last executing test programs: 1m46.929640029s ago: executing program 1 (id=1254): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) inotify_rm_watch(r2, r1) read$char_usb(r2, &(0x7f0000000000)=""/128, 0x80) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[], 0x80001) 1m46.793434604s ago: executing program 1 (id=1256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000004c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x3) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102400, 0x19000) 1m46.654943908s ago: executing program 1 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3", 0xd}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 1m46.640691941s ago: executing program 1 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}}) 1m46.561773285s ago: executing program 1 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) 1m46.415073848s ago: executing program 1 (id=1261): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.35055797s ago: executing program 32 (id=1261): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.057290213s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf2ff, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 43.153331322s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf2ff, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 33.200561437s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf2ff, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 25.019119764s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf2ff, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 12.317081683s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf2ff, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 6.055135558s ago: executing program 5 (id=2049): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88b, &(0x7f0000000280)={0x0, 0xaedf, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) io_uring_enter(r2, 0x52de, 0xf62e, 0x8, 0x0, 0x0) 5.320595875s ago: executing program 3 (id=2053): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.230738734s ago: executing program 3 (id=2054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000002c0)={0x5, 0x7, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.892114533s ago: executing program 5 (id=2057): openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000240)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x6, 0x20005e, 0x83, 0x9}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x1, 0x0, 0x0, 0x9}) 4.811752767s ago: executing program 5 (id=2058): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f000006f000/0x3000)=nil, 0x3000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 4.796228581s ago: executing program 3 (id=2059): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="0005040000009d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)={0x0, 0xf, 0x4, "e7b90010"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0xd, 0x4, "0d8476d5"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000640)={0x0, 0x30, 0x4, "dece0dfd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.693861255s ago: executing program 4 (id=2061): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) setxattr$security_evm(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000740)=ANY=[@ANYRES64=r0], 0x9, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.159325551s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf2ff, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2.263393249s ago: executing program 5 (id=2063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x15, 0x0, r2, 0x1, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.261540855s ago: executing program 4 (id=2064): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) open(0x0, 0xb0400, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000140)={0x11, 0x3, r1, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.164306143s ago: executing program 4 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) 1.99117098s ago: executing program 3 (id=2067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x5) close(r3) write$cgroup_int(r4, &(0x7f0000000040)=0x7, 0x12) writev(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)='h', 0x1}], 0x1) 1.953993765s ago: executing program 4 (id=2068): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x1, {0x3, 0x1, 0x0, 0x1, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x800800, 0x8, 0x0, 0x2000, 0x9f, 0x0, 0x0, 0x501}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) 1.631734427s ago: executing program 3 (id=2071): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) setpgid(0x0, r0) open(&(0x7f0000000140)='./file1\x00', 0x688102, 0x0) 1.217488849s ago: executing program 3 (id=2074): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="00001fbd4dc5", 0x6}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.040008121s ago: executing program 5 (id=2076): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x30, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 864.604809ms ago: executing program 4 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x145) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 743.76171ms ago: executing program 4 (id=2080): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='contention_begin\x00', r3, 0x0, 0x405}, 0x71) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(0x4) 378.344646ms ago: executing program 0 (id=2082): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x101) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x1) rmdir(&(0x7f0000000240)='./file0\x00') 310.163226ms ago: executing program 0 (id=2083): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) 232.650121ms ago: executing program 0 (id=2084): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 188.002424ms ago: executing program 0 (id=2085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000100)='[', 0x1}, {0x0, 0x2}], 0x2) 125.180303ms ago: executing program 0 (id=2086): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1}, 0xfffffff8}], 0x1, 0xcb, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 100.9333ms ago: executing program 5 (id=2087): socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 0 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8007fff, 0x0) kernel console output (not intermixed with test programs): nterface [ 193.191472][ T8633] TC_ACT_REPEAT abuse ? [ 193.198499][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.208340][ T13] bond0 (unregistering): Released all slaves [ 193.360147][ T30] audit: type=1400 audit(1741652170.106:525): avc: denied { create } for pid=9771 comm="syz.3.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.429384][ T30] audit: type=1400 audit(1741652170.156:526): avc: denied { map } for pid=9771 comm="syz.3.1434" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 193.453398][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.547308][ T30] audit: type=1400 audit(1741652170.296:527): avc: denied { bind } for pid=9771 comm="syz.3.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.633202][ T30] audit: type=1400 audit(1741652170.296:528): avc: denied { write } for pid=9771 comm="syz.3.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.652418][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.694972][ T30] audit: type=1400 audit(1741652170.336:529): avc: denied { write } for pid=9785 comm="syz.5.1437" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 193.718151][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.763808][ T30] audit: type=1400 audit(1741652170.486:530): avc: denied { view } for pid=9789 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.788947][ T8625] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.811233][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.824400][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.834461][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.850666][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.858292][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.869835][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.878223][ T30] audit: type=1326 audit(1741652170.626:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623498d169 code=0x7ffc0000 [ 193.901567][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.923776][ T30] audit: type=1326 audit(1741652170.626:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623498d169 code=0x7ffc0000 [ 193.948424][ T30] audit: type=1326 audit(1741652170.626:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f623498d169 code=0x7ffc0000 [ 193.978600][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.989838][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.991926][ T81] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.019435][ T30] audit: type=1326 audit(1741652170.626:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623498d169 code=0x7ffc0000 [ 194.117999][ T13] hsr_slave_0: left promiscuous mode [ 194.129700][ T13] hsr_slave_1: left promiscuous mode [ 194.135481][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.149648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.175673][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.214095][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.229667][ T81] usb 6-1: Using ep0 maxpacket: 32 [ 194.259192][ T81] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 194.267360][ T81] usb 6-1: config 0 has no interface number 0 [ 194.309006][ T13] veth1_macvtap: left promiscuous mode [ 194.310024][ T81] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.331812][ T8611] TC_ACT_REPEAT abuse ? [ 194.339315][ T81] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.347672][ T81] usb 6-1: Product: syz [ 194.352109][ T81] usb 6-1: Manufacturer: syz [ 194.356716][ T81] usb 6-1: SerialNumber: syz [ 194.367521][ T13] veth0_macvtap: left promiscuous mode [ 194.390581][ T81] usb 6-1: config 0 descriptor?? [ 194.393003][ T13] veth1_vlan: left promiscuous mode [ 194.402628][ T81] smsc95xx v2.0.0 [ 194.418398][ T13] veth0_vlan: left promiscuous mode [ 194.778853][ T9813] block device autoloading is deprecated and will be removed. [ 195.100381][ T53] Bluetooth: hci2: command tx timeout [ 195.248860][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 195.274946][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 195.338589][ T13] team0 (unregistering): Port device team_slave_1 removed [ 195.395767][ T9821] ceph: No mds server is up or the cluster is laggy [ 195.437355][ T13] team0 (unregistering): Port device team_slave_0 removed [ 195.456201][ T81] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 195.456808][ T8611] TC_ACT_REPEAT abuse ? [ 195.467243][ T81] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 195.506040][ T81] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 195.529761][ T81] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 195.541363][ T81] usb 6-1: USB disconnect, device number 2 [ 195.562159][ T9828] overlayfs: failed to clone upperpath [ 195.919673][ T9834] ref_ctr_offset mismatch. inode: 0x9fa offset: 0x0 ref_ctr_offset(old): 0x14 ref_ctr_offset(new): 0x0 [ 195.966770][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 196.053834][ T53] Bluetooth: hci4: command tx timeout [ 196.312926][ T9845] netlink: 'syz.5.1459': attribute type 1 has an invalid length. [ 196.434143][ T9849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9849 comm=syz.3.1460 [ 196.581636][ T8633] TC_ACT_REPEAT abuse ? [ 196.635576][ T9849] batadv1: entered allmulticast mode [ 196.933996][ T9793] chnl_net:caif_netlink_parms(): no params data found [ 197.019335][ T5864] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 197.149719][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.183561][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.190470][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.199203][ T9793] bridge_slave_0: entered allmulticast mode [ 197.209576][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.218731][ T9793] bridge_slave_0: entered promiscuous mode [ 197.230608][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.245446][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.259183][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.274642][ T5864] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.278942][ T9793] bridge_slave_1: entered allmulticast mode [ 197.295824][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.306880][ T9793] bridge_slave_1: entered promiscuous mode [ 197.320036][ T5864] usb 5-1: config 0 descriptor?? [ 197.402524][ T9793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.433962][ T9793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.496959][ T9793] team0: Port device team_slave_0 added [ 197.522449][ T9793] team0: Port device team_slave_1 added [ 197.587802][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.601604][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.668549][ T9793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.686079][ T9885] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 197.694455][ T8633] TC_ACT_REPEAT abuse ? [ 197.722905][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.747380][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.796037][ T5864] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 197.806772][ T9793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.814567][ T5873] TC_ACT_REPEAT abuse ? [ 197.822036][ T5864] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 197.905752][ T9793] hsr_slave_0: entered promiscuous mode [ 197.939946][ T9793] hsr_slave_1: entered promiscuous mode [ 197.956265][ T9793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.973982][ T9793] Cannot create hsr debugfs directory [ 198.091490][ T9900] ref_ctr_offset mismatch. inode: 0xa2e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 198.106848][ T5873] usb 5-1: USB disconnect, device number 23 [ 198.129627][ T53] Bluetooth: hci4: command tx timeout [ 198.370073][ T5864] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.387973][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 198.518553][ T9793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.529432][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 198.536714][ T9793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.545056][ T5864] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.555448][ T9793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.562201][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.570583][ T5864] usb 4-1: Product: syz [ 198.574755][ T5864] usb 4-1: Manufacturer: syz [ 198.580966][ T9793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.592693][ T5864] usb 4-1: SerialNumber: syz [ 198.604237][ T5864] usb 4-1: config 0 descriptor?? [ 198.661017][ T9793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.684672][ T9793] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.696304][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.703449][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.725632][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.732830][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.824784][ T8642] TC_ACT_REPEAT abuse ? [ 198.838740][ T5864] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.933129][ T9793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.997917][ T9793] veth0_vlan: entered promiscuous mode [ 199.023359][ T9793] veth1_vlan: entered promiscuous mode [ 199.064191][ T9793] veth0_macvtap: entered promiscuous mode [ 199.083636][ T9793] veth1_macvtap: entered promiscuous mode [ 199.100840][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.129392][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.142362][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.161897][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.171855][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.182471][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.192694][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.213453][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.234632][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.251574][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.269453][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.299455][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.310083][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.329326][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.349612][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.359643][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.381724][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.392466][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.438317][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 199.438334][ T30] audit: type=1400 audit(1741652176.186:545): avc: denied { accept } for pid=9933 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.535273][ T30] audit: type=1400 audit(1741652176.286:546): avc: denied { accept } for pid=9933 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 199.557968][ T9793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.566984][ T9793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.576370][ T9793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.585525][ T9793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.747415][ T8656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.768480][ T8656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.829954][ T8656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.844585][ T8656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.875461][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1494'. [ 199.877735][ T9939] syzkaller0: entered promiscuous mode [ 199.893364][ T9939] syzkaller0: entered allmulticast mode [ 199.905388][ T5864] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 199.920876][ T5864] usb 4-1: USB disconnect, device number 18 [ 199.939863][ T8642] TC_ACT_REPEAT abuse ? [ 200.089506][ T5897] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 200.252819][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.267615][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 200.292552][ T5897] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 200.303821][ T5897] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1847, setting to 64 [ 200.318044][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.327347][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.335467][ T5897] usb 5-1: Product: syz [ 200.340506][ T5897] usb 5-1: Manufacturer: syz [ 200.345120][ T5897] usb 5-1: SerialNumber: syz [ 200.352102][ T9944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 200.569724][ T9944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 200.589543][ T9944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.060495][ T8625] TC_ACT_REPEAT abuse ? [ 201.211650][ T9944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.219128][ T9944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.450861][ T5897] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 201.457341][ T5897] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 201.465983][ T5897] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 201.518446][ T30] audit: type=1400 audit(1741652178.266:547): avc: denied { write } for pid=9959 comm="syz.3.1500" name="fd" dev="proc" ino=33798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 201.540196][ T30] audit: type=1400 audit(1741652178.266:548): avc: denied { add_name } for pid=9959 comm="syz.3.1500" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 201.560110][ T30] audit: type=1400 audit(1741652178.266:549): avc: denied { create } for pid=9959 comm="syz.3.1500" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 201.586701][ T30] audit: type=1400 audit(1741652178.266:550): avc: denied { associate } for pid=9959 comm="syz.3.1500" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.666422][ T5897] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 202.163595][ T8603] TC_ACT_REPEAT abuse ? [ 202.265399][ T5897] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 202.305304][ T5897] usb 5-1: USB disconnect, device number 24 [ 202.312931][ T5897] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 202.443854][ T30] audit: type=1400 audit(1741652179.196:551): avc: denied { ioctl } for pid=9988 comm="syz.4.1513" path="socket:[33836]" dev="sockfs" ino=33836 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 202.479960][ T9985] netlink: 'syz.0.1512': attribute type 39 has an invalid length. [ 202.574610][ T8642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.671440][ T8603] smc: removing ib device syz2 [ 203.289957][ T8611] TC_ACT_REPEAT abuse ? [ 203.725362][ T9996] vlan3: entered allmulticast mode [ 203.764039][ T9996] bridge_slave_0: entered allmulticast mode [ 203.793250][ T9996] bridge_slave_0: left allmulticast mode [ 203.920955][ T8642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.969733][ T1201] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 204.053785][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.064267][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.072807][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.073241][ T8642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.113593][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.121945][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.130810][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.131779][ T1201] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 204.258728][ T1201] usb 5-1: config 0 has no interface number 1 [ 204.299334][ T1201] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 204.309766][ T1201] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.321794][ T1201] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 204.331112][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.341143][ T1201] usb 5-1: SerialNumber: syz [ 204.355037][ T1201] usb 5-1: config 0 descriptor?? [ 204.378261][ T1201] usb 5-1: Found UVC 0.00 device (0002:0000) [ 204.393770][ T1201] usb 5-1: No valid video chain found. [ 204.398753][ T8642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.413260][ T8633] TC_ACT_REPEAT abuse ? [ 204.677684][T10009] chnl_net:caif_netlink_parms(): no params data found [ 204.779584][ T5898] usb 5-1: USB disconnect, device number 25 [ 204.800857][ T8642] bridge_slave_1: left allmulticast mode [ 204.817859][ T8642] bridge_slave_1: left promiscuous mode [ 204.854511][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.883332][ T8642] bridge_slave_0: left allmulticast mode [ 204.900822][ T8642] bridge_slave_0: left promiscuous mode [ 204.913963][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.539734][ T8625] TC_ACT_REPEAT abuse ? [ 205.592890][ T8642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.611862][ T8642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.629096][ T8642] bond0 (unregistering): Released all slaves [ 205.673474][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1529'. [ 205.843621][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.859524][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.872525][T10009] bridge_slave_0: entered allmulticast mode [ 205.879926][T10009] bridge_slave_0: entered promiscuous mode [ 205.892288][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.902213][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.909773][T10009] bridge_slave_1: entered allmulticast mode [ 205.916785][T10009] bridge_slave_1: entered promiscuous mode [ 205.973684][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 206.019853][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 206.027608][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 206.073013][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.105255][ T30] audit: type=1326 audit(1741652182.856:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.3.1533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2132d8d169 code=0x0 [ 206.132700][ T8642] hsr_slave_0: left promiscuous mode [ 206.147236][ T8642] hsr_slave_1: left promiscuous mode [ 206.158143][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.168391][T10057] ceph: No mds server is up or the cluster is laggy [ 206.188071][ T8642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.209737][ T53] Bluetooth: hci4: command tx timeout [ 206.239492][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.262651][ T8642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.362283][ T8642] veth1_macvtap: left promiscuous mode [ 206.374900][ T8642] veth0_macvtap: left promiscuous mode [ 206.393643][ T8642] veth1_vlan: left promiscuous mode [ 206.418953][ T8642] veth0_vlan: left promiscuous mode [ 206.664126][ T8656] TC_ACT_REPEAT abuse ? [ 207.340979][ T30] audit: type=1400 audit(1741652184.086:553): avc: denied { setopt } for pid=10088 comm="syz.3.