][T11287] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1521'. [ 809.231676][ T5288] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 809.789297][ T5288] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 809.811764][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.848895][ T5288] usb 3-1: Product: syz [ 809.853147][ T5288] usb 3-1: Manufacturer: syz [ 809.880380][ T5288] usb 3-1: SerialNumber: syz [ 809.898434][ T30] audit: type=1326 audit(1727228679.578:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.0.1524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d397def9 code=0x0 [ 809.936815][ T5288] usb 3-1: config 0 descriptor?? [ 809.984192][ T5288] ch341 3-1:0.0: ch341-uart converter detected [ 811.149959][T11281] fuse: Bad value for 'fd' [ 811.374717][ T5288] usb 3-1: failed to send control message: -71 [ 811.389496][ T5288] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 811.448835][ T5288] usb 3-1: USB disconnect, device number 16 [ 811.468405][ T5288] ch341 3-1:0.0: device disconnected [ 811.510346][T11304] No control pipe specified [ 812.388623][T11326] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.1534'. [ 813.260203][ T30] audit: type=1326 audit(1727228682.661:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11325 comm="syz.1.1535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0c37def9 code=0x0 [ 813.435313][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'. [ 813.669161][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 814.747076][T11341] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 815.041521][T11349] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 815.490664][T11363] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.1548'. [ 816.724705][T11371] qnx6: unable to read the first superblock [ 817.638829][ T30] audit: type=1400 audit(1727228685.845:970): avc: denied { getopt } for pid=11361 comm="syz.3.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 817.760076][T11370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1550'. [ 818.034913][T11377] netlink: 'syz.1.1553': attribute type 1 has an invalid length. [ 819.246949][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 819.528408][T11414] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.1563'. [ 820.302369][ T30] audit: type=1326 audit(1727228689.168:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.1564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d397def9 code=0x0 [ 822.991566][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 823.056264][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 823.106371][T11457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.154897][T11457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.262160][T11457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.269730][T11457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.629428][T11465] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.1578'. [ 824.907021][T11447] Bluetooth: hci7: command 0x0406 tx timeout [ 826.098818][ T31] INFO: task syz.4.1169:10049 blocked for more than 145 seconds. [ 826.128716][ T31] Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 826.166680][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.183300][ T31] task:syz.4.1169 state:D stack:26480 pid:10049 tgid:10049 ppid:7383 flags:0x00004004 [ 826.219705][ T31] Call Trace: [ 826.233363][ T31] [ 826.239878][ T31] __schedule+0xe37/0x5490 [ 826.248746][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 826.259745][ T31] ? preempt_schedule_notrace+0x62/0xe0 [ 826.272075][ T31] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 826.287569][ T31] ? __pfx___schedule+0x10/0x10 [ 826.300801][ T31] ? schedule+0x298/0x350 [ 826.314566][ T31] ? __pfx_lock_release+0x10/0x10 [ 826.324797][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 826.341031][ T31] ? __mutex_trylock_common+0x78/0x250 [ 826.357706][ T31] schedule+0xe7/0x350 [ 826.365223][ T31] schedule_preempt_disabled+0x13/0x30 [ 826.379620][ T31] __mutex_lock+0x5b8/0x9c0 [ 826.393603][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 826.409925][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 