last executing test programs: 4m40.382298466s ago: executing program 4 (id=384): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000140)={0x20, 0x16, 0x1, "f0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m3.024006833s ago: executing program 4 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m2.914194448s ago: executing program 4 (id=390): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000003600)=""/120) 4m2.767010401s ago: executing program 4 (id=391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m2.58981803s ago: executing program 4 (id=392): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000400", @ANYRES16=0x0, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB='\n\x004'], 0x28}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16], 0x0) 4m1.217654634s ago: executing program 4 (id=393): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 2m17.755820641s ago: executing program 0 (id=45): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) setresgid(r1, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x0, 0x84) r2 = getpid() socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000040)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x105b, 0xffffffffffffffff, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000003780)=""/4096, 0x1000) 2m14.047522382s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x6, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 2m9.658184749s ago: executing program 1 (id=387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 1m54.123743627s ago: executing program 0 (id=45): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) setresgid(r1, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x0, 0x84) r2 = getpid() socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000040)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x105b, 0xffffffffffffffff, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000003780)=""/4096, 0x1000) 1m53.41416271s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x6, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 1m50.968147868s ago: executing program 1 (id=387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 1m24.616565288s ago: executing program 0 (id=45): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) setresgid(r1, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x0, 0x84) r2 = getpid() socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000040)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x105b, 0xffffffffffffffff, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000003780)=""/4096, 0x1000) 1m21.195403046s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x6, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 1m18.569072553s ago: executing program 1 (id=387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 58.094044937s ago: executing program 0 (id=45): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) setresgid(r1, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x0, 0x84) r2 = getpid() socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000040)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x105b, 0xffffffffffffffff, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000003780)=""/4096, 0x1000) 56.507553162s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x6, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 53.676089696s ago: executing program 1 (id=387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 32.217447993s ago: executing program 0 (id=45): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) setresgid(r1, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x0, 0x84) r2 = getpid() socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000040)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x105b, 0xffffffffffffffff, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000003780)=""/4096, 0x1000) 31.211562354s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x6, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 26.448598713s ago: executing program 1 (id=387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 9.261113646s ago: executing program 0 (id=45): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) setresgid(r1, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x0, 0x84) r2 = getpid() socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000040)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x105b, 0xffffffffffffffff, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000003780)=""/4096, 0x1000) 8.343419582s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x6, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 4.478196735s ago: executing program 1 (id=387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 3.125031511s ago: executing program 2 (id=699): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001780), 0x8, r0}, 0x38) 2.899976726s ago: executing program 2 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a000000000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e008000000008000d"], 0x5c}}, 0x0) 2.758883843s ago: executing program 2 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000001c0)=r3}, 0x20) recvmsg$unix(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(0x0, 0x702, 0x0) 1.34800752s ago: executing program 2 (id=702): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="08000000040000fcffffff170700bb60000040", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x89) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) 153.684631ms ago: executing program 2 (id=703): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x19) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 0s ago: executing program 2 (id=704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): entered promiscuous mode [ 434.282157][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.306688][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.314064][ T9177] bridge_slave_1: entered allmulticast mode [ 434.337549][ T9177] bridge_slave_1: entered promiscuous mode [ 434.400754][ T9154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.461032][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.482986][ T9154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.541750][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.593663][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.732402][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.802369][ T9177] team0: Port device team_slave_0 added [ 434.811372][ T9177] team0: Port device team_slave_1 added [ 434.825588][ T9154] team0: Port device team_slave_0 added [ 434.858677][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.884786][ T9208] chnl_net:caif_netlink_parms(): no params data found [ 434.909633][ T9154] team0: Port device team_slave_1 added [ 435.012078][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.029211][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.036466][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.067060][ T9154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.086748][ T5240] Bluetooth: hci3: command tx timeout [ 435.102161][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.110288][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.146222][ T9177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.171344][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.179736][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.206567][ T9177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.230313][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.238699][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.251608][ T29] audit: type=1400 audit(1727479521.051:364): avc: denied { connect } for pid=9261 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 435.266112][ T9154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.390656][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 435.449455][ T9154] hsr_slave_0: entered promiscuous mode [ 435.460952][ T9154] hsr_slave_1: entered promiscuous mode [ 435.503091][ T29] audit: type=1400 audit(1727479521.311:365): avc: denied { create } for pid=9261 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 435.514945][ T9262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.546028][ T9177] hsr_slave_0: entered promiscuous mode [ 435.552514][ T9177] hsr_slave_1: entered promiscuous mode [ 435.559280][ T9177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.568454][ T9177] Cannot create hsr debugfs directory [ 435.605628][ T9262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.627460][ T9262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.709791][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.718440][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.725865][ T9208] bridge_slave_0: entered allmulticast mode [ 435.732837][ T9208] bridge_slave_0: entered promiscuous mode [ 435.749591][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.765403][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.775666][ T9208] bridge_slave_1: entered allmulticast mode [ 435.783696][ T9208] bridge_slave_1: entered promiscuous mode [ 435.841122][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.876287][ T5240] Bluetooth: hci0: command tx timeout [ 435.943699][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.956043][ T5240] Bluetooth: hci2: command tx timeout [ 435.995664][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.003195][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.016336][ T9211] bridge_slave_0: entered allmulticast mode [ 436.023295][ T9211] bridge_slave_0: entered promiscuous mode [ 436.035566][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.046735][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.054010][ T9211] bridge_slave_1: entered allmulticast mode [ 436.061299][ T9211] bridge_slave_1: entered promiscuous mode [ 436.070285][ T9208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.085427][ T9208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.116787][ T5240] Bluetooth: hci1: command tx timeout [ 436.127753][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.230443][ T9208] team0: Port device team_slave_0 added [ 436.243766][ T9208] team0: Port device team_slave_1 added [ 436.293322][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.338736][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.429696][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.461263][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.468659][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.502266][ T9208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.533295][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.541012][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.568661][ T9208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.199976][ T5240] Bluetooth: hci3: command tx timeout [ 437.261700][ T9211] team0: Port device team_slave_0 added [ 437.281342][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 437.358148][ T9211] team0: Port device team_slave_1 added [ 437.640628][ T9208] hsr_slave_0: entered promiscuous mode [ 437.676811][ T9208] hsr_slave_1: entered promiscuous mode [ 437.694165][ T9208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.722455][ T9208] Cannot create hsr debugfs directory [ 437.795161][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.802612][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.830552][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.955792][ T29] audit: type=1400 audit(1727479523.741:366): avc: denied { read } for pid=9287 comm="syz.2.572" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 437.981554][ T5240] Bluetooth: hci0: command tx timeout [ 438.037219][ T5240] Bluetooth: hci2: command tx timeout [ 438.624502][ T29] audit: type=1400 audit(1727479523.741:367): avc: denied { open } for pid=9287 comm="syz.2.572" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 438.717903][ T29] audit: type=1400 audit(1727479523.761:368): avc: denied { ioctl } for pid=9287 comm="syz.2.572" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 438.855544][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.873382][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.900285][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.344683][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.918282][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.017083][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.038279][ T5240] Bluetooth: hci0: command tx timeout [ 440.105408][ T9211] hsr_slave_0: entered promiscuous mode [ 440.119626][ T9211] hsr_slave_1: entered promiscuous mode [ 440.126520][ T5240] Bluetooth: hci2: command tx timeout [ 440.135813][ T9211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.143655][ T9211] Cannot create hsr debugfs directory [ 440.179026][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.561283][ T9154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.640291][ T9154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.664382][ T9154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.757259][ T9154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.861259][ T12] bridge_slave_1: left allmulticast mode [ 440.867560][ T12] bridge_slave_1: left promiscuous mode [ 440.873334][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.883116][ T12] bridge_slave_0: left allmulticast mode [ 440.891121][ T12] bridge_slave_0: left promiscuous mode [ 440.897486][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.914137][ T12] bridge_slave_1: left allmulticast mode [ 440.920937][ T12] bridge_slave_1: left promiscuous mode [ 440.927296][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.937669][ T12] bridge_slave_0: left allmulticast mode [ 440.943364][ T12] bridge_slave_0: left promiscuous mode [ 440.951711][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.961935][ T12] bridge_slave_1: left allmulticast mode [ 440.968451][ T12] bridge_slave_1: left promiscuous mode [ 440.974322][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.007428][ T12] bridge_slave_0: left allmulticast mode [ 441.013136][ T12] bridge_slave_0: left promiscuous mode [ 441.026180][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.363573][ T9334] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.581'. [ 