last executing test programs: 3m26.117597575s ago: executing program 4 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x11) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x40) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r9, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) getrlimit(0x7, &(0x7f00000003c0)) close(r6) 3m24.057913786s ago: executing program 4 (id=1296): sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3}, 0x20) 3m22.667017984s ago: executing program 4 (id=1302): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9000, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 3m21.467691237s ago: executing program 4 (id=1303): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"/1781], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x14, 0x941f00a0, &(0x7f0000000100)="b9ff03076044238cb89e14f00800", 0x0, 0xbdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m59.428217033s ago: executing program 3 (id=1344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000080)={0x18, r3, 0x2, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = dup(r7) read$FUSE(r8, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) setsockopt(r8, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) 2m58.021374755s ago: executing program 3 (id=1348): syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004e835c10e80430ff2154010203010902240001000000000904"], 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x201, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0000ef000020000004000100000000000000218a5e37ea2b0000a81ffd3077d81ad405349215ff001971bf38058443a86f88a9c90fdcb35c284169d7e6651e6fc252fefffdf19e19200cec22cb0edf7861031b0457"], 0x18}}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000007c0)={{}, 'port0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000) write$dsp(0xffffffffffffffff, &(0x7f0000002080)="a5", 0x1) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x81}, &(0x7f0000000800)={0x7f, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa9}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX, @ANYRES32], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m52.799972409s ago: executing program 3 (id=1358): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 2m51.384816128s ago: executing program 3 (id=1361): socket(0x1d, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040), 0x24}}, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x8000000000000001, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x2c}, 0x1, 0xba01}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) 2m42.480134257s ago: executing program 3 (id=1374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200)=0x6, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000800}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000002a00)={0x0, &(0x7f0000003180)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0xa002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) accept4$packet(r0, 0x0, &(0x7f0000000180), 0x0) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x27, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x11) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x7f}], 0x0) 1m49.561117276s ago: executing program 2 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="1500004065ffff018400110800395032303030", @ANYBLOB="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", @ANYRESDEC=r1, @ANYRESOCT=r0], 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = inotify_init1(0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='+\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) socketpair(0x38, 0x0, 0xfffffffe, &(0x7f0000001400)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001400)) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000000)={@empty, @rand_addr, r8}, 0xc) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @multicast2}, 0x25, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='gretap0\x00', 0x8, 0x401, 0x8}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) getsockopt$MRT6(r11, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r8, 0x4, 0x3, 0x5, 0x200, 0x4, @private1, @remote, 0x40, 0x80, 0xfff}}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 1m42.353113973s ago: executing program 2 (id=1419): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r1, &(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x1000014}, 0xc) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="05030402d3fc02000000ab5d71acedd7c9560385dcb1884884d7dc049806892f05ce811c88f7", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @window, @window, @timestamp, @mss, @mss, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 1m40.836887544s ago: executing program 2 (id=1428): r0 = socket(0x2, 0x3, 0x9) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x994) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r5 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x1fff, 0x3}, 0x6a, 0x0) landlock_restrict_self(r6, 0x0) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x10000000) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m39.693908698s ago: executing program 2 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) capset(0x0, &(0x7f0000000280)) inotify_init() inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0xffffffff, 0x2003) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[], 0x69) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast2, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'ip_vti0\x00', 0x3}, 0x18) 1m37.52833119s ago: executing program 2 (id=1430): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB="0405"], 0x2, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000000540)=ANY=[], 0x25) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@private0}}, 0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r10, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 1m36.609194027s ago: executing program 3 (id=1387): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "060000000000e5318fca4288c2ffbdbec772030acd2c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907f7c71d7007200", r5}) epoll_create1(0x0) r6 = dup3(0xffffffffffffffff, r4, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 1m35.206285117s ago: executing program 4 (id=1320): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x0, 0x0) 1m35.053371007s ago: executing program 4 (id=1435): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000540), 0xfff, 0x480201) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYBLOB="1800000010140100001c0000000000000800050000000000fd966367f25fbac0a3aa99d75eb69ebf86e491977ce5a520643b192aa37824c5aeac0c91656863f6fa05b1e4d08b3c48e5b089e469e850137ad7d2dcafdbe193d2205d760fb7a1a000000000000000"], 0x18}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r7, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) 1m33.743242537s ago: executing program 2 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000c2920f22be858d640061199800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@get={0x1, &(0x7f0000000340)=""/168, 0x1}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xfdef}], 0x1, 0x0, 0x0, 0x2c}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1m13.526938668s ago: executing program 1 (id=1456): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 1m13.234847496s ago: executing program 1 (id=1457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 1m13.029451107s ago: executing program 1 (id=1458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303, 0x36}, "08e38f0d08f0d792", "251f009db0dfb3444441b095826ab2ae9ad8cdf842b600000000002000", "578a41c8", "24076feb5d0b4a00"}, 0x38) 1m12.491643631s ago: executing program 1 (id=1461): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0), 0x8) 1m11.89364781s ago: executing program 1 (id=1463): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) 1m11.28844409s ago: executing program 1 (id=1465): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x90) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) 7.691099464s ago: executing program 0 (id=1497): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x70}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=A']) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x3, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r2, 0x402, 0x80000004) getdents64(r2, &(0x7f0000000200)=""/171, 0xab) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000480)=ANY=[], 0x180}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004b0000400000000000069078ac141480ac1e0001440b08ac1414bbe00000028907d70000000044040020000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x81, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) 6.418586131s ago: executing program 0 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x54, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "bb8895ac3f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xc, 0x4, "6adff9924286fb9f"}]}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bc6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, 0x0, 0x0, 0xffd8) bind$alg(r2, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="eb553fec2e08841e6606b89424", 0xd) accept$alg(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0xecf86c37d53049cc) r6 = syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, &(0x7f00000002c0)=""/71, &(0x7f00000002c0), 0x0, {r5}}, 0x58) ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x0, 0x5003) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r9, 0x400455c8, 0x4) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x31) 3.23013417s ago: executing program 0 (id=1499): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r3) syz_io_uring_setup(0x1e45, &(0x7f0000000780), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10003, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)) 1.816923246s ago: executing program 0 (id=1500): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x8, 0x0, &(0x7f00000004c0)=[@decrefs], 0x0, 0xfeffff, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) open(&(0x7f0000000040)='./file0\x00', 0x81000, 0x80) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000000c0)=0x1) readv(r7, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) socket$igmp(0x2, 0x3, 0x2) 518.394812ms ago: executing program 0 (id=1501): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x50}, 0x1, 0x7}, 0x0) 0s ago: executing program 0 (id=1502): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xffeffffe}, 0x10) accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0x0, @local}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) epoll_create1(0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040), 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "d61b58"}) kernel console output (not intermixed with test programs): 19277][T10205] netlink: 'syz.3.1205': attribute type 21 has an invalid length. [ 640.330664][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.341530][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.401497][T10205] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1205'. [ 642.921537][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 642.921552][ T29] audit: type=1400 audit(1722790714.472:1035): avc: denied { setattr } for pid=10219 comm="syz.4.1209" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 643.334916][ T944] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 643.539638][ T944] usb 3-1: Using ep0 maxpacket: 16 [ 643.562909][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 643.584096][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 643.627616][ T944] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 643.671813][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.698289][ T944] usb 3-1: Product: syz [ 643.710306][ T944] usb 3-1: Manufacturer: syz [ 643.721372][ T944] usb 3-1: SerialNumber: syz [ 643.765536][ T944] usb 3-1: config 0 descriptor?? [ 643.796538][ T944] imon_raw 3-1:0.0: IR endpoint missing [ 645.083707][T10256] TCP: TCP_TX_DELAY enabled [ 645.152253][ T944] usb 3-1: USB disconnect, device number 20 [ 645.573616][ T29] audit: type=1400 audit(1722790717.082:1036): avc: denied { watch_reads } for pid=10265 comm="syz.0.1219" path="/324/file0" dev="tmpfs" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 646.424655][ T5331] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 646.704868][ T5331] usb 1-1: Using ep0 maxpacket: 32 [ 646.734413][ T5331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.822889][ T5331] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.954843][ T5331] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 647.064417][ T5331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.140137][ T5331] usb 1-1: config 0 descriptor?? [ 647.310160][ T5331] rndis_host 1-1:0.0: skipping garbage [ 647.350280][ T5331] usb 1-1: bad CDC descriptors [ 647.455967][ T944] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 647.492653][T10269] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1219'. [ 647.519348][ T5331] cdc_acm 1-1:0.0: skipping garbage [ 647.687671][ T944] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.353499][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 648.518146][ T941] usb 1-1: USB disconnect, device number 22 [ 648.610682][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.705433][ T944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.735409][ T944] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.752856][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.803138][ T944] usb 2-1: config 0 descriptor?? [ 648.829461][T10285] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 649.291811][T10307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.340112][ T944] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 649.370870][ T944] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 649.397809][ T944] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 649.464734][ T941] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 649.584054][ T29] audit: type=1326 audit(1722790721.132:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 649.658197][ T29] audit: type=1326 audit(1722790721.182:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 649.681660][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.733824][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.771046][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.791272][ T944] usb 