826.429291][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 826.442221][ T31] ? rcu_is_watching+0x12/0xc0 [ 826.457053][ T31] ? __pfx_fscontext_release+0x10/0x10 [ 826.468759][ T31] ? __rcu_read_unlock+0x2b4/0x580 [ 826.482101][ T31] ? __pfx_fscontext_release+0x10/0x10 [ 826.493808][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 826.505411][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 826.510904][ T31] nfsd_umount+0x48/0xe0 [ 826.515314][ T31] deactivate_locked_super+0xbe/0x1a0 [ 826.520850][ T31] deactivate_super+0xde/0x100 [ 826.525846][ T31] ? __pfx_fscontext_release+0x10/0x10 [ 826.534433][ T31] put_fs_context+0xac/0x600 [ 826.539217][ T31] ? __pfx_fscontext_release+0x10/0x10 [ 826.544954][ T31] fscontext_release+0x47/0x60 [ 826.549895][ T31] __fput+0x3f6/0xb60 [ 826.559800][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.568871][ T31] task_work_run+0x14e/0x250 [ 826.573715][ T31] ? __pfx_task_work_run+0x10/0x10 [ 826.579913][ T31] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 826.587817][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 826.593562][ T31] do_syscall_64+0xda/0x250 [ 826.599722][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.605713][ T31] RIP: 0033:0x7f609ff7def9 [ 826.611625][ T31] RSP: 002b:00007fff98f55ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 826.620642][ T31] RAX: 0000000000000000 RBX: 000000000009f708 RCX: 00007f609ff7def9 [ 826.628838][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 826.638394][ T31] RBP: 00007f60a0137a80 R08: 0000000000000001 R09: 00007fff98f561bf [ 826.649539][ T31] R10: 00007f609fe00000 R11: 0000000000000246 R12: 000000000009f7d9 [ 826.658130][ T31] R13: 00007fff98f55fd0 R14: 0000000000000032 R15: ffffffffffffffff [ 826.667537][ T31] [ 826.670704][ T31] [ 826.670704][ T31] Showing all locks held in the system: [ 826.689932][ T31] 1 lock held by khungtaskd/31: [ 826.703172][ T31] #0: ffffffff8ddba6a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 826.728237][ T31] 4 locks held by kworker/1:2/1853: [ 826.736006][ T31] #0: ffff8880b893eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 826.762842][ T31] #1: ffff8880b8928a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 826.784452][ T31] #2: ffff8880b892a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 826.801369][ T31] #3: ffffffff9a5ad188 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x199/0x540 [ 826.825211][ T31] 2 locks held by getty/4984: [ 826.830004][ T31] #0: ffff888030a1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 826.840620][ T31] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 826.851568][ T31] 2 locks held by syz.3.949/9146: [ 826.856833][ T31] #0: ffffffff8fb686f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 826.878832][ T31] #1: ffffffff8e1c7a08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 826.889282][ T31] 2 locks held by syz.4.1169/10049: [ 826.896804][ T31] #0: ffff8880216bc0e0 (&type->s_umount_key#83){+.+.}-{3:3}, at: deactivate_super+0xd6/0x100 [ 826.908220][ T31] #1: ffffffff8e1c7a08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 826.918669][ T31] 2 locks held by syz.1.1216/10253: [ 826.925335][ T31] #0: ffff88805af860e0 (&type->s_umount_key#83){+.+.}-{3:3}, at: deactivate_super+0xd6/0x100 [ 826.936553][ T31] #1: ffffffff8e1c7a08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 826.946899][ T31] 2 locks held by syz.3.1584/11486: [ 826.952689][ T31] [ 826.956607][ T31] ============================================= [ 826.956607][ T31] [ 826.965241][ T31] NMI backtrace for cpu 0 [ 826.969629][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 826.979842][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 826.989950][ T31] Call Trace: [ 826.993265][ T31] [ 826.996235][ T31] dump_stack_lvl+0x116/0x1f0 [ 827.000978][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 827.006079][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 827.012219][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 827.018243][ T31] watchdog+0xf0c/0x1240 [ 