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.414986][ T1201] TC_ACT_REPEAT abuse ? [ 207.993177][ T8611] TC_ACT_REPEAT abuse ? [ 208.008133][ T8642] team0 (unregistering): Port device team_slave_1 removed [ 208.144161][ T8642] team0 (unregistering): Port device team_slave_0 removed [ 208.229845][ T30] audit: type=1400 audit(1741652184.986:554): avc: denied { mounton } for pid=10106 comm="syz.5.1552" path="/29/file0" dev="proc" ino=4026534216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 208.289763][ T53] Bluetooth: hci4: command tx timeout [ 208.344871][ T30] audit: type=1400 audit(1741652185.096:555): avc: denied { unmount } for pid=9616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 208.515158][T10116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.111100][ T8609] TC_ACT_REPEAT abuse ? [ 209.333885][ C0] TC_ACT_REPEAT abuse ? [ 209.387507][T10125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.457456][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.515534][T10009] team0: Port device team_slave_0 added [ 209.527034][T10009] team0: Port device team_slave_1 added [ 209.615263][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.622905][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.658357][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.673515][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.680701][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.714654][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.798168][T10009] hsr_slave_0: entered promiscuous mode [ 209.804455][T10009] hsr_slave_1: entered promiscuous mode [ 209.812439][T10009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.820803][T10009] Cannot create hsr debugfs directory [ 209.925179][ T53] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 210.113243][T10009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.122086][T10009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.130870][T10009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.143600][T10009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.191113][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.209060][T10009] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.221160][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.228275][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.242019][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.249092][ T8642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.279784][ T8656] TC_ACT_REPEAT abuse ? [ 210.364620][T10009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.379348][ T5873] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 210.386997][ T53] Bluetooth: hci4: command tx timeout [ 210.407145][T10009] veth0_vlan: entered promiscuous mode [ 210.415928][T10009] veth1_vlan: entered promiscuous mode [ 210.433545][T10009] veth0_macvtap: entered promiscuous mode [ 210.442250][T10009] veth1_macvtap: entered promiscuous mode [ 210.454724][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.465534][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.476097][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.486569][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.496762][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.507249][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.517153][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.527945][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.539167][T10009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.550650][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.561254][ T5873] usb 5-1: config 0 has no interfaces? [ 210.568644][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.580247][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.590138][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.600809][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.610833][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.621584][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.639615][ T5873] usb 5-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 210.648676][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.656800][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.668822][ T5873] usb 5-1: Product: syz [ 210.673876][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.684840][ T5873] usb 5-1: Manufacturer: syz [ 210.689780][ T5873] usb 5-1: SerialNumber: syz [ 210.697206][T10009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.705446][ T5873] usb 5-1: config 0 descriptor?? [ 210.714164][T10009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.726335][T10009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.736268][T10009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.749182][T10009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.839748][ T8656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.851201][ T8656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.874636][ T8656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.885773][ T8656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.081312][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 211.432126][ T8603] TC_ACT_REPEAT abuse ? [ 211.927295][ T30] audit: type=1400 audit(1741652188.676:556): avc: denied { ioctl } for pid=10183 comm="syz.5.1582" path="socket:[35260]" dev="sockfs" ino=35260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 212.010612][ T30] audit: type=1400 audit(1741652188.766:557): avc: denied { append } for pid=10187 comm="syz.5.1584" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 212.526411][T10212] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 212.540700][ T8656] TC_ACT_REPEAT abuse ? [ 212.565279][T10212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.574464][T10212] bond3: (slave bond4): making interface the new active one [ 212.582616][T10212] bond3: (slave bond4): Enslaving as an active interface with an up link [ 212.787361][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.094675][ T5897] usb 5-1: USB disconnect, device number 26 [ 213.669724][ T8642] TC_ACT_REPEAT abuse ? [ 214.078493][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1597'. [ 214.099349][ T30] audit: type=1400 audit(1741652190.846:558): avc: denied { ioctl } for pid=10224 comm="syz.4.1599" path="socket:[35456]" dev="sockfs" ino=35456 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 214.276346][ T30] audit: type=1400 audit(1741652191.026:559): avc: denied { nlmsg_read } for pid=10234 comm="syz.0.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.365522][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.377494][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.386376][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.416323][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.424120][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.432060][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.518160][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.692710][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.820791][ T8603] TC_ACT_REPEAT abuse ? [ 214.915448][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.046239][T10239] chnl_net:caif_netlink_parms(): no params data found [ 215.067424][ T13] bridge_slave_1: left allmulticast mode [ 215.074560][ T13] bridge_slave_1: left promiscuous mode [ 215.080405][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.133216][ T13] bridge_slave_0: left allmulticast mode [ 215.139097][ T13] bridge_slave_0: left promiscuous mode [ 215.156225][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.381131][T10268] overlayfs: failed to clone upperpath [ 215.901632][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.915716][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.925484][ T13] bond0 (unregistering): Released all slaves [ 215.952741][ T8625] TC_ACT_REPEAT abuse ? [ 215.988353][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.001041][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.013001][T10239] bridge_slave_0: entered allmulticast mode [ 216.022665][T10239] bridge_slave_0: entered promiscuous mode [ 216.064107][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.073860][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.082824][T10239] bridge_slave_1: entered allmulticast mode [ 216.092406][T10239] bridge_slave_1: entered promiscuous mode [ 216.159152][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.173440][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.229945][ T13] hsr_slave_0: left promiscuous mode [ 216.236086][ T13] hsr_slave_1: left promiscuous mode [ 216.243874][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.251657][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.259322][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.266797][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.283505][ T13] veth1_macvtap: left promiscuous mode [ 216.289124][ T13] veth0_macvtap: left promiscuous mode [ 216.295764][ T13] veth1_vlan: left promiscuous mode [ 216.301206][ T13] veth0_vlan: left promiscuous mode [ 216.473472][ T1201] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 216.540353][ T5819] Bluetooth: hci4: command tx timeout [ 216.569643][ T5868] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 216.641485][ T1201] usb 6-1: Using ep0 maxpacket: 16 [ 216.672160][ T1201] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 216.674418][T10300] overlayfs: failed to clone upperpath [ 216.686212][ T1201] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 216.686236][ T1201] usb 6-1: config 0 has no interface number 0 [ 216.716764][ T1201] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 216.731203][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 216.737481][ T1201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.741490][ T5868] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 216.751182][ T1201] usb 6-1: Product: syz [ 216.757285][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.768897][ T1201] usb 6-1: Manufacturer: syz [ 216.785423][ T1201] usb 6-1: SerialNumber: syz [ 216.805920][ T1201] usb 6-1: config 0 descriptor?? [ 216.818270][ T1201] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 216.831997][ T5868] usb 4-1: config 0 descriptor?? [ 216.835138][ T1201] usb 6-1: No valid video chain found. [ 216.851332][ T5868] gspca_main: sq930x-2.14.0 probing 041e:403c [ 216.882377][ T13] team0 (unregistering): Port device team_slave_1 removed [ 216.967875][ T13] team0 (unregistering): Port device team_slave_0 removed [ 217.015489][ T1201] TC_ACT_REPEAT abuse ? [ 217.046844][ T30] audit: type=1400 audit(1741652193.806:560): avc: denied { listen } for pid=10310 comm="syz.0.