last executing test programs: 29.186808551s ago: executing program 0 (id=924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r2, 0x8, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 25.914045795s ago: executing program 0 (id=930): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 23.494680846s ago: executing program 0 (id=935): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.91725517s ago: executing program 4 (id=939): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x7b0740709918abc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2}]}, @enum]}}, &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'wlan1\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000940)='!A', 0x2}, {&(0x7f0000000500)="34af0994d195c410145827bc0f87a847ca3928e399f618192fad3d5d017257b7c1d60e5f6c36054b7106f9eb69a0b98d64486d4ee6a5ffdcc3b174b12016a1bbe448a7e48faa25c4a72a3559cbeca2e9b81c6fb628e6fb296b6567d7a31fe393b51fee06730bc6de787336af4d412762897555770a5ff9007eafc06336f8be2d2b3e89d4d8a06535e0b86064e551c7924fb60758ee2aadaa416f303eb4cb5b79fa160d1b0a5cbe56df634bc421dcbad57ec38a8b46dccb1631277b9bdb33fa3e73a57b3274655015335405c92800fc8b44ce7aba", 0xd4}, {&(0x7f0000000600)="d9c4d51098f6753682b38343cdeca77b8182f6cd32c635fa47ab4c88ba19278336fc5dc4fbe74487b5e243cb9dd77b6fc782d2667350f7c2131b8bbdd8a9536a003ee94a719306d9472c6974ad59a31c87e3faf762be09", 0x57}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)="1fa7", 0x2}], 0x1}}, {{&(0x7f0000000a00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001080)="5a596589baba253516d731af4173fcad733b2fb29bc9b993ca5950888d7e2d3f11869c1e39e1cc5175c4cf3fd98d1859d8cfa81668dc7e0f3b3fd684cb7145553af56d5d1ade517a3a38b4591f6126aea200cc1e92f4ea0bd3ea7773722a4b27ac28b49ef675dfc5b07eebb9c81d7f71c332556ba64daed108b8c0d639b497ac7d7246e70634ab59c45f35eff40ecaaa2fa0915ee641bbcb637ac0da3d92879767aaa82d0eb048fb228ce2340749020548c65c482ac3cc694166e614f32ad79d", 0xc0}, {&(0x7f00000004c0)="0d0a559ec23cf0588f6a4e04214ca8079ddf74a39674f371341a092f6f2eaf9d6633c4e42a7aeb69616a19ab177cddf7b638787c39fdb41edfa1", 0x3a}, {&(0x7f0000000ac0)="20e46099be32f377badbdb7d02ca962ea4d959308aa66e29608d077c335aa50c5f32b935968abf7bde35e743cbb4789ba45624349769b1152092a222c042b60e30", 0x41}, {&(0x7f0000001140)="ed737cd3ede969ff4ba9b3f4948982056767e3034aa1692e0e55a38fa089b7e8150c875770afeb3ec173a69634654aa3c03e6fa4d42a8300446be26fcd468cb893ac69cf03a759be60489593eb", 0x4d}, {&(0x7f0000001700)="d70edee95ab4b4b03853ed1dc81d437bc2ca46698d8095eb1e6e7eb0e39e247f1aa50da691038a1f22432cb153789622dd5f25104b86378b248856230cfd74042f38b8cc6efbe441b8acbe86f612ba2018b2817eec65189dfdfc30e16c70cdb008de8cbf2ac45477ad632ee52f7cd4be574f8689d7d52d618d02774da2c41e12561ccfce4d2f417e621a8fa8", 0x8c}, {&(0x7f00000017c0)="4c4432428df54ebb0d27f3cd1d41d73fff0851bb5a7b5976fd55983dabfbc4c2fae1105c701d5c7f55a00061298cf5619c0f353949d79960cf46c26a0e4dfa133cc08c9cf9da7c51aaa20a0217cbcf3b53b2cf9f52b1c13879bdefb3b71cd08484848c8fe468a36a5d8e5cc5bb3e765df59511bba50fd92c2430a59ecf8859b5cb6a288819220e0ed3125f028f1e943bd670acd51a5405f308156a952bd9973d1af4f96bbe257dbd523d", 0xaa}, {&(0x7f0000002940)="e3a9e33d708b302dc90c5d703fbb34d39553e57b38db917c2ba4ebd94f8257ee268771a162d37ee5f8ac3f55308493988c159ddc6051d9af4c0cf85cc1af6877ac8bc4fe8124b8c7f0bee9218c649fcd59dcd12867f5de0cbfa5beaccd663bdc50220c8ac1e7c8b6806783d5165763fbccde3e73c4ed7c3545e5bae01700afb989f27afa735e4a59243c3b20e4de41820eed8e1fce03acf425b3166299dcf10ee8a72b9ee32fb6fd86e2f98405471761498404d2dd714a7d889804032d358a570d40051cee35a2b0760bc52a9f446bf6ae9fc34a6911e5a98e78d877cee49a33580b5f1d324d2cd3ba8c3d1d28b5ee", 0xef}, {&(0x7f0000002a40)="7d51e2f70345c94043b57bbc00c991233afe59639d3fe9a87d01bd20118336706276e9da5b34d522cbbdb8d44f202c47dfbc8917c5eb30e054232c3da01f0b6a03336ba83c0b658e975dc4af357736b094b7816df76bb3d62c1b9fed61bcef43aea25da635034e27490ea9e287accbcee100611fc14d07a3e676598bed32ef0b42243c4365b41b990581d14739cf6c9a8e465151ada7fa9a5c674446e6de365db0d249f9e8212e529dc8235c2ce4462cffe53c9ed2f9236732797d28840c7d92f36fd025bcab4b41ef2178d365583989840d2498cbc6", 0xd6}, {&(0x7f0000002b40)="599c6ae1861bd03be62d4aa6bf0cf660662b016df8eb103bd380a35abd42ef471e3a38f3e72d6c471faacf4707500c37df282bccba7254292f208249b50601b900a42e731d9a16a8bf8ae94806e353050b5e82db50f99366f788a57f6a0d0147fb6356a4d779e1134ae51230e7fa3fb367832fccbeb4474073df41c291115997adc759da0f0e74cb88b0ed2c1ce870296abc55dc4465", 0x96}], 0x9, &(0x7f0000002cc0)=[{0xf0, 0x115, 0x4, "b61d00b04919dcf39bedf1f37c36f8b07913ba60ada4f7bb285e615bef350565dfc5e50976ef982b00fab4f2f61e17adbd936afb5b32f701c1d8e01874292dc32a86c0185567db1baa919fe113ffe0b904d52e8a1cb55698dc3d13cf170678dbcf323777fc48fba0ce10ab92dfae5a4b246b7996caaf4477a4cbfb471745456d837ce579300ad62c977f715851e1fa2b47db8e580a2a4f60cccee949903d273f8d163e772607a06b00d24e0b05e7362f86815e9f3296f52c99bf11a97ea550c97889f0bcdecf086e4e0ee3e57916e0fd89fde2d8ff469711e6eb74375cdc"}, {0xa0, 0x110, 0x40, "d1540e1269c7236c33497224ec4e2d15c56671e68aced813b5c74a69f889c2a922da6a505e19fee264e06dd331a1decccd4617a97498cf847ebd93194d34c78dedf8b8b3e53bdc167679c1f85d8f96b3d1e00d960b7869add6189db9d82c0510002a261e0cb470f554a119b7869c68b23586586c8acdebf4e170ae59f9bc4cf7d71850e84db2ab3bccc6bd4d"}, {0x58, 0x11, 0x7, "2a5bc92a6914a82d99d21d99103ba17251caa9e55f6ca9a926bae7a3d1cf0a7f37c56d82c7da500c0c1810d96b08108d98c6a0c2854aa06c31d7d0e464a15118b6"}, {0xc8, 0x1, 0x8, "7210aaa6bdc263992c8f5e72622b90fd2a04b34ed3e5b7692af7a915df1836f7ab178408e92c4339bf60b9a5b4988d8e8b55b241dde5bd82db09fd0d34551069ca72d069651ed1a61bbed30e77f4cfab69d6cea702f077c4782a52e56289d90b81ad9ad8405783ccbf31735a10c5d8e784a6800cbf4aeb8a410272e589ac7e23fa4bcaebe8bdcf805737cb47ad2b15bc98b3f0fcc2d270a69ebbf5aa218a5aa5b2bd511d04e0a6548e15a614211bad53c64e564d2c77"}], 0x2b0}}, {{&(0x7f0000001880)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002f80)="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", 0xfe}, {&(0x7f0000000980)="60abadf3de358d1b7a06a312b0d0f26ec24db4fbb5d3d6ef06704cf5672d7f730336d7fee331dabf24213838102d968f1c8c96fbeaa429333728", 0x3a}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000003080)="4591a27229023017d34473af48c2815aa1cb9654b6e9a4c8417cf1bd8772dedfbcbd85d309b01d40e1ab9609127e655c20666002e1ce21616f7fcb0d4ff96f5f38dac389d4f6de7234095180e098c933530f2ca2252fa233a1d55d44eb0cb62bd1f57f0153e31c5ae7ef6570f57bf730d99b211f3947c6e70e7bde1416a93f546bd5d4a3f053d06f52070aee", 0x8c}, {&(0x7f0000003140)="d2acaf95691e06768bc88a9245159c4bdbbb54bc87f741b2de3ae115041cebafb8ae097874bcfc4711810e4eacb422a06a41128d7aee8bb2c5193b30d770c9f32bf82557e401656ecaeff50e817652621aa9cbfcdf7be9f3e095b4262c29faf85910ac5b0bf4ee4e59dd28ce8f40c92821445f2ef3e4cd7115c69407af0bf8fb89bc4f3c9e3b09c7e684e6bd2447ca1ed13f", 0x92}], 0x5}}], 0x4, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r7, 0x0, &(0x7f0000000180)="9c", 0xfffffc24, 0x6}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000240)={0x18, r7, 0x1, 0x0, &(0x7f0000000080)=[{0x3cc5, 0x5e97}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r7, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xa, 0x8, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}, @ldst={0x3, 0x2, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x10}, @ldst={0x3, 0x1, 0x4, 0x1, 0x9, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 21.705089039s ago: executing program 0 (id=940): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r4, 0x705, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 19.885720104s ago: executing program 0 (id=942): syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1}, 0x1c) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) 17.207695144s ago: executing program 0 (id=944): r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x703, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40}]) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 16.664252822s ago: executing program 1 (id=947): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="001ef1f1e2729cb7b70400"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r2, 0x8, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r6, 0x2}}, 0x18) 14.450396328s ago: executing program 4 (id=951): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000001200)='./file1\x00', 0x110) socket$inet6(0xa, 0x4, 0x3a) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgget(0x2, 0x4c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@local, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/185) msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x800) pipe(0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) msgrcv(0x0, &(0x7f00000005c0), 0x8, 0x1, 0x3000) msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x3000) msgrcv(0x0, &(0x7f0000000580)={0x0, ""/18}, 0x1a, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.314084671s ago: executing program 2 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa20000000000ffff020000f8ffffffb703000008000000b7040000000000008500000001000000958b71cba661a12333eb30a7a2e1c9c45292cbc818385bc958149e613699898e83384b7eaaa7ce61f01160daff08e5f84fdcab91b63795f1c33703a0c8926dc289106c85c95ee561e2ef2f40673ada155b8513a7c3e3f43a95c3e23cad77d407f34b524308aa37ca33a2b631ef4eb41c4e002a1af4c98a656b88ec53e35164f60b1145e2f10d130e98a525e03758ad9d06992347cc5f19eb0e6f489e0a6926d4606239209110001d4188d9995d7949baa683e22652b0be36e9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setreuid(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r6, &(0x7f0000000300)=""/150, 0x96, 0x0) 10.136895378s ago: executing program 2 (id=954): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', r0, 0x40, 0x7a0, 0x401, 0x9642, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x64, 0x0, 0x4c, 0x29, 0x0, @private=0xa010101, @multicast2, {[@noop, @cipso={0x86, 0xb, 0x1, [{0x0, 0x5, 'yBx'}]}, @rr={0x7, 0xf, 0x9d, [@multicast1, @multicast1, @multicast2]}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(0x0, &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000004c0)="835696a3632e1555a8430f0506dcc90fa7a3d2b1715d4a0ce15d7a4dcfa3140f501a040f73908968f3a5608fb0a30c3a144cc68274969d99aafc4025ad0a81bfbdf8050db4ae6d378679b95ed8c1e734ab5a90ca78796e7339cb6e010c76245ec61f510f1738d893c29f758380c66d49a20f16ba6c0cc7ff2226abd585b27db7a3b37f93e01ec74830a16cde376414d6241dfa20fd5108e3dc75ceb231d94c1109b1cd6d931e3605776edaa849624064e2", 0xb1, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3}) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper}, @my=0x1, 0x0, 0x0, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x18603}) close_range(r3, 0xffffffffffffffff, 0x0) 10.031892174s ago: executing program 4 (id=955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b", 0x41}], 0x1}, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) splice(r3, 0x0, r4, 0x0, 0xe8, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000002c0)="b07e3fb72995c8966ec5ccbe7e0e3d61e28ca7dd6cbd7a812468cd4e83b1408031497b554c544d", 0x27}], 0x1, 0x4, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f5", 0x23, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 8.946334519s ago: executing program 4 (id=956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) shmat(0xffffffffffffffff, &(0x7f0000251000/0x4000)=nil, 0x3000) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) shutdown(r5, 0x1) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 8.250103057s ago: executing program 2 (id=957): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) 8.215609858s ago: executing program 1 (id=958): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) io_uring_setup(0x0, &(0x7f0000000080)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 8.191810546s ago: executing program 3 (id=959): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x8, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 6.47097088s ago: executing program 2 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80585414, &(0x7f00000000c0)) syz_open_dev$vivid(0x0, 0x1, 0x2) 6.468556136s ago: executing program 1 (id=962): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) shmat(0xffffffffffffffff, &(0x7f0000251000/0x4000)=nil, 0x3000) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r6, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) shutdown(r6, 0x1) 4.980213353s ago: executing program 1 (id=963): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 4.934015957s ago: executing program 2 (id=964): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(r2, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') close_range(r0, 0xffffffffffffffff, 0x0) 4.911805372s ago: executing program 3 (id=965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7fff0200}]}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0) dup(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 3.685678932s ago: executing program 3 (id=966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b", 0x41}], 0x1}, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) splice(r3, 0x0, r4, 0x0, 0xe8, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000002c0)="b07e3fb72995c8966ec5ccbe7e0e3d61e28ca7dd6cbd7a812468cd4e83b1408031497b554c544d", 0x27}, {0x0}], 0x2, 0x4, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f5", 0x23, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.553051368s ago: executing program 3 (id=967): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x1405, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000580)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) fstat(r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setfsgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) fcntl$getown(r2, 0x9) 2.194467835s ago: executing program 1 (id=968): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000001200)='./file1\x00', 0x110) socket$inet6(0xa, 0x4, 0x3a) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgget(0x2, 0x4c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@local, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) msgget$private(0x0, 0x0) r3 = msgget(0x1, 0x2b0) msgrcv(r1, 0x0, 0x0, 0x2, 0x800) pipe(0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) msgrcv(0x0, &(0x7f00000005c0), 0x8, 0x1, 0x3000) msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x3000) msgrcv(0x0, &(0x7f0000000580)={0x0, ""/18}, 0x1a, 0x2, 0x0) msgctl$IPC_RMID(r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.249472195s ago: executing program 4 (id=969): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x14, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x0, 0x0) 1.150853709s ago: executing program 3 (id=970): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) 144.896885ms ago: executing program 2 (id=971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x8, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 125.554345ms ago: executing program 4 (id=972): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) shmat(0xffffffffffffffff, &(0x7f0000251000/0x4000)=nil, 0x3000) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r6, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) shutdown(r6, 0x1) 108.746621ms ago: executing program 1 (id=973): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3ffffffffffffd2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=974): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x8, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): sadm_t tclass=xdp_socket permissive=1 [ 208.660046][ T29] audit: type=1400 audit(1726640077.211:233): avc: denied { setopt } for pid=6289 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.860688][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.933637][ T5279] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 208.988920][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.081838][ T5279] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 209.110587][ T29] audit: type=1400 audit(1726640077.751:234): avc: denied { bind } for pid=6289 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.113050][ T5279] microsoft 0003:045E:07DA.0001: no inputs found [ 209.238835][ T5279] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 209.358172][ T47] usb 4-1: USB disconnect, device number 3 [ 211.553466][ T29] audit: type=1400 audit(1726640080.091:235): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 213.874466][ T6327] hub 6-0:1.0: USB hub found [ 213.888812][ T6327] hub 6-0:1.0: 1 port detected [ 219.826761][ T29] audit: type=1400 audit(1726640088.451:236): avc: denied { create } for pid=6355 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.627522][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.664147][ T29] audit: type=1400 audit(1726640088.461:237): avc: denied { bind } for pid=6355 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.878495][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 221.047134][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.788668][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.815415][ T47] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.908550][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.958955][ T47] usb 4-1: config 0 descriptor?? [ 223.197460][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 223.205858][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.217814][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.227370][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.288959][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 223.418524][ T47] usb 4-1: USB disconnect, device number 4 [ 223.474170][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.483313][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.491552][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.689415][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 224.892790][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 225.181002][ T5623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.584139][ T5241] Bluetooth: hci0: command tx timeout [ 227.787988][ T5241] Bluetooth: hci0: command tx timeout [ 227.975685][ T5623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.825623][ T5623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.158568][ T29] audit: type=1400 audit(1726640097.781:238): avc: denied { ioctl } for pid=6426 comm="syz.1.259" path="socket:[11279]" dev="sockfs" ino=11279 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.169198][ T5623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.248023][ T29] audit: type=1400 audit(1726640097.891:239): avc: denied { ioctl } for pid=6426 comm="syz.1.259" path="socket:[11285]" dev="sockfs" ino=11285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.359322][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.528646][ T5222] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 229.736139][ T5222] usb 3-1: Using ep0 maxpacket: 16 [ 229.781104][ T5222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.798780][ T5241] Bluetooth: hci0: command tx timeout [ 229.828746][ T5222] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.841974][ T5222] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 229.853785][ T5222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.965269][ T5222] usb 3-1: config 0 descriptor?? [ 230.229693][ T5623] bridge_slave_1: left allmulticast mode [ 230.235428][ T5623] bridge_slave_1: left promiscuous mode [ 230.249819][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.328797][ T5623] bridge_slave_0: left allmulticast mode [ 230.345020][ T5623] bridge_slave_0: left promiscuous mode [ 230.381776][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.424280][ T5222] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 230.449043][ T5222] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 230.468172][ T5222] microsoft 0003:045E:07DA.0002: no inputs found [ 230.474768][ T5222] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 231.568632][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.652504][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.879064][ T5241] Bluetooth: hci0: command tx timeout [ 232.080856][ T47] usb 3-1: USB disconnect, device number 3 [ 232.988776][ T6467] hub 6-0:1.0: USB hub found [ 232.994893][ T6467] hub 6-0:1.0: 1 port detected [ 235.055684][ T5623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.133572][ T5623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.244008][ T5623] bond0 (unregistering): Released all slaves [ 235.542328][ T6490] netlink: 'syz.2.272': attribute type 9 has an invalid length. [ 235.571962][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 235.596855][ T6490] netlink: 134688 bytes leftover after parsing attributes in process `syz.2.272'. [ 236.370770][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.389317][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.396884][ T6374] bridge_slave_0: entered allmulticast mode [ 236.413296][ T6374] bridge_slave_0: entered promiscuous mode [ 236.855518][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.891680][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.933271][ T6374] bridge_slave_1: entered allmulticast mode [ 237.017443][ T6374] bridge_slave_1: entered promiscuous mode [ 237.201664][ T5623] hsr_slave_0: left promiscuous mode [ 237.227810][ T5623] hsr_slave_1: left promiscuous mode [ 237.252794][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.265870][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.328570][ T5222] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 237.365511][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.413538][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.548554][ T5222] usb 2-1: device descriptor read/64, error -71 [ 237.577893][ T5623] veth1_macvtap: left promiscuous mode [ 237.627487][ T5623] veth0_macvtap: left promiscuous mode [ 237.676599][ T5623] veth1_vlan: left promiscuous mode [ 237.742989][ T5623] veth0_vlan: left promiscuous mode [ 237.889288][ T56] Bluetooth: hci5: command 0x0406 tx timeout [ 237.898726][ T5222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 238.463631][ T5222] usb 2-1: device descriptor read/64, error -71 [ 238.701450][ T5222] usb usb2-port1: attempt power cycle [ 238.978649][ T29] audit: type=1400 audit(1726640107.251:240): avc: denied { create } for pid=6528 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.262649][ T29] audit: type=1400 audit(1726640107.311:241): avc: denied { accept } for pid=6528 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.553542][ T5222] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 239.629299][ T5222] usb 2-1: device descriptor read/8, error -71 [ 239.925839][ T5222] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 239.969599][ T5222] usb 2-1: device descriptor read/8, error -71 [ 240.104981][ T5222] usb usb2-port1: unable to enumerate USB device [ 240.212892][ T941] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 240.563796][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 240.585519][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.617763][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.640410][ T941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.678953][ T941] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.689418][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.751678][ T941] usb 4-1: config 0 descriptor?? [ 240.889155][ T5623] team0 (unregistering): Port device team_slave_1 removed [ 241.059449][ T5623] team0 (unregistering): Port device team_slave_0 removed [ 241.364930][ T941] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 241.430085][ T941] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 241.488534][ T941] microsoft 0003:045E:07DA.0003: no inputs found [ 241.505846][ T941] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 241.605981][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.635155][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.052438][ T5278] usb 4-1: USB disconnect, device number 5 [ 242.681119][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.806613][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.313380][ T6374] team0: Port device team_slave_0 added [ 244.405010][ T6374] team0: Port device team_slave_1 added [ 244.538024][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.545573][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.579243][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.623022][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.632072][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.669160][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.672029][ T5222] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 244.883228][ T5222] usb 2-1: device descriptor read/64, error -71 [ 244.990000][ T6374] hsr_slave_0: entered promiscuous mode [ 245.043014][ T6374] hsr_slave_1: entered promiscuous mode [ 245.075486][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.107534][ T6374] Cannot create hsr debugfs directory [ 245.198500][ T5222] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.379215][ T5222] usb 2-1: device descriptor read/64, error -71 [ 245.867272][ T5222] usb usb2-port1: attempt power cycle [ 250.759909][ T6641] hub 6-0:1.0: USB hub found [ 250.765935][ T6641] hub 6-0:1.0: 1 port detected [ 254.437143][ T6656] hub 6-0:1.0: USB hub found [ 254.443627][ T6656] hub 6-0:1.0: 1 port detected [ 256.403421][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.409873][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.208354][ T6675] hub 6-0:1.0: USB hub found [ 257.218567][ T6675] hub 6-0:1.0: 1 port detected [ 258.508718][ T5279] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 258.583301][ T6374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.654998][ T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.664714][ T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.685398][ T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.700656][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.717668][ T56] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.737837][ T5279] usb 5-1: device descriptor read/64, error -71 [ 258.746910][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.780878][ T6374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.869355][ T6374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.979469][ T6374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.050573][ T5279] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 259.238534][ T5279] usb 5-1: device descriptor read/64, error -71 [ 259.402739][ T5279] usb usb5-port1: attempt power cycle [ 259.487142][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.704430][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.838552][ T5279] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 259.899154][ T5279] usb 5-1: device descriptor read/8, error -71 [ 259.902341][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.188989][ T5279] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 260.200745][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.239592][ T5279] usb 5-1: device descriptor read/8, error -71 [ 260.391884][ T5279] usb usb5-port1: unable to enumerate USB device [ 260.427053][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.472800][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 260.741155][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.838750][ T5241] Bluetooth: hci2: command tx timeout [ 260.951201][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.958492][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.159084][ T54] bridge_slave_1: left allmulticast mode [ 261.189705][ T54] bridge_slave_1: left promiscuous mode [ 261.208931][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.248333][ T54] bridge_slave_0: left allmulticast mode [ 261.298686][ T54] bridge_slave_0: left promiscuous mode [ 261.316988][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.918705][ T5241] Bluetooth: hci2: command tx timeout [ 262.950087][ T29] audit: type=1400 audit(1726640131.571:242): avc: denied { setopt } for pid=6745 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.319944][ T29] audit: type=1400 audit(1726640131.931:243): avc: denied { write } for pid=6754 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.635377][ T29] audit: type=1400 audit(1726640131.931:244): avc: denied { connect } for pid=6754 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.122017][ T29] audit: type=1400 audit(1726640131.931:245): avc: denied { name_connect } for pid=6754 comm="syz.3.323" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 264.864321][ T29] audit: type=1400 audit(1726640133.511:246): avc: denied { mounton } for pid=6769 comm="syz.1.325" path="/72/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.889210][ T6777] syz.1.325: attempt to access beyond end of device [ 264.889210][ T6777] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 264.916987][ T6777] FAT-fs (loop1): unable to read boot sector [ 265.003632][ T5241] Bluetooth: hci2: command tx timeout [ 265.501513][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.588023][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.662556][ T54] bond0 (unregistering): Released all slaves [ 265.725618][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.755693][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.783794][ T6683] bridge_slave_0: entered allmulticast mode [ 265.834189][ T6683] bridge_slave_0: entered promiscuous mode [ 266.708783][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.788643][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.795943][ T6683] bridge_slave_1: entered allmulticast mode [ 266.855239][ T6683] bridge_slave_1: entered promiscuous mode [ 266.984862][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.992175][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.078523][ T5241] Bluetooth: hci2: command tx timeout [ 267.658549][ T5279] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 267.890869][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.901584][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 267.953323][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.998171][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.044629][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.170009][ T5279] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.295238][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.443009][ T5279] usb 2-1: config 0 descriptor?? [ 268.914484][ T5279] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 269.011915][ T5279] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 269.074589][ T5279] microsoft 0003:045E:07DA.0004: no inputs found [ 269.145247][ T5279] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 269.240141][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.348881][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.440310][ T54] hsr_slave_0: left promiscuous mode [ 269.546388][ T54] hsr_slave_1: left promiscuous mode [ 269.565629][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.598525][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.640066][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.688155][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.262131][ T54] veth1_macvtap: left promiscuous mode [ 270.340376][ T54] veth0_macvtap: left promiscuous mode [ 270.425760][ T54] veth1_vlan: left promiscuous mode [ 270.466019][ T54] veth0_vlan: left promiscuous mode [ 270.944497][ T5284] usb 2-1: USB disconnect, device number 9 [ 272.204589][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 272.327844][ T54] team0 (unregistering): Port device team_slave_1 removed [ 272.385922][ T54] team0 (unregistering): Port device team_slave_0 removed [ 272.830898][ T6683] team0: Port device team_slave_0 added [ 272.846461][ T6683] team0: Port device team_slave_1 added [ 272.905957][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.105522][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.125110][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.188010][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.249454][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.271076][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.421229][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.562290][ T6845] hub 6-0:1.0: USB hub found [ 273.568299][ T6845] hub 6-0:1.0: 1 