442.245557][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.259293][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.272152][ T12] bond0 (unregistering): Released all slaves [ 442.429275][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.445965][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.460125][ T12] bond0 (unregistering): Released all slaves [ 442.890610][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.930470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.969435][ T12] bond0 (unregistering): Released all slaves [ 444.108447][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.182003][ T9177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.211180][ T9177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.275113][ T9154] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.317670][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.324049][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.347429][ T9177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.457495][ T9177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.492854][ T2537] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.500072][ T2537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.642161][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.649428][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.846038][ T29] audit: type=1400 audit(1727479531.651:369): avc: denied { connect } for pid=9378 comm="syz.2.590" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 445.948851][ T29] audit: type=1400 audit(1727479531.651:370): avc: denied { name_connect } for pid=9378 comm="syz.2.590" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 446.029040][ T12] hsr_slave_0: left promiscuous mode [ 446.054541][ T12] hsr_slave_1: left promiscuous mode [ 446.071588][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.084938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.111439][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.134933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.164705][ T12] hsr_slave_0: left promiscuous mode [ 446.190194][ T12] hsr_slave_1: left promiscuous mode [ 446.227692][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.235169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.262370][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.270801][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.301036][ T9390] 9pnet_fd: p9_fd_create_tcp (9390): problem connecting socket to 127.0.0.1 [ 446.315899][ T12] hsr_slave_0: left promiscuous mode [ 446.326560][ T12] hsr_slave_1: left promiscuous mode [ 446.339733][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.365953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.386601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.394164][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.641117][ T12] veth1_macvtap: left promiscuous mode [ 446.658031][ T12] veth0_macvtap: left promiscuous mode [ 446.664204][ T12] veth1_vlan: left promiscuous mode [ 446.670088][ T12] veth0_vlan: left promiscuous mode [ 446.868949][ T12] veth1_macvtap: left promiscuous mode [ 446.874549][ T12] veth0_macvtap: left promiscuous mode [ 446.894016][ T12] veth1_vlan: left promiscuous mode [ 446.899780][ T12] veth0_vlan: left promiscuous mode [ 447.043088][ T12] veth1_macvtap: left promiscuous mode [ 447.059528][ T12] veth0_macvtap: left promiscuous mode [ 447.082175][ T12] veth1_vlan: left promiscuous mode [ 447.099949][ T12] veth0_vlan: left promiscuous mode [ 448.801651][ T12] team0 (unregistering): Port device team_slave_1 removed [ 448.859988][ T12] team0 (unregistering): Port device team_slave_0 removed [ 449.782813][ T12] team0 (unregistering): Port device team_slave_1 removed [ 449.831041][ T12] team0 (unregistering): Port device team_slave_0 removed [ 450.631471][ T12] team0 (unregistering): Port device team_slave_1 removed [ 450.679147][ T12] team0 (unregistering): Port device team_slave_0 removed [ 451.191747][ T9154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.619190][ T9208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.633562][ T9208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.686447][ T9208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.727464][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.368242][ T9208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.440479][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.522699][ T2537] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.529894][ T2537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.560943][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.568254][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.590879][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.897218][ T9177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.080582][ T9154] veth0_vlan: entered promiscuous mode [ 453.958268][ T9154] veth1_vlan: entered promiscuous mode [ 454.301420][ T9211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.319156][ T9211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.357510][ T9211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.392097][ T9154] veth0_macvtap: entered promiscuous mode [ 454.423432][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.457328][ T9211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.472354][ T9154] veth1_macvtap: entered promiscuous mode [ 454.518504][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.604003][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.626197][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.646199][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.669204][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.686857][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.704527][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.720049][ T9208] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.768710][ T9154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.789691][ T9154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.798655][ T9154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.807568][ T9154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.867597][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.874866][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.919017][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.926197][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.026422][ T5276] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 455.102607][ T5618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.130596][ T5618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.188317][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 455.203536][ T5276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.213345][ T5276] usb 3-1: config 0 has no interface number 0 [ 455.219155][ T9177] veth0_vlan: entered promiscuous mode [ 455.227706][ T5276] usb 3-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.250967][ T5276] usb 3-1: config 0 interface 1 has no altsetting 0 [ 455.260573][ T5276] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 455.278675][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.285352][ T9177] veth1_vlan: entered promiscuous mode [ 455.300706][ T5276] usb 3-1: Product: syz [ 455.305029][ T5276] usb 3-1: Manufacturer: syz [ 455.312676][ T5276] usb 3-1: SerialNumber: syz [ 455.323737][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.349422][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.360421][ T5276] usb 3-1: config 0 descriptor?? [ 455.393604][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.481552][ T9177] veth0_macvtap: entered promiscuous mode [ 455.512686][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.551137][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.558357][ T5346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.576677][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.596862][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.623261][ T9177] veth1_macvtap: entered promiscuous mode [ 455.641219][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.648398][ T5618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.657773][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.705656][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.765842][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.806118][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.835908][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.862823][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.130078][ T2537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.157523][ T5276] usb 3-1: selecting invalid altsetting 1 [ 456.167311][ T5276] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 456.182841][ T5276] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 456.190736][ T5276] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 456.216123][ T5276] usb 3-1: USB disconnect, device number 24 [ 456.277070][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.289159][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.322748][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.343801][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.367437][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.447319][ T2537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.493694][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.511429][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.535269][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.556068][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.584360][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.656671][ T2537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.705440][ T9177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.729908][ T9177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.755042][ T9177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.773082][ T9177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.795621][ T9208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.854403][ T2537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.060758][ T9208] veth0_vlan: entered promiscuous mode [ 457.107900][ T5618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.112306][ T9208] veth1_vlan: entered promiscuous mode [ 457.128584][ T5618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.168481][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.261433][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.283292][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.291620][ T2537] bridge_slave_1: left allmulticast mode [ 457.306654][ T2537] bridge_slave_1: left promiscuous mode [ 457.318195][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.334280][ T2537] bridge_slave_0: left allmulticast mode [ 457.340228][ T2537] bridge_slave_0: left promiscuous mode [ 457.346501][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.673369][ T2537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.685605][ T2537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.698524][ T2537] bond0 (unregistering): Released all slaves [ 457.771334][ T9208] veth0_macvtap: entered promiscuous mode [ 457.832978][ T9208] veth1_macvtap: entered promiscuous mode [ 458.969461][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.025762][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.076256][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.125746][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.165725][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.209776][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.251660][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.317841][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.335754][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.370685][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.382424][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.385880][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.405910][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.419325][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.428519][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.443080][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.450860][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 459.454886][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.470082][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.484128][ T9548] 9pnet_fd: p9_fd_create_tcp (9548): problem connecting socket to 127.0.0.1 [ 459.513813][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.620605][ T2537] hsr_slave_0: left promiscuous mode [ 459.632384][ T2537] hsr_slave_1: left promiscuous mode [ 459.639200][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.648215][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.656333][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.663773][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.682197][ T2537] veth1_macvtap: left promiscuous mode [ 459.687838][ T2537] veth0_macvtap: left promiscuous mode [ 459.693414][ T2537] veth1_vlan: left promiscuous mode [ 459.698797][ T2537] veth0_vlan: left promiscuous mode [ 460.124448][ T2537] team0 (unregistering): Port device team_slave_1 removed [ 460.180467][ T2537] team0 (unregistering): Port device team_slave_0 removed [ 460.569164][ T9208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.578327][ T9208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.591795][ T9208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.600686][ T9208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.798040][ T9211] veth0_vlan: entered promiscuous mode [ 460.933093][ T9211] veth1_vlan: entered promiscuous mode [ 460.950081][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.984771][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.107273][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.115167][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.135525][ T9561] Invalid ELF header type: 0 != 1 [ 461.141261][ T29] audit: type=1400 audit(1727479546.941:371): avc: denied { module_load } for pid=9560 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 461.453379][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.463856][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.465412][ T2537] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.490781][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.514795][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.526486][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 461.542342][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.555947][ T5240] Bluetooth: hci1: command tx timeout [ 461.596588][ T9211] veth0_macvtap: entered promiscuous mode [ 461.870995][ T2537] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.587679][ T9211] veth1_macvtap: entered promiscuous mode [ 462.671863][ T2537] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.722907][ T9545] chnl_net:caif_netlink_parms(): no params data found [ 462.820347][ T2537] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.895284][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.912994][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.923320][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.934052][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.944012][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.954641][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.967911][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.004665][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.018926][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.029322][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.039991][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.049861][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.060372][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.073922][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.084887][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.092351][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.099745][ T9545] bridge_slave_0: entered allmulticast mode [ 463.107145][ T9545] bridge_slave_0: entered promiscuous mode [ 463.125058][ T9211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.135358][ T9211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.144538][ T9211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.153550][ T9211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.169430][ T9545] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.176757][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.183972][ T9545] bridge_slave_1: entered allmulticast mode [ 463.192147][ T9545] bridge_slave_1: entered promiscuous mode [ 463.351385][ T9545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.369564][ T9545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.482257][ T2537] bridge_slave_1: left allmulticast mode [ 463.495116][ T2537] bridge_slave_1: left promiscuous mode [ 463.503743][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.520728][ T2537] bridge_slave_0: left allmulticast mode [ 463.526528][ T2537] bridge_slave_0: left promiscuous mode [ 463.532285][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.636325][ T5231] Bluetooth: hci1: command tx timeout [ 463.641874][ T5240] Bluetooth: hci3: command tx timeout [ 463.921938][ T29] audit: type=1400 audit(1727479549.691:372): avc: denied { bind } for pid=9597 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 464.713471][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.723776][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.740681][ T29] audit: type=1400 audit(1727479550.551:373): avc: denied { unmount } for pid=7478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 464.771629][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.794583][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.807078][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 464.827560][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.122157][ T2537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.139187][ T2537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.160964][ T2537] bond0 (unregistering): Released all slaves [ 465.279188][ T9545] team0: Port device team_slave_0 added [ 465.298058][ T9545] team0: Port device team_slave_1 added [ 465.716116][ T5231] Bluetooth: hci3: command tx timeout [ 465.723395][ T5231] Bluetooth: hci1: command tx timeout [ 465.829134][ T9568] chnl_net:caif_netlink_parms(): no params data found [ 465.858113][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.865092][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.893398][ T9545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.018312][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.025328][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.051832][ T9545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.097107][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.111990][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.336537][ T9545] hsr_slave_0: entered promiscuous mode [ 466.526667][ T9545] hsr_slave_1: entered promiscuous mode [ 466.917825][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.957160][ T5231] Bluetooth: hci0: command tx timeout [ 466.975412][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.276219][ T2537] hsr_slave_0: left promiscuous mode [ 467.282908][ T2537] hsr_slave_1: left promiscuous mode [ 467.299316][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.317980][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.334221][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.342334][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.411802][ T2537] veth1_macvtap: left promiscuous mode [ 467.436380][ T2537] veth0_macvtap: left promiscuous mode [ 467.460673][ T2537] veth1_vlan: left promiscuous mode [ 467.475880][ T2537] veth0_vlan: left promiscuous mode [ 467.796724][ T5231] Bluetooth: hci1: command tx timeout [ 467.796828][ T5240] Bluetooth: hci3: command tx timeout [ 468.577417][ T29] audit: type=1400 audit(1727479554.331:374): avc: denied { create } for pid=9645 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 468.652051][ T29] audit: type=1400 audit(1727479554.341:375): avc: denied { write } for pid=9645 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 469.000463][ T5240] Bluetooth: hci0: command tx timeout [ 469.241642][ T2537] team0 (unregistering): Port device team_slave_1 removed [ 469.374588][ T2537] team0 (unregistering): Port device team_slave_0 removed [ 469.877952][ T5240] Bluetooth: hci3: command tx timeout [ 470.607105][ T29] audit: type=1400 audit(1727479556.411:376): avc: denied { bind } for pid=9654 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 470.659912][ T29] audit: type=1400 audit(1727479556.471:377): avc: denied { ioctl } for pid=9654 comm="syz.2.620" path="socket:[50171]" dev="sockfs" ino=50171 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 470.760389][ T29] audit: type=1400 audit(1727479556.471:378): avc: denied { read } for pid=9654 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 470.903835][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.915414][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.930644][ T9568] bridge_slave_0: entered allmulticast mode [ 470.949566][ T9568] bridge_slave_0: entered promiscuous mode [ 471.069745][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.082864][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.086669][ T5240] Bluetooth: hci0: command tx timeout [ 471.093085][ T9568] bridge_slave_1: entered allmulticast mode [ 471.109177][ T9568] bridge_slave_1: entered promiscuous mode [ 471.351433][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.457955][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.592568][ T9568] team0: Port device team_slave_0 added [ 471.655096][ T9568] team0: Port device team_slave_1 added [ 471.856431][ T9603] chnl_net:caif_netlink_parms(): no params data found [ 471.882676][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.903993][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.931943][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.948513][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.956076][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.002318][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.259512][ T2537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.469722][ T2537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.587904][ T9568] hsr_slave_0: entered promiscuous mode [ 472.595091][ T9568] hsr_slave_1: entered promiscuous mode [ 472.604695][ T9568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.612878][ T9568] Cannot create hsr debugfs directory [ 472.715020][ T2537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.884474][ T2537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.930052][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.941842][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.949662][ T9603] bridge_slave_0: entered allmulticast mode [ 472.957308][ T9603] bridge_slave_0: entered promiscuous mode [ 472.979115][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 472.996998][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.008260][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.016025][ T9603] bridge_slave_1: entered allmulticast mode [ 473.023457][ T9603] bridge_slave_1: entered promiscuous mode [ 473.113979][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.206915][ T5240] Bluetooth: hci0: command tx timeout [ 473.258791][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.431902][ T9545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 473.743060][ T9603] team0: Port device team_slave_0 added [ 473.903423][ T9545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 473.923179][ T9603] team0: Port device team_slave_1 added [ 474.024844][ T2537] bridge_slave_1: left allmulticast mode [ 474.033079][ T2537] bridge_slave_1: left promiscuous mode [ 474.049046][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.070666][ T2537] bridge_slave_0: left allmulticast mode [ 474.076438][ T2537] bridge_slave_0: left promiscuous mode [ 474.082393][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.237058][ T2537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.271333][ T2537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.288101][ T2537] bond0 (unregistering): Released all slaves [ 475.309930][ T9545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 475.405464][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.414610][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.441058][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.455475][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.462631][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.488814][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.536390][ T9603] hsr_slave_0: entered promiscuous mode [ 475.543137][ T9603] hsr_slave_1: entered promiscuous mode [ 475.551186][ T9603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.559171][ T9603] Cannot create hsr debugfs directory [ 475.599732][ T9545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.269966][ T2537] hsr_slave_0: left promiscuous mode [ 476.291769][ T2537] hsr_slave_1: left promiscuous mode [ 476.302817][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.316560][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.335619][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.343271][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.397520][ T2537] veth1_macvtap: left promiscuous mode [ 476.403145][ T2537] veth0_macvtap: left promiscuous mode [ 476.409194][ T2537] veth1_vlan: left promiscuous mode [ 476.414667][ T2537] veth0_vlan: left promiscuous mode [ 477.152625][ T9709] syz.2.630[9709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.153227][ T9709] syz.2.630[9709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.165409][ T9709] syz.2.630[9709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.825301][ T2537] team0 (unregistering): Port device team_slave_1 removed [ 477.960099][ T2537] team0 (unregistering): Port device team_slave_0 removed [ 479.354080][ T9545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.402911][ T9545] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.442946][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 479.454440][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.461692][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.521947][ T9568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.555629][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.562830][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.838274][ T9568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.872081][ T9568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.933171][ T9568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.229061][ T9603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.247156][ T9603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.261938][ T9603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.294336][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.304027][ T9603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 480.364746][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.398642][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.405787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.489327][ T9568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.516103][ T9568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.544228][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.551367][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.613383][ T9545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.663618][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.680723][ T9603] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.708736][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.715938][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.725739][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.732876][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.877734][ T9545] veth0_vlan: entered promiscuous mode [ 480.939486][ T9545] veth1_vlan: entered promiscuous mode [ 481.037360][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.062053][ T9545] veth0_macvtap: entered promiscuous mode [ 481.089213][ T9545] veth1_macvtap: entered promiscuous mode [ 481.148064][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.179293][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.198489][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.209521][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.221527][ T9545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.261093][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.281117][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.294571][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.306521][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.319208][ T9545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.343584][ T9545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.355003][ T9545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.371570][ T9545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.381633][ T9545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.438343][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.471211][ T9568] veth0_vlan: entered promiscuous mode [ 481.560006][ T9568] veth1_vlan: entered promiscuous mode [ 481.611489][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.650130][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.722781][ T9603] veth0_vlan: entered promiscuous mode [ 481.742004][ T9568] veth0_macvtap: entered promiscuous mode [ 481.752457][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.769861][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.777288][ T9568] veth1_macvtap: entered promiscuous mode [ 481.793104][ T9737] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 481.812278][ T9603] veth1_vlan: entered promiscuous mode [ 481.823207][ T9740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 481.855247][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.896139][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.912229][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.922846][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.933968][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.955941][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.989621][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.069134][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.097505][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.116415][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.135231][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.146028][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.175900][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.226595][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.301723][ T9568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.312182][ T9568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.335935][ T9568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.344702][ T9568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.426649][ T9603] veth0_macvtap: entered promiscuous mode [ 482.563089][ T5346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.631748][ T9603] veth1_macvtap: entered promiscuous mode [ 482.655835][ T5303] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 482.713296][ T5346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.743596][ T5391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.757512][ T5391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.763313][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.792978][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.810138][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.823492][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.828106][ T5303] usb 3-1: Using ep0 maxpacket: 16 [ 482.838679][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.838707][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.859897][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.878227][ T5303] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.879157][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.886483][ T5303] usb 3-1: config 0 has no interface number 0 [ 482.904301][ T5303] usb 3-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.908080][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.918508][ T5303] usb 3-1: config 0 interface 1 has no altsetting 0 [ 482.939730][ T5303] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 482.961693][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.975608][ T5303] usb 3-1: Product: syz [ 482.982416][ T5303] usb 3-1: Manufacturer: syz [ 482.992025][ T5303] usb 3-1: SerialNumber: syz [ 482.999973][ T5346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.012467][ T5303] usb 3-1: config 0 descriptor?? [ 483.050199][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.065066][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.075823][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.088585][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.099705][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.110639][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.120890][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.133441][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.145449][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.214248][ T5346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.230567][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.246147][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.261911][ T9603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.274778][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.287546][ T9603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.296740][ T9603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.305818][ T9603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.317702][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.347568][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.349841][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.374389][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.390274][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.436385][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.459963][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.763566][ T5346] bridge_slave_1: left allmulticast mode [ 483.774508][ T5346] bridge_slave_1: left promiscuous mode [ 483.782605][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.799811][ T5303] usb 3-1: selecting invalid altsetting 1 [ 483.812579][ T5346] bridge_slave_0: left allmulticast mode [ 483.817584][ T5303] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 483.819843][ T5346] bridge_slave_0: left promiscuous mode [ 483.833496][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.848481][ T5303] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 483.859354][ T5303] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 483.911383][ T5303] usb 3-1: USB disconnect, device number 25 [ 484.497858][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.524192][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.533384][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.562148][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.580897][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.604000][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.774059][ T5346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.785521][ T5346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.797117][ T5346] bond0 (unregistering): Released all slaves [ 484.821821][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.846083][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.007699][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.038969][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.202948][ T5346] hsr_slave_0: left promiscuous mode [ 485.212073][ T5346] hsr_slave_1: left promiscuous mode [ 485.220873][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.229463][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.237681][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.245094][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.267451][ T5346] veth1_macvtap: left promiscuous mode [ 485.272986][ T5346] veth0_macvtap: left promiscuous mode [ 485.279063][ T5346] veth1_vlan: left promiscuous mode [ 485.284390][ T5346] veth0_vlan: left promiscuous mode [ 485.619729][ T9823] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 485.645888][ T9823] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.640'. [ 485.946449][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.958179][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.976728][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.984726][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 486.004061][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 486.012432][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.110270][ T5346] team0 (unregistering): Port device team_slave_1 removed [ 486.219922][ T5346] team0 (unregistering): Port device team_slave_0 removed [ 486.678828][ T5240] Bluetooth: hci1: command tx timeout [ 486.996429][ T9815] chnl_net:caif_netlink_parms(): no params data found [ 487.145808][ T29] audit: type=1400 audit(1727479572.951:379): avc: denied { getopt } for pid=9838 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 487.404592][ T9828] chnl_net:caif_netlink_parms(): no params data found [ 487.426330][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.433454][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.440902][ T9815] bridge_slave_0: entered allmulticast mode [ 487.448145][ T9815] bridge_slave_0: entered promiscuous mode [ 487.457936][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.465169][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.472517][ T9815] bridge_slave_1: entered allmulticast mode [ 487.486990][ T9815] bridge_slave_1: entered promiscuous mode [ 487.569093][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.610852][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.703632][ T5346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.788693][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.801981][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.809604][ T9828] bridge_slave_0: entered allmulticast mode [ 487.817072][ T9828] bridge_slave_0: entered promiscuous mode [ 487.834066][ T9815] team0: Port device team_slave_0 added [ 487.843090][ T9815] team0: Port device team_slave_1 added [ 487.864988][ T5346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.894717][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.902760][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.915028][ T9828] bridge_slave_1: entered allmulticast mode [ 487.922003][ T9828] bridge_slave_1: entered promiscuous mode [ 487.979895][ T5346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.012280][ T9828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.028261][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.035264][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.063490][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.069873][ T5240] Bluetooth: hci0: command tx timeout [ 488.078314][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.087076][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.114760][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.161284][ T9828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.282657][ T5346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.333827][ T9828] team0: Port device team_slave_0 added [ 488.423861][ T9828] team0: Port device team_slave_1 added [ 488.481202][ T9815] hsr_slave_0: entered promiscuous mode [ 488.503594][ T9815] hsr_slave_1: entered promiscuous mode [ 488.523875][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 488.544855][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 488.564556][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.564957][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.573499][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.587369][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 488.594917][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.604678][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.633018][ T9828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.647928][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.654915][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.682007][ T9828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.756635][ T5231] Bluetooth: hci1: command tx timeout [ 488.948831][ T9828] hsr_slave_0: entered promiscuous mode [ 488.958095][ T9828] hsr_slave_1: entered promiscuous mode [ 488.968295][ T9828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.977017][ T9828] Cannot create hsr debugfs directory [ 489.079829][ T5346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.107123][ T9865] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 489.130340][ T9867] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 489.218429][ T5346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.402252][ T5346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.522279][ T5346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.720700][ T9904] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 490.735159][ T9904] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.650'. [ 490.757005][ T5231] Bluetooth: hci3: command tx timeout [ 490.835976][ T5231] Bluetooth: hci1: command tx timeout [ 490.924252][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 491.162029][ T5346] bridge_slave_1: left allmulticast mode [ 491.169206][ T5346] bridge_slave_1: left promiscuous mode [ 491.174983][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.236910][ T5346] bridge_slave_0: left allmulticast mode [ 491.242665][ T5346] bridge_slave_0: left promiscuous mode [ 491.439410][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.467251][ T5346] bridge_slave_1: left allmulticast mode [ 491.511029][ T5346] bridge_slave_1: left promiscuous mode [ 491.542289][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.638957][ T5346] bridge_slave_0: left allmulticast mode [ 491.669215][ T5346] bridge_slave_0: left promiscuous mode [ 491.706982][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.119500][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.130775][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.139960][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.148306][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.158499][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 492.166275][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.840110][ T5240] Bluetooth: hci3: command tx timeout [ 492.915950][ T5240] Bluetooth: hci1: command tx timeout [ 493.102228][ T5346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.115870][ T5346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.128410][ T5346] bond0 (unregistering): Released all slaves [ 493.304374][ T5346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.316958][ T5346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.331311][ T5346] bond0 (unregistering): Released all slaves [ 493.669621][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.681354][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.689313][ T9870] bridge_slave_0: entered allmulticast mode [ 493.697133][ T9870] bridge_slave_0: entered promiscuous mode [ 493.738842][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.747990][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.755281][ T9870] bridge_slave_1: entered allmulticast mode [ 493.764752][ T9870] bridge_slave_1: entered promiscuous mode [ 493.927506][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.943831][ T9935] Bluetooth: MGMT ver 1.23 [ 493.950238][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.958171][ T9934] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 494.161498][ T9870] team0: Port device team_slave_0 added [ 494.205902][ T5231] Bluetooth: hci2: command tx timeout [ 494.257844][ T9870] team0: Port device team_slave_1 added [ 494.291827][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.303074][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.329713][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.389467][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.405791][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.431951][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.560672][ T5346] hsr_slave_0: left promiscuous mode [ 494.566763][ T5346] hsr_slave_1: left promiscuous mode [ 494.572859][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.580480][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.593998][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.603243][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.616113][ T5346] hsr_slave_0: left promiscuous mode [ 494.622348][ T5346] hsr_slave_1: left promiscuous mode [ 494.629910][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.637432][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.645317][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.653427][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.690704][ T5346] veth1_macvtap: left promiscuous mode [ 494.696490][ T5346] veth0_macvtap: left promiscuous mode [ 494.702123][ T5346] veth1_vlan: left promiscuous mode [ 494.707638][ T5346] veth0_vlan: left promiscuous mode [ 494.714011][ T5346] veth1_macvtap: left promiscuous mode [ 494.719735][ T5346] veth0_macvtap: left promiscuous mode [ 494.725394][ T5346] veth1_vlan: left promiscuous mode [ 494.738186][ T5346] veth0_vlan: left promiscuous mode [ 494.918782][ T5231] Bluetooth: hci3: command tx timeout [ 495.411570][ T5346] team0 (unregistering): Port device team_slave_1 removed [ 495.469797][ T5346] team0 (unregistering): Port device team_slave_0 removed [ 496.040313][ T5240] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 496.276146][ T5240] Bluetooth: hci2: command tx timeout [ 496.528225][ T5346] team0 (unregistering): Port device team_slave_1 removed [ 496.575298][ T5346] team0 (unregistering): Port device team_slave_0 removed [ 496.998171][ T5240] Bluetooth: hci3: command tx timeout [ 497.004660][ T9870] hsr_slave_0: entered promiscuous mode [ 497.034341][ T9870] hsr_slave_1: entered promiscuous mode [ 497.040729][ T9870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.050867][ T9870] Cannot create hsr debugfs directory [ 497.062551][ T9815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.076464][ T9815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.146850][ T9919] chnl_net:caif_netlink_parms(): no params data found [ 497.181581][ T9815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.192003][ T9815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.528989][ T9828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 497.552765][ T9828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 497.565062][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.573189][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.581400][ T9919] bridge_slave_0: entered allmulticast mode [ 497.597155][ T9919] bridge_slave_0: entered promiscuous mode [ 497.605475][ T9919] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.613197][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.620988][ T9919] bridge_slave_1: entered allmulticast mode [ 497.628367][ T9919] bridge_slave_1: entered promiscuous mode [ 497.735517][ T9828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 497.737795][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 497.800391][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.813664][ T9828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 497.858560][ T9919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.908990][ T9919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.209019][ T9919] team0: Port device team_slave_0 added [ 498.359824][ T9815] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.376483][ T5240] Bluetooth: hci2: command tx timeout [ 498.645052][ T9919] team0: Port device team_slave_1 added [ 498.859176][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.866371][ T5618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.937919][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.945180][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.039763][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.058977][ T9828] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.096922][ T9828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.107413][ T9828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.170280][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.177417][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.204887][ T9919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.244779][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.252109][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.279786][ T9919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.261305][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.268556][ T5391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.282026][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.289272][ T5391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.436262][ T5240] Bluetooth: hci2: command tx timeout [ 500.619506][ T9919] hsr_slave_0: entered promiscuous mode [ 500.643636][ T9919] hsr_slave_1: entered promiscuous mode [ 500.660649][ T9919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.675915][ T9919] Cannot create hsr debugfs directory [ 500.681780][ T9870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.727032][ T9870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.798818][ T5346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.834741][ T29] audit: type=1400 audit(1727479586.641:380): avc: denied { bind } for pid=9970 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 500.866749][ T29] audit: type=1400 audit(1727479586.641:381): avc: denied { ioctl } for pid=9970 comm="syz.2.663" path="/dev/ppp" dev="devtmpfs" ino=697 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 500.906326][ T9870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.924107][ T9870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 500.972988][ T5346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.002228][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.069830][ T5346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.228559][ T5346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.372773][ T9828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.635083][ T9815] veth0_vlan: entered promiscuous mode [ 501.804179][ T9815] veth1_vlan: entered promiscuous mode [ 502.004168][ T5346] bridge_slave_1: left allmulticast mode [ 502.011675][ T5346] bridge_slave_1: left promiscuous mode [ 502.018212][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.038980][ T5346] bridge_slave_0: left allmulticast mode [ 502.044820][ T5346] bridge_slave_0: left promiscuous mode [ 502.076403][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.903679][ T5346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.920552][ T5346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.934211][ T5346] bond0 (unregistering): Released all slaves [ 502.993735][ T9828] veth0_vlan: entered promiscuous mode [ 503.197878][ T9828] veth1_vlan: entered promiscuous mode [ 503.334480][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.353195][ T9815] veth0_macvtap: entered promiscuous mode [ 503.494261][ T5346] hsr_slave_0: left promiscuous mode [ 503.563947][ T5346] hsr_slave_1: left promiscuous mode [ 503.578046][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.585515][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.594168][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.602223][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.628486][ T5346] veth1_macvtap: left promiscuous mode [ 503.634078][ T5346] veth0_macvtap: left promiscuous mode [ 503.646746][ T5346] veth1_vlan: left promiscuous mode [ 503.652105][ T5346] veth0_vlan: left promiscuous mode [ 504.876204][ T5346] team0 (unregistering): Port device team_slave_1 removed [ 504.958159][ T5346] team0 (unregistering): Port device team_slave_0 removed [ 506.423986][ T9815] veth1_macvtap: entered promiscuous mode [ 506.535531][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.559532][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.582086][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.603092][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.633615][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.640789][ T5618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.696552][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.703727][ T5618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.725378][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.744924][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.757909][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.764284][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.790740][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.833323][ T9815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.860333][ T9815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.875284][ T9815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.884523][ T9815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.899468][ T9828] veth0_macvtap: entered promiscuous mode [ 506.961985][ T9828] veth1_macvtap: entered promiscuous mode [ 507.034914][ T9919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 507.061782][ T9919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 507.081926][ T9919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 507.126894][ T9919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 507.200226][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.212257][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.223783][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.234805][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.270240][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.354488][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.365964][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.377432][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.388624][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.405344][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.509665][ T9828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.525912][ T9828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.534823][ T9828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.545907][ T9828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.656090][ T5391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.687033][ T5391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.900634][ T5346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.912152][ T5346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.983242][ T9919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.026449][ T5346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.105359][ T5346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.133465][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.225346][ T9919] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.262691][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.271254][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.287355][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.294487][ T5391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.309989][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.317134][ T5391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.435048][ T5391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.599087][ T5391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.749099][ T5391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.854521][ T5391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.924146][ T9870] veth0_vlan: entered promiscuous mode [ 508.968648][ T9870] veth1_vlan: entered promiscuous mode [ 509.145222][ T5391] bridge_slave_1: left allmulticast mode [ 509.167123][ T5391] bridge_slave_1: left promiscuous mode [ 509.172929][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.196363][ T5391] bridge_slave_0: left allmulticast mode [ 509.202108][ T5391] bridge_slave_0: left promiscuous mode [ 509.210445][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.631202][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.643510][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.655863][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.664053][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.678500][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 509.687334][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.840978][ T5391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.853617][ T5391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.865178][ T5391] bond0 (unregistering): Released all slaves [ 509.881030][ T9870] veth0_macvtap: entered promiscuous mode [ 509.912480][ T9870] veth1_macvtap: entered promiscuous mode [ 510.044171][ T9919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.077220][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.105810][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.121444][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.133883][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.151389][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.163329][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.176379][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.237979][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.267139][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.292559][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.305495][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.322398][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.334919][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.363600][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.451046][ T9870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.480167][ T9870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.491789][ T9870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.518769][ T9870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.600645][ T5391] hsr_slave_0: left promiscuous mode [ 510.611691][ T5391] hsr_slave_1: left promiscuous mode [ 510.621232][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.629911][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.638566][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.646515][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.671817][ T5391] veth1_macvtap: left promiscuous mode [ 510.678163][ T5391] veth0_macvtap: left promiscuous mode [ 510.683898][ T5391] veth1_vlan: left promiscuous mode [ 510.690153][ T5391] veth0_vlan: left promiscuous mode [ 511.359754][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.381471][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.586995][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.603155][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.614321][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 511.623421][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.717738][ T5231] Bluetooth: hci0: command tx timeout [ 512.214229][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 512.266231][ T5391] team0 (unregistering): Port device team_slave_0 removed [ 513.068529][ T29] audit: type=1400 audit(1727479598.881:382): avc: denied { sqpoll } for pid=10106 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 513.150539][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.175897][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.298974][T10070] chnl_net:caif_netlink_parms(): no params data found [ 513.331600][ T9919] veth0_vlan: entered promiscuous mode [ 513.358706][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.375844][ T5303] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 513.402886][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.433902][ T9919] veth1_vlan: entered promiscuous mode [ 513.573731][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 513.587986][ T5303] usb 3-1: config 1 has an invalid descriptor of length 69, skipping remainder of the config [ 513.599181][ T5303] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 513.608377][ T5303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 513.626149][ T5303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 513.637524][ T5303] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 513.646686][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.677439][ T5303] hub 3-1:1.0: bad descriptor, ignoring hub [ 513.683521][ T5303] hub 3-1:1.0: probe with driver hub failed with error -5 [ 513.695945][ T5303] cdc_wdm 3-1:1.0: skipping garbage [ 513.701237][ T5303] cdc_wdm 3-1:1.0: skipping garbage [ 513.716433][ T5240] Bluetooth: hci1: command tx timeout [ 513.724878][ T5303] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 513.741301][ T5303] cdc_wdm 3-1:1.0: Unknown control protocol [ 513.773097][ T5391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.796090][ T5240] Bluetooth: hci0: command tx timeout [ 513.835262][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.844145][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.851929][T10070] bridge_slave_0: entered allmulticast mode [ 513.859331][T10070] bridge_slave_0: entered promiscuous mode [ 513.867841][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.874985][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.882506][T10070] bridge_slave_1: entered allmulticast mode [ 513.889995][T10070] bridge_slave_1: entered promiscuous mode [ 513.928056][ T9919] veth0_macvtap: entered promiscuous mode [ 513.937992][ T9919] veth1_macvtap: entered promiscuous mode [ 513.954742][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.966197][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.976374][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.987146][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.997094][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.008012][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.019983][ T9919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.059540][ T5391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.148742][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.166561][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.185105][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.199010][ T9121] usb 3-1: USB disconnect, device number 26 [ 514.209565][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.243562][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.261011][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.282263][ T9919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.334187][ T5391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.355158][T10070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.382966][T10070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.415418][ T9919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.424817][ T9919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.435250][ T9919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.446846][ T9919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.479412][ T5391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.517383][T10070] team0: Port device team_slave_0 added [ 514.538412][T10099] chnl_net:caif_netlink_parms(): no params data found [ 514.558798][T10070] team0: Port device team_slave_1 added [ 514.644698][T10070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.654481][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.692145][T10070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.762391][T10070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.775603][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.810266][T10070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.022303][T10070] hsr_slave_0: entered promiscuous mode [ 515.031899][T10070] hsr_slave_1: entered promiscuous mode [ 515.126557][ T5391] bridge_slave_1: left allmulticast mode [ 515.133697][ T5391] bridge_slave_1: left promiscuous mode [ 515.146243][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.165639][ T5391] bridge_slave_0: left allmulticast mode [ 515.178374][ T5391] bridge_slave_0: left promiscuous mode [ 515.184562][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.627578][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 515.657268][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.673463][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.683316][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.711508][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.723923][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 515.731451][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 515.762150][ T5391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.777746][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.788384][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.793628][ T5391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.797678][ T5240] Bluetooth: hci1: command tx timeout [ 515.813941][ T25] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 515.823209][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 515.831371][ T25] usb 3-1: SerialNumber: syz [ 515.834107][ T5391] bond0 (unregistering): Released all slaves [ 515.875898][ T5240] Bluetooth: hci0: command tx timeout [ 515.884672][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.903882][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.911787][T10099] bridge_slave_0: entered allmulticast mode [ 515.928514][T10099] bridge_slave_0: entered promiscuous mode [ 515.943140][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.952101][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.965975][T10099] bridge_slave_1: entered allmulticast mode [ 515.973233][T10099] bridge_slave_1: entered promiscuous mode [ 516.027485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.035436][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.067985][ T25] usb 3-1: 0:2 : does not exist [ 516.073018][ T25] usb 3-1: unit 255 not found! [ 516.112497][ T25] usb 3-1: USB disconnect, device number 27 [ 516.151143][ T9658] udevd[9658]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.250307][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.294583][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.374994][T10099] team0: Port device team_slave_0 added [ 516.387983][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.396677][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.429342][T10099] team0: Port device team_slave_1 added [ 516.501348][ T5391] hsr_slave_0: left promiscuous mode [ 516.516951][ T5391] hsr_slave_1: left promiscuous mode [ 516.526180][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.533705][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.542041][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.558002][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.601519][ T5391] veth1_macvtap: left promiscuous mode [ 516.616176][ T5391] veth0_macvtap: left promiscuous mode [ 516.621824][ T5391] veth1_vlan: left promiscuous mode [ 516.639332][ T5391] veth0_vlan: left promiscuous mode [ 517.796041][ T5240] Bluetooth: hci3: command tx timeout [ 517.905889][ T5240] Bluetooth: hci1: command tx timeout [ 517.965869][ T5240] Bluetooth: hci0: command tx timeout [ 518.524931][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 518.597904][ T5391] team0 (unregistering): Port device team_slave_0 removed [ 519.387366][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.394514][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.686983][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.946992][ T5240] Bluetooth: hci3: command tx timeout [ 519.956644][ T5231] Bluetooth: hci1: command tx timeout [ 520.151411][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.178173][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.204159][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.235522][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.601859][T10099] hsr_slave_0: entered promiscuous mode [ 520.633881][T10099] hsr_slave_1: entered promiscuous mode [ 520.652561][T10099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.664716][T10099] Cannot create hsr debugfs directory [ 521.364734][T10151] chnl_net:caif_netlink_parms(): no params data found [ 521.551073][ T5391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.749541][ T5391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.950291][ T5391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.045969][ T5231] Bluetooth: hci3: command tx timeout [ 522.145418][ T5391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.210086][T10070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 522.266191][T10070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 522.475967][T10070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.496248][T10070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 522.540875][T10151] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.557558][T10151] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.564945][T10151] bridge_slave_0: entered allmulticast mode [ 522.574021][T10151] bridge_slave_0: entered promiscuous mode [ 522.591779][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.609758][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.622128][T10151] bridge_slave_1: entered allmulticast mode [ 522.633687][T10151] bridge_slave_1: entered promiscuous mode [ 522.821416][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.875382][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.919300][ T5391] bridge_slave_1: left allmulticast mode [ 522.935771][ T5391] bridge_slave_1: left promiscuous mode [ 522.941528][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.967669][ T5391] bridge_slave_0: left allmulticast mode [ 522.973342][ T5391] bridge_slave_0: left promiscuous mode [ 522.979734][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.418842][ T5391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.430469][ T5391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.444819][ T5391] bond0 (unregistering): Released all slaves [ 523.481035][T10151] team0: Port device team_slave_0 added [ 523.514976][T10151] team0: Port device team_slave_1 added [ 523.613066][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.624100][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.650044][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.664114][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.723378][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.731781][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.762820][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.149885][ T5231] Bluetooth: hci3: command tx timeout [ 524.606647][T10151] hsr_slave_0: entered promiscuous mode [ 524.779324][T10151] hsr_slave_1: entered promiscuous mode [ 524.847532][T10151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.917929][T10151] Cannot create hsr