2-1: USB disconnect, device number 19 [ 649.816091][ T29] audit: type=1326 audit(1722790721.182:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 649.845750][ T941] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 649.855994][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.900453][ T941] usb 4-1: config 0 descriptor?? [ 650.186609][T10311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.197647][T10311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.221302][ T29] audit: type=1326 audit(1722790721.182:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 650.441227][T10320] hub 6-0:1.0: USB hub found [ 650.451393][T10320] hub 6-0:1.0: 1 port detected [ 650.739073][T10320] Invalid ELF header magic: != ELF [ 651.158906][ T29] audit: type=1326 audit(1722790721.182:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 651.243431][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'. [ 651.335012][ T29] audit: type=1326 audit(1722790721.182:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 651.370857][ T29] audit: type=1326 audit(1722790721.182:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 651.407304][ T29] audit: type=1326 audit(1722790721.192:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 651.430764][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.442411][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1230'. [ 651.517530][ T29] audit: type=1326 audit(1722790721.192:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 655.445077][ T29] audit: type=1326 audit(1722790721.192:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 655.493030][ T29] audit: type=1326 audit(1722790721.192:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 655.525130][ T29] audit: type=1326 audit(1722790721.192:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 656.876003][ T941] usb 4-1: string descriptor 0 read error: -32 [ 657.040355][ T941] uclogic 0003:256C:006D.0017: interface is invalid, ignoring [ 657.334379][ T29] audit: type=1326 audit(1722790721.192:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 657.536391][ T29] audit: type=1326 audit(1722790721.202:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 657.619421][ T941] usb 4-1: USB disconnect, device number 21 [ 657.756765][ T29] audit: type=1326 audit(1722790721.202:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 657.902712][ T29] audit: type=1326 audit(1722790721.202:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 657.999528][ T29] audit: type=1326 audit(1722790721.202:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 658.097201][ T29] audit: type=1326 audit(1722790721.202:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 658.170496][ T29] audit: type=1326 audit(1722790721.202:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104db779f9 code=0x7ffc0000 [ 659.306164][T10366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.151720][T10349] UBIFS error (pid: 10349): cannot open "/dev/sr0", error -22 [ 662.090017][ T5421] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 662.146900][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 662.146940][ T29] audit: type=1400 audit(1722790733.702:1082): avc: denied { lock } for pid=10380 comm="syz.1.1244" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 662.174734][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 662.254894][ T29] audit: type=1400 audit(1722790733.772:1083): avc: denied { ioctl } for pid=10380 comm="syz.1.1244" path="socket:[30329]" dev="sockfs" ino=30329 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 662.362183][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 662.375530][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 662.384324][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 662.394705][ T5421] usb 5-1: Using ep0 maxpacket: 32 [ 662.401246][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 662.408955][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 662.416566][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 662.449285][ T5421] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=7c.49 [ 662.460009][ T5421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.474638][ T5421] usb 5-1: Product: syz [ 662.478807][ T5421] usb 5-1: Manufacturer: syz [ 662.486074][ T29] audit: type=1400 audit(1722790733.692:1081): avc: denied { set_context_mgr } for pid=10384 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 662.523934][ T5421] usb 5-1: SerialNumber: syz [ 662.535952][ T5421] usb 5-1: config 0 descriptor?? [ 662.543632][ T5421] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 663.275458][ T5421] gspca_topro: reg_w err -110 [ 663.314942][ T5421] gspca_topro: Sensor soi763a [ 664.464766][ T55] Bluetooth: hci6: command tx timeout [ 664.514730][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1251'. [ 664.810833][ T8] usb 5-1: USB disconnect, device number 11 [ 666.769996][ T55] Bluetooth: hci6: command tx timeout [ 667.167253][T10388] chnl_net:caif_netlink_parms(): no params data found [ 667.447957][ T29] audit: type=1400 audit(1722790738.972:1084): avc: denied { shutdown } for pid=10430 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 667.530622][T10435] GUP no longer grows the stack in syz.3.1256 (10435): 20004000-2000a000 (20001000) [ 667.551581][T10435] CPU: 0 UID: 0 PID: 10435 Comm: syz.3.1256 Not tainted 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 667.562364][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 667.572440][T10435] Call Trace: [ 667.575712][T10435] [ 667.578629][T10435] dump_stack_lvl+0x16c/0x1f0 [ 667.583309][T10435] gup_vma_lookup+0x1d2/0x220 [ 667.587986][T10435] __get_user_pages+0x261/0x15c0 [ 667.592920][T10435] ? __pfx___get_user_pages+0x10/0x10 [ 667.598286][T10435] ? down_read_killable+0xcc/0x380 [ 667.603396][T10435] ? __pfx_down_read_killable+0x10/0x10 [ 667.608944][T10435] ? __pfx_mark_lock+0x10/0x10 [ 667.613704][T10435] __gup_longterm_locked+0x22e/0x1b30 [ 667.619073][T10435] ? __pfx_lock_release+0x10/0x10 [ 667.624087][T10435] ? __pfx___gup_longterm_locked+0x10/0x10 [ 667.629884][T10435] ? const_folio_flags.constprop.0+0x56/0x150 [ 667.635938][T10435] ? sanity_check_pinned_pages+0x384/0x1220 [ 667.641817][T10435] gup_fast_fallback+0x153d/0x24e0 [ 667.646920][T10435] ? __pfx_gup_fast_fallback+0x10/0x10 [ 667.652365][T10435] ? hlock_class+0x4e/0x130 [ 667.656861][T10435] ? mark_lock+0xb5/0xc60 [ 667.661176][T10435] ? mark_lock+0xb5/0xc60 [ 667.665491][T10435] pin_user_pages_fast+0xa8/0x100 [ 667.670507][T10435] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 667.676129][T10435] ? mark_lock+0xb5/0xc60 [ 667.680444][T10435] ? __pfx_register_lock_class+0x10/0x10 [ 667.686072][T10435] iov_iter_extract_pages+0x388/0x18b0 [ 667.691528][T10435] ? hlock_class+0x4e/0x130 [ 667.696025][T10435] ? __lock_acquire+0x1620/0x3cb0 [ 667.701037][T10435] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 667.706922][T10435] extract_iter_to_sg+0xbe0/0x1960 [ 667.712023][T10435] ? lock_acquire+0x1b1/0x560 [ 667.716686][T10435] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 667.722219][T10435] ? hash_sendmsg+0xb7/0xf30 [ 667.726801][T10435] ? __pfx_lock_release+0x10/0x10 [ 667.731811][T10435] ? mark_held_locks+0x9f/0xe0 [ 667.736559][T10435] ? hash_sendmsg+0xb7/0xf30 [ 667.741137][T10435] hash_sendmsg+0x431/0xf30 [ 667.745632][T10435] ? security_socket_sendmsg+0x8c/0xc0 [ 667.751081][T10435] ____sys_sendmsg+0xab5/0xc90 [ 667.755833][T10435] ? copy_msghdr_from_user+0x10b/0x160 [ 667.761297][T10435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.766569][T10435] ? __pfx___futex_wait+0x10/0x10 [ 667.771669][T10435] ? __pfx___lock_acquire+0x10/0x10 [ 667.776857][T10435] ___sys_sendmsg+0x135/0x1e0 [ 667.781531][T10435] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.786727][T10435] ? __fget_light+0x173/0x210 [ 667.791405][T10435] __sys_sendmsg+0x117/0x1f0 [ 667.795987][T10435] ? __pfx___sys_sendmsg+0x10/0x10 [ 667.801338][T10435] ? __x64_sys_futex+0x1e1/0x4c0 [ 667.806268][T10435] do_syscall_64+0xcd/0x250 [ 667.810761][T10435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.816648][T10435] RIP: 0033:0x7f1ac2f779f9 [ 667.821048][T10435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.840643][T10435] RSP: 002b:00007f1ac3e25048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.849048][T10435] RAX: ffffffffffffffda RBX: 00007f1ac3105f80 RCX: 00007f1ac2f779f9 [ 667.857019][T10435] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000009 [ 667.864976][T10435] RBP: 00007f1ac2fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 667.872934][T10435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.880890][T10435] R13: 000000000000000b R14: 00007f1ac3105f80 R15: 00007ffdfd464938 [ 667.888850][T10435] [ 667.891973][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.193383][ T1061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.418338][ T1061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.456340][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.463870][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.472002][T10388] bridge_slave_0: entered allmulticast mode [ 668.508214][T10388] bridge_slave_0: entered promiscuous mode [ 668.639331][ T1061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.719450][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.730097][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.740752][T10388] bridge_slave_1: entered allmulticast mode [ 668.752091][T10388] bridge_slave_1: entered promiscuous mode [ 668.785163][ T55] Bluetooth: hci6: command tx timeout [ 668.850098][ T1061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.931206][T10388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.964400][T10388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.097606][T10388] team0: Port device team_slave_0 added [ 669.132201][T10388] team0: Port device team_slave_1 added [ 669.407312][T10388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.435002][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.460887][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.531260][T10388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.625538][T10388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.667553][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.693476][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.704736][T10455] input: syz1 as /devices/virtual/input/input40 [ 669.848354][T10388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.901595][ T29] audit: type=1400 audit(1722790741.442:1085): avc: denied { ioctl } for pid=10445 comm="syz.4.1258" path="socket:[30395]" dev="sockfs" ino=30395 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 670.002137][ T1061] bridge_slave_1: left allmulticast mode [ 670.068446][ T1061] bridge_slave_1: left promiscuous mode [ 670.111743][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.161746][ T1061] bridge_slave_0: left allmulticast mode [ 670.207369][ T1061] bridge_slave_0: left promiscuous mode [ 670.224197][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.864768][ T55] Bluetooth: hci6: command tx timeout [ 672.971558][ T1061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.020590][ T1061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.051229][ T1061] bond0 (unregistering): Released all slaves [ 674.644951][T10388] hsr_slave_0: entered promiscuous mode [ 674.686184][T10388] hsr_slave_1: entered promiscuous mode [ 674.712139][T10388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.742322][T10388] Cannot create hsr debugfs directory [ 675.306551][ T1061] hsr_slave_0: left promiscuous mode [ 675.339579][ T1061] hsr_slave_1: left promiscuous mode [ 675.469354][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.492296][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.541270][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.568713][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.737234][ T1061] veth1_macvtap: left promiscuous mode [ 675.778793][ T1061] veth0_macvtap: left promiscuous mode [ 675.808383][ T1061] veth1_vlan: left promiscuous mode [ 675.821318][ T1061] veth0_vlan: left promiscuous mode [ 675.904756][ T55] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 676.541104][T10538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.573092][ T29] audit: type=1326 audit(1722790750.122:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10555 comm="syz.1.1281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x0 [ 679.394084][ T29] audit: type=1400 audit(1722790750.942:1087): avc: denied { unmount } for pid=8962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 680.530484][ T1061] team0 (unregistering): Port device team_slave_1 removed [ 680.826609][ T1061] team0 (unregistering): Port device team_slave_0 removed [ 680.896106][T10565] slcan: can't register candev [ 680.917826][T10565] Falling back ldisc for ptm0. [ 681.242409][ T29] audit: type=1400 audit(1722790752.792:1088): avc: denied { append } for pid=10571 comm="syz.1.1285" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 681.265707][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.420719][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 685.131254][T10594] (syz.1.1301,10594,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 685.224258][T10594] (syz.1.1301,10594,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 685.484696][T10606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.510053][ T29] audit: type=1400 audit(1722790757.062:1089): avc: denied { map } for pid=10595 comm="syz.4.1293" path="socket:[34057]" dev="sockfs" ino=34057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 687.056403][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.062867][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.270611][T10613] ipt_rpfilter: unknown options [ 687.539239][T10607] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 687.548346][T10607] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 688.727225][T10388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 688.809467][T10388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 688.906104][T10388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 689.020121][T10388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 