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.070504][ T8611] TC_ACT_REPEAT abuse ? [ 217.125939][ T1201] usb 6-1: USB disconnect, device number 3 [ 217.738423][ T30] audit: type=1400 audit(1741652194.436:561): avc: denied { create } for pid=10295 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.896268][ T5868] gspca_sq930x: ucbus_write failed -71 [ 217.905823][ T5868] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 217.917797][ T5868] usb 4-1: USB disconnect, device number 19 [ 218.205527][ T8642] TC_ACT_REPEAT abuse ? [ 218.296247][T10239] team0: Port device team_slave_0 added [ 218.346964][T10239] team0: Port device team_slave_1 added [ 218.382881][T10346] overlayfs: failed to clone upperpath [ 218.510528][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.517473][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.575555][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.614259][ T5819] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 218.628239][ T53] Bluetooth: hci4: command tx timeout [ 218.634634][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.650199][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.677430][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.716532][ T30] audit: type=1400 audit(1741652195.466:562): avc: denied { create } for pid=10355 comm="syz.3.1646" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 218.787375][ T30] audit: type=1400 audit(1741652195.536:563): avc: denied { rename } for pid=10355 comm="syz.3.1646" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=35868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 218.923301][T10239] hsr_slave_0: entered promiscuous mode [ 218.953508][T10239] hsr_slave_1: entered promiscuous mode [ 218.985755][T10239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.024082][T10239] Cannot create hsr debugfs directory [ 219.339908][ T8633] TC_ACT_REPEAT abuse ? [ 219.951992][T10239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.976883][T10239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.985732][T10389] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 219.993312][ T8642] Bluetooth: hci5: Frame reassembly failed (-84) [ 220.010478][T10239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.026969][T10239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.050573][ T81] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 220.072356][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1662'. [ 220.086990][T10395] tipc: Invalid UDP bearer configuration [ 220.087033][T10395] tipc: Enabling of bearer rejected, failed to enable media [ 220.129041][T10239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.154527][T10398] overlayfs: failed to clone upperpath [ 220.167919][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.206042][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.213201][ T8642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.234981][ T81] usb 4-1: config 0 has no interfaces? [ 220.245034][ T81] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 220.263450][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.273097][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.280218][ T8642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.293837][ T81] usb 4-1: Product: syz [ 220.298025][ T81] usb 4-1: Manufacturer: syz [ 220.304347][ T81] usb 4-1: SerialNumber: syz [ 220.311660][ T81] usb 4-1: config 0 descriptor?? [ 220.418622][ T30] audit: type=1400 audit(1741652197.166:564): avc: denied { setattr } for pid=10402 comm="syz.5.1665" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 220.421748][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.467726][T10239] veth0_vlan: entered promiscuous mode [ 220.474970][ T8633] TC_ACT_REPEAT abuse ? [ 220.478499][T10239] veth1_vlan: entered promiscuous mode [ 220.500610][T10239] veth0_macvtap: entered promiscuous mode [ 220.508985][T10239] veth1_macvtap: entered promiscuous mode [ 220.522404][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.533258][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.543258][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.547156][ T81] usb 4-1: USB disconnect, device number 20 [ 220.554927][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.572682][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.583666][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.594028][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.604581][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.615997][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.627550][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.639328][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.649341][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.660657][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.670724][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.681427][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.691251][ T53] Bluetooth: hci4: command tx timeout [ 220.697071][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.708622][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.721077][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.733535][T10239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.743992][T10239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.755209][T10239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.765548][T10239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.824032][ T8625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.833760][ T8625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.859443][ T8633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.867562][ T8633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.582457][ T8642] TC_ACT_REPEAT abuse ? [ 222.049665][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 222.056124][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 222.643472][T10467] Invalid ELF header type: 0 != 1 [ 222.653619][ T30] audit: type=1400 audit(1741652199.386:565): avc: denied { module_load } for pid=10466 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 222.694281][ T5819] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 222.705244][ T5819] Bluetooth: hci1: Injecting HCI hardware error event [ 222.714920][ T53] Bluetooth: hci1: hardware error 0x00 [ 223.060074][ T8603] TC_ACT_REPEAT abuse ? [ 223.469410][ T81] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 223.629365][ T81] usb 6-1: Using ep0 maxpacket: 32 [ 223.644595][ T81] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 223.677495][ T81] usb 6-1: config 0 has no interface number 0 [ 223.717656][ T81] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 223.733262][ T81] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.750435][ T8625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.761431][ T81] usb 6-1: Product: syz [ 223.765754][ T81] usb 6-1: Manufacturer: syz [ 223.775544][ T81] usb 6-1: SerialNumber: syz [ 223.782255][ T81] usb 6-1: config 0 descriptor?? [ 223.794095][ T81] smsc95xx v2.0.0 [ 223.855273][T10503] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1699'. [ 224.190249][ T8633] TC_ACT_REPEAT abuse ? [ 224.200431][ T81] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 224.211571][ T81] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 224.625066][ T81] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 224.635932][ T81] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 224.646689][ T81] usb 6-1: USB disconnect, device number 4 [ 224.769420][ T53] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 224.812409][ T8603] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 225.321175][ T8633] TC_ACT_REPEAT abuse ? [ 225.357465][ T8625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.474350][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.501415][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.510871][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.539875][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.548684][T10534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.568330][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.575789][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.578475][ T8625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.670485][ T1201] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 225.748414][T10519] Invalid option length (1048096) for dns_resolver key [ 225.776453][ T8625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.840669][ T1201] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.851295][ T1201] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 225.870144][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.882692][ T1201] usb 4-1: config 0 descriptor?? [ 225.888455][T10529] chnl_net:caif_netlink_parms(): no params data found [ 225.922190][ T1201] pwc: Askey VC010 type 2 USB webcam detected. [ 226.046299][T10554] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1716'. [ 226.105917][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.123929][T10554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 226.133146][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.153879][T10529] bridge_slave_0: entered allmulticast mode [ 226.166584][T10529] bridge_slave_0: entered promiscuous mode [ 226.177639][ T8625] bridge_slave_1: left allmulticast mode [ 226.187884][ T8625] bridge_slave_1: left promiscuous mode [ 226.196104][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.222172][ T8625] bridge_slave_0: left allmulticast mode [ 226.227846][ T8625] bridge_slave_0: left promiscuous mode [ 226.243880][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.327786][ T1201] pwc: recv_control_msg error -32 req 02 val 2b00 [ 226.335304][ T1201] pwc: recv_control_msg error -32 req 02 val 2700 [ 226.357522][ T1201] pwc: recv_control_msg error -32 req 02 val 2c00 [ 226.368077][ T1201] pwc: recv_control_msg error -32 req 04 val 1000 [ 226.389771][ T1201] pwc: recv_control_msg error -32 req 04 val 1300 [ 226.459772][ T8642] TC_ACT_REPEAT abuse ? [ 226.610431][ T9] TC_ACT_REPEAT abuse ? [ 226.625404][ T1201] pwc: recv_control_msg error -71 req 02 val 2000 [ 226.654177][ T1201] pwc: recv_control_msg error -71 req 02 val 2100 [ 226.670570][ T1201] pwc: recv_control_msg error -71 req 04 val 1500 [ 226.679894][ T1201] pwc: recv_control_msg error -71 req 02 val 2500 [ 226.688243][ T1201] pwc: recv_control_msg error -71 req 02 val 2400 [ 226.697856][ T1201] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.709580][ T1201] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.745592][ T1201] pwc: recv_control_msg error -71 req 02 val 2800 [ 226.764110][ T1201] pwc: recv_control_msg error -71 req 04 val 1100 [ 226.795442][ T1201] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.837285][ T1201] pwc: Registered as video103. [ 226.861092][ T1201] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 226.926773][ T1201] usb 4-1: USB disconnect, device number 21 [ 226.944872][ T8625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.968142][ T8625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.989178][ T8625] bond0 (unregistering): Released all slaves [ 227.014458][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.027570][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.036364][T10529] bridge_slave_1: entered allmulticast mode [ 227.048018][T10529] bridge_slave_1: entered promiscuous mode [ 227.168725][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.306484][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.395046][T10529] team0: Port device team_slave_0 added [ 227.521804][T10529] team0: Port device team_slave_1 added [ 227.580137][ T13] TC_ACT_REPEAT abuse ? [ 227.649835][ T53] Bluetooth: hci4: command tx timeout [ 227.734375][ T8625] hsr_slave_0: left promiscuous mode [ 227.764909][ T8625] hsr_slave_1: left promiscuous mode [ 227.787814][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.802263][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.837608][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.859097][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.918069][ T8625] veth1_macvtap: left promiscuous mode [ 227.941226][ T8625] veth0_macvtap: left promiscuous mode [ 227.951923][ T8625] veth1_vlan: left promiscuous mode [ 227.957249][ T8625] veth0_vlan: left promiscuous mode [ 228.150567][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1736'. [ 228.159469][ T30] audit: type=1400 audit(1741652204.896:566): avc: denied { ioctl } for pid=10609 comm="syz.5.1736" path="socket:[37662]" dev="sockfs" ino=37662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.689810][ T8656] TC_ACT_REPEAT abuse ? [ 229.075811][ T8625] team0 (unregistering): Port device team_slave_1 removed [ 229.147755][ T8625] team0 (unregistering): Port device team_slave_0 removed [ 229.385369][ T30] audit: type=1400 audit(1741652206.126:567): avc: denied { name_bind } for pid=10644 