debugfs directory [ 524.974400][T10099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 525.014405][ T5391] hsr_slave_0: left promiscuous mode [ 525.033537][ T5391] hsr_slave_1: left promiscuous mode [ 525.047822][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.055422][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.069338][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.077192][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.102798][ T5391] veth1_macvtap: left promiscuous mode [ 525.108573][ T5391] veth0_macvtap: left promiscuous mode [ 525.114206][ T5391] veth1_vlan: left promiscuous mode [ 525.120443][ T5391] veth0_vlan: left promiscuous mode [ 526.192394][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 526.237872][ T5391] team0 (unregistering): Port device team_slave_0 removed [ 526.656986][T10099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 526.667035][T10275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 526.772317][T10099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 526.941244][T10099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.979081][T10070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.890090][T10070] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.030550][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.037749][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.117401][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.124559][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.460225][T10099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.548431][T10099] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.633096][ T2537] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.640300][ T2537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.679033][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.686218][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.769145][T10151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 528.817888][T10070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.843496][T10151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.859245][T10151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.906443][T10070] veth0_vlan: entered promiscuous mode [ 528.932457][T10151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 528.957850][T10070] veth1_vlan: entered promiscuous mode [ 528.982110][T10099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 529.064987][T10070] veth0_macvtap: entered promiscuous mode [ 529.100621][T10307] input: syz0 as /devices/virtual/input/input13 [ 529.135565][T10070] veth1_macvtap: entered promiscuous mode [ 529.383709][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.445976][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.493396][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.520571][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.542700][T10070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.618616][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.648382][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.675753][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.690109][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.720646][T10070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.763984][T10070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.779159][T10070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.790413][T10070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.808968][T10070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.843722][T10151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.869583][T10099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.985220][T10151] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.114773][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.121953][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.157288][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.157297][ T5618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.157322][ T5618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.165134][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.214538][ T29] audit: type=1400 audit(1727479616.021:383): avc: denied { write } for pid=10323 comm="syz.2.692" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 530.319134][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.326268][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.343404][T10328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.364497][ T5231] Bluetooth: Frame is too long (len 16, expected len 4) [ 530.382261][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.405267][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.426268][T10099] veth0_vlan: entered promiscuous mode [ 530.510844][T10099] veth1_vlan: entered promiscuous mode [ 530.663350][T10099] veth0_macvtap: entered promiscuous mode [ 530.701933][T10099] veth1_macvtap: entered promiscuous mode [ 530.874809][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.913508][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.935240][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.955763][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.965626][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.996876][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.009945][T10099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.058234][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.071437][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.071459][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.071480][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.071498][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.071518][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.073880][T10099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.141479][T10099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.161390][T10099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.181662][T10099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.201973][T10099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.317784][T10151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.415599][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.587132][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.594991][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.647414][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.669613][ T5618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.687497][ T5618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.784572][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.858190][T10151] veth0_vlan: entered promiscuous mode [ 531.882231][T10151] veth1_vlan: entered promiscuous mode [ 531.912945][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.973173][T10151] veth0_macvtap: entered promiscuous mode [ 532.000147][T10151] veth1_macvtap: entered promiscuous mode [ 532.084595][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.105725][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.117743][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.129159][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.139477][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.150296][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.160648][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.171527][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.183650][T10151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.277995][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.295944][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.310908][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.323617][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.341134][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.352116][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.370758][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.382958][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.401983][T10151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.435568][T10151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.459065][T10151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.472808][T10151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.483017][T10151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.502949][ T52] bridge_slave_1: left allmulticast mode [ 532.511690][ T52] bridge_slave_1: left promiscuous mode [ 532.530713][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 532.540908][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.541142][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 532.557664][ T52] bridge_slave_0: left allmulticast mode [ 532.563530][ T52] bridge_slave_0: left promiscuous mode [ 532.565053][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.572534][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.583691][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.591952][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 532.604583][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.930337][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.943629][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.956570][ T52] bond0 (unregistering): Released all slaves [ 533.267040][ T5618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.283813][ T5618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.364337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.380927][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.423769][ T52] hsr_slave_0: left promiscuous mode [ 533.433615][ T52] hsr_slave_1: left promiscuous mode [ 533.447770][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.455179][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.467129][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.474581][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.523607][ T52] veth1_macvtap: left promiscuous mode [ 533.529407][ T52] veth0_macvtap: left promiscuous mode [ 533.534967][ T52] veth1_vlan: left promiscuous mode [ 533.540719][ T52] veth0_vlan: left promiscuous mode [ 534.243344][ T52] team0 (unregistering): Port device team_slave_1 removed [ 534.678624][ T5231] Bluetooth: hci0: command tx timeout [ 534.958112][ T52] team0 (unregistering): Port device team_slave_0 removed [ 534.991697][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.004212][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.013934][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.023184][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.031505][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 535.040054][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.776616][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 535.814279][T10357] chnl_net:caif_netlink_parms(): no params data found [ 536.006416][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.015004][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.030078][T10357] bridge_slave_0: entered allmulticast mode [ 536.039232][T10357] bridge_slave_0: entered promiscuous mode [ 536.058476][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.066033][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.073323][T10357] bridge_slave_1: entered allmulticast mode [ 536.085332][T10357] bridge_slave_1: entered promiscuous mode [ 536.173916][T10357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.203171][T10357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.316565][T10357] team0: Port device team_slave_0 added [ 536.355583][T10357] team0: Port device team_slave_1 added [ 536.406266][T10357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.414147][T10357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.444045][T10357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.458277][T10357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.465266][T10357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.492442][T10357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.597943][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.623312][T10368] chnl_net:caif_netlink_parms(): no params data found [ 536.671848][T10357] hsr_slave_0: entered promiscuous mode [ 536.687694][T10357] hsr_slave_1: entered promiscuous mode [ 536.738644][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.757792][ T5240] Bluetooth: hci0: command tx timeout [ 536.858088][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.975370][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.998960][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.015828][T10368] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.023089][T10368] bridge_slave_0: entered allmulticast mode [ 537.037548][T10368] bridge_slave_0: entered promiscuous mode [ 537.073625][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.082469][ T5240] Bluetooth: hci1: command tx timeout [ 537.092611][T10368] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.101867][T10368] bridge_slave_1: entered allmulticast mode [ 537.109010][T10368] bridge_slave_1: entered promiscuous mode [ 537.148700][T10368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.161916][T10368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.224553][T10368] team0: Port device team_slave_0 added [ 537.254316][T10368] team0: Port device team_slave_1 added [ 537.484288][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.529559][T10368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.551105][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.625786][T10368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.647985][T10368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.654981][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.720764][T10368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.901146][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.288934][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 538.324903][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.380151][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 538.395606][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 538.417834][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 538.427776][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 538.438563][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 538.853863][ T5231] Bluetooth: hci0: command tx timeout [ 539.156327][ T5231] Bluetooth: hci1: command