689.491833][T10388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.765674][T10388] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.909060][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.916239][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.063535][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.070705][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.552719][ T55] Bluetooth: hci3: unexpected event 0x09 length: 4 > 3 [ 690.726371][ T55] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 691.483238][T10388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.788655][T10388] veth0_vlan: entered promiscuous mode [ 691.900431][T10388] veth1_vlan: entered promiscuous mode [ 692.095007][T10388] veth0_macvtap: entered promiscuous mode [ 692.142554][T10388] veth1_macvtap: entered promiscuous mode [ 693.122601][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.164658][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.307169][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.369964][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.494591][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.547406][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.593908][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.665710][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.684651][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.712628][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.758247][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.521686][ T29] audit: type=1400 audit(1722790765.592:1090): avc: denied { ioctl } for pid=10690 comm="syz.0.1311" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 694.558943][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.857232][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.894664][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.763019][T10388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.022034][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.256951][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.495858][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.295924][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.537291][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.613481][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.784593][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.906335][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.996512][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.069493][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 698.159463][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1315'. [ 698.169955][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.210607][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.236415][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.260299][T10388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.299092][T10388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.340336][T10388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.381044][T10388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.424371][T10388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.457702][T10388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.498309][T10388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.864669][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.893188][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.922854][ T5418] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 698.982040][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.012550][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.146213][ T5418] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 699.175280][ T5418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.233075][ T5418] usb 1-1: config 0 descriptor?? [ 699.256540][ T5418] cp210x 1-1:0.0: cp210x converter detected [ 699.754593][ T25] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 699.907161][ T5418] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 699.950602][ T5418] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 700.006442][ T5418] usb 1-1: cp210x converter now attached to ttyUSB0 [ 700.054895][ T5418] usb 1-1: USB disconnect, device number 23 [ 700.140752][ T5418] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 700.938877][ T5418] cp210x 1-1:0.0: device disconnected [ 700.984712][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 701.095269][ T29] audit: type=1400 audit(1722790772.642:1091): avc: denied { setopt } for pid=10754 comm="syz.1.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 701.144825][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.344384][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 701.539354][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 701.722888][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 703.106067][ T25] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 703.245207][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.445814][ T25] usb 4-1: config 0 descriptor?? [ 703.503269][ T25] usb 4-1: can't set config #0, error -71 [ 703.637605][ T25] usb 4-1: USB disconnect, device number 22 [ 703.643914][T10792] binder: 10784:10792 ioctl c018620c 20000740 returned -22 [ 703.682577][T10796] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 262144 (only 8 groups) [ 703.701453][T10799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 703.717186][T10799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 703.734290][T10799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 703.745554][T10799] Bluetooth: hci8: command 0x040f tx timeout [ 703.759026][ T5381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 703.785186][ T5381] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 703.794237][ T5381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 703.857690][T10793] tmpfs: Bad value for 'mpol' [ 704.939073][T10820] hub 6-0:1.0: USB hub found [ 704.946571][T10820] hub 6-0:1.0: 1 port detected [ 705.111342][T10820] Invalid ELF header magic: != ELF [ 705.127649][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 705.844964][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 705.870538][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.904750][ T55] Bluetooth: hci7: command tx timeout [ 705.933673][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.950318][T10797] chnl_net:caif_netlink_parms(): no params data found [ 705.953589][ T8] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 705.972282][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.010493][ T8] usb 4-1: config 0 descriptor?? [ 707.422496][ T8] ntrig 0003:1B96:0008.0018: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0 [ 707.564898][ T29] audit: type=1326 audit(1722790778.992:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 707.596455][ T8] usb 4-1: USB disconnect, device number 23 [ 707.660870][ T29] audit: type=1326 audit(1722790778.992:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 707.794691][ T29] audit: type=1326 audit(1722790778.992:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 707.914612][ T29] audit: type=1326 audit(1722790778.992:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 707.992965][ T55] Bluetooth: hci7: command tx timeout [ 708.057044][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.086248][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.093561][T10797] bridge_slave_0: entered allmulticast mode [ 708.108520][T10797] bridge_slave_0: entered promiscuous mode [ 708.139996][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.148014][ T29] audit: type=1326 audit(1722790778.992:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 708.182164][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.201523][T10797] bridge_slave_1: entered allmulticast mode [ 708.225047][T10797] bridge_slave_1: entered promiscuous mode [ 708.250698][ T29] audit: type=1326 audit(1722790778.992:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 708.353312][ T29] audit: type=1326 audit(1722790778.992:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 708.415669][ T29] audit: type=1326 audit(1722790778.992:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 709.284888][ T29] audit: type=1326 audit(1722790778.992:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 709.340767][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.455838][ T29] audit: type=1326 audit(1722790778.992:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x7fc00000 [ 709.503584][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.330654][ T55] Bluetooth: hci7: command tx timeout [ 712.224854][ T5417] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 712.387666][ T55] Bluetooth: hci7: command tx timeout [ 712.480174][ T5417] usb 3-1: Using ep0 maxpacket: 8 [ 712.508896][ T5417] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 712.517564][ T5417] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 712.527090][ T5417] usb 3-1: config 0 has an invalid interface number: 49 but max is 2 [ 712.540228][ T5417] usb 3-1: config 0 has no interface number 0 [ 712.550963][ T5417] usb 3-1: config 0 has no interface number 1 [ 712.564799][ T5417] usb 3-1: config 0 has no interface number 2 [ 712.594998][ T5417] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 712.615994][ T5417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.948002][ T5417] usb 3-1: config 0 descriptor?? [ 713.223905][ T5417] qcserial 3-1:0.6: Qualcomm USB modem converter detected [ 713.456587][ T5417] usb 3-1: Could not set interface, error -71 [ 713.507362][T10797] team0: Port device team_slave_0 added [ 713.515169][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 713.517335][ T5417] usb 3-1: USB disconnect, device number 21 [ 713.582354][ T5417] qcserial 3-1:0.6: device disconnected [ 713.615124][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 713.632163][T10797] team0: Port device team_slave_1 added [ 713.824845][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 713.833690][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 713.856157][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.895665][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.933440][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 713.967843][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.009878][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.033972][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.036432][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.077698][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.111646][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.123806][ T25] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 714.131045][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.189646][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.191432][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.229207][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.253501][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.269177][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.291031][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.328078][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.355576][ T25] usb 4-1: Product: syz [ 714.364804][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.391124][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.395294][ T25] usb 4-1: Manufacturer: syz [ 714.405195][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.444785][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.478512][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.514166][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.535982][ T25] usb 4-1: SerialNumber: syz [ 714.575132][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.609595][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.621346][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.636535][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.773594][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.954117][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.010256][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.144573][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.181333][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.293448][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.303105][ T25] usb 4-1: config 0 descriptor?? [ 715.313273][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 715.327958][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 715.340013][ T8] usb 2-1: Product: syz [ 715.353968][ T8] usb 2-1: Manufacturer: syz [ 715.361462][ T8] usb 2-1: SerialNumber: syz [ 715.386376][ T8] usb 2-1: config 0 descriptor?? [ 715.399003][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 715.449666][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.452890][ T25] imon_raw 4-1:0.0: IR endpoint missing [ 715.648393][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.919769][ T25] usb 2-1: USB disconnect, device number 20 [ 717.990957][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 717.990970][ T29] audit: type=1400 audit(1722790789.542:1105): avc: denied { read } for pid=10904 comm="syz.1.1355" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 718.125376][ T25] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 718.193549][ T29] audit: type=1400 audit(1722790789.582:1106): avc: denied { open } for pid=10904 comm="syz.1.1355" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 718.367355][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.414901][ T5419] usb 4-1: USB disconnect, device number 24 [ 718.439337][ T29] audit: type=1400 audit(1722790789.582:1107): avc: denied { ioctl } for pid=10904 comm="syz.1.1355" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 718.555123][T10911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 718.609002][T10912] Bluetooth: MGMT ver 1.23 [ 718.684018][T10797] hsr_slave_0: entered promiscuous mode [ 718.720264][T10797] hsr_slave_1: entered promiscuous mode [ 718.768453][T10797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.804948][T10797] Cannot create hsr debugfs directory [ 718.853279][ T29] audit: type=1400 audit(1722790790.272:1108): avc: denied { execute } for pid=10913 comm="syz.2.1353" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 718.998930][ T29] audit: type=1400 audit(1722790790.372:1109): avc: denied { append } for pid=10918 comm="syz.0.1359" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 720.134322][T10927] can: request_module (can-proto-0) failed. [ 720.144079][ T60] bridge_slave_1: left allmulticast mode [ 720.212851][ T60] bridge_slave_1: left promiscuous mode [ 720.256691][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.346580][ T60] bridge_slave_0: left allmulticast mode [ 720.370469][ T60] bridge_slave_0: left promiscuous mode [ 720.398862][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.174688][ T5418] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 725.399970][ T5418] usb 1-1: New USB device found, idVendor=12d1, idProduct=ca74, bcdDevice= c.d7 [ 725.420859][ T5418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.447365][ T5418] usb 1-1: Product: syz [ 725.488569][ T5418] usb 1-1: Manufacturer: syz [ 725.501946][ T5418] usb 1-1: SerialNumber: syz [ 725.551619][ T5418] usb 1-1: config 0 descriptor?? [ 725.568756][ T5418] huawei_cdc_ncm 1-1:0.0: CDC Union missing and no IAD found [ 725.591468][ T5418] huawei_cdc_ncm 1-1:0.0: bind() failure [ 725.815649][ T944] usb 1-1: USB disconnect, device number 24 [ 728.315331][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.348599][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.381777][ T60] bond0 (unregistering): Released all slaves [ 728.937676][ T29] audit: type=1400 audit(1722791312.491:1110): avc: denied { append } for pid=10977 comm="syz.2.1371" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 729.210907][ T29] audit: type=1400 audit(1722791312.751:1111): avc: denied { setopt } for pid=10991 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 729.230390][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.533065][T10987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.543868][T11000] Dead loop on virtual device ip6_vti0, fix it urgently! [ 730.000666][T10995] can0: slcan on ptm0. [ 730.094116][ T60] hsr_slave_0: left promiscuous mode [ 730.113689][ T60] hsr_slave_1: left promiscuous mode [ 730.221112][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.974766][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.057979][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.099580][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.408606][ T60] veth1_macvtap: left promiscuous mode [ 731.417217][ T60] veth0_macvtap: left promiscuous mode [ 731.439522][ T60] veth1_vlan: left promiscuous mode [ 731.502497][ T60] veth0_vlan: left promiscuous mode [ 731.606868][ T29] audit: type=1400 audit(1722791315.161:1112): avc: denied { read append } for pid=11021 comm="syz.1.1381" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 731.996951][ T55] Bluetooth: hci3: ISO packet for unknown connection handle 571 [ 732.542813][ T29] audit: type=1400 audit(1722791315.161:1113): avc: denied { open } for pid=11021 comm="syz.1.1381" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 738.009288][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 739.080199][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 740.459741][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.481107][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.502692][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 740.559208][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 740.571613][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 740.592347][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.663534][ T5381] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 741.712352][ T5381] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 741.750137][ T5381] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 741.767681][ T5381] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 741.790806][ T5381] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 741.802193][ T5381] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 742.244138][ T60] team0 (unregistering): Port device team_slave_1 removed [ 742.597293][ T60] team0 (unregistering): Port device team_slave_0 removed [ 742.733978][ T5381] Bluetooth: hci0: command tx timeout [ 743.826167][ T5381] Bluetooth: hci6: command tx timeout [ 744.784709][ T5381] Bluetooth: hci0: command tx timeout [ 744.977487][T10988] can0 (unregistered): slcan off ptm0. [ 745.880972][T10797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 745.914644][ T5381] Bluetooth: hci6: command tx timeout [ 746.085943][T10797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 746.229964][T11082] x_tables: duplicate underflow at hook 3 [ 746.292986][ T29] audit: type=1400 audit(1722791329.841:1114): avc: denied { nlmsg_write } for pid=11077 comm="syz.1.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 746.325302][T10797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 746.938201][ T5381] Bluetooth: hci0: command tx timeout [ 747.392731][T10797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 747.451371][ T29] audit: type=1400 audit(1722791331.001:1115): avc: denied { append } for pid=11089 comm="syz.0.1398" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 747.475110][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.770455][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.783534][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.984711][ T5381] Bluetooth: hci6: command tx timeout [ 749.024599][ T5381] Bluetooth: hci0: command tx timeout [ 750.064669][ T5381] Bluetooth: hci6: command tx timeout [ 750.617662][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.651652][T11126] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 750.651652][T11126] program syz.0.1402 not setting count and/or reply_len properly [ 750.692383][T11126] fuse: Unknown parameter 'Z$ +]f{vkZ`J9H#l HvJ;"DSuם V>5 L&**뿾߶(7Z&' [ 751.623788][T11062] chnl_net:caif_netlink_parms(): no params data found [ 751.705885][T10797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.739276][T11051] chnl_net:caif_netlink_parms(): no params data found [ 752.041982][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.348395][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.810341][T10797] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.170229][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.342214][T11062] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.354007][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.363968][T11062] bridge_slave_0: entered allmulticast mode [ 753.376382][T11062] bridge_slave_0: entered promiscuous mode [ 753.393103][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.400377][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.423698][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.431457][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.440820][T11062] bridge_slave_1: entered allmulticast mode [ 753.450967][T11062] bridge_slave_1: entered promiscuous mode [ 753.489484][T11158] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26671 sclass=netlink_xfrm_socket pid=11158 comm=syz.1.1407 [ 753.581502][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.588682][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.788889][T11062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.887138][T11051] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.921936][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.002906][T11051] bridge_slave_0: entered allmulticast mode [ 754.026817][ T29] audit: type=1400 audit(1722791337.581:1116): avc: denied { write } for pid=11164 comm="syz.1.1409" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 754.092477][T11051] bridge_slave_0: entered promiscuous mode [ 754.954437][T11062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.999728][ T29] audit: type=1400 audit(1722791338.551:1117): avc: denied { read } for pid=11164 comm="syz.1.1409" path="socket:[37360]" dev="sockfs" ino=37360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 755.179458][T11051] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.205223][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.212574][T11051] bridge_slave_1: entered allmulticast mode [ 755.266455][T11051] bridge_slave_1: entered promiscuous mode [ 755.361568][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1409'. [ 755.605364][T11051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.680498][T11062] team0: Port device team_slave_0 added [ 755.785587][ T944] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 755.824260][T11186] can: request_module (can-proto-0) failed. [ 755.920781][T11051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.018477][ T944] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 756.034308][T11062] team0: Port device team_slave_1 added [ 756.043307][ T944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.087496][ T944] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 756.153343][ T944] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 756.182632][ T944] usb 1-1: Manufacturer: syz [ 756.219792][ T944] usb 1-1: config 0 descriptor?? [ 756.398658][ T944] rc_core: IR keymap rc-hauppauge not found [ 756.406582][ T944] Registered IR keymap rc-empty [ 756.469033][ T944] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 756.501883][ T944] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 756.511157][T11185] Process accounting resumed [ 756.518293][ T60] bridge_slave_1: left allmulticast mode [ 756.524191][ T60] bridge_slave_1: left promiscuous mode [ 756.564954][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.666398][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.692731][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.778491][ T60] bridge_slave_0: left allmulticast mode [ 756.784170][ T60] bridge_slave_0: left promiscuous mode [ 756.826041][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.093360][ T5421] usb 1-1: USB disconnect, device number 25 [ 758.768750][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.799021][T11213] UBIFS error (pid: 11213): cannot open "/dev/sr0", error -22 [ 758.805560][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.909346][ T60] bond0 (unregistering): Released all slaves [ 759.336711][T11051] team0: Port device team_slave_0 added [ 759.388669][T11062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.403611][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.448479][T11062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.518312][T11051] team0: Port device team_slave_1 added [ 759.539610][T11062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.554581][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.593122][T11062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.723197][T11051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.733044][T11051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.794937][T11051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.925705][T11051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.932759][T11051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.972482][T11051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.167010][ T60] hsr_slave_0: left promiscuous mode [ 760.174887][ T60] hsr_slave_1: left promiscuous mode [ 760.185368][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.192794][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.295662][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.303230][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.498794][ T60] veth1_macvtap: left promiscuous mode [ 760.504340][ T60] veth0_macvtap: left promiscuous mode [ 760.524765][ T60] veth1_vlan: left promiscuous mode [ 760.530074][ T60] veth0_vlan: left promiscuous mode [ 760.966898][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 761.026525][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 761.035659][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 761.049187][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 761.061138][ T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 761.075490][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 762.398927][ T60] team0 (unregistering): Port device team_slave_1 removed [ 762.522997][ T60] team0 (unregistering): Port device team_slave_0 removed [ 763.184754][ T55] Bluetooth: hci8: command tx timeout [ 764.126604][T11062] hsr_slave_0: entered promiscuous mode [ 764.148942][T11062] hsr_slave_1: entered promiscuous mode [ 764.230500][T11062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.255813][T11062] Cannot create hsr debugfs directory [ 764.421719][T11051] hsr_slave_0: entered promiscuous mode [ 764.498049][T11051] hsr_slave_1: entered promiscuous mode [ 764.535376][T11051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.542950][T11051] Cannot create hsr debugfs directory [ 765.265110][ T55] Bluetooth: hci8: command tx timeout [ 766.046900][T11228] chnl_net:caif_netlink_parms(): no params data found [ 767.221259][T11228] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.274630][T11228] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.282053][T11228] bridge_slave_0: entered allmulticast mode [ 767.333619][T11228] bridge_slave_0: entered promiscuous mode [ 767.345143][ T55] Bluetooth: hci8: command tx timeout [ 767.357542][T11228] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.403376][T11228] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.425185][T11228] bridge_slave_1: entered allmulticast mode [ 767.432208][T11228] bridge_slave_1: entered promiscuous mode [ 767.667698][T11228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.689605][T11228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.014838][T11062] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 768.052241][T11062] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 768.269142][T11051] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.318069][ T60] bridge_slave_1: left allmulticast mode [ 768.323736][ T60] bridge_slave_1: left promiscuous mode [ 768.361959][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.453010][ T60] bridge_slave_0: left allmulticast mode [ 768.466382][ T60] bridge_slave_0: left promiscuous mode [ 768.472125][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.425157][ T55] Bluetooth: hci8: command tx timeout [ 769.712405][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.749252][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.771140][ T60] bond0 (unregistering): Released all slaves [ 769.847264][T11062] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 769.886624][T11062] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 