port detected [ 274.127251][ T6683] hsr_slave_0: entered promiscuous mode [ 274.180226][ T6683] hsr_slave_1: entered promiscuous mode [ 274.303837][ T6683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.322033][ T6683] Cannot create hsr debugfs directory [ 275.689604][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.018646][ T5279] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 276.219059][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 276.256835][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.320281][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.348007][ T6374] veth0_vlan: entered promiscuous mode [ 276.352066][ T5279] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.018210][ T6374] veth1_vlan: entered promiscuous mode [ 277.178479][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.204099][ T5279] usb 2-1: config 0 descriptor?? [ 277.224958][ T6374] veth0_macvtap: entered promiscuous mode [ 277.309661][ T6374] veth1_macvtap: entered promiscuous mode [ 277.467514][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.501206][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.524768][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.535782][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.555077][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.575421][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.752589][ T5279] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 277.784941][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.786553][ T5279] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 277.809876][ T5279] microsoft 0003:045E:07DA.0005: no inputs found [ 277.816651][ T5279] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 277.863565][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.903909][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.915303][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.952270][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.986316][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.010434][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.035714][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.058345][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.075316][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.137234][ T6374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.157881][ T6374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.171963][ T6374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.191592][ T6374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.527689][ T6683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.618102][ T6683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.670823][ T6683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.727233][ T6683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.965426][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.007200][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.365438][ T2523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.389301][ T2523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.576597][ T5222] usb 2-1: USB disconnect, device number 10 [ 279.821463][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.162540][ T6683] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.966279][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.973554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.109869][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.117129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.361657][ T6683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.475974][ T6921] hub 6-0:1.0: USB hub found [ 281.482179][ T6921] hub 6-0:1.0: 1 port detected [ 282.646650][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.660844][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.670905][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.681190][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.698468][ T56] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.707969][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.545518][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.674843][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.843940][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.937789][ T29] audit: type=1400 audit(1726640152.571:247): avc: denied { rename } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.184064][ T29] audit: type=1400 audit(1726640152.571:248): avc: denied { unlink } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.224979][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.238125][ T29] audit: type=1400 audit(1726640152.641:249): avc: denied { create } for pid=4655 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.396000][ T6683] veth0_vlan: entered promiscuous mode [ 284.449875][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.613719][ T6683] veth1_vlan: entered promiscuous mode [ 284.722443][ T6927] chnl_net:caif_netlink_parms(): no params data found [ 284.758901][ T56] Bluetooth: hci0: command tx timeout [ 284.928707][ T5276] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 284.960690][ T6683] veth0_macvtap: entered promiscuous mode [ 285.003208][ T12] bridge_slave_1: left allmulticast mode [ 285.015764][ T12] bridge_slave_1: left promiscuous mode [ 285.034061][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.091996][ T12] bridge_slave_0: left allmulticast mode [ 285.110632][ T12] bridge_slave_0: left promiscuous mode [ 285.123023][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.148841][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 285.185433][ T29] audit: type=1400 audit(1726640153.831:250): avc: denied { sqpoll } for pid=6951 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 285.229394][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.260064][ T29] audit: type=1400 audit(1726640153.901:251): avc: denied { create } for pid=6951 comm="syz.4.359" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 285.278759][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.331297][ T5276] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.367399][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.407449][ T5276] usb 2-1: config 0 descriptor?? [ 285.414768][ T6960] netlink: 'syz.3.360': attribute type 9 has an invalid length. [ 285.437751][ T6960] netlink: 134688 bytes leftover after parsing attributes in process `syz.3.360'. [ 286.726823][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.744301][ T5276] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 286.798106][ T5276] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 286.828510][ T5276] microsoft 0003:045E:07DA.0006: no inputs found [ 286.838659][ T56] Bluetooth: hci0: command tx timeout [ 286.840879][ T5276] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 286.886837][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.053078][ T47] usb 2-1: USB disconnect, device number 11 [ 288.675927][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.712000][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.764516][ T12] bond0 (unregistering): Released all slaves [ 288.829517][ T6683] veth1_macvtap: entered promiscuous mode [ 288.997634][ T56] Bluetooth: hci0: command tx timeout [ 290.173791][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.205123][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.253559][ T6927] bridge_slave_0: entered allmulticast mode [ 290.285382][ T6927] bridge_slave_0: entered promiscuous mode [ 290.367959][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.415868][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.446355][ T6927] bridge_slave_1: entered allmulticast mode [ 290.479844][ T6927] bridge_slave_1: entered promiscuous mode [ 290.726407][ T6927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.751755][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.765696][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.778151][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.790569][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.819391][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.844175][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.868491][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.055274][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.081608][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.108316][ T56] Bluetooth: hci0: command tx timeout [ 291.759702][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.898252][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.927881][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.987820][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.163993][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.286085][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.410245][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.526244][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.987234][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.063264][ T12] hsr_slave_0: left promiscuous mode [ 293.084140][ T12] hsr_slave_1: left promiscuous mode [ 293.129974][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.152365][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.295622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.407357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.774109][ T12] veth1_macvtap: left promiscuous mode [ 293.883183][ T12] veth0_macvtap: left promiscuous mode [ 293.908899][ T12] veth1_vlan: left promiscuous mode [ 293.914389][ T12] veth0_vlan: left promiscuous mode [ 295.357390][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 295.434773][ T12] team0 (unregistering): Port device team_slave_1 removed [ 295.501516][ T12] team0 (unregistering): Port device team_slave_0 removed [ 296.248122][ T6927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.487925][ T6927] team0: Port device team_slave_0 added [ 296.506346][ T6683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.536702][ T6683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.571084][ T6683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.583484][ T6683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.643045][ T6927] team0: Port device team_slave_1 added [ 296.736628][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.752376][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.792818][ T6927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.893290][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.915946][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.000579][ T6927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.524524][ T6927] hsr_slave_0: entered promiscuous mode [ 297.559090][ T6927] hsr_slave_1: entered promiscuous mode [ 297.608630][ T6927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.637808][ T6927] Cannot create hsr debugfs directory [ 297.722382][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.784069][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.023459][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.067014][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.179069][ T7114] hub 6-0:1.0: USB hub found [ 302.192591][ T7114] hub 6-0:1.0: 1 port detected [ 302.442571][ T6927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.504578][ T6927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.583267][ T6927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.711461][ T6927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.336486][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.457514][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.508210][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.515514][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.588741][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.595947][ T2508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.944202][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.068539][ T5300] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.153294][ T6927] veth0_vlan: entered promiscuous mode [ 306.202086][ T6927] veth1_vlan: entered promiscuous mode [ 306.278501][ T5300] usb 5-1: Using ep0 maxpacket: 16 [ 306.284638][ T6927] veth0_macvtap: entered promiscuous mode [ 306.301558][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.356634][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.421058][ T5300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.486562][ T5300] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 306.544411][ T6927] veth1_macvtap: entered promiscuous mode [ 306.562367][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.601488][ T5300] usb 5-1: config 0 descriptor?? [ 306.711448][ T7180] hub 6-0:1.0: USB hub found [ 306.718853][ T7180] hub 6-0:1.0: 1 port detected [ 307.185674][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.277671][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.333341][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.393232][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.584517][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.678495][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.743436][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.793420][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.807922][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.965503][ T5300] usbhid 5-1:0.0: can't add hid device: -71 [ 307.967837][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.000150][ T5300] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 308.046377][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.047786][ T5300] usb 5-1: USB disconnect, device number 10 [ 308.091669][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.132447][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.158882][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.180782][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.233901][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.260368][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.460268][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.483597][ T6927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.518849][ T6927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.527816][ T6927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.263974][ T6927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.112289][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.154975][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.399228][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.456029][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.608504][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 314.779194][ T25] usb 2-1: device descriptor read/64, error -71 [ 315.060842][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 315.402478][ T25] usb 2-1: device descriptor read/64, error -71 [ 315.410823][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 316.264375][ T25] usb usb2-port1: attempt power cycle [ 316.678563][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 316.737519][ T29] audit: type=1400 audit(1726640185.381:252): avc: denied { bind } for pid=7280 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.104294][ T25] usb 2-1: device not accepting address 14, error -71 [ 317.108483][ T29] audit: type=1400 audit(1726640185.741:253): avc: denied { write } for pid=7280 comm="syz.2.428" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.398772][ T29] audit: type=1400 audit(1726640185.751:254): avc: denied { open } for pid=7280 comm="syz.2.428" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.829984][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.836495][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.849980][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 319.810041][ T7291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.092193][ T7366] fuse: Unknown parameter 'fd0x0000000000000007' [ 324.651200][ T7368] sched: RT throttling activated [ 328.312324][ T7409] hub 6-0:1.0: USB hub found [ 328.318501][ T7409] hub 6-0:1.0: 1 port detected [ 329.418968][ T7417] fuse: Unknown