comm="syz.3.1749" path="socket:[38951]" dev="sockfs" ino=38951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.637662][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.644860][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.674494][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.728511][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.742325][ T53] Bluetooth: hci4: command tx timeout [ 229.749469][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.821229][ T8603] TC_ACT_REPEAT abuse ? [ 229.853670][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.995590][T10529] hsr_slave_0: entered promiscuous mode [ 230.011693][T10529] hsr_slave_1: entered promiscuous mode [ 230.018284][T10529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.026132][T10529] Cannot create hsr debugfs directory [ 230.242377][ T1201] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 230.420605][ T1201] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.439898][ T1201] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.469402][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.489467][ T1201] usb 6-1: config 0 descriptor?? [ 230.497133][ T1201] pwc: Askey VC010 type 2 USB webcam detected. [ 230.526521][T10677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.569624][ T81] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 230.586234][T10677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.597483][T10529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.607263][T10529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.616013][T10529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.626309][T10529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.679338][T10529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.742306][ T81] usb 4-1: Using ep0 maxpacket: 8 [ 230.758103][T10529] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.765280][ T81] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 230.773668][ T81] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 230.789199][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.794663][ T81] usb 4-1: config 179 has no interface number 0 [ 230.796369][ T8633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.804568][ T81] usb 4-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 230.845764][T10529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.856893][ T81] usb 4-1: config 179 interface 65 has no altsetting 0 [ 231.098761][ T1201] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.139955][ T1201] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.200283][ T81] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 231.210822][T10529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.280909][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.294980][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.302115][ T8603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.311689][ T8633] TC_ACT_REPEAT abuse ? [ 231.369415][ T1201] pwc: recv_control_msg error -32 req 04 val 1000 [ 231.377090][ T1201] pwc: recv_control_msg error -32 req 04 val 1300 [ 231.394376][ T1201] pwc: recv_control_msg error -32 req 04 val 1400 [ 231.414118][ T1201] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.435279][ T1201] pwc: recv_control_msg error -71 req 02 val 2100 [ 231.455454][ T1201] pwc: recv_control_msg error -71 req 04 val 1500 [ 231.462686][ T1201] pwc: recv_control_msg error -71 req 02 val 2500 [ 231.494816][ T1201] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.513387][ T1201] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.534233][ T1201] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.542401][ T1201] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.554384][ T1201] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.579649][ T1201] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.589409][ T1201] pwc: Registered as video103. [ 231.590865][ T81] usb 4-1: USB disconnect, device number 22 [ 231.598573][ T1201] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 231.641183][T10529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.641739][ T1201] usb 6-1: USB disconnect, device number 5 [ 231.718474][T10529] veth0_vlan: entered promiscuous mode [ 231.736262][T10529] veth1_vlan: entered promiscuous mode [ 231.773933][T10529] veth0_macvtap: entered promiscuous mode [ 231.796663][T10529] veth1_macvtap: entered promiscuous mode [ 231.810977][ T53] Bluetooth: hci4: command tx timeout [ 231.826758][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.838154][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.859330][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.904032][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.931256][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.959287][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.969150][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.999328][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.011182][T10529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.035455][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.059317][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.069159][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.096666][ T30] audit: type=1400 audit(1741652208.846:568): avc: denied { map } for pid=10700 comm="syz.5.1769" path="socket:[39497]" dev="sockfs" ino=39497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 232.129403][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.148495][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.169480][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.218154][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.239555][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.257854][T10529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.305588][T10529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.329327][T10529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.348607][T10529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.357645][T10529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.530079][ T8633] TC_ACT_REPEAT abuse ? [ 232.572635][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.584802][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.707266][ T8625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.801711][T10725] Bluetooth: MGMT ver 1.23 [ 232.893386][ T8625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.194193][T10733] Driver unsupported XDP return value 0 on prog (id 323) dev N/A, expect packet loss! [ 233.799618][ T1201] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 233.807774][ T8603] TC_ACT_REPEAT abuse ? [ 233.969396][ T1201] usb 5-1: Using ep0 maxpacket: 16 [ 233.990633][ T1201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.013486][ T1201] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.024670][ T1201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.044716][ T1201] usb 5-1: Product: syz [ 234.065544][ T1201] usb 5-1: Manufacturer: syz [ 234.078582][ T1201] usb 5-1: SerialNumber: syz [ 234.096565][ T1201] usb 5-1: config 0 descriptor?? [ 234.110865][ T1201] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 234.129465][ T1201] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 234.229740][ T5898] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 234.266097][ T30] audit: type=1400 audit(1741652211.016:569): avc: denied { accept } for pid=10753 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.302352][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1789'. [ 234.390015][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 234.399333][ T5898] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 234.412851][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 234.422646][ T5898] usb 6-1: Product: syz [ 234.426822][ T5898] usb 6-1: Manufacturer: syz [ 234.435024][ T5898] usb 6-1: SerialNumber: syz [ 234.455181][ T5898] usb 6-1: config 0 descriptor?? [ 234.633508][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.745530][ T1201] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 234.920939][ T8625] TC_ACT_REPEAT abuse ? [ 235.095391][ T5898] usb 6-1: USB disconnect, device number 6 [ 235.368023][ T1201] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 235.378787][ T1201] em28xx 5-1:0.0: board has no eeprom [ 235.449289][ T1201] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 235.457127][ T1201] em28xx 5-1:0.0: dvb set to bulk mode. [ 235.463852][ T9] em28xx 5-1:0.0: Binding DVB extension [ 235.472700][ T1201] usb 5-1: USB disconnect, device number 27 [ 235.478959][ T1201] em28xx 5-1:0.0: Disconnecting em28xx [ 235.502897][ T9] em28xx 5-1:0.0: Registering input extension [ 235.510828][ T1201] em28xx 5-1:0.0: Closing input extension [ 235.525172][ T1201] em28xx 5-1:0.0: Freeing device [ 235.610711][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.677832][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.723254][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.778821][ T13] bridge_slave_1: left allmulticast mode [ 235.784777][ T13] bridge_slave_1: left promiscuous mode [ 235.791599][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.802347][ T13] bridge_slave_0: left allmulticast mode [ 235.808010][ T13] bridge_slave_0: left promiscuous mode [ 235.814025][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.031616][ T8611] TC_ACT_REPEAT abuse ? [ 236.209861][ T5867] TC_ACT_REPEAT abuse ? [ 236.346616][T10786] netlink: 'syz.3.1798': attribute type 4 has an invalid length. [ 236.391008][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.414148][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.431153][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.441746][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.451977][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.460750][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.471609][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.480912][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.502061][ T13] bond0 (unregistering): Released all slaves [ 236.949597][ T5898] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 237.030252][ T13] hsr_slave_0: left promiscuous mode [ 237.049371][ T13] hsr_slave_1: left promiscuous mode [ 237.055248][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.074538][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.087275][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.095116][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.121429][ T13] veth1_macvtap: left promiscuous mode [ 237.127075][ T13] veth0_macvtap: left promiscuous mode [ 237.133430][ T13] veth1_vlan: left promiscuous mode [ 237.140868][ T13] veth0_vlan: left promiscuous mode [ 237.143736][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 237.162130][ T5898] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f9.c4 [ 237.193579][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.204595][ T5898] usb 5-1: config 0 descriptor?? [ 237.222307][ T5898] cytherm 5-1:0.0: Cypress thermometer device now attached [ 237.453890][ T1201] usb 5-1: USB disconnect, device number 28 [ 237.464091][ T1201] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 237.602667][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 237.658761][ T53] Bluetooth: hci3: unknown advertising packet type: 0x76 [ 237.658843][ T53] Bluetooth: hci3: unknown advertising packet type: 0xff [ 237.681886][ T53] Bluetooth: hci3: Malformed LE Event: 0x02 [ 237.774556][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 237.793037][ T9] usb 4-1: config 1 has an invalid descriptor of length 76, skipping remainder of the config [ 237.803960][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 237.823432][ T9] usb 4-1: config 1 has no interface number 1 [ 237.830228][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 237.843412][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 237.876951][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.897744][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.907707][ T9] usb 4-1: Product: syz [ 237.921895][ T9] usb 4-1: Manufacturer: syz [ 237.926665][ T9] usb 4-1: SerialNumber: syz [ 238.075761][ T30] audit: type=1400 audit(1741652214.826:570): avc: denied { create } for pid=10845 