770.063545][T11051] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.143705][T11228] team0: Port device team_slave_0 added [ 770.183597][T11228] team0: Port device team_slave_1 added [ 770.213094][ T60] hsr_slave_0: left promiscuous mode [ 770.241600][ T60] hsr_slave_1: left promiscuous mode [ 770.280752][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.302012][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.079280][ T60] team0 (unregistering): Port device team_slave_1 removed [ 771.196809][ T60] team0 (unregistering): Port device team_slave_0 removed [ 772.490010][T11051] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.621614][T11228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.637568][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.684405][T11228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.755745][T11051] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.839488][T11228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.899670][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.995859][T11228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.250783][T11228] hsr_slave_0: entered promiscuous mode [ 773.302175][T11228] hsr_slave_1: entered promiscuous mode [ 773.363136][T11228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.383504][T11228] Cannot create hsr debugfs directory [ 773.858587][T11051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 774.003017][T11051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 774.020419][T11051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 774.070648][T11051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 774.843948][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.130599][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.287256][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.294531][ T5408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.509957][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.517227][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.942295][T11228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 775.967851][T11228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 776.016701][T11228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 776.078720][T11051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.096809][T11228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 776.383382][T11051] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.490244][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.497423][ T5421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.535349][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.542579][ T5421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.760987][T11051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 776.785001][T11051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.025226][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.169224][T11228] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.222057][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.229218][ T5421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.276491][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.283604][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.375682][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.521807][T11228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.657302][T11062] veth0_vlan: entered promiscuous mode [ 777.704243][T11062] veth1_vlan: entered promiscuous mode [ 777.820537][T11062] veth0_macvtap: entered promiscuous mode [ 777.873863][T11062] veth1_macvtap: entered promiscuous mode [ 777.979246][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.029663][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.084708][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.105836][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.136553][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.178753][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.214593][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.247742][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.266308][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.287913][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.313188][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.343043][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.360285][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.502809][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.528910][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.545155][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.564579][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.591459][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.610257][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.644791][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.684887][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.716135][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.737147][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.760972][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.781002][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.803700][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.831767][T11051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.922452][T11062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.987447][T11062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.013000][T11062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.025871][T11062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.089482][T11228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.327456][T11051] veth0_vlan: entered promiscuous mode [ 779.372866][ T3848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.394163][T11051] veth1_vlan: entered promiscuous mode [ 779.411224][ T3848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.511604][T11051] veth0_macvtap: entered promiscuous mode [ 779.560119][T11051] veth1_macvtap: entered promiscuous mode [ 779.587396][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.611116][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.734082][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.764545][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.804630][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.845865][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.872878][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.893792][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.909263][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.924447][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.944057][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.962251][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.974878][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.990341][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.014874][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.054668][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.106587][T11051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.258090][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.297395][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.317336][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.340394][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.375778][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.413985][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.439003][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.324671][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.427580][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.509871][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.566139][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.670725][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.703123][T11378] msdos: Unknown parameter 'bFs ' [ 786.704608][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.778799][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.816760][T11051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.884415][T11228] veth0_vlan: entered promiscuous mode [ 787.001532][T11051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.145607][T11051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.232060][T11051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.294943][T11051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.449287][T11228] veth1_vlan: entered promiscuous mode [ 787.685212][ T29] audit: type=1804 audit(1722791371.231:1118): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1416" name="/newroot/70/bus/bus" dev="overlay" ino=400 res=1 errno=0 [ 788.750983][ T29] audit: type=1400 audit(1722791372.301:1119): avc: denied { ioctl } for pid=11384 comm="syz.1.1416" path="socket:[39100]" dev="sockfs" ino=39100 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 789.045590][T11228] veth0_macvtap: entered promiscuous mode [ 789.082958][ T29] audit: type=1400 audit(1722791372.631:1120): avc: denied { connect } for pid=11397 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 789.160953][T11228] veth1_macvtap: entered promiscuous mode [ 789.414175][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.486052][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.607749][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.608226][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.639527][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.663894][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.672873][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.701025][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.721346][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.734286][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.765125][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.809006][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.823597][T11400] bio_check_eod: 2 callbacks suppressed [ 789.823610][T11400] syz.0.1421: attempt to access beyond end of device [ 789.823610][T11400] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 789.852208][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.864901][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.877874][T11400] EXT4-fs (nbd0): unable to read superblock [ 789.894646][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.934587][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.965304][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.004593][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.037730][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.079992][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.124370][T11228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.292709][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.327535][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.341012][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.375070][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.407900][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.433740][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.483576][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.522280][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.545423][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.578074][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.389213][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.449926][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.498399][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.539391][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.564648][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.604616][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.642693][T11228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.660564][ T29] audit: type=1400 audit(1722791375.211:1121): avc: denied { unmount } for pid=5363 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 793.679710][T11228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.694576][T11228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.703333][T11228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.724906][T11228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.130246][T11427] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 794.278091][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.295738][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.508963][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1431'. [ 794.679424][T11432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11432 comm=syz.1.1432 [ 794.757458][ T29] audit: type=1400 audit(1722791378.301:1122): avc: denied { ioctl } for pid=11428 comm="syz.1.1432" path="socket:[39370]" dev="sockfs" ino=39370 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 795.669172][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.704570][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.563751][T11446] binder: 11439:11446 ioctl 400c620e 20000380 returned -22 [ 797.734618][ T5458] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 797.963817][ T5458] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 798.143892][ T5458] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 798.275752][ T5458] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 798.302781][ T5458] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 798.422829][ T5458] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 803.391001][ T5458] usb 2-1: string descriptor 0 read error: -71 [ 803.485830][ T5458] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 803.577034][ T5458] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 804.637474][ T5458] usb 2-1: can't set config #1, error -71 [ 804.707015][ T5458] usb 2-1: USB disconnect, device number 21 [ 809.680491][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.687937][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.136228][ T29] audit: type=1400 audit(1722791393.691:1123): avc: denied { shutdown } for pid=11483 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 810.819187][ T5381] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 810.832808][ T5381] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 810.847600][ T5381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 810.856929][ T5381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 810.867859][ T5381] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 