tx timeout [ 539.179774][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.216550][T10368] hsr_slave_0: entered promiscuous mode [ 539.240261][T10368] hsr_slave_1: entered promiscuous mode [ 539.251188][T10368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.259011][T10368] Cannot create hsr debugfs directory [ 539.654523][T10426] usb usb8: usbfs: process 10426 (syz.2.702) did not claim interface 0 before use [ 540.338876][ T52] bridge_slave_1: left allmulticast mode [ 540.344777][ T52] bridge_slave_1: left promiscuous mode [ 540.351122][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.370816][ T52] bridge_slave_0: left allmulticast mode [ 540.376702][ T52] bridge_slave_0: left promiscuous mode [ 540.384788][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.405137][ T52] bridge_slave_1: left allmulticast mode [ 540.435013][ T52] bridge_slave_1: left promiscuous mode [ 540.453635][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.478477][ T52] bridge_slave_0: left allmulticast mode [ 540.484261][ T52] bridge_slave_0: left promiscuous mode [ 540.506005][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.526351][ T5231] Bluetooth: hci3: command tx timeout [ 540.915882][ T5231] Bluetooth: hci0: command tx timeout [ 541.235879][ T5231] Bluetooth: hci1: command tx timeout [ 541.276326][T10438] mmap: syz.2.704 (10438) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 541.293392][T10438] [ 541.295770][T10438] ====================================================== [ 541.302905][T10438] WARNING: possible circular locking dependency detected [ 541.310124][T10438] 6.11.0-syzkaller-11624-ge477dba5442c #0 Not tainted [ 541.316894][T10438] ------------------------------------------------------ [ 541.323926][T10438] syz.2.704/10438 is trying to acquire lock: [ 541.329913][T10438] ffff8880520671d0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x39c/0x2370 [ 541.340686][T10438] [ 541.340686][T10438] but task is already holding lock: [ 541.348090][T10438] ffff88807c721498 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 541.358144][T10438] [ 541.358144][T10438] which lock already depends on the new lock. [ 541.358144][T10438] [ 541.368554][T10438] [ 541.368554][T10438] the existing dependency chain (in reverse order) is: [ 541.377575][T10438] [ 541.377575][T10438] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 541.385254][T10438] down_read_killable+0x9d/0x380 [ 541.390741][T10438] lock_mm_and_find_vma+0x3a9/0x6a0 [ 541.396490][T10438] do_user_addr_fault+0x2b5/0x13f0 [ 541.402153][T10438] exc_page_fault+0x5c/0xc0 [ 541.407280][T10438] asm_exc_page_fault+0x26/0x30 [ 541.412672][T10438] fault_in_readable+0x126/0x230 [ 541.418177][T10438] fault_in_iov_iter_readable+0x101/0x2c0 [ 541.424437][T10438] generic_perform_write+0x21b/0x920 [ 541.430282][T10438] shmem_file_write_iter+0x10e/0x140 [ 541.436104][T10438] vfs_write+0x6b5/0x1140 [ 541.440976][T10438] ksys_write+0x12f/0x260 [ 541.445861][T10438] do_syscall_64+0xcd/0x250 [ 541.450911][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.457361][T10438] [ 541.457361][T10438] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 541.466097][T10438] __lock_acquire+0x250b/0x3ce0 [ 541.471501][T10438] lock_acquire+0x1b1/0x560 [ 541.476557][T10438] down_write+0x93/0x200 [ 541.481345][T10438] process_measurement+0x39c/0x2370 [ 541.487081][T10438] ima_file_mmap+0x146/0x1d0 [ 541.492205][T10438] security_mmap_file+0x8bd/0x990 [ 541.497777][T10438] __do_sys_remap_file_pages+0x526/0x900 [ 541.503949][T10438] do_syscall_64+0xcd/0x250 [ 541.509005][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.515478][T10438] [ 541.515478][T10438] other info that might help us debug this: [ 541.515478][T10438] [ 541.525715][T10438] Possible unsafe locking scenario: [ 541.525715][T10438] [ 541.533175][T10438] CPU0 CPU1 [ 541.538554][T10438] ---- ---- [ 541.543948][T10438] lock(&mm->mmap_lock); [ 541.548304][T10438] lock(&sb->s_type->i_mutex_key#12); [ 541.556318][T10438] lock(&mm->mmap_lock); [ 541.563186][T10438] lock(&sb->s_type->i_mutex_key#12); [ 541.568675][T10438] [ 541.568675][T10438] *** DEADLOCK *** [ 541.568675][T10438] [ 541.577017][T10438] 1 lock held by syz.2.704/10438: [ 541.582058][T10438] #0: ffff88807c721498 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 541.592561][T10438] [ 541.592561][T10438] stack backtrace: [ 541.598464][T10438] CPU: 1 UID: 0 PID: 10438 Comm: syz.2.704 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 541.608821][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 541.618902][T10438] Call Trace: [ 541.622188][T10438] [ 541.625126][T10438] dump_stack_lvl+0x116/0x1f0 [ 541.629834][T10438] print_circular_bug+0x419/0x5d0 [ 541.634893][T10438] check_noncircular+0x31a/0x400 [ 541.639856][T10438] ? __pfx_check_noncircular+0x10/0x10 [ 541.645339][T10438] ? register_lock_class+0xb1/0x1240 [ 541.650663][T10438] ? lockdep_lock+0xc6/0x200 [ 541.655279][T10438] ? __pfx_lockdep_lock+0x10/0x10 [ 541.660332][T10438] __lock_acquire+0x250b/0x3ce0 [ 541.665223][T10438] ? __pfx___lock_acquire+0x10/0x10 [ 541.670452][T10438] ? hlock_class+0x4e/0x130 [ 541.674985][T10438] lock_acquire+0x1b1/0x560 [ 541.679523][T10438] ? process_measurement+0x39c/0x2370 [ 541.684917][T10438] ? __pfx_lock_acquire+0x10/0x10 [ 541.689976][T10438] ? __pfx_ima_match_policy+0x10/0x10 [ 541.695392][T10438] ? __pfx___might_resched+0x10/0x10 [ 541.700696][T10438] ? hlock_class+0x4e/0x130 [ 541.705232][T10438] down_write+0x93/0x200 [ 541.709498][T10438] ? process_measurement+0x39c/0x2370 [ 541.714886][T10438] ? __pfx_down_write+0x10/0x10 [ 541.719762][T10438] process_measurement+0x39c/0x2370 [ 541.724986][T10438] ? __pfx_process_measurement+0x10/0x10 [ 541.730816][T10438] ? avc_has_perm_noaudit+0x119/0x3a0 [ 541.736216][T10438] ? __pfx_lock_release+0x10/0x10 [ 541.741272][T10438] ? __pfx___lock_acquire+0x10/0x10 [ 541.746605][T10438] ? file_map_prot_check+0x1eb/0x360 [ 541.751920][T10438] ima_file_mmap+0x146/0x1d0 [ 541.756530][T10438] ? __pfx_ima_file_mmap+0x10/0x10 [ 541.761658][T10438] ? __pfx_down_write_killable+0x10/0x10 [ 541.767310][T10438] ? preempt_schedule_thunk+0x1a/0x30 [ 541.772703][T10438] security_mmap_file+0x8bd/0x990 [ 541.777770][T10438] __do_sys_remap_file_pages+0x526/0x900 [ 541.783421][T10438] ? __pfx_do_futex+0x10/0x10 [ 541.788127][T10438] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 541.794305][T10438] ? __x64_sys_futex+0x1e1/0x4c0 [ 541.799270][T10438] ? xfd_validate_state+0x5d/0x180 [ 541.804425][T10438] do_syscall_64+0xcd/0x250 [ 541.808955][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.814889][T10438] RIP: 0033:0x7f2c9837df39 [ 541.819320][T10438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.838951][T10438] RSP: 002b:00007f2c991bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 541.847381][T10438] RAX: ffffffffffffffda RBX: 00007f2c98535f80 RCX: 00007f2c9837df39 [ 541.855385][T10438] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020491000 [ 541.863374][T10438] RBP: 00007f2c983f0216 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 541.871360][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.879346][T10438] R13: 0000000000000000 R14: 00007f2c98535f80 R15: 00007ffdbc4cd7a8 [ 541.887339][T10438] [ 542.472830][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.483228][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.493333][ T52] bond0 (unregistering): Released all slaves [ 542.584644][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.594909][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.597397][ T5231] Bluetooth: hci3: command tx timeout [ 542.612373][ T52] bond0 (unregistering): Released all slaves [ 542.632220][T10357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 543.343808][ T52] hsr_slave_0: left promiscuous mode [ 543.353972][ T52] hsr_slave_1: left promiscuous mode [ 543.362034][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.373107][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.381327][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.391690][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.402966][ T52] hsr_slave_0: left promiscuous mode [ 543.408975][ T52] hsr_slave_1: left promiscuous mode [ 543.414852][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.422343][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.435474][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.442976][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.454945][ T52] veth1_macvtap: left promiscuous mode [ 543.462804][ T52] veth0_macvtap: left promiscuous mode [ 543.468929][ T52] veth1_vlan: left promiscuous mode [ 543.474223][ T52] veth0_vlan: left promiscuous mode [ 543.482551][ T52] veth1_macvtap: left promiscuous mode [ 543.488527][ T52] veth0_macvtap: left promiscuous mode [ 543.494689][ T52] veth1_vlan: left promiscuous mode [ 543.502286][ T52] veth0_vlan: left promiscuous mode [ 543.786717][ T52] team0 (unregistering): Port device team_slave_1 removed [ 543.822451][ T52] team0 (unregistering): Port device team_slave_0 removed [ 544.119390][ T52] team0 (unregistering): Port device team_slave_1 removed [ 544.155390][ T52] team0 (unregistering): Port device team_slave_0 removed [ 545.018366][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.070950][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.111063][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.163860][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.284103][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.333019][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.382019][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.421304][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.527872][ T52] bridge_slave_1: left allmulticast mode [ 545.533598][ T52] bridge_slave_1: left promiscuous mode [ 545.541403][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.550024][ T52] bridge_slave_0: left allmulticast mode [ 545.556000][ T52] bridge_slave_0: left promiscuous mode [ 545.561766][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.578133][ T52] bridge_slave_1: left allmulticast mode [ 545.583841][ T52] bridge_slave_1: left promiscuous mode [ 545.590025][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.598606][ T52] bridge_slave_0: left allmulticast mode [ 545.604558][ T52] bridge_slave_0: left promiscuous mode [ 545.611463][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.621459][ T52] bridge_slave_1: left allmulticast mode [ 545.629564][ T52] bridge_slave_1: left promiscuous mode [ 545.635294][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.648938][ T52] bridge_slave_0: left allmulticast mode [ 545.654643][ T52] bridge_slave_0: left promiscuous mode [ 545.660497][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.670731][ T52] bridge_slave_1: left allmulticast mode [ 545.676674][ T52] bridge_slave_1: left promiscuous mode [ 545.682405][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.691921][ T52] bridge_slave_0: left allmulticast mode [ 545.697954][ T52] bridge_slave_0: left promiscuous mode [ 545.703686][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.109123][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.119292][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.132597][ T52] bond0 (unregistering): Released all slaves [ 546.141938][ T52] bond0 (unregistering): Released all slaves [ 546.152401][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.163028][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.173016][ T52] bond0 (unregistering): Released all slaves [ 546.189799][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.201674][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.212029][ T52] bond0 (unregistering): Released all slaves [ 546.224422][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.235061][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.245143][ T52] bond0 (unregistering): Released all slaves [ 546.614849][ T52] hsr_slave_0: left promiscuous mode [ 546.622026][ T52] hsr_slave_1: left promiscuous mode [ 546.630384][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.638208][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.650727][ T52] hsr_slave_0: left promiscuous mode [ 546.657315][ T52] hsr_slave_1: left promiscuous mode [ 546.668163][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.676066][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.694156][ T52] hsr_slave_0: left promiscuous mode [ 546.700788][ T52] hsr_slave_1: left promiscuous mode [ 546.716279][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.723827][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.736542][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.743997][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.756096][ T52] hsr_slave_0: left promiscuous mode [ 546.761989][ T52] hsr_slave_1: left promiscuous mode [ 546.770244][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.777940][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.787894][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.795335][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.809481][ T52] veth1_macvtap: left promiscuous mode [ 546.815216][ T52] veth0_macvtap: left promiscuous mode [ 546.821150][ T52] veth1_vlan: left promiscuous mode [ 546.828361][ T52] veth0_vlan: left promiscuous mode [ 546.834396][ T52] veth1_macvtap: left promiscuous mode [ 546.840399][ T52] veth0_macvtap: left promiscuous mode [ 546.847713][ T52] veth1_vlan: left promiscuous mode [ 546.853043][ T52] veth0_vlan: left promiscuous mode [ 547.061233][ T52] team0 (unregistering): Port device team_slave_1 removed [ 547.090508][ T52] team0 (unregistering): Port device team_slave_0 removed [ 547.321694][ T52] team0 (unregistering): Port device team_slave_1 removed [ 547.351693][ T52] team0 (unregistering): Port device team_slave_0 removed [ 547.540681][ T52] team0 (unregistering): Port device team_slave_1 removed [ 547.572066][ T52] team0 (unregistering): Port device team_slave_0 removed [ 547.800640][ T52] team0 (unregistering): Port device team_slave_1 removed [ 547.829881][ T52] team0 (unregistering): Port device team_slave_0 removed [ 547.950274][ T29] audit: type=1400 audit(1727479633.761:384): avc: denied { setrlimit } for pid=10602 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1