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 238.136823][ T13] team0 (unregistering): Port device team_slave_1 removed [ 238.213384][ T13] team0 (unregistering): Port device team_slave_0 removed [ 238.313312][ T1201] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 238.480680][ T1201] usb 5-1: Using ep0 maxpacket: 16 [ 238.495744][ T1201] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.518024][ T1201] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 238.537141][ T53] Bluetooth: hci4: command tx timeout [ 238.544172][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.565707][ T1201] usb 5-1: config 0 descriptor?? [ 238.996035][ T1201] apple 0003:05AC:0264.000F: unknown main item tag 0x2 [ 239.006267][ T1201] apple 0003:05AC:0264.000F: hidraw0: USB HID v20.00 Device [HID 05ac:0264] on usb-dummy_hcd.4-1/input0 [ 239.228247][ T1201] usb 5-1: USB disconnect, device number 29 [ 239.247173][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 239.258779][T10864] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.268384][T10864] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.316642][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.323761][T10866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.431052][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.438144][T10866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.497430][ T9] usb 4-1: USB disconnect, device number 23 [ 239.586020][T10788] chnl_net:caif_netlink_parms(): no params data found [ 239.747668][T10788] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.778295][T10874] Process accounting resumed [ 239.779424][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.809876][T10788] bridge_slave_0: entered allmulticast mode [ 239.816807][T10788] bridge_slave_0: entered promiscuous mode [ 239.834426][T10788] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.850995][T10788] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.858264][T10788] bridge_slave_1: entered allmulticast mode [ 239.866600][T10788] bridge_slave_1: entered promiscuous mode [ 239.933592][T10788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.961703][T10788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.026173][T10788] team0: Port device team_slave_0 added [ 240.047302][T10788] team0: Port device team_slave_1 added [ 240.122389][ T30] audit: type=1400 audit(1741652216.876:571): avc: denied { module_load } for pid=10893 comm="syz.5.1842" path="/92/bus" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 240.122566][T10894] Invalid ELF header magic: != ELF [ 240.157567][T10788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.166100][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.194273][T10788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.208627][T10788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.228577][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.252822][ T30] audit: type=1400 audit(1741652216.976:572): avc: denied { getopt } for pid=10899 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.254989][T10788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.380954][T10788] hsr_slave_0: entered promiscuous mode [ 240.388327][T10788] hsr_slave_1: entered promiscuous mode [ 240.396024][T10788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.433107][T10788] Cannot create hsr debugfs directory [ 240.616206][ T53] Bluetooth: hci4: command tx timeout [ 241.110133][ T1201] IPVS: starting estimator thread 0... [ 241.116976][T10913] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 241.209508][T10919] IPVS: using max 55 ests per chain, 132000 per kthread [ 241.470588][T10788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.488591][T10788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.514047][T10788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.534003][T10788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.647475][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1858'. [ 241.713412][T10788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.771609][T10788] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.786853][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.794013][ T8633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.815361][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.822535][ T8633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.966404][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'. [ 242.005734][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 242.156896][T10788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.218989][T10966] vlan2: entered allmulticast mode [ 242.253986][T10966] bond0: entered allmulticast mode [ 242.259151][T10966] bond_slave_0: entered allmulticast mode [ 242.289426][T10966] bond_slave_1: entered allmulticast mode [ 242.310396][T10966] bond0: left allmulticast mode [ 242.316660][T10966] bond_slave_0: left allmulticast mode [ 242.330188][T10966] bond_slave_1: left allmulticast mode [ 242.427438][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 242.443428][T10788] veth0_vlan: entered promiscuous mode [ 242.473538][T10788] veth1_vlan: entered promiscuous mode [ 242.516908][T10788] veth0_macvtap: entered promiscuous mode [ 242.541745][T10788] veth1_macvtap: entered promiscuous mode [ 242.573025][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.583855][ T30] audit: type=1400 audit(1741652219.326:573): avc: denied { cmd } for pid=10976 comm="syz.3.1873" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 242.628554][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.640370][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.651684][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.666386][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.683076][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.694823][ T53] Bluetooth: hci4: command tx timeout [ 242.715325][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.739289][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.764597][T10788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.803617][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.828506][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.842625][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.863448][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.874624][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.890288][ T53] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 242.895941][ T30] audit: type=1400 audit(1741652219.646:574): avc: denied { getopt } for pid=10993 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.899885][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.941780][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.952466][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.963316][T10788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.981909][T10788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.997039][T10788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.005978][T10788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.014848][T10788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.127730][ T8625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.140060][ T8625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.188166][ T8625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.216888][ T8625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.308176][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1890'. [ 244.552202][T11029] input: syz0 as /devices/virtual/input/input21 [ 244.671373][ T8625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.313849][ T8625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.486407][ T8625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.546760][ T8625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.629853][ T8625] bridge_slave_1: left allmulticast mode [ 245.635520][ T8625] bridge_slave_1: left promiscuous mode [ 245.642643][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.652138][ T8625] bridge_slave_0: left allmulticast mode [ 245.657809][ T8625] bridge_slave_0: left promiscuous mode [ 245.663934][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.948950][ T8625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.959019][ T8625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.968913][ T8625] bond0 (unregistering): Released all slaves [ 246.183838][ T30] audit: type=1400 audit(1741652222.936:575): avc: denied { mount } for pid=11031 comm="syz.5.1895" name="/" dev="pstore" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 246.227544][T11035] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 246.244424][ T30] audit: type=1400 audit(1741652222.996:576): avc: denied { watch watch_reads } for pid=11031 comm="syz.5.1895" path="/104/bus" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 246.249371][ T8625] hsr_slave_0: left promiscuous mode [ 246.314452][ T8625] hsr_slave_1: left promiscuous mode [ 246.322155][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.330126][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.339127][ T30] audit: type=1400 audit(1741652223.086:577): avc: denied { unmount } for pid=9616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 246.367158][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.375415][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.405196][ T8625] veth1_macvtap: left promiscuous mode [ 246.411085][ T8625] veth0_macvtap: left promiscuous mode [ 246.416762][ T8625] veth1_vlan: left promiscuous mode [ 246.424816][ T8625] veth0_vlan: left promiscuous mode [ 246.455490][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.466657][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.479520][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.497455][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.510267][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.519502][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.287867][ T30] audit: type=1400 audit(1741652224.036:578): avc: denied { link } for pid=11056 comm="syz.4.1900" name="#46" dev="tmpfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 247.344770][ T30] audit: type=1400 audit(1741652224.076:579): avc: denied { rename } for pid=11056 comm="syz.4.1900" name="#47" dev="tmpfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 247.565585][ T8625] team0 (unregistering): Port device team_slave_1 removed [ 247.632623][ T8625] team0 (unregistering): Port device team_slave_0 removed [ 247.879543][ T1201] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 247.965470][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1905'. [ 248.032597][ T1201] usb 6-1: Using ep0 maxpacket: 32 [ 248.059392][ T1201] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 248.068527][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.082552][ T1201] usb 6-1: config 0 descriptor?? [ 248.090512][ T1201] gspca_main: sunplus-2.14.0 probing 041e:400b [ 248.353373][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 248.402100][T11045] chnl_net:caif_netlink_parms(): no params data found [ 248.436932][ T1201] gspca_sunplus: reg_w_riv err -71 [ 248.445569][ T1201] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 248.468627][ T1201] usb 6-1: USB disconnect, device number 7 [ 248.557370][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.581156][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.588372][T11045] bridge_slave_0: entered allmulticast mode [ 248.609689][ T53] Bluetooth: hci4: command tx timeout [ 248.619134][T11045] bridge_slave_0: entered promiscuous mode [ 248.645664][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.653627][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.661479][T11045] bridge_slave_1: entered allmulticast mode [ 248.668646][T11045] bridge_slave_1: entered promiscuous mode [ 248.699072][T11045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.710980][T11045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.756020][T11045] team0: Port device team_slave_0 added [ 248.769077][T11045] team0: Port device team_slave_1 added [ 248.793655][T11045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.803480][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.834033][T11045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.846765][T11045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.854220][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.904885][T11045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.013029][T11045] hsr_slave_0: entered promiscuous mode [ 249.029723][T11045] hsr_slave_1: entered promiscuous mode [ 249.035840][T11045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.081895][ T30] audit: type=1400 audit(1741652225.826:580): avc: denied { connect } for pid=11103 comm="syz.3.