parameter 'fd0x0000000000000007' [ 337.771580][ T7479] hub 6-0:1.0: USB hub found [ 337.779308][ T7479] hub 6-0:1.0: 1 port detected [ 344.678741][ T5279] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 344.686923][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 344.839318][ T5279] usb 2-1: device descriptor read/64, error -32 [ 345.427282][ T7521] fuse: Unknown parameter 'fd0x0000000000000007' [ 346.762646][ T5279] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 347.429120][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 347.689128][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 352.585398][ T7566] fuse: Unknown parameter 'fd0x0000000000000007' [ 353.278564][ T5300] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 353.502614][ T5300] usb 5-1: Using ep0 maxpacket: 16 [ 353.525233][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.552324][ T5300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.765013][ T5300] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.789395][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.629348][ T5300] usb 5-1: config 0 descriptor?? [ 355.124594][ T5300] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 355.149055][ T5300] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 355.160829][ T5300] microsoft 0003:045E:07DA.0007: no inputs found [ 355.168550][ T5300] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 355.748355][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.760448][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.770220][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.782494][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.792319][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 355.805343][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.432239][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.549748][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.922515][ T5300] usb 5-1: USB disconnect, device number 11 [ 357.391185][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.803754][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.129935][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.447703][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.518570][ T5241] Bluetooth: hci1: command tx timeout [ 358.730859][ T7585] chnl_net:caif_netlink_parms(): no params data found [ 359.639560][ T7624] fuse: Unknown parameter 'fd0x0000000000000007' [ 360.209240][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.254743][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.318201][ T7585] bridge_slave_0: entered allmulticast mode [ 360.372175][ T7585] bridge_slave_0: entered promiscuous mode [ 360.410588][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.417784][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.479083][ T7585] bridge_slave_1: entered allmulticast mode [ 360.507101][ T7585] bridge_slave_1: entered promiscuous mode [ 360.616716][ T5241] Bluetooth: hci1: command tx timeout [ 362.678545][ T5241] Bluetooth: hci1: command tx timeout [ 362.810949][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.060357][ T53] bridge_slave_1: left allmulticast mode [ 363.263031][ T53] bridge_slave_1: left promiscuous mode [ 363.366618][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.428028][ T53] bridge_slave_0: left allmulticast mode [ 363.438590][ T53] bridge_slave_0: left promiscuous mode [ 363.518151][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 363.862330][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.789231][ T5241] Bluetooth: hci1: command tx timeout [ 366.982926][ T7681] fuse: Unknown parameter 'fd0x0000000000000007' [ 376.152980][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.194941][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.232128][ T53] bond0 (unregistering): Released all slaves [ 376.265622][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.762670][ T7725] befs: Unrecognized mount option "¼]<…±‚s_úï4÷ËœrÝÚ3wS1y³›ÏCl* º©]ûÇŽ Ê–ðb"§eÌ#(r’«" or missing value [ 376.814555][ T7725] befs: (nullb0): cannot parse mount options [ 377.254374][ T7733] fuse: Unknown parameter 'fd0x0000000000000007' [ 379.279952][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.286302][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.419531][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.431773][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.440532][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.450892][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.469354][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 379.484160][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.013446][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 386.019748][ T56] Bluetooth: hci0: command tx timeout [ 386.203485][ T7585] team0: Port device team_slave_0 added [ 386.317886][ T7585] team0: Port device team_slave_1 added [ 386.569881][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.594049][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.627918][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.815152][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.849197][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.950300][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.176668][ T53] hsr_slave_0: left promiscuous mode [ 387.193719][ T53] hsr_slave_1: left promiscuous mode [ 387.225517][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.257202][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.298044][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.347600][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.474468][ T53] veth1_macvtap: left promiscuous mode [ 387.505618][ T53] veth0_macvtap: left promiscuous mode [ 387.522753][ T53] veth1_vlan: left promiscuous mode [ 387.536310][ T53] veth0_vlan: left promiscuous mode [ 388.125752][ T5241] Bluetooth: hci0: command tx timeout [ 390.199045][ T5241] Bluetooth: hci0: command tx timeout [ 392.324615][ T5241] Bluetooth: hci0: command tx timeout [ 394.455178][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 394.487571][ T53] team0 (unregistering): Port device team_slave_1 removed [ 394.593174][ T53] team0 (unregistering): Port device team_slave_0 removed [ 396.307133][ T29] audit: type=1400 audit(1726640264.951:255): avc: denied { read } for pid=7844 comm="syz.2.550" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 396.409804][ T29] audit: type=1400 audit(1726640265.011:256): avc: denied { ioctl } for pid=7844 comm="syz.2.550" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 396.462666][ T7585] hsr_slave_0: entered promiscuous mode [ 396.500933][ T7585] hsr_slave_1: entered promiscuous mode [ 396.511749][ T7585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.524655][ T7585] Cannot create hsr debugfs directory [ 399.118642][ T7747] chnl_net:caif_netlink_parms(): no params data found [ 399.214931][ T7885] fuse: Unknown parameter 'fd0x0000000000000007' [ 400.637888][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 400.712095][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.820203][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.489701][ T7923] fuse: Unknown parameter 'fd0x0000000000000007' [ 404.125527][ T29] audit: type=1400 audit(1726640272.761:257): avc: denied { create } for pid=7918 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 404.233755][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.550965][ T29] audit: type=1400 audit(1726640272.761:258): avc: denied { setopt } for pid=7918 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 404.679994][ T29] audit: type=1400 audit(1726640272.761:259): avc: denied { connect } for pid=7918 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 404.732001][ T29] audit: type=1400 audit(1726640272.761:260): avc: denied { name_connect } for pid=7918 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 407.375358][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.452256][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.462752][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.508858][ T7747] bridge_slave_0: entered allmulticast mode [ 407.520492][ T7747] bridge_slave_0: entered promiscuous mode [ 407.523039][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 407.535918][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.545583][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.563756][ T7747] bridge_slave_1: entered allmulticast mode [ 407.584743][ T7747] bridge_slave_1: entered promiscuous mode [ 408.743168][ T7747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.861636][ T7747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.381220][ T7965] fuse: Unknown parameter 'fd0x0000000000000007' [ 412.521127][ T7747] team0: Port device team_slave_0 added [ 412.747663][ T7747] team0: Port device team_slave_1 added [ 413.054725][ T53] bridge_slave_1: left allmulticast mode [ 413.075656][ T53] bridge_slave_1: left promiscuous mode [ 413.098328][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.126789][ T53] bridge_slave_0: left allmulticast mode [ 413.140010][ T53] bridge_slave_0: left promiscuous mode [ 413.160191][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.759426][ T5276] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 413.800031][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.852799][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.861740][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.929179][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.937365][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.945988][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.978966][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 414.001538][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.028503][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.042516][ T5276] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.052155][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.816598][ T5276] usb 3-1: config 0 descriptor?? [ 415.776737][ T5276] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 415.796256][ T5276] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 415.918257][ T5276] microsoft 0003:045E:07DA.0008: no inputs found [ 415.982143][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.049858][ T5234] Bluetooth: hci5: command tx timeout [ 416.056746][ T5276] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 416.126722][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.245830][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.326097][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.365478][ T53] bond0 (unregistering): Released all slaves [ 416.429861][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.447143][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.494112][ T7747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.657753][ T5276] usb 3-1: USB disconnect, device number 4 [ 416.810732][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.841925][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.878806][ T7747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.298470][ T53] hsr_slave_0: left promiscuous mode [ 417.335802][ T53] hsr_slave_1: left promiscuous mode [ 417.360141][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.368003][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.426085][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.448510][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.523747][ T53] veth1_macvtap: left promiscuous mode [ 417.536773][ T53] veth0_macvtap: left promiscuous mode [ 417.551415][ T53] veth1_vlan: left promiscuous mode [ 417.564884][ T53] veth0_vlan: left promiscuous mode [ 417.656906][ T8015] netlink: 'syz.4.585': attribute type 9 has an invalid length. [ 417.669128][ T8015] netlink: 91148 bytes leftover after parsing attributes in process `syz.4.585'. [ 417.945269][ T29] audit: type=1400 audit(1726640286.591:261): avc: denied { unmount } for pid=6683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 418.148684][ T5234] Bluetooth: hci5: command tx timeout [ 420.199111][ T5234] Bluetooth: hci5: command tx timeout [ 422.326746][ T5234] Bluetooth: hci5: command tx timeout [ 423.062319][ T53] team0 (unregistering): Port device team_slave_1 removed [ 423.322380][ T53] team0 (unregistering): Port device team_slave_0 removed [ 425.936816][ T7747] hsr_slave_0: entered promiscuous mode [ 425.953897][ T7747] hsr_slave_1: entered promiscuous mode [ 425.972365][ T7747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.008482][ T7747] Cannot create hsr debugfs directory [ 426.099857][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 430.300370][ T8111] SELinux: Context : is not valid (left unmapped). [ 430.351734][ T29] audit: type=1400 audit(1726640298.981:262): avc: denied { relabelto } for pid=8108 comm="syz.2.607" name="rdma.current" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 430.455287][ T29] audit: type=1400 audit(1726640298.981:263): avc: denied { associate } for pid=8108 comm="syz.2.607" name="rdma.current" dev="tmpfs" ino=376 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 430.549408][ T7980] chnl_net:caif_netlink_parms(): no params data found [ 434.482425][ T29] audit: type=1400 audit(1726640303.121:264): avc: denied { unlink } for pid=6683 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 436.412266][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.424500][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.434036][ T7980] bridge_slave_0: entered allmulticast mode [ 436.448582][ T7980] bridge_slave_0: entered promiscuous mode [ 436.458158][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.239359][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.246635][ T7980] bridge_slave_1: entered allmulticast mode [ 437.306392][ T7980] bridge_slave_1: entered promiscuous mode [ 437.491929][ T53] bridge_slave_1: left allmulticast mode [ 437.520303][ T53] bridge_slave_1: left promiscuous mode [ 437.549306][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.592903][ T53] bridge_slave_0: left allmulticast mode [ 437.668704][ T53] bridge_slave_0: left promiscuous mode [ 437.705951][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.205552][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.324026][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.444041][ T53] bond0 (unregistering): Released all slaves [ 438.539633][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.556663][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.568153][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.579730][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.588236][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 438.596391][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.831005][ T7980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.050223][ T7980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.260348][ T53] hsr_slave_0: left promiscuous mode [ 439.508877][ T53] hsr_slave_1: left promiscuous mode [ 439.581727][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.646699][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.678587][ T5241] Bluetooth: hci1: command tx timeout [ 440.698785][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.705223][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.740802][ T53] team0 (unregistering): Port device team_slave_1 removed [ 441.859180][ T53] team0 (unregistering): Port device team_slave_0 removed [ 442.779335][ T5241] Bluetooth: hci1: command tx timeout [ 442.909250][ T7980] team0: Port device team_slave_0 added [ 442.950343][ T7980] team0: Port device team_slave_1 added [ 443.085837][ T29] audit: type=1400 audit(1726640311.711:265): avc: denied { create } for pid=8249 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 443.342069][ T8252] fuse: Unknown parameter 'fd0x0000000000000007' [ 444.245816][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.288479][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.408687][ T7980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.948476][ T5241] Bluetooth: hci1: command tx timeout [ 445.489381][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.496641][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.584434][ T7980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.235557][ T7980] hsr_slave_0: entered promiscuous mode [ 446.291590][ T7980] hsr_slave_1: entered promiscuous mode [ 446.346390][ T7980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.412707][ T7980] Cannot create hsr debugfs directory [ 446.999054][ T5241] Bluetooth: hci1: command tx timeout [ 450.121876][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 450.128733][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 452.001261][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.038566][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.046010][ T8191] bridge_slave_0: entered allmulticast mode [ 452.098565][ T8191] bridge_slave_0: entered promiscuous mode [ 452.111264][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.138760][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.146072][ T8191] bridge_slave_1: entered allmulticast mode [ 452.170501][ T8191] bridge_slave_1: entered promiscuous mode [ 452.239145][ T53] bridge_slave_1: left allmulticast mode [ 452.244833][ T53] bridge_slave_1: left promiscuous mode [ 452.268827][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.326754][ T53] bridge_slave_0: left allmulticast mode [ 452.358445][ T53] bridge_slave_0: left promiscuous mode [ 452.378724][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.994854][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.071205][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.112780][ T53] bond0 (unregistering): Released all slaves [ 454.488068][ T53] hsr_slave_0: left promiscuous mode [ 454.521392][ T53] hsr_slave_1: left promiscuous mode [ 454.544637][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.564922][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.313581][ T53] team0 (unregistering): Port device team_slave_1 removed [ 455.560530][ T53] team0 (unregistering): Port device team_slave_0 removed [ 456.985520][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 457.556502][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.824212][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.311516][ T8191] team0: Port device team_slave_0 added [ 458.366703][ T8191] team0: Port device team_slave_1 added [ 459.416259][ T29] audit: type=1400 audit(1726640327.341:266): avc: denied { create } for pid=8392 comm="syz.2.647" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.613111][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.631047][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.667712][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.717338][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.737530][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.776522][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.961709][ T7980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.191805][ T8191] hsr_slave_0: entered promiscuous mode [ 460.663335][ T8191] hsr_slave_1: entered promiscuous mode [ 460.962321][ T8191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.971705][ T8191] Cannot create hsr debugfs directory [ 460.994438][ T7980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.285390][ T7980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.233519][ T7980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.519782][ T7980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.192515][ T7980] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.220786][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.228020][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.263682][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.271054][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.372925][ T8191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 467.402538][ T8191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 467.425532][ T8191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 467.470994][ T8191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.024791][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.146616][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.183036][ T7980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.207497][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.214743][ T2523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.403255][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.410544][ T2523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.405308][ T7980] veth0_vlan: entered promiscuous mode [ 469.495049][ T7980] veth1_vlan: entered promiscuous mode [ 469.786153][ T7980] veth0_macvtap: entered promiscuous mode [ 469.847431][ T7980] veth1_macvtap: entered promiscuous mode [ 469.952798][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.993277][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.037941][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.075046][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.115564][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.162602][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.197562][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.245923][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.314346][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.355840][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.426883][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.467477][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.497215][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.540783][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.695395][ T7980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.715182][ T7980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.733252][ T7980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.749796][ T7980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.786225][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.009171][ T8191] veth0_vlan: entered promiscuous mode [ 472.356484][ T8191] veth1_vlan: entered promiscuous mode [ 472.430574][ T5623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.512706][ T5623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.644271][ T8191] veth0_macvtap: entered promiscuous mode [ 472.756126][ T8191] veth1_macvtap: entered promiscuous mode [ 472.862196][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.905628][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.926626][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.980662][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.026938][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.098737][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.147944][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.198537][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.281618][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.434468][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.494736][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.544736][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.605014][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.624936][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.668453][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.705332][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.746586][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.808512][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.861117][ T8191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.893576][ T8191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.918422][ T8191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.949225][ T8191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.101912][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.129964][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.158178][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.176091][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.187101][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 475.197062][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.497134][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.509750][ T2523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.517579][ T2523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.656609][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.241257][ T5234] Bluetooth: hci0: command tx timeout [ 477.775941][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.034627][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.278289][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.350141][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.084074][ T12] bridge_slave_1: left allmulticast mode [ 479.107165][ T12] bridge_slave_1: left promiscuous mode [ 479.127597][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.174274][ T12] bridge_slave_0: left allmulticast mode [ 479.203938][ T12] bridge_slave_0: left promiscuous mode [ 479.232071][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.407725][ T5234] Bluetooth: hci0: command tx timeout [ 481.647392][ T5234] Bluetooth: hci0: command tx timeout [ 483.382455][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.401185][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.416151][ T12] bond0 (unregistering): Released all slaves [ 483.728618][ T5234] Bluetooth: hci0: command tx timeout [ 484.298625][ T8580] chnl_net:caif_netlink_parms(): no params data found [ 485.633510][ T12] hsr_slave_0: left promiscuous mode [ 485.660489][ T12] hsr_slave_1: left promiscuous mode [ 485.674890][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.849311][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.895934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.307134][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.701433][ T12] veth1_macvtap: left promiscuous mode [ 486.706964][ T12] veth0_macvtap: left promiscuous mode [ 486.720220][ T12] veth1_vlan: left promiscuous mode [ 486.725950][ T12] veth0_vlan: left promiscuous mode [ 488.976265][ T8733] befs: (nullb0): No write support. Marking filesystem read-only [ 489.020878][ T8733] befs: (nullb0): invalid magic header [ 492.097450][ T12] team0 (unregistering): Port device team_slave_1 removed [ 492.183646][ T12] team0 (unregistering): Port device team_slave_0 removed [ 496.153755][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.170312][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.201657][ T8580] bridge_slave_0: entered allmulticast mode [ 496.223818][ T8580] bridge_slave_0: entered promiscuous mode [ 496.443370][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.501518][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.671867][ T8580] bridge_slave_1: entered allmulticast mode [ 496.680251][ T8580] bridge_slave_1: entered promiscuous mode [ 498.260083][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.316011][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.736167][ T8580] team0: Port device team_slave_0 added [ 500.818612][ T8580] team0: Port device team_slave_1 added [ 504.105724][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.112348][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.324769][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.458007][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.680811][ T8580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.699697][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.706676][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.733129][ T8580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.035945][ T8580] hsr_slave_0: entered promiscuous mode [ 507.977731][ T8580] hsr_slave_1: entered promiscuous mode [ 508.012541][ T8580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.074659][ T8580] Cannot create hsr debugfs directory [ 508.668541][ T1850] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 508.811920][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 508.827912][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 508.844937][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 508.857101][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 508.889559][ T1850] usb 1-1: device descriptor read/64, error -71 [ 508.897145][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 508.904864][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.170421][ T1850] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 509.388452][ T1850] usb 1-1: device descriptor read/64, error -71 [ 509.532314][ T1850] usb usb1-port1: attempt power cycle [ 509.607316][ T1119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.879344][ T1850] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 510.891405][ T1119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.958224][ T1850] usb 1-1: device descriptor read/8, error -71 [ 510.999132][ T5234] Bluetooth: hci5: command tx timeout [ 511.106255][ T1119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.271163][ T1850] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 511.329852][ T1850] usb 1-1: device descriptor read/8, error -71 [ 511.378022][ T1119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.525998][ T1850] usb usb1-port1: unable to enumerate USB device [ 511.605261][ T8580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 511.631961][ T8580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 511.843170][ T8866] chnl_net:caif_netlink_parms(): no params data found [ 512.751957][ T8580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.819344][ T8580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 513.078605][ T5234] Bluetooth: hci5: command tx timeout [ 514.496885][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.566597][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.635055][ T8866] bridge_slave_0: entered allmulticast mode [ 514.689595][ T8866] bridge_slave_0: entered promiscuous mode [ 514.851631][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.894247][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.934186][ T8866] bridge_slave_1: entered allmulticast mode [ 514.963314][ T8866] bridge_slave_1: entered promiscuous mode [ 515.152309][ T1119] bridge_slave_1: left allmulticast mode [ 515.158014][ T1119] bridge_slave_1: left promiscuous mode [ 515.163698][ T5234] Bluetooth: hci5: command tx timeout [ 515.266321][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.342416][ T1119] bridge_slave_0: left allmulticast mode [ 515.348113][ T1119] bridge_slave_0: left promiscuous mode [ 515.408709][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.241367][ T5234] Bluetooth: hci5: command tx timeout [ 517.704929][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.739527][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.771697][ T1119] bond0 (unregistering): Released all slaves [ 517.913210][ T8866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.995293][ T8866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.318013][ T8866] team0: Port device team_slave_0 added [ 518.381879][ T8866] team0: Port device team_slave_1 added [ 518.488980][ T5279] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 518.605035][ T8866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.670749][ T5279] usb 2-1: device descriptor read/64, error -71 [ 518.678521][ T8866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.705416][ T8866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.749801][ T8866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.756838][ T8866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.827359][ T8866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.963924][ T1119] hsr_slave_0: left promiscuous mode [ 518.978832][ T5279] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 518.993336][ T1119] hsr_slave_1: left promiscuous mode [ 519.049030][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.114945][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.169690][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.208462][ T5279] usb 2-1: device descriptor