810.876006][ T5381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 811.088646][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 811.101001][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 811.111113][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 811.150630][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 811.158577][ T55] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 811.166412][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 811.917266][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 811.928950][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 811.939286][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 811.954060][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 811.963565][ T55] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 811.974295][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 812.245914][ T29] audit: type=1326 audit(1722791395.761:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.1.1451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0f61779f9 code=0x0 [ 812.679284][ T5381] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 813.167981][ T5381] Bluetooth: hci7: command tx timeout [ 813.264782][ T5381] Bluetooth: hci9: command tx timeout [ 814.065080][ T5381] Bluetooth: hci10: command tx timeout [ 815.044167][T11497] chnl_net:caif_netlink_parms(): no params data found [ 815.184765][ T5381] Bluetooth: hci7: command tx timeout [ 815.350116][ T5381] Bluetooth: hci9: command tx timeout [ 815.690135][ T3014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.845637][T11509] chnl_net:caif_netlink_parms(): no params data found [ 816.031341][ T3014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.124991][T11492] chnl_net:caif_netlink_parms(): no params data found [ 816.144725][ T5381] Bluetooth: hci10: command tx timeout [ 816.174723][ T52] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 816.310157][ T3014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.444571][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 816.501262][ T52] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 816.534956][ T52] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 816.545043][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.768736][ T3014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.814225][T11497] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.824356][T11497] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.834246][T11497] bridge_slave_0: entered allmulticast mode [ 816.864277][T11497] bridge_slave_0: entered promiscuous mode [ 816.976280][T11497] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.000185][T11497] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.026234][T11497] bridge_slave_1: entered allmulticast mode [ 817.036016][T11497] bridge_slave_1: entered promiscuous mode [ 817.167836][ T52] usb 1-1: string descriptor 0 read error: -71 [ 817.213153][ T52] hub 1-1:32.0: USB hub found [ 817.266435][ T5381] Bluetooth: hci7: command tx timeout [ 817.280579][ T52] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 817.387183][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.425082][ T5381] Bluetooth: hci9: command tx timeout [ 817.447444][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.516190][T11509] bridge_slave_0: entered allmulticast mode [ 817.531833][T11509] bridge_slave_0: entered promiscuous mode [ 817.612898][T11497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.677992][ T52] usb 1-1: USB disconnect, device number 26 [ 817.749435][T11497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.929137][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.974904][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.982190][T11509] bridge_slave_1: entered allmulticast mode [ 818.100410][T11509] bridge_slave_1: entered promiscuous mode [ 818.228301][ T5381] Bluetooth: hci10: command tx timeout [ 818.616673][T11492] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.663502][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.674755][T11492] bridge_slave_0: entered allmulticast mode [ 818.682599][T11492] bridge_slave_0: entered promiscuous mode [ 819.055119][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.164367][T11497] team0: Port device team_slave_0 added [ 819.267993][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.345791][ T5381] Bluetooth: hci7: command tx timeout [ 819.371599][T11492] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.398169][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.469641][T11590] loop0: detected capacity change from 0 to 127 [ 819.492956][T11492] bridge_slave_1: entered allmulticast mode [ 819.509120][ T5381] Bluetooth: hci9: command tx timeout [ 819.520170][T11492] bridge_slave_1: entered promiscuous mode [ 819.718223][T11497] team0: Port device team_slave_1 added [ 820.110859][T11492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.191255][T11492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.304763][ T5381] Bluetooth: hci10: command tx timeout [ 820.355041][T11509] team0: Port device team_slave_0 added [ 820.378438][T11594] vcan0 speed is unknown, defaulting to 1000 [ 820.408347][ T3014] bridge_slave_1: left allmulticast mode [ 820.417238][ T3014] bridge_slave_1: left promiscuous mode [ 820.442553][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.537142][ T3014] bridge_slave_0: left allmulticast mode [ 820.598186][ T3014] bridge_slave_0: left promiscuous mode [ 820.630561][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.828437][ T29] audit: type=1326 audit(1722791404.381:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.0.1466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35dd9779f9 code=0x0 [ 821.994627][ T941] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 822.196281][ T941] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 822.225214][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.236974][ T941] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 822.254731][ T941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 822.273768][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.293064][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 822.313183][ T3014] bond0 (unregistering): Released all slaves [ 822.334411][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 822.367514][ T941] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 822.408384][ T941] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 822.434211][T11497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.455001][ T941] usb 1-1: Product: syz [ 822.477731][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.513043][ T941] usb 1-1: Manufacturer: syz [ 822.538105][ T941] cdc_wdm 1-1:1.0: skipping garbage [ 822.557991][ T941] cdc_wdm 1-1:1.0: skipping garbage [ 822.568009][ T941] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 822.573969][ T941] cdc_wdm 1-1:1.0: Unknown control protocol [ 822.600349][T11497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.648222][T11509] team0: Port device team_slave_1 added [ 822.771166][T11497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.840802][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.934895][T11497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.945160][ T5458] usb 1-1: USB disconnect, device number 27 [ 823.093667][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.107651][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.149213][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.178575][T11594] vcan0 speed is unknown, defaulting to 1000 [ 823.199265][T11492] team0: Port device team_slave_0 added [ 823.322928][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.337067][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.370534][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.386335][T11492] team0: Port device team_slave_1 added [ 823.401530][T11594] vcan0 speed is unknown, defaulting to 1000 [ 823.576439][ T3014] hsr_slave_0: left promiscuous mode [ 823.646422][ T3014] hsr_slave_1: left promiscuous mode [ 823.653119][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.664962][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.699959][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.723304][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.754628][ T5417] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 823.849753][ T3014] veth1_macvtap: left promiscuous mode [ 823.865325][ T3014] veth0_macvtap: left promiscuous mode [ 823.885094][ T3014] veth1_vlan: left promiscuous mode [ 823.907609][ T3014] veth0_vlan: left promiscuous mode [ 823.920877][T11594] infiniband syz1: set active [ 823.970561][ T5417] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 823.980404][T11594] infiniband syz1: added vcan0 [ 824.002128][ T5417] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 824.042030][T11594] syz1: rxe_create_cq: returned err = -12 [ 824.043812][ T5417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 824.103722][T11594] infiniband syz1: Couldn't create ib_mad CQ [ 824.113590][ T5417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 824.162345][ T5417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 824.162757][T11594] infiniband syz1: Couldn't open port 1 [ 824.238177][ T5417] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 824.252159][ T5417] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 824.278171][ T5417] usb 1-1: Product: syz [ 824.292785][ T5417] usb 1-1: Manufacturer: syz [ 824.318852][ T5417] cdc_wdm 1-1:1.0: skipping garbage [ 824.329074][ T5417] cdc_wdm 1-1:1.0: skipping garbage [ 824.438067][ T5417] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 824.472938][ T5417] cdc_wdm 1-1:1.0: Unknown control protocol [ 824.547112][T11594] RDS/IB: syz1: added [ 824.551714][T11594] smc: adding ib device syz1 with port count 1 [ 824.591150][T11594] smc: ib device syz1 port 1 has pnetid [ 824.672595][ T5418] usb 1-1: USB disconnect, device number 28 [ 825.931009][ T3014] team0 (unregistering): Port device team_slave_1 removed [ 826.120193][ T3014] team0 (unregistering): Port device team_slave_0 removed [ 828.082650][T11497] hsr_slave_0: entered promiscuous mode [ 828.100950][T11497] hsr_slave_1: entered promiscuous mode [ 828.117186][T11497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.139572][T11497] Cannot create hsr debugfs directory [ 828.179926][ T944] vcan0 speed is unknown, defaulting to 1000 [ 828.226010][T11509] hsr_slave_0: entered promiscuous mode [ 828.247746][T11509] hsr_slave_1: entered promiscuous mode [ 828.282551][T11509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.314433][T11509] Cannot create hsr debugfs directory [ 828.322789][T11492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.354584][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.384700][T11492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.487435][T11492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.494423][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.633150][T11492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.675626][ T5417] vcan0 speed is unknown, defaulting to 1000 [ 828.848992][T11594] vcan0 speed is unknown, defaulting to 1000 [ 829.285528][T11492] hsr_slave_0: entered promiscuous mode [ 829.315448][T11492] hsr_slave_1: entered promiscuous mode [ 829.337462][T11492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.353622][T11492] Cannot create hsr debugfs directory [ 829.515193][T11594] vcan0 speed is unknown, defaulting to 1000 [ 830.181743][T11509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.434752][T11594] vcan0 speed is unknown, defaulting to 1000 [ 830.579752][T11509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.089064][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 831.108304][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 831.151633][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 831.199654][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 831.208768][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 831.216665][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 831.290289][T11509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.580879][T11509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.824192][T11594] vcan0 speed is unknown, defaulting to 1000 [ 831.885933][T11644] wg2: entered promiscuous mode [ 831.890842][T11644] wg2: entered allmulticast mode [ 832.429910][ T8102] bridge_slave_1: left allmulticast mode [ 832.474863][ T8102] bridge_slave_1: left promiscuous mode [ 832.480696][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.616524][ T8102] bridge_slave_0: left allmulticast mode [ 832.622222][ T8102] bridge_slave_0: left promiscuous mode [ 832.683489][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.273652][ T55] Bluetooth: hci0: command tx timeout [ 834.958348][ T8102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.977415][ T8102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.017459][ T8102] bond0 (unregistering): Released all slaves [ 835.208016][T11594] vcan0 speed is unknown, defaulting to 1000 [ 835.345171][ T5381] Bluetooth: hci0: command tx timeout [ 836.397954][T11642] vcan0 speed is unknown, defaulting to 1000 [ 836.673583][ T29] audit: type=1400 audit(1722791420.221:1126): avc: denied { watch watch_reads } for pid=11673 comm="syz.0.1476" path="pipe:[5271]" dev="pipefs" ino=5271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 836.851830][T11497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 836.933706][T11497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 837.132650][T11492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.191671][T11497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 837.251604][T11497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 837.295702][T11594] vcan0 speed is unknown, defaulting to 1000 [ 837.427634][ T5381] Bluetooth: hci0: command 0x040f tx timeout [ 842.218218][T11492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.642725][T11492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.757291][T11594] vcan0 speed is unknown, defaulting to 1000 [ 843.027387][T11492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.606644][T11594] vcan0 speed is unknown, defaulting to 1000 [ 844.000392][T11642] chnl_net:caif_netlink_parms(): no params data found [ 844.155258][ T5381] Bluetooth: hci0: command 0x040f tx timeout [ 844.170632][T11497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.244745][ T5419] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 844.301784][T11492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 844.335779][T11594] vcan0 speed is unknown, defaulting to 1000 [ 844.406290][T11497] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.420549][T11492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 844.587011][T11492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 844.650014][T11594] vcan0 speed is unknown, defaulting to 1000 [ 844.664731][ T5419] usb 1-1: Using ep0 maxpacket: 32 [ 844.689461][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.696753][ T5418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.707926][ T5419] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 844.709024][T11492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 844.852368][ T5419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.874345][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.881503][ T5418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.970476][ T5419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.021344][T11642] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.058754][ T5419] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 845.077824][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.125155][T11642] bridge_slave_0: entered allmulticast mode [ 845.159577][T11642] bridge_slave_0: entered promiscuous mode [ 845.231821][ T5419] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 845.234861][T11642] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.303627][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.336391][T11642] bridge_slave_1: entered allmulticast mode [ 845.344095][ T5419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.375342][T11642] bridge_slave_1: entered promiscuous mode [ 845.446384][ T5419] usb 1-1: config 0 descriptor?? [ 845.623062][T11642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.738889][T11509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 845.825158][T11509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 845.868829][T11594] vcan0 speed is unknown, defaulting to 1000 [ 845.891160][T11509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 845.953085][T11642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.017468][T11509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 846.235578][ T5381] Bluetooth: hci0: command 0x040f tx timeout [ 846.487974][T11642] team0: Port device team_slave_0 added [ 846.537206][T11642] team0: Port device team_slave_1 added [ 846.659053][ T5419] usbhid 1-1:0.0: can't add hid device: -71 [ 846.743319][ T5419] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 846.854944][ T5419] usb 1-1: USB disconnect, device number 29 [ 846.992800][T11642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.043781][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.106206][T11642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.129849][T11642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.137938][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.186398][T11642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.581679][T11642] hsr_slave_0: entered promiscuous mode [ 847.634982][T11642] hsr_slave_1: entered promiscuous mode [ 847.658960][T11642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 847.874612][T11642] Cannot create hsr debugfs directory [ 848.610334][T11492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.501634][ T8102] hsr_slave_0: left promiscuous mode [ 849.622216][ T8102] hsr_slave_1: left promiscuous mode [ 849.711493][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.764729][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.926121][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.933609][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.088227][ T8102] veth1_macvtap: left promiscuous mode [ 850.142498][ T8102] veth0_macvtap: left promiscuous mode [ 850.163735][ T8102] veth1_vlan: left promiscuous mode [ 850.181789][ T8102] veth0_vlan: left promiscuous mode [ 853.209953][ T8102] team0 (unregistering): Port device team_slave_1 removed [ 853.442894][ T8102] team0 (unregistering): Port device team_slave_0 removed [ 855.213052][T11492] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.548360][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.555593][ T5418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.939842][ T29] audit: type=1400 audit(1722791439.441:1127): avc: denied { ioctl } for pid=11785 comm="syz.0.1484" path="/422/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 856.567102][ T944] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.574332][ T944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.596487][T11497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.942585][T11509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.134314][T11509] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.307697][T11796] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 858.088285][T11642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.216754][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.223923][ T5420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.289699][T11801] overlayfs: invalid redirect (./file1) [ 858.351957][T11642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.502130][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.509417][ T5420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.732061][T11642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.818577][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.988833][T11642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.192229][T11509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 859.294540][T11509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 859.521675][ T8102] bridge_slave_1: left allmulticast mode [ 859.573183][ T8102] bridge_slave_1: left promiscuous mode [ 859.598843][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.636885][ T8102] bridge_slave_0: left allmulticast mode [ 859.642542][ T8102] bridge_slave_0: left promiscuous mode [ 859.679802][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.781362][ T8102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.810097][ T8102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.850338][ T8102] bond0 (unregistering): Released all slaves [ 862.142139][T11492] veth0_vlan: entered promiscuous mode [ 862.569770][T11492] veth1_vlan: entered promiscuous mode [ 862.619585][T11497] veth0_vlan: entered promiscuous mode [ 862.844974][ T8102] hsr_slave_0: left promiscuous mode [ 862.854322][ T8102] hsr_slave_1: left promiscuous mode [ 862.874097][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.898446][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.923975][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.963268][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.057654][ T8102] veth1_macvtap: left promiscuous mode [ 863.063261][ T8102] veth0_macvtap: left promiscuous mode [ 863.144798][ T8102] veth1_vlan: left promiscuous mode [ 863.150138][ T8102] veth0_vlan: left promiscuous mode [ 863.533520][ T8102] infiniband syz1: set down [ 864.996145][ T8102] team0 (unregistering): Port device team_slave_1 removed [ 865.181075][ T8102] team0 (unregistering): Port device team_slave_0 removed [ 865.609861][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 865.625576][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 865.636173][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 865.645924][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 865.653595][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 865.661051][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 866.887254][ T35] smc: removing ib device syz1 [ 866.996937][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.233589][T11822] tipc: Enabling of bearer rejected, failed to enable media [ 867.274646][ T5417] vcan0 speed is unknown, defaulting to 1000 [ 867.359399][T11642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 867.614856][T11497] veth1_vlan: entered promiscuous mode [ 867.734713][T11642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 867.749207][ T5381] Bluetooth: hci3: command tx timeout [ 867.939876][T11642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 869.048390][T11642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 869.451942][T11836] Bluetooth: (null): Invalid header checksum [ 869.565170][T11497] veth0_macvtap: entered promiscuous mode [ 869.573746][ T2991] Bluetooth: (null): Invalid header checksum [ 869.824818][ T5381] Bluetooth: hci3: command tx timeout [ 871.908349][ T55] Bluetooth: hci3: command tx timeout [ 874.565428][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.576817][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.651086][ T2991] Bluetooth: (null): Invalid header checksum [ 875.982051][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 875.992834][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 876.002866][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 876.012433][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 876.023600][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 876.031217][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 876.624824][ T5381] Bluetooth: hci3: command tx timeout [ 876.893899][T11642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.439036][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 877.493840][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 877.504144][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 877.527085][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 877.537450][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 877.547497][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 877.660602][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 877.972928][T11642] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.069850][T11853] overlayfs: failed to resolve './file2': -2 [ 878.176234][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.183404][ T5421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.224821][ T5381] Bluetooth: hci6: command tx timeout [ 878.339097][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.346290][ T5421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.671726][T11826] chnl_net:caif_netlink_parms(): no params data found [ 878.882738][T11642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.956649][T11642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.266029][ T29] audit: type=1400 audit(1722791462.821:1128): avc: denied { read } for pid=11861 comm="syz.0.1495" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 879.341687][T11863] libceph: resolve '. [ 879.341687][T11863] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 879.341687][T11863] ' (ret=-3): failed [ 879.665519][ T5381] Bluetooth: hci7: command tx timeout [ 880.316522][ T5381] Bluetooth: hci6: command tx timeout [ 880.741343][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.771321][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.846946][T11826] bridge_slave_0: entered allmulticast mode [ 880.872254][T11826] bridge_slave_0: entered promiscuous mode [ 881.058595][T11842] chnl_net:caif_netlink_parms(): no params data found [ 881.132278][T11642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.182544][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.216384][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.223648][T11826] bridge_slave_1: entered allmulticast mode [ 881.292481][T11826] bridge_slave_1: entered promiscuous mode [ 881.585664][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.744985][ T5381] Bluetooth: hci7: command tx timeout [ 881.808407][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.918312][ T5420] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 882.090207][T11826] team0: Port device team_slave_0 added [ 882.116757][ T5420] usb 1-1: config 0 has no interfaces? [ 882.122251][ T5420] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 882.137474][T11826] team0: Port device team_slave_1 added [ 882.154200][ T5420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.175617][ T5420] usb 1-1: config 0 descriptor?? [ 882.384647][ T5381] Bluetooth: hci6: command tx timeout [ 882.619615][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.677162][ T5420] usb 1-1: USB disconnect, device number 30 [ 882.684001][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.750116][T11842] bridge_slave_0: entered allmulticast mode [ 882.764788][T11842] bridge_slave_0: entered promiscuous mode [ 882.866700][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.873654][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.907300][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.948762][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.964528][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.006958][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.063125][T11855] chnl_net:caif_netlink_parms(): no params data found [ 883.081036][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.094782][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.102022][T11842] bridge_slave_1: entered allmulticast mode [ 883.125427][T11842] bridge_slave_1: entered promiscuous mode [ 883.476661][T11826] hsr_slave_0: entered promiscuous mode [ 883.511888][T11826] hsr_slave_1: entered promiscuous mode [ 883.527219][T11826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.548340][T11826] Cannot create hsr debugfs directory [ 883.559366][T11642] veth0_vlan: entered promiscuous mode [ 883.638741][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.690308][ T29] audit: type=1400 audit(1722791467.241:1129): avc: denied { remount } for pid=11887 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 883.761477][ T29] audit: type=1400 audit(1722791467.311:1130): avc: denied { watch } for pid=11887 comm="syz.0.1497" path="/proc/1402/task" dev="proc" ino=41234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 883.777333][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.825635][ T5381] Bluetooth: hci7: command tx timeout [ 883.879701][T11842] team0: Port device team_slave_0 added [ 884.199393][T11842] team0: Port device team_slave_1 added [ 