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.109535][T11045] Cannot create hsr debugfs directory [ 249.153925][ T30] audit: type=1400 audit(1741652225.836:581): avc: denied { write } for pid=11105 comm="syz.5.1918" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.212886][ T30] audit: type=1400 audit(1741652225.836:582): avc: denied { open } for pid=11105 comm="syz.5.1918" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.249882][T11108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.273074][T11108] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 249.284117][ T30] audit: type=1400 audit(1741652225.836:583): avc: denied { read append } for pid=11105 comm="syz.5.1918" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.334410][T11108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.349839][ T30] audit: type=1400 audit(1741652225.876:584): avc: denied { read } for pid=11103 comm="syz.3.1919" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.369106][T11108] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 249.416286][T11108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.445333][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1922'. [ 249.448223][T11108] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.454714][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1922'. [ 249.479607][T11108] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.480462][ T53] Bluetooth: hci3: hardware error 0x07 [ 249.514024][T11117] gtp0: entered promiscuous mode [ 249.519511][T11117] gtp0: entered allmulticast mode [ 249.524042][T11108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.535039][T11108] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 249.574862][T11108] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 249.847838][T11045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.860583][T11045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.869567][T11045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.911467][T11045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.987547][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.994432][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.020945][T11045] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.035510][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.042642][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.057974][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.065112][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.159445][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 250.175330][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 250.189125][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.228729][ T9] usb 6-1: Product: syz [ 250.233066][ T9] usb 6-1: Manufacturer: syz [ 250.238479][ T9] usb 6-1: SerialNumber: syz [ 250.251327][ T9] usb 6-1: config 0 descriptor?? [ 250.261619][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 250.294917][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.343661][T11045] veth0_vlan: entered promiscuous mode [ 250.358722][T11045] veth1_vlan: entered promiscuous mode [ 250.397534][T11045] veth0_macvtap: entered promiscuous mode [ 250.407785][T11045] veth1_macvtap: entered promiscuous mode [ 250.434542][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.445414][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.465758][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.476341][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.486434][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.496977][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.506959][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.517970][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.528979][T11045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.543393][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.553922][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.563950][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.574542][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.584474][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.594944][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.604925][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.615658][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.626805][T11045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.638683][T11045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.647786][T11045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.656656][T11045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.666026][T11045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.757894][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.779369][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.828068][ T8642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.842390][ T8642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.249496][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 251.489365][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.569889][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 251.852738][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 251.852774][ T30] audit: type=1400 audit(1741652228.606:588): avc: denied { create } for pid=11178 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 251.919325][ T30] audit: type=1400 audit(1741652228.646:589): avc: denied { sys_admin } for pid=11178 comm="syz.3.1945" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 252.099090][ T9] gspca_sonixj: reg_r err -71 [ 252.104008][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 252.132463][ T9] usb 6-1: USB disconnect, device number 8 [ 252.186854][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1947'. [ 252.226302][T11193] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 252.235527][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1948'. [ 252.827379][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.329574][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 253.569460][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.004474][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.062211][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.133214][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.217748][ T13] bridge_slave_1: left allmulticast mode [ 254.223798][ T13] bridge_slave_1: left promiscuous mode [ 254.229846][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.240295][ T13] bridge_slave_0: left allmulticast mode [ 254.245926][ T13] bridge_slave_0: left promiscuous mode [ 254.251965][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.486991][ T30] audit: type=1800 audit(1741652231.236:590): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1955" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 254.698388][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1959'. [ 254.748783][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1959'. [ 254.867624][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.878559][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.896849][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.906374][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.914536][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 254.923627][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.934649][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.956357][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.977436][ T13] bond0 (unregistering): Released all slaves [ 255.084328][T11235] netlink: 'syz.3.1962': attribute type 1 has an invalid length. [ 255.112105][T11235] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.339737][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 255.411290][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.417604][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.509513][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 255.538974][ T13] hsr_slave_0: left promiscuous mode [ 255.553760][ T13] hsr_slave_1: left promiscuous mode [ 255.555420][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.569116][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.584958][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.592806][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.623889][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.626970][ T9] usb 6-1: Product: syz [ 255.650355][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.656566][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.659290][ T9] usb 6-1: Manufacturer: syz [ 255.713314][ T13] veth1_macvtap: left promiscuous mode [ 255.715085][ T9] usb 6-1: SerialNumber: syz [ 255.729101][ T13] veth0_macvtap: left promiscuous mode [ 255.739946][ T13] veth1_vlan: left promiscuous mode [ 255.745250][ T13] veth0_vlan: left promiscuous mode [ 255.750580][ T9] usb 6-1: config 0 descriptor?? [ 255.810575][ T30] audit: type=1804 audit(1741652232.566:591): pid=11251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1968" name="/newroot/382/file0" dev="tmpfs" ino=2127 res=1 errno=0 [ 255.839734][ T8642] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.962672][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 256.173266][ T30] audit: type=1400 audit(1741652232.926:592): avc: denied { create } for pid=11257 comm="syz.3.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.016025][ T5819] Bluetooth: hci4: command tx timeout [ 257.181709][ T13] team0 (unregistering): Port device team_slave_1 removed [ 257.275125][ T13] team0 (unregistering): Port device team_slave_0 removed [ 257.389337][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 257.408181][ T9] usb 6-1: USB disconnect, device number 9 [ 257.851822][T11269] vlan2: entered promiscuous mode [ 257.867335][T11269] vlan2: entered allmulticast mode [ 257.875411][T11269] hsr_slave_1: entered allmulticast mode [ 257.903994][T11229] chnl_net:caif_netlink_parms(): no params data found [ 258.179093][ T30] audit: type=1400 audit(1741652234.926:593): avc: denied { read append } for pid=11279 comm="syz.3.1977" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.206987][ T30] audit: type=1400 audit(1741652234.926:594): avc: denied { open } for pid=11279 comm="syz.3.1977" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.233117][T11229] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.319636][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.355295][T11229] bridge_slave_0: entered allmulticast mode [ 258.378096][T11229] bridge_slave_0: entered promiscuous mode [ 258.401716][T11229] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.453759][T11229] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.468637][T11229] bridge_slave_1: entered allmulticast mode [ 258.514065][T11229] bridge_slave_1: entered promiscuous mode [ 258.734646][T11229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.746354][T11229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.777463][T11229] team0: Port device team_slave_0 added [ 258.838686][T11229] team0: Port device team_slave_1 added [ 259.006081][T11229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.062325][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.090024][T11229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.092962][ T5819] Bluetooth: hci4: command tx timeout [ 259.107523][T11229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.143329][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.312305][T11229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.393551][T11299] bridge_slave_0: left allmulticast mode [ 