read/64, error -71 [ 519.231484][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.330143][ T5279] usb usb2-port1: attempt power cycle [ 519.397413][ T1119] veth1_macvtap: left promiscuous mode [ 519.437926][ T1119] veth0_macvtap: left promiscuous mode [ 519.469922][ T1119] veth1_vlan: left promiscuous mode [ 519.497139][ T1119] veth0_vlan: left promiscuous mode [ 519.841448][ T5279] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 520.909818][ T5279] usb 2-1: device descriptor read/8, error -71 [ 525.416593][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 525.465158][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 526.552196][ T8866] hsr_slave_0: entered promiscuous mode [ 526.575507][ T8866] hsr_slave_1: entered promiscuous mode [ 526.969498][ T8866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.546683][ T8866] Cannot create hsr debugfs directory [ 529.172796][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.418351][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.514176][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.521781][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.748272][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.755447][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.988746][ T5279] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 531.162637][ T9045] syz.4.751: attempt to access beyond end of device [ 531.162637][ T9045] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 531.210022][ T5279] usb 2-1: device descriptor read/64, error -71 [ 531.302510][ T9045] FAT-fs (loop4): unable to read boot sector [ 531.383156][ T8866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.426351][ T8866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.447522][ T8866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.479457][ T5279] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 531.507732][ T8866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.573818][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.668717][ T5279] usb 2-1: device descriptor read/64, error -71 [ 531.782451][ T8580] veth0_vlan: entered promiscuous mode [ 531.834848][ T8580] veth1_vlan: entered promiscuous mode [ 531.849011][ T5279] usb usb2-port1: attempt power cycle [ 531.976448][ T8866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.065789][ T8580] veth0_macvtap: entered promiscuous mode [ 532.110146][ T8580] veth1_macvtap: entered promiscuous mode [ 532.152478][ T8866] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.213387][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.220822][ T5623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.272515][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.279792][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.303696][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.309922][ T5279] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 532.321095][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.351143][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.365617][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.377248][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.392795][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.414313][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.430645][ T5279] usb 2-1: device descriptor read/8, error -71 [ 532.512923][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.537662][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.552815][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.564046][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.581849][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.595565][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.615820][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.656747][ T8580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.667378][ T8580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.676814][ T8580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.687286][ T8580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.749003][ T5279] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 532.812507][ T5279] usb 2-1: device descriptor read/8, error -71 [ 533.007049][ T5623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.019294][ T5279] usb usb2-port1: unable to enumerate USB device [ 533.039826][ T5623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.592554][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.566188][ T8866] veth0_vlan: entered promiscuous mode [ 537.846685][ T8866] veth1_vlan: entered promiscuous mode [ 538.067943][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.084091][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.093336][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.102232][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.115471][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 538.146937][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 538.207846][ T8866] veth0_macvtap: entered promiscuous mode [ 538.572177][ T9101] syz.1.757: attempt to access beyond end of device [ 538.572177][ T9101] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 538.645826][ T9101] FAT-fs (loop1): unable to read boot sector [ 538.724462][ T8866] veth1_macvtap: entered promiscuous mode [ 540.249473][ T5234] Bluetooth: hci2: command tx timeout [ 541.888935][ T5623] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.169811][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.325248][ T5234] Bluetooth: hci2: command tx timeout [ 542.338512][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.352465][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.364707][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.381844][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.426321][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.436857][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.481345][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.532128][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.611825][ T5623] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.822447][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.882563][ T29] audit: type=1400 audit(1726640411.531:267): avc: denied { write } for pid=9123 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 542.916280][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.970810][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.010125][ T29] audit: type=1400 audit(1726640411.531:268): avc: denied { nlmsg_write } for pid=9123 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 543.075084][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.108589][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.143624][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.154427][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.182924][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.218949][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.330754][ T5623] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.393094][ T8866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.421037][ T8866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.442438][ T8866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.458418][ T8866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.561314][ T5623] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.928470][ T47] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 544.148840][ T47] usb 2-1: device descriptor read/64, error -71 [ 544.440033][ T5234] Bluetooth: hci2: command tx timeout [ 544.511039][ T47] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 544.729363][ T47] usb 2-1: device descriptor read/64, error -71 [ 544.854776][ T47] usb usb2-port1: attempt power cycle [ 545.006599][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 545.857791][ T5623] bridge_slave_1: left allmulticast mode [ 545.876994][ T5623] bridge_slave_1: left promiscuous mode [ 545.894486][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.907288][ T5623] bridge_slave_0: left allmulticast mode [ 545.934932][ T5623] bridge_slave_0: left promiscuous mode [ 545.951781][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.519684][ T5234] Bluetooth: hci2: command tx timeout [ 546.879332][ T47] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 547.128440][ T47] usb 2-1: device not accepting address 28, error -71 [ 548.373240][ T5623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.394180][ T5623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.433258][ T5623] bond0 (unregistering): Released all slaves [ 548.563018][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.649685][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.305856][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.368788][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.376063][ T9098] bridge_slave_0: entered allmulticast mode [ 549.410369][ T9098] bridge_slave_0: entered promiscuous mode [ 549.443560][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.474819][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.492398][ T9098] bridge_slave_1: entered allmulticast mode [ 549.670414][ T9098] bridge_slave_1: entered promiscuous mode [ 549.771666][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.820817][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.975004][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.171593][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.069979][ T5623] hsr_slave_0: left promiscuous mode [ 551.232296][ T5623] hsr_slave_1: left promiscuous mode [ 551.256417][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.295343][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.337867][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.383104][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.536488][ T5623] veth1_macvtap: left promiscuous mode [ 551.597349][ T5623] veth0_macvtap: left promiscuous mode [ 551.619727][ T5623] veth1_vlan: left promiscuous mode [ 551.644286][ T5623] veth0_vlan: left promiscuous mode [ 552.812954][ T941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 553.119138][ T941] usb 3-1: device descriptor read/64, error -71 [ 553.542973][ T941] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 553.722012][ T941] usb 3-1: device descriptor read/64, error -71 [ 553.855486][ T941] usb usb3-port1: attempt power cycle [ 554.125137][ T5623] team0 (unregistering): Port device team_slave_1 removed [ 554.221171][ T5623] team0 (unregistering): Port device team_slave_0 removed [ 554.280756][ T941] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 554.357938][ T941] usb 3-1: device descriptor read/8, error -71 [ 554.808571][ T941] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 555.521337][ T941] usb 3-1: device descriptor read/8, error -71 [ 555.744528][ T941] usb usb3-port1: unable to enumerate USB device [ 561.365547][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.375741][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.445412][ T29] audit: type=1400 audit(1726640430.091:269): avc: denied { read append } for pid=9286 comm="syz.0.790" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 561.496339][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.659580][ T29] audit: type=1400 audit(1726640430.091:270): avc: denied { open } for pid=9286 comm="syz.0.790" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 561.735325][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 562.172612][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 562.215121][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.609174][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.619496][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.938172][ T9098] team0: Port device team_slave_0 added [ 564.119104][ T5279] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 564.149018][ T9098] team0: Port device team_slave_1 added [ 564.355032][ T5279] usb 1-1: device descriptor read/64, error -71 [ 564.358975][ T5234] Bluetooth: hci0: command tx timeout [ 564.530784][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.557806][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.614689][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.648023][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.656597][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.683528][ T5279] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 564.697112][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.838913][ T5279] usb 1-1: device descriptor read/64, error -71 [ 564.979032][ T5279] usb usb1-port1: attempt power cycle [ 565.122816][ T9098] hsr_slave_0: entered promiscuous mode [ 565.132684][ T9098] hsr_slave_1: entered promiscuous mode [ 565.161276][ T9098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.178449][ T9098] Cannot create hsr debugfs directory [ 565.409832][ T5279] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 565.666518][ T5241] Bluetooth: hci1: command 0x0406 tx timeout [ 566.210360][ T5279] usb 1-1: device descriptor read/8, error -71 [ 566.439055][ T5234] Bluetooth: hci0: command tx timeout [ 566.568707][ T5279] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 566.659065][ T5279] usb 1-1: device descriptor read/8, error -71 [ 566.797525][ T5279] usb usb1-port1: unable to enumerate USB device [ 566.972217][ T5623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.341992][ T5623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.649537][ T5234] Bluetooth: hci0: command tx timeout [ 568.719304][ T29] audit: type=1400 audit(1726640437.211:271): avc: denied { getopt } for pid=9346 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.115643][ T5623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.487740][ T9355] Zero length message leads to an empty skb [ 570.207071][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 571.223659][ T5241] Bluetooth: hci0: command tx timeout [ 571.376955][ T5623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.260347][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.313744][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.339763][ T9288] bridge_slave_0: entered allmulticast mode [ 573.346865][ T9288] bridge_slave_0: entered promiscuous mode [ 573.351161][ T5222] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 573.388901][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.418691][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.426402][ T9288] bridge_slave_1: entered allmulticast mode [ 573.434877][ T9288] bridge_slave_1: entered promiscuous mode [ 573.580174][ T5222] usb 2-1: device descriptor read/64, error -71 [ 573.610923][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.649126][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.670331][ T5623] bridge_slave_1: left allmulticast mode [ 573.683849][ T5623] bridge_slave_1: left promiscuous mode [ 573.698879][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.782959][ T5623] bridge_slave_0: left allmulticast mode [ 573.826945][ T5623] bridge_slave_0: left promiscuous mode [ 573.849247][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.888783][ T5222] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 574.078505][ T5222] usb 2-1: device descriptor read/64, error -71 [ 574.227883][ T5222] usb usb2-port1: attempt power cycle [ 574.648647][ T5222] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 575.379353][ T5222] usb 2-1: device descriptor read/8, error -71 [ 575.728481][ T5222] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 575.800483][ T5222] usb 2-1: device descriptor read/8, error -71 [ 575.939024][ T5222] usb usb2-port1: unable to enumerate USB device [ 578.909698][ T5623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.953797][ T5623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.994261][ T5623] bond0 (unregistering): Released all slaves [ 579.432172][ T9288] team0: Port device team_slave_0 added [ 579.518190][ T9288] team0: Port device team_slave_1 added [ 579.562324][ T9098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 