827.022535][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.027359][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.032650][ T31] ? __kthread_parkme+0x148/0x220 [ 827.037728][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.042437][ T31] kthread+0x2c1/0x3a0 [ 827.046536][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.051770][ T31] ? __pfx_kthread+0x10/0x10 [ 827.056388][ T31] ret_from_fork+0x45/0x80 [ 827.060838][ T31] ? __pfx_kthread+0x10/0x10 [ 827.065457][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.070282][ T31] [ 827.076889][ T31] Sending NMI from CPU 0 to CPUs 1: [ 827.084360][ C1] NMI backtrace for cpu 1 [ 827.084385][ C1] CPU: 1 UID: 0 PID: 1284 Comm: kworker/u8:7 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 827.084425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 827.084445][ C1] Workqueue: bat_events batadv_nc_worker [ 827.084492][ C1] RIP: 0010:unwind_get_return_address+0x53/0xe0 [ 827.084530][ C1] Code: 3c 03 0f 8e 8b 00 00 00 8b 2b 31 ff 89 ee e8 b4 e2 4e 00 85 ed 75 13 e8 6b e0 4e 00 31 db 48 89 d8 5b 5d 41 5c c3 cc cc cc cc 58 e0 4e 00 4c 8d 63 48 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 [ 827.084561][ C1] RSP: 0018:ffffc90000a18778 EFLAGS: 00000202 [ 827.084585][ C1] RAX: 0000000000000000 RBX: ffffc90000a187a0 RCX: ffffffff813cf86c [ 827.084607][ C1] RDX: ffff888028ed8000 RSI: 0000000000000000 RDI: 0000000000000005 [ 827.084627][ C1] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 827.084647][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc90000a187a0 [ 827.084667][ C1] R13: ffffffff817774c0 R14: ffffc90000a18860 R15: ffff888028ed8000 [ 827.084689][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 827.084720][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.084743][ C1] CR2: 00007f7318307ab8 CR3: 000000005ffd4000 CR4: 00000000003506f0 [ 827.084764][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 827.084784][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 827.084803][ C1] Call Trace: [ 827.084813][ C1] [ 827.084826][ C1] ? show_regs+0x8c/0xa0 [ 827.084875][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 827.084924][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 827.084971][ C1] ? nmi_handle+0x1a9/0x5c0 [ 827.085001][ C1] ? unwind_get_return_address+0x53/0xe0 [ 827.085036][ C1] ? default_do_nmi+0x6a/0x160 [ 827.085078][ C1] ? exc_nmi+0x170/0x1e0 [ 827.085117][ C1] ? end_repeat_nmi+0xf/0x53 [ 827.085147][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 827.085195][ C1] ? unwind_get_return_address+0x3c/0xe0 [ 827.085230][ C1] ? unwind_get_return_address+0x53/0xe0 [ 827.085264][ C1] ? unwind_get_return_address+0x53/0xe0 [ 827.085299][ C1] ? unwind_get_return_address+0x53/0xe0 [ 827.085333][ C1] [ 827.085350][ C1] [ 827.085361][ C1] arch_stack_walk+0xc1/0x170 [ 827.085401][ C1] ? consume_skb+0xbf/0x100 [ 827.085467][ C1] ? skb_free_head+0x18a/0x1d0 [ 827.085506][ C1] stack_trace_save+0x95/0xd0 [ 827.085547][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 827.085586][ C1] ? hlock_class+0x4e/0x130 [ 827.085624][ C1] ? __pfx_mark_lock+0x10/0x10 [ 827.085664][ C1] ? mark_lock+0xb5/0xc60 [ 827.085712][ C1] kasan_save_stack+0x33/0x60 [ 827.085757][ C1] ? kasan_save_stack+0x33/0x60 [ 827.085796][ C1] ? kasan_save_track+0x14/0x30 [ 827.085835][ C1] ? kasan_save_free_info+0x3b/0x60 [ 827.085868][ C1] ? poison_slab_object+0xf7/0x160 [ 827.085907][ C1] ? __kasan_slab_free+0x32/0x50 [ 827.085930][ C1] ? kmem_cache_free+0x12f/0x3a0 [ 827.085968][ C1] ? skb_free_head+0x18a/0x1d0 [ 827.085999][ C1] ? skb_release_data+0x75d/0x990 [ 827.086066][ C1] kasan_save_track+0x14/0x30 [ 827.086107][ C1] kasan_save_free_info+0x3b/0x60 [ 827.086141][ C1] poison_slab_object+0xf7/0x160 [ 827.086182][ C1] __kasan_slab_free+0x32/0x50 [ 827.086207][ C1] kmem_cache_free+0x12f/0x3a0 [ 827.086246][ C1] ? skb_free_head+0x18a/0x1d0 [ 827.086283][ C1] skb_free_head+0x18a/0x1d0 [ 827.086317][ C1] skb_release_data+0x75d/0x990 [ 827.086361][ C1] ? mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 827.086402][ C1] ? rcu_is_watching+0x12/0xc0 [ 827.086446][ C1] consume_skb+0xbf/0x100 [ 827.086486][ C1] mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 827.086532][ C1] mac80211_hwsim_beacon_tx+0x592/0xa00 [ 827.086576][ C1] ? find_held_lock+0x2d/0x110 [ 827.086610][ C1] __iterate_interfaces+0x2d0/0x5d0 [ 827.086650][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 827.086694][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 827.086736][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 827.086769][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 827.086817][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 827.086853][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 827.086889][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 827.086920][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 827.086964][ C1] hrtimer_run_softirq+0x17d/0x350 [ 827.086996][ C1] handle_softirqs+0x216/0x8f0 [ 827.087030][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 827.087063][ C1] irq_exit_rcu+0xbb/0x120 [ 827.087094][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 827.087135][ C1] [ 827.087143][ C1] [ 827.087152][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.087195][ C1] RIP: 0010:__rcu_read_unlock+0x1b/0x580 [ 827.087229][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 41 55 41 54 55 65 48 8b 2d 1d 07 91 7e 53 48 8d bd 44 04 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 [ 827.087254][ C1] RSP: 0018:ffffc9000471fb60 EFLAGS: 00000282 [ 827.087274][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000471fb18 [ 827.087291][ C1] RDX: 1ffff110051db15a RSI: ffffffff8b4cddc0 RDI: ffff888028ed8444 [ 827.087309][ C1] RBP: ffff888028ed8000 R08: 0000000000000000 R09: fffffbfff203b333 [ 827.087326][ C1] R10: ffffffff901d999f R11: 0000000000000000 R12: 0000000000000001 [ 827.087347][ C1] R13: 000000000003d8cc R14: 0000000000000000 R15: dffffc0000000000 [ 827.087379][ C1] batadv_nc_worker+0x891/0x1060 [ 827.087426][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 827.087465][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 827.087493][ C1] ? preempt_schedule_common+0x44/0xc0 [ 827.087536][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 827.087567][ C1] process_one_work+0x9c5/0x1b40 [ 827.087600][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 827.087640][ C1] ? __pfx_process_one_work+0x10/0x10 [ 827.087688][ C1] ? assign_work+0x1a0/0x250 [ 827.087729][ C1] worker_thread+0x6c8/0xf00 [ 827.087760][ C1] ? __kthread_parkme+0x148/0x220 [ 827.087794][ C1] ? __pfx_worker_thread+0x10/0x10 [ 827.087818][ C1] kthread+0x2c1/0x3a0 [ 827.087848][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.087887][ C1] ? __pfx_kthread+0x10/0x10 [ 827.087918][ C1] ret_from_fork+0x45/0x80 [ 827.087958][ C1] ? __pfx_kthread+0x10/0x10 [ 827.087988][ C1] ret_from_fork_asm+0x1a/0x30 [ 827.088037][ C1] [ 827.110095][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 827.110120][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 827.110161][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 827.110182][ T31] Call Trace: [ 827.110195][ T31] [ 827.110210][ T31] dump_stack_lvl+0x3d/0x1f0 [ 827.110258][ T31] panic+0x6dc/0x7c0 [ 827.110308][ T31] ? __pfx_panic+0x10/0x10 [ 827.110357][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 827.110404][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 827.110455][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 827.110494][ T31] ? watchdog+0xd76/0x1240 [ 827.110529][ T31] ? watchdog+0xd69/0x1240 [ 827.110569][ T31] watchdog+0xd87/0x1240 [ 827.110613][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.110645][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.110703][ T31] ? __kthread_parkme+0x148/0x220 [ 827.110749][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.110783][ T31] kthread+0x2c1/0x3a0 [ 827.110822][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.110874][ T31] ? __pfx_kthread+0x10/0x10 [ 827.110917][ T31] ret_from_fork+0x45/0x80 [ 827.110967][ T31] ? __pfx_kthread+0x10/0x10 [ 827.111009][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.111079][ T31] [ 827.113289][ T31] Kernel Offset: disabled [ 827.842220][ T31] Rebooting in 86400 seconds..