884.251156][T11642] veth1_vlan: entered promiscuous mode [ 884.366691][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.404823][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.427848][T11855] bridge_slave_0: entered allmulticast mode [ 884.454139][T11855] bridge_slave_0: entered promiscuous mode [ 884.464603][ T5381] Bluetooth: hci6: command tx timeout [ 884.485574][T11855] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.492689][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.570342][T11855] bridge_slave_1: entered allmulticast mode [ 884.605957][T11855] bridge_slave_1: entered promiscuous mode [ 884.880146][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.887619][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.940282][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.020349][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.053040][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.214931][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.458425][T11855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.480628][T11855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.505908][ T1061] Bluetooth: hci8: Frame reassembly failed (-84) [ 885.579901][T11642] veth0_macvtap: entered promiscuous mode [ 885.917094][T11642] veth1_macvtap: entered promiscuous mode [ 885.924082][ T55] Bluetooth: hci7: command tx timeout [ 886.080378][T11855] team0: Port device team_slave_0 added [ 886.248544][T11842] hsr_slave_0: entered promiscuous mode [ 886.296249][T11842] hsr_slave_1: entered promiscuous mode [ 886.321557][T11842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.333039][T11842] Cannot create hsr debugfs directory [ 886.445952][T11855] team0: Port device team_slave_1 added [ 886.640781][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.662906][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.705417][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.724827][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.742896][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.788373][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.833599][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.852644][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.894685][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.946370][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.968044][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.024937][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.066313][T11642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.504711][ T5381] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 887.505564][ T55] Bluetooth: hci8: command 0x1003 tx timeout [ 887.625304][T11855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.632264][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.706811][T11855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.132581][T11855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.153408][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.215339][T11855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.260598][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.288973][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.385062][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.498510][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.509021][ T29] audit: type=1400 audit(1722791471.981:1131): avc: denied { write } for pid=11913 comm="syz.0.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 888.956224][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.014517][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.024496][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.064744][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.103558][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.124549][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.144076][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.156512][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.201138][T11642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.656376][T11855] hsr_slave_0: entered promiscuous mode [ 890.828506][T11855] hsr_slave_1: entered promiscuous mode [ 890.920548][T11855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.976946][T11855] Cannot create hsr debugfs directory [ 891.499721][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 891.513272][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 891.557557][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 891.576750][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 891.597479][ T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 891.610084][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 891.863127][T11942] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 891.914832][T11942] ------------[ cut here ]------------ [ 891.920367][T11942] ODEBUG: free active (active state 0) object: ffff88806b024978 object type: timer_list hint: hci_cmd_timeout+0x0/0x260 [ 891.936838][T11942] WARNING: CPU: 1 PID: 11942 at lib/debugobjects.c:515 debug_print_object+0x1a3/0x2b0 [ 891.946747][T11942] Modules linked in: [ 891.950632][T11942] CPU: 1 UID: 0 PID: 11942 Comm: syz.0.1502 Not tainted 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 891.961595][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 891.971989][T11942] RIP: 0010:debug_print_object+0x1a3/0x2b0 [ 891.977904][T11942] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 40 97 b0 8b 41 56 4c 89 e6 48 c7 c7 a0 8a b0 8b e8 ce 8d c3 fc 90 <0f> 0b 90 90 58 83 05 b5 cb 89 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 891.997816][T11942] RSP: 0018:ffffc9000411f828 EFLAGS: 00010286 [ 892.003881][T11942] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9000b93b000 [ 892.012029][T11942] RDX: 0000000000040000 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 892.020317][T11942] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 892.028309][T11942] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bb09140 [ 892.036307][T11942] R13: ffffffff8b4f40e0 R14: ffffffff8a01b2e0 R15: ffffc9000411f938 [ 892.044645][T11942] FS: 00007f35de7e66c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 892.053591][T11942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 892.060560][T11942] CR2: 00007f28b1157290 CR3: 000000004f494000 CR4: 00000000003506f0 [ 892.068572][T11942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 892.076603][T11942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 892.084602][T11942] Call Trace: [ 892.087872][T11942] [ 892.090787][T11942] ? show_regs+0x8c/0xa0 [ 892.095058][T11942] ? __warn+0xe5/0x3c0 [ 892.099117][T11942] ? preempt_schedule_notrace+0x62/0xe0 [ 892.104682][T11942] ? debug_print_object+0x1a3/0x2b0 [ 892.109956][T11942] ? report_bug+0x3c0/0x580 [ 892.114518][T11942] ? handle_bug+0x3d/0x70 [ 892.118861][T11942] ? exc_invalid_op+0x17/0x50 [ 892.123527][T11942] ? asm_exc_invalid_op+0x1a/0x20 [ 892.128570][T11942] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 892.133858][T11942] ? __warn_printk+0x1a6/0x350 [ 892.138649][T11942] ? debug_print_object+0x1a3/0x2b0 [ 892.143850][T11942] ? debug_print_object+0x1a2/0x2b0 [ 892.149420][T11942] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 892.154998][T11942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 892.160822][T11942] debug_check_no_obj_freed+0x4b8/0x600 [ 892.166412][T11942] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 892.172474][T11942] ? kmem_cache_free+0x12f/0x3a0 [ 892.177435][T11942] kfree+0x284/0x3b0 [ 892.181318][T11942] ? hci_release_dev+0x4d9/0x600 [ 892.186265][T11942] hci_release_dev+0x4d9/0x600 [ 892.191022][T11942] ? __pfx_hci_release_dev+0x10/0x10 [ 892.196336][T11942] ? rcu_is_watching+0x12/0xc0 [ 892.201091][T11942] bt_host_release+0x6a/0xb0 [ 892.205694][T11942] ? __pfx_bt_host_release+0x10/0x10 [ 892.210972][T11942] device_release+0xa1/0x240 [ 892.215595][T11942] kobject_put+0x1fa/0x5b0 [ 892.219999][T11942] put_device+0x1f/0x30 [ 892.224144][T11942] hci_inquiry+0x1f4/0x970 [ 892.228687][T11942] ? __pfx_lock_release+0x10/0x10 [ 892.233702][T11942] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 892.239097][T11942] ? __pfx_hci_inquiry+0x10/0x10 [ 892.244029][T11942] ? read_local_oob_ext_data+0x1180/0x1340 [ 892.250213][T11942] ? __local_bh_enable_ip+0xa4/0x120 [ 892.255766][T11942] hci_sock_ioctl+0x2bb/0x880 [ 892.260474][T11942] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 892.265718][T11942] sock_do_ioctl+0x116/0x280 [ 892.270307][T11942] ? __pfx_sock_do_ioctl+0x10/0x10 [ 892.275451][T11942] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 892.281945][T11942] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 892.288828][T11942] sock_ioctl+0x22e/0x6c0 [ 892.293155][T11942] ? __pfx_sock_ioctl+0x10/0x10 [ 892.298039][T11942] ? selinux_file_ioctl+0x180/0x270 [ 892.303225][T11942] ? selinux_file_ioctl+0xb4/0x270 [ 892.308451][T11942] ? __pfx_sock_ioctl+0x10/0x10 [ 892.313308][T11942] __x64_sys_ioctl+0x193/0x220 [ 892.318113][T11942] do_syscall_64+0xcd/0x250 [ 892.322617][T11942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.328539][T11942] RIP: 0033:0x7f35dd9779f9 [ 892.332945][T11942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.352815][T11942] RSP: 002b:00007f35de7e6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.361451][T11942] RAX: ffffffffffffffda RBX: 00007f35ddb06130 RCX: 00007f35dd9779f9 [ 892.369472][T11942] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 000000000000000b [ 892.377459][T11942] RBP: 00007f35dd9e58ee R08: 0000000000000000 R09: 0000000000000000 [ 892.385516][T11942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.393475][T11942] R13: 000000000000006e R14: 00007f35ddb06130 R15: 00007fffbd566208 [ 892.401464][T11942] [ 892.404539][T11942] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 892.411902][T11942] CPU: 1 UID: 0 PID: 11942 Comm: syz.0.1502 Not tainted 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 892.422648][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 892.432688][T11942] Call Trace: [ 892.435957][T11942] [ 892.438873][T11942] dump_stack_lvl+0x3d/0x1f0 [ 892.443460][T11942] panic+0x6f5/0x7a0 [ 892.447344][T11942] ? __pfx_panic+0x10/0x10 [ 892.451749][T11942] ? show_trace_log_lvl+0x363/0x500 [ 892.456951][T11942] ? debug_print_object+0x1a3/0x2b0 [ 892.462140][T11942] check_panic_on_warn+0xab/0xb0 [ 892.467071][T11942] __warn+0xf1/0x3c0 [ 892.470954][T11942] ? preempt_schedule_notrace+0x62/0xe0 [ 892.476487][T11942] ? debug_print_object+0x1a3/0x2b0 [ 892.481672][T11942] report_bug+0x3c0/0x580 [ 892.485995][T11942] handle_bug+0x3d/0x70 [ 892.490142][T11942] exc_invalid_op+0x17/0x50 [ 892.494649][T11942] asm_exc_invalid_op+0x1a/0x20 [ 892.499503][T11942] RIP: 0010:debug_print_object+0x1a3/0x2b0 [ 892.505298][T11942] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 40 97 b0 8b 41 56 4c 89 e6 48 c7 c7 a0 8a b0 8b e8 ce 8d c3 fc 90 <0f> 0b 90 90 58 83 05 b5 cb 89 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 892.524895][T11942] RSP: 0018:ffffc9000411f828 EFLAGS: 00010286 [ 892.530961][T11942] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9000b93b000 [ 892.538942][T11942] RDX: 0000000000040000 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 892.546899][T11942] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 892.554860][T11942] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bb09140 [ 892.562821][T11942] R13: ffffffff8b4f40e0 R14: ffffffff8a01b2e0 R15: ffffc9000411f938 [ 892.570785][T11942] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 892.576069][T11942] ? __warn_printk+0x1a6/0x350 [ 892.580825][T11942] ? debug_print_object+0x1a2/0x2b0 [ 892.586013][T11942] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 892.591286][T11942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 892.597082][T11942] debug_check_no_obj_freed+0x4b8/0x600 [ 892.602619][T11942] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 892.608678][T11942] ? kmem_cache_free+0x12f/0x3a0 [ 892.613602][T11942] kfree+0x284/0x3b0 [ 892.617481][T11942] ? hci_release_dev+0x4d9/0x600 [ 892.622410][T11942] hci_release_dev+0x4d9/0x600 [ 892.627161][T11942] ? __pfx_hci_release_dev+0x10/0x10 [ 892.632432][T11942] ? rcu_is_watching+0x12/0xc0 [ 892.637186][T11942] bt_host_release+0x6a/0xb0 [ 892.641765][T11942] ? __pfx_bt_host_release+0x10/0x10 [ 892.647040][T11942] device_release+0xa1/0x240 [ 892.651621][T11942] kobject_put+0x1fa/0x5b0 [ 892.656022][T11942] put_device+0x1f/0x30 [ 892.660178][T11942] hci_inquiry+0x1f4/0x970 [ 892.664594][T11942] ? __pfx_lock_release+0x10/0x10 [ 892.669609][T11942] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 892.674973][T11942] ? __pfx_hci_inquiry+0x10/0x10 [ 892.679926][T11942] ? read_local_oob_ext_data+0x1180/0x1340 [ 892.685718][T11942] ? __local_bh_enable_ip+0xa4/0x120 [ 892.690997][T11942] hci_sock_ioctl+0x2bb/0x880 [ 892.695665][T11942] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 892.700851][T11942] sock_do_ioctl+0x116/0x280 [ 892.705430][T11942] ? __pfx_sock_do_ioctl+0x10/0x10 [ 892.710528][T11942] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 892.717017][T11942] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 892.723851][T11942] sock_ioctl+0x22e/0x6c0 [ 892.728178][T11942] ? __pfx_sock_ioctl+0x10/0x10 [ 892.733016][T11942] ? selinux_file_ioctl+0x180/0x270 [ 892.738199][T11942] ? selinux_file_ioctl+0xb4/0x270 [ 892.743299][T11942] ? __pfx_sock_ioctl+0x10/0x10 [ 892.748158][T11942] __x64_sys_ioctl+0x193/0x220 [ 892.752951][T11942] do_syscall_64+0xcd/0x250 [ 892.757481][T11942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.763401][T11942] RIP: 0033:0x7f35dd9779f9 [ 892.767814][T11942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.787411][T11942] RSP: 002b:00007f35de7e6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.795818][T11942] RAX: ffffffffffffffda RBX: 00007f35ddb06130 RCX: 00007f35dd9779f9 [ 892.803778][T11942] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 000000000000000b [ 892.811735][T11942] RBP: 00007f35dd9e58ee R08: 0000000000000000 R09: 0000000000000000 [ 892.819696][T11942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.827652][T11942] R13: 000000000000006e R14: 00007f35ddb06130 R15: 00007fffbd566208 [ 892.835613][T11942] [ 892.838936][T11942] Kernel Offset: disabled [ 892.843249][T11942] Rebooting in 86400 seconds..