579.692614][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.758850][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.829536][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.887578][ T9098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 579.959756][ T9098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 580.030861][ T9098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 580.089266][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.134236][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.214980][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.320020][ T5623] hsr_slave_0: left promiscuous mode [ 580.342797][ T5623] hsr_slave_1: left promiscuous mode [ 580.377266][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.388559][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.402737][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.437307][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.519530][ T5623] veth1_macvtap: left promiscuous mode [ 580.526663][ T5623] veth0_macvtap: left promiscuous mode [ 580.535840][ T5623] veth1_vlan: left promiscuous mode [ 580.553165][ T5623] veth0_vlan: left promiscuous mode [ 581.815623][ T29] audit: type=1400 audit(1726640450.461:272): avc: denied { connect } for pid=9436 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.044160][ T5623] team0 (unregistering): Port device team_slave_1 removed [ 583.206562][ T5623] team0 (unregistering): Port device team_slave_0 removed [ 586.594612][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 586.683096][ T29] audit: type=1400 audit(1726640455.331:273): avc: denied { ioctl } for pid=9458 comm="syz.0.825" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 587.125618][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 588.013442][ T9288] hsr_slave_0: entered promiscuous mode [ 588.348736][ T9288] hsr_slave_1: entered promiscuous mode [ 588.396662][ T9288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.428671][ T9288] Cannot create hsr debugfs directory [ 588.773381][ T9481] syz.2.830: attempt to access beyond end of device [ 588.773381][ T9481] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 588.825168][ T9481] FAT-fs (loop2): unable to read boot sector [ 591.539419][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.586527][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 598.661874][ T9288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 598.748967][ T9288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 598.792683][ T9288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 598.844614][ T9288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 598.883542][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 598.893253][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 598.904381][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 598.913828][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 598.923199][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 598.933491][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 599.208863][ T9553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9553 comm=syz.1.842 [ 599.764808][ T9562] netlink: 87 bytes leftover after parsing attributes in process `syz.1.843'. [ 600.391311][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.834910][ T2523] bridge_slave_1: left allmulticast mode [ 600.890493][ T2523] bridge_slave_1: left promiscuous mode [ 600.905435][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.008871][ T5241] Bluetooth: hci2: command tx timeout [ 601.033678][ T2523] bridge_slave_0: left allmulticast mode [ 601.040406][ T2523] bridge_slave_0: left promiscuous mode [ 601.049137][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.264662][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 603.086642][ T5241] Bluetooth: hci2: command tx timeout [ 603.282064][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.323723][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.353736][ T2523] bond0 (unregistering): Released all slaves [ 603.443226][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.450560][ T9548] chnl_net:caif_netlink_parms(): no params data found [ 603.698210][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.705766][ T5623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.745254][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.753767][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.017431][ T2523] hsr_slave_0: left promiscuous mode [ 605.034287][ T2523] hsr_slave_1: left promiscuous mode [ 605.083180][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.083396][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.851 [ 605.114286][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.158555][ T5241] Bluetooth: hci2: command tx timeout [ 605.765993][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 605.813229][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 606.402497][ T9288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.539501][ T9548] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.547841][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.556781][ T9548] bridge_slave_0: entered allmulticast mode [ 606.592102][ T9548] bridge_slave_0: entered promiscuous mode [ 606.613665][ T9548] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.628507][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.646041][ T9548] bridge_slave_1: entered allmulticast mode [ 606.657831][ T9548] bridge_slave_1: entered promiscuous mode [ 606.840492][ T9548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.952329][ T9548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.175979][ T9548] team0: Port device team_slave_0 added [ 607.213611][ T9548] team0: Port device team_slave_1 added [ 607.238638][ T5241] Bluetooth: hci2: command tx timeout [ 607.533093][ T9548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.551396][ T9548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.644098][ T9548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.709535][ T9548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.729756][ T9548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.800783][ T9548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.979886][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.874305][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 610.986430][ T9548] hsr_slave_0: entered promiscuous mode [ 611.006462][ T9548] hsr_slave_1: entered promiscuous mode [ 611.109368][ T9548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.133614][ T9548] Cannot create hsr debugfs directory [ 612.073204][ T9687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9687 comm=syz.2.861 [ 614.731070][ T9288] veth0_vlan: entered promiscuous mode [ 615.136975][ T9288] veth1_vlan: entered promiscuous mode [ 615.423780][ T9288] veth0_macvtap: entered promiscuous mode [ 615.450171][ T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 615.470481][ T9288] veth1_macvtap: entered promiscuous mode [ 615.567855][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.580171][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.603886][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.616173][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.658757][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 615.667826][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.678033][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.694503][ T47] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 615.705145][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.716322][ T47] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 615.871272][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.886936][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.906017][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.916985][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.925793][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.333233][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.383910][ T47] usb 3-1: config 0 descriptor?? [ 617.401942][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.421604][ T9733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9733 comm=syz.1.871 [ 617.443097][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.476105][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.673429][ T9288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.686873][ T9288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.697679][ T9288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.706672][ T9288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.791582][ T9548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 617.868057][ T9548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 617.899374][ T9548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 617.961253][ T9548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.141287][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.199926][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.323207][ T5623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.368589][ T5623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.422909][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.482738][ T9548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.506461][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.627948][ T9548] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.681671][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.688854][ T5623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.770819][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.778032][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.460502][ T5300] usb 3-1: USB disconnect, device number 9 [ 620.762477][ T9548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.152825][ T9548] veth0_vlan: entered promiscuous mode [ 623.973151][ T9548] veth1_vlan: entered promiscuous mode [ 624.270315][ T9548] veth0_macvtap: entered promiscuous mode [ 624.316945][ T9548] veth1_macvtap: entered promiscuous mode [ 624.380210][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.391091][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.419151][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.934937][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.941499][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.134521][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.204146][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.265109][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.298541][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.582783][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.602482][ T9548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.782273][ T29] audit: type=1400 audit(1726640495.561:274): avc: denied { create } for pid=9806 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 627.865239][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.898072][ T29] audit: type=1400 audit(1726640495.681:275): avc: denied { connect } for pid=9806 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 627.928768][ T29] audit: type=1400 audit(1726640495.801:276): avc: denied { read } for pid=9806 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 627.998470][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.058483][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.105361][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.172050][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.219568][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.243064][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.270753][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.310802][ T9548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.375144][ T9548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.410848][ T9548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.460866][ T9548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.481854][ T9548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.925352][ T9113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.960001][ T9113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.120704][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.197578][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.848425][ T9848] hub 6-0:1.0: USB hub found [ 629.854482][ T9848] hub 6-0:1.0: 1 port detected [ 630.688771][ T29] audit: type=1400 audit(1726640499.341:277): avc: denied { create } for pid=9837 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 631.489443][ T29] audit: type=1400 audit(1726640499.671:278): avc: denied { ioctl } for pid=9851 comm="syz.3.892" path="socket:[25436]" dev="sockfs" ino=25436 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 632.233942][ T5241] Bluetooth: hci5: command 0x0406 tx timeout [ 633.987285][ T9880] Bluetooth: MGMT ver 1.23 [ 633.993168][ T29] audit: type=1400 audit(1726640502.631:279): avc: denied { write } for pid=9879 comm="syz.1.899" path="socket:[25465]" dev="sockfs" ino=25465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 644.815554][ T9964] syz.0.920 (9964): drop_caches: 2 [ 648.959242][ T9993] Bluetooth: MGMT ver 1.23 [ 651.475120][ T29] audit: type=1400 audit(1726640520.101:280): avc: denied { unmount } for pid=9548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 659.480540][ T29] audit: type=1400 audit(1726640528.121:281): avc: denied { bind } for pid=10068 comm="syz.2.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 662.188535][ T29] audit: type=1400 audit(1726640530.421:282): avc: denied { read } for pid=10078 comm="syz.2.952" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 664.721568][ T29] audit: type=1400 audit(1726640530.431:283): avc: denied { open } for pid=10078 comm="syz.2.952" path="/dev/rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 670.388601][ T941] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 671.293282][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 671.321544][ T941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.352543][ T941] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 671.386732][ T941] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 671.413408][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.450447][ T941] usb 3-1: config 0 descriptor?? [ 671.471664][ T941] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 672.454416][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.464829][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.473621][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.495620][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.498808][ T29] audit: type=1400 audit(1726640541.141:284): avc: denied { create } for pid=10140 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 672.536233][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 672.544694][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.603471][ T29] audit: type=1400 audit(1726640541.151:285): avc: denied { write } for pid=10140 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 672.654380][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.718743][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.841095][ T2508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.061009][ T2508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.319092][ T2508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.564084][ T2508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.790422][ T5300] usb 3-1: USB disconnect, device number 10 [ 674.598548][ T5234] Bluetooth: hci1: command tx timeout [ 780.108363][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 780.115355][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10167/1:b..l P4887/1:b..l P4673/1:b..l [ 780.125978][ C1] rcu: (detected by 1, t=10502 jiffies, g=48025, q=322 ncpus=2) [ 780.133680][ C1] task:udevd state:R running task stack:24176 pid:4673 tgid:4673 ppid:1 flags:0x00000002 [ 780.146270][ C1] Call Trace: [ 780.149558][ C1] [ 780.152479][ C1] __schedule+0xe37/0x5490 [ 780.156902][ C1] ? __pfx_mark_lock+0x10/0x10 [ 780.161679][ C1] ? __pfx___schedule+0x10/0x10 [ 780.166544][ C1] preempt_schedule_irq+0x51/0x90 [ 780.171564][ C1] irqentry_exit+0x36/0x90 [ 780.175966][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 780.181942][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 780.188095][ C1] Code: 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 <83> f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 [ 780.207717][ C1] RSP: 0018:ffffc900041cf9e0 EFLAGS: 00000246 [ 780.213790][ C1] RAX: 0000000000000000 RBX: ffff888033f310d0 RCX: ffffffff843f0dc7 [ 780.221755][ C1] RDX: ffff88807b9d5a00 RSI: ffffffff843f0d64 RDI: 0000000000000004 [ 780.229721][ C1] RBP: 0000000000000092 R08: 0000000000000004 R09: 0000000000000046 [ 780.237769][ C1] R10: 0000000000000092 R11: 0000000000000000 R12: dffffc0000000000 [ 780.245726][ C1] R13: 0000000000000046 R14: 0000000000000008 R15: 000000000000002d [ 780.253694][ C1] ? avc_lookup+0xe7/0x1d0 [ 780.258106][ C1] ? avc_lookup+0x84/0x1d0 [ 780.262537][ C1] avc_lookup+0x84/0x1d0 [ 780.266788][ C1] avc_has_perm_noaudit+0x97/0x3a0 [ 780.271901][ C1] selinux_inode_permission+0x361/0x590 [ 780.277447][ C1] ? __pfx_selinux_inode_permission+0x10/0x10 [ 780.283512][ C1] ? generic_permission+0x22a/0x680 [ 780.288711][ C1] security_inode_permission+0xda/0x260 [ 780.294276][ C1] inode_permission+0x17a/0x5f0 [ 780.299119][ C1] ? walk_component+0x104/0x5b0 [ 780.303960][ C1] link_path_walk.part.0.constprop.0+0x1d7/0xd40 [ 780.310282][ C1] path_lookupat+0x93/0x770 [ 780.314779][ C1] filename_lookup+0x1e5/0x5b0 [ 780.319530][ C1] ? __virt_addr_valid+0x2b4/0x590 [ 780.324649][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 780.329940][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 780.335309][ C1] do_readlinkat+0xcf/0x390 [ 780.339827][ C1] ? __pfx_do_readlinkat+0x10/0x10 [ 780.344934][ C1] __x64_sys_readlink+0x78/0xc0 [ 780.349795][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.355020][ C1] do_syscall_64+0xcd/0x250 [ 780.359517][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.365428][ C1] RIP: 0033:0x7f8940717d47 [ 780.369840][ C1] RSP: 002b:00007ffc5916cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 780.378240][ C1] RAX: ffffffffffffffda RBX: 00007ffc5916cc88 RCX: 00007f8940717d47 [ 780.386196][ C1] RDX: 0000000000000400 RSI: 00007ffc5916cc88 RDI: 00007ffc5916d168 [ 780.394156][ C1] RBP: 0000000000000400 R08: 000055a050491ff4 R09: 0000000000000000 [ 780.402111][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007ffc5916d168 [ 780.410070][ C1] R13: 00007ffc5916d0d8 R14: 000055a0504682c0 R15: 0000000000000000 [ 780.418037][ C1] [ 780.421043][ C1] task:dhcpcd state:R running task stack:22688 pid:4887 tgid:4887 ppid:4886 flags:0x00004002 [ 780.432760][ C1] Call Trace: [ 780.436045][ C1] [ 780.438980][ C1] __schedule+0xe37/0x5490 [ 780.443408][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 780.449564][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 780.454777][ C1] ? __pfx___schedule+0x10/0x10 [ 780.459667][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 780.464888][ C1] preempt_schedule_irq+0x51/0x90 [ 780.469923][ C1] irqentry_exit+0x36/0x90 [ 780.474332][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 780.479793][ C1] RIP: 0010:__update_page_owner_handle+0xcc/0x320 [ 780.486223][ C1] Code: 98 ff 44 39 f3 0f 8e e9 01 00 00 e8 9e 13 98 ff 48 8b 1d f7 4e 05 0c 4c 01 e3 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 74 08 3c 03 0f 8e d1 01 00 00 8b 44 24 0c 89 43 08 48 89 d8 [ 780.505834][ C1] RSP: 0018:ffffc900031172b0 EFLAGS: 00000a02 [ 780.511889][ C1] RAX: 0000000000000000 RBX: ffff88801ecbdce8 RCX: ffffffff81f3c534 [ 780.519866][ C1] RDX: ffff88802a8eda00 RSI: ffffffff81f3c542 RDI: ffff88801ecbdcf0 [ 780.527823][ C1] RBP: ffff88801ecbdce0 R08: 0000000000000004 R09: 0000000000000001 [ 780.535778][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801ecbdce0 [ 780.543735][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.551702][ C1] ? __update_page_owner_handle+0xa4/0x320 [ 780.557524][ C1] ? __update_page_owner_handle+0xb2/0x320 [ 780.563355][ C1] __set_page_owner+0x13f/0x560 [ 780.568204][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 780.573566][ C1] ? bad_range+0x264/0x440 [ 780.577989][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.583184][ C1] post_alloc_hook+0x2d1/0x350 [ 780.587946][ C1] get_page_from_freelist+0x1351/0x2e50 [ 780.593488][ C1] ? __pfx___might_resched+0x10/0x10 [ 780.598763][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 780.604646][ C1] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 780.610964][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 780.616332][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 780.621610][ C1] ? alloc_pages_bulk_noprof+0x742/0x14f0 [ 780.627315][ C1] ? copy_process+0x2f3b/0x8dd0 [ 780.632154][ C1] ? kernel_clone+0xfd/0x960 [ 780.636730][ C1] ? do_syscall_64+0xcd/0x250 [ 780.641396][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.647454][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 780.653177][ C1] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 780.659189][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.665087][ C1] ? policy_nodemask+0xea/0x4e0 [ 780.669948][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.675835][ C1] ? policy_nodemask+0xea/0x4e0 [ 780.680680][ C1] alloc_pages_mpol_noprof+0x275/0x610 [ 780.686131][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 780.692102][ C1] ? __pfx___might_resched+0x10/0x10 [ 780.697374][ C1] ? __vmalloc_node_range_noprof+0x3de/0x14e0 [ 780.703432][ C1] __vmalloc_node_range_noprof+0x6da/0x14e0 [ 780.709322][ C1] ? kernel_clone+0xfd/0x960 [ 780.713905][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 780.720226][ C1] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 780.725603][ C1] ? kmem_cache_alloc_node_noprof+0x1a2/0x310 [ 780.731662][ C1] ? copy_process+0x4ba/0x8dd0 [ 780.736414][ C1] ? kernel_clone+0xfd/0x960 [ 780.740993][ C1] copy_process+0x2f3b/0x8dd0 [ 780.745659][ C1] ? kernel_clone+0xfd/0x960 [ 780.750235][ C1] ? hlock_class+0x4e/0x130 [ 780.754728][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 780.759968][ C1] ? mark_lock+0xb5/0xc60 [ 780.764340][ C1] ? hlock_class+0x4e/0x130 [ 780.768890][ C1] ? __pfx_copy_process+0x10/0x10 [ 780.773949][ C1] ? __might_fault+0x13b/0x190 [ 780.778750][ C1] ? __pfx_lock_release+0x10/0x10 [ 780.783815][ C1] ? __pfx___might_resched+0x10/0x10 [ 780.789153][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 780.794214][ C1] ? __might_fault+0xe3/0x190 [ 780.798932][ C1] ? _copy_from_user+0x5d/0xf0 [ 780.803760][ C1] kernel_clone+0xfd/0x960 [ 780.808238][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 780.813488][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 780.818564][ C1] ? find_held_lock+0x2d/0x110 [ 780.823369][ C1] __do_sys_clone3+0x1f5/0x270 [ 780.828170][ C1] ? __pfx___do_sys_clone3+0x10/0x10 [ 780.833530][ C1] do_syscall_64+0xcd/0x250 [ 780.838066][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.843994][ C1] RIP: 0033:0x7f736e8bdba9 [ 780.848429][ C1] RSP: 002b:00007ffc7d40b788 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 780.856867][ C1] RAX: ffffffffffffffda RBX: 00007ffc7d40b7e8 RCX: 00007f736e8bdba9 [ 780.864871][ C1] RDX: 00007f736e8afe12 RSI: 0000000000000058 RDI: 00007ffc7d40b7e8 [ 780.872871][ C1] RBP: 00007f736e8afe12 R08: 00007ffc7d40b840 R09: 0000000000000000 [ 780.880865][ C1] R10: 0000000000000008 R11: 0000000000000206 R12: 00007ffc7d40b840 [ 780.888852][ C1] R13: ffffffffffffff80 R14: 0000000000000000 R15: 00007ffc7d40b840 [ 780.896859][ C1] [ 780.899893][ C1] task:syz.2.971 state:R running task stack:28784 pid:10167 tgid:10166 ppid:8866 flags:0x00000000 [ 780.911659][ C1] Call Trace: [ 780.914957][ C1] [ 780.917912][ C1] __schedule+0xe37/0x5490 [ 780.922376][ C1] ? kernel_text_address+0x8d/0x100 [ 780.927637][ C1] ? hlock_class+0x4e/0x130 [ 780.932201][ C1] ? __pfx___schedule+0x10/0x10 [ 780.937110][ C1] ? stack_depot_save_flags+0x28/0x8f0 [ 780.942621][ C1] preempt_schedule_irq+0x51/0x90 [ 780.947684][ C1] irqentry_exit+0x36/0x90 [ 780.952124][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 780.957622][ C1] RIP: 0010:lock_is_held_type+0x107/0x150 [ 780.963381][ C1] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 ec 7f ea 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb [ 780.983028][ C1] RSP: 0018:ffffc9000487f8d0 EFLAGS: 00000292 [ 780.989120][ C1] RAX: 0000000000000046 RBX: ffff88802ad6a8e0 RCX: 0000000000000001 [ 780.997113][ C1] RDX: 0000000000000000 RSI: ffffffff8b4cddc0 RDI: ffffffff8bb118a0 [ 781.005104][ C1] RBP: ffffffff8ddba6a0 R08: 0000000000000000 R09: fffffbfff2d39ae0 [ 781.013097][ C1] R10: ffffffff969cd707 R11: 0000000000000000 R12: ffff88802ad69e00 [ 781.021120][ C1] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000000 [ 781.029135][ C1] task_css.constprop.0+0xcd/0x130 [ 781.034320][ C1] current_objcg_update+0x1d0/0x400 [ 781.039551][ C1] ? __pfx_current_objcg_update+0x10/0x10 [ 781.045310][ C1] __memcg_slab_post_alloc_hook+0x703/0x9c0 [ 781.051249][ C1] ? kasan_save_track+0x14/0x30 [ 781.056153][ C1] kmem_cache_alloc_noprof+0x2c6/0x2f0 [ 781.061673][ C1] ? hlock_class+0x4e/0x130 [ 781.066213][ C1] ? alloc_empty_file+0x73/0x1e0 [ 781.071198][ C1] alloc_empty_file+0x73/0x1e0 [ 781.076006][ C1] path_openat+0xe1/0x2d60 [ 781.080450][ C1] ? hlock_class+0x4e/0x130 [ 781.084976][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 781.090044][ C1] ? __pfx_path_openat+0x10/0x10 [ 781.095008][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 781.100241][ C1] ? find_held_lock+0x2d/0x110 [ 781.105036][ C1] do_filp_open+0x1dc/0x430 [ 781.109569][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 781.114619][ C1] ? find_held_lock+0x2d/0x110 [ 781.119435][ C1] ? _raw_spin_unlock+0x28/0x50 [ 781.124317][ C1] ? alloc_fd+0x2d7/0x6c0 [ 781.128678][ C1] do_sys_openat2+0x17a/0x1e0 [ 781.133392][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 781.138630][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 781.144392][ C1] __x64_sys_openat+0x175/0x210 [ 781.149278][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 781.154713][ C1] do_syscall_64+0xcd/0x250 [ 781.159256][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.165184][ C1] RIP: 0033:0x7fb91877def9 [ 781.169615][ C1] RSP: 002b:00007fb919533038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 781.178052][ C1] RAX: ffffffffffffffda RBX: 00007fb918935f80 RCX: 00007fb91877def9 [ 781.186396][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 781.194386][ C1] RBP: 00007fb9187f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 781.202380][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.210372][ C1] R13: 0000000000000000 R14: 00007fb918935f80 R15: 00007ffff3c7d168 [ 781.218378][ C1] [ 781.221422][ C1] rcu: rcu_preempt kthread starved for 10612 jiffies! g48025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 781.232647][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 781.242629][ C1] rcu: RCU grace-period kthread stack dump: [ 781.248522][ C1] task:rcu_preempt state:R running task stack:27616 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 781.260283][ C1] Call Trace: [ 781.263573][ C1] [ 781.266525][ C1] __schedule+0xe37/0x5490 [ 781.270981][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 781.276325][ C1] ? __pfx___schedule+0x10/0x10 [ 781.281215][ C1] ? schedule+0x298/0x350 [ 781.285580][ C1] ? __pfx_lock_release+0x10/0x10 [ 781.290635][ C1] ? __pfx___mod_timer+0x10/0x10 [ 781.295615][ C1] ? lock_acquire+0x1b1/0x560 [ 781.300325][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 781.305832][ C1] schedule+0xe7/0x350 [ 781.309936][ C1] schedule_timeout+0x136/0x2a0 [ 781.314815][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 781.320217][ C1] ? __pfx_process_timeout+0x10/0x10 [ 781.325555][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 781.331394][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 781.336890][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 781.341695][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 781.347005][ C1] ? rcu_gp_init+0xc82/0x1630 [ 781.351718][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 781.356952][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 781.362796][ C1] rcu_gp_kthread+0x271/0x380 [ 781.367502][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.372733][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 781.377970][ C1] ? __kthread_parkme+0x148/0x220 [ 781.383023][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.388254][ C1] kthread+0x2c1/0x3a0 [ 781.392347][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.397578][ C1] ? __pfx_kthread+0x10/0x10 [ 781.402193][ C1] ret_from_fork+0x45/0x80 [ 781.406642][ C1] ? __pfx_kthread+0x10/0x10 [ 781.411264][ C1] ret_from_fork_asm+0x1a/0x30 [ 781.416091][ C1] [ 781.419125][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 781.425475][ C1] Sending NMI from CPU 1 to CPUs 0: [ 781.431151][ C0] NMI backtrace for cpu 0 [ 781.431174][ C0] CPU: 0 UID: 0 PID: 10177 Comm: syz.1.973 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 781.431202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 781.431216][ C0] RIP: 0010:fpu__clear_user_states+0x6/0x1e0 [ 781.431254][ C0] Code: e9 2e ff ff ff e8 0a 78 b7 00 e9 81 fe ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 54 <55> 53 48 89 fb e8 b0 bb 58 00 65 48 8b 05 88 bb d0 7e 48 05 40 19 [ 781.431277][ C0] RSP: 0018:ffffc9000460fdf8 EFLAGS: 00000202 [ 781.431296][ C0] RAX: dffffc0000000000 RBX: 1ffff920008c1fc2 RCX: ffffc9000b089000 [ 781.431314][ C0] RDX: 1ffff920008c1ffd RSI: ffffffff812f66f0 RDI: ffff88802827d540 [ 781.431330][ C0] RBP: ffffc9000460ff58 R08: 0000000000000005 R09: 0000000000000000 [ 781.431345][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000460fe30 [ 781.431360][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802827bc00 [ 781.431375][ C0] FS: 00007fe39afde6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 781.431399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.431416][ C0] CR2: 00007fe39afbcf40 CR3: 0000000058322000 CR4: 00000000003506f0 [ 781.431432][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 781.431446][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 781.431461][ C0] Call Trace: [ 781.431470][ C0] [ 781.431479][ C0] ? show_regs+0x8c/0xa0 [ 781.431515][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 781.431551][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 781.431586][ C0] ? nmi_handle+0x1a9/0x5c0 [ 781.431609][ C0] ? fpu__clear_user_states+0x6/0x1e0 [ 781.431640][ C0] ? default_do_nmi+0x6a/0x160 [ 781.431670][ C0] ? exc_nmi+0x170/0x1e0 [ 781.431696][ C0] ? end_repeat_nmi+0xf/0x53 [ 781.431722][ C0] ? arch_do_signal_or_restart+0x580/0x7e0 [ 781.431754][ C0] ? fpu__clear_user_states+0x6/0x1e0 [ 781.431785][ C0] ? fpu__clear_user_states+0x6/0x1e0 [ 781.431817][ C0] ? fpu__clear_user_states+0x6/0x1e0 [ 781.431849][ C0] [ 781.431856][ C0] [ 781.431863][ C0] arch_do_signal_or_restart+0x5b9/0x7e0 [ 781.431896][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 781.431932][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.431971][ C0] ? __do_sys_rt_sigreturn+0x167/0x230 [ 781.432003][ C0] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 781.432039][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 781.432080][ C0] do_syscall_64+0xda/0x250 [ 781.432105][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.432142][ C0] RIP: 0033:0x7fe39b5a6130 [ 781.432160][ C0] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d 1a c8 06 00 e8 25 92 f8 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 781.432183][ C0] RSP: 002b:00007fe39afdda78 EFLAGS: 00000246 [ 781.432200][ C0] RAX: 0000000000000000 RBX: 00007fe39b736130 RCX: 00007fe39b57def9 [ 781.432216][ C0] RDX: 00007fe39afdda80 RSI: 00007fe39afddbb0 RDI: 0000000000000021 [ 781.432231][ C0] RBP: 00007fe39b5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 781.432246][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.432260][ C0] R13: 0000000000000000 R14: 00007fe39b736130 R15: 00007ffffe3e31d8 [ 781.432285][ C0]