259.402085][T11299] bridge_slave_0: left promiscuous mode [ 259.414884][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.438872][T11299] bond0: (slave bond_slave_0): Releasing backup interface [ 259.449044][T11299] bond0: (slave bond_slave_1): Releasing backup interface [ 259.705633][T11299] team0: Port device team_slave_0 removed [ 259.962894][T11299] team0: Port device team_slave_1 removed [ 259.973653][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.984923][T11299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.080188][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.099794][T11299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.135020][T11299] bond2: (slave gretap1): Releasing active interface [ 260.267617][T11300] team0: Mode changed to "loadbalance" [ 260.316292][T11229] hsr_slave_0: entered promiscuous mode [ 260.334121][T11229] hsr_slave_1: entered promiscuous mode [ 260.347137][T11229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.358944][T11229] Cannot create hsr debugfs directory [ 260.384447][T11318] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.623525][T11323] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 260.630068][T11323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.656924][T11323] vhci_hcd vhci_hcd.0: Device attached [ 260.801889][T11328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.839344][ T9] vhci_hcd: vhci_device speed not set [ 260.861396][T11323] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 260.867954][T11323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.894567][T11328] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 260.901203][T11328] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.949358][ T9] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 261.006172][T11323] vhci_hcd vhci_hcd.0: Device attached [ 261.029476][T11328] vhci_hcd vhci_hcd.0: Device attached [ 261.192003][ T5819] Bluetooth: hci4: command tx timeout [ 261.277485][T11328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 261.284980][T11323] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(9) [ 261.292084][T11323] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.304785][T11323] vhci_hcd vhci_hcd.0: Device attached [ 261.423426][T11328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 261.490018][T11323] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 261.549560][T11328] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 261.556214][T11328] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 261.589387][T11328] vhci_hcd vhci_hcd.0: Device attached [ 261.610585][T11339] vhci_hcd: connection closed [ 261.610817][T11332] vhci_hcd: connection closed [ 261.612621][T11342] vhci_hcd: connection closed [ 261.615615][ T13] vhci_hcd: stop threads [ 261.642273][T11324] vhci_hcd: connection reset by peer [ 261.646066][ T13] vhci_hcd: release socket [ 261.647717][T11335] vhci_hcd: connection closed [ 261.671213][ T13] vhci_hcd: disconnect device [ 261.681931][ T13] vhci_hcd: stop threads [ 261.689315][ T13] vhci_hcd: release socket [ 261.694069][ T13] vhci_hcd: disconnect device [ 261.704703][ T13] vhci_hcd: stop threads [ 261.709546][ T13] vhci_hcd: release socket [ 261.714178][ T13] vhci_hcd: disconnect device [ 261.739189][ T13] vhci_hcd: stop threads [ 261.754165][ T13] vhci_hcd: release socket [ 261.773552][ T13] vhci_hcd: disconnect device [ 261.797993][ T13] vhci_hcd: stop threads [ 261.809568][ T13] vhci_hcd: release socket [ 261.829445][ T13] vhci_hcd: disconnect device [ 261.861381][T11229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.875357][T11229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.891294][T11229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.900971][T11229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.954408][T11229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.981750][T11229] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.003836][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.011023][ T8424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.037797][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.045028][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.508794][T11229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.652408][T11229] veth0_vlan: entered promiscuous mode [ 262.686963][T11229] veth1_vlan: entered promiscuous mode [ 262.754252][T11229] veth0_macvtap: entered promiscuous mode [ 262.810274][T11229] veth1_macvtap: entered promiscuous mode [ 262.819721][ T5868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 262.854486][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.869624][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.895193][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.918544][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.929924][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.944359][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.968634][T11229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.981374][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 262.999723][ T5868] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 263.011749][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.013908][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.038268][ T5868] usb 4-1: Product: syz [ 263.046194][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.056403][ T5868] usb 4-1: Manufacturer: syz [ 263.071504][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.076538][ T5868] usb 4-1: SerialNumber: syz [ 263.087048][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.097289][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.108090][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.144359][T11229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.157171][ T5868] usb 4-1: config 0 descriptor?? [ 263.177912][T11229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.238010][T11229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.249527][ T5819] Bluetooth: hci4: command tx timeout [ 263.333377][T11229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.388804][T11229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.417927][ T5868] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 263.556076][ T30] audit: type=1400 audit(1741652240.306:595): avc: denied { mount } for pid=11365 comm="syz.5.2000" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 263.556319][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.599567][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.607926][ T8612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.618854][T11367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 263.633432][ T8612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.777333][ T30] audit: type=1400 audit(1741652240.526:596): avc: denied { unmount } for pid=9616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 264.049701][ T81] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 264.210027][ T81] usb 6-1: Using ep0 maxpacket: 16 [ 264.225686][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.245288][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.269619][ T81] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.292662][ T81] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.312069][ T81] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.339558][ T81] usb 6-1: config 0 descriptor?? [ 264.456511][T11380] gretap0: entered promiscuous mode [ 264.462935][T11380] vlan2: entered promiscuous mode [ 264.761315][ T81] HID 045e:07da: Invalid code 65791 type 1 [ 264.776224][ T81] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0010/input/input22 [ 264.793847][ T81] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 265.006451][T11366] usb 6-1: USB disconnect, device number 10 [ 265.256058][ T5868] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.267071][ T5868] dvbdev: DVB: registering new adapter (Terratec H7) [ 265.284389][ T5868] usb 4-1: media controller created [ 265.381949][ T8612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.455847][ T5868] usb read operation failed. (-71) [ 265.478436][ T5868] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 265.491033][ T5868] usb 4-1: USB disconnect, device number 24 [ 265.579756][T11366] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 265.759414][T11366] usb 5-1: Using ep0 maxpacket: 16 [ 265.765881][T11366] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.776691][T11366] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 265.785959][T11366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.795010][T11366] usb 5-1: config 0 descriptor?? [ 265.802093][T11366] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 266.017490][T11403] input: syz1 as /devices/virtual/input/input24 [ 266.082415][ T5178] bcm5974 5-1:0.0: could not read from device [ 266.092613][T11366] usb 5-1: USB disconnect, device number 30 [ 266.094086][ T5178] bcm5974 5-1:0.0: could not read from device [ 266.119375][ T9] vhci_hcd: vhci_device speed not set [ 266.324305][ T8612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.413962][ T8612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.481121][ T8612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.547598][ T8612] bridge_slave_1: left allmulticast mode [ 266.553343][ T8612] bridge_slave_1: left promiscuous mode [ 266.558961][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.567348][ T8612] bridge_slave_0: left allmulticast mode [ 266.573199][ T8612] bridge_slave_0: left promiscuous mode [ 266.578811][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.873025][ T8612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.883690][ T8612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.893576][ T8612] bond0 (unregistering): Released all slaves [ 267.135192][T11408] overlayfs: failed to clone lowerpath [ 267.162196][ T8612] hsr_slave_0: left promiscuous mode [ 267.168212][T11408] overlayfs: failed to clone upperpath [ 267.178461][ T8612] hsr_slave_1: left promiscuous mode [ 267.184843][T11413] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 267.185386][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.191353][T11413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.206328][T11413] vhci_hcd vhci_hcd.0: Device attached [ 267.209389][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.256292][T11414] vhci_hcd: cannot find the pending unlink 46764 [ 267.283206][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.302585][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.338952][T11414] vhci_hcd: connection closed [ 267.339160][ T2905] vhci_hcd: stop threads [ 267.348338][ T2905] vhci_hcd: release socket [ 267.358064][ T2905] vhci_hcd: disconnect device [ 267.377631][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.397738][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.400223][ T8612] veth1_macvtap: left promiscuous mode [ 267.410878][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.423739][ T8612] veth0_macvtap: left promiscuous mode [ 267.438304][ T8612] veth1_vlan: left promiscuous mode [ 267.440065][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.451120][ T8612] veth0_vlan: left promiscuous mode [ 267.456494][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.466253][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.727195][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'. [ 267.781207][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2021'. [ 267.955964][ T8612] team0 (unregistering): Port device team_slave_1 removed [ 268.010205][ T8612] team0 (unregistering): Port device team_slave_0 removed [ 268.437155][T11412] vlan4: entered allmulticast mode [ 268.443168][T11412] bond0: entered allmulticast mode [ 268.448289][T11412] bond_slave_1: entered allmulticast mode [ 268.455603][T11412] bond0: left allmulticast mode [ 268.460792][T11412] bond_slave_1: left allmulticast mode [ 268.498678][T11432] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2021'. [ 268.689289][ T30] audit: type=1400 audit(1741652245.436:597): avc: denied { listen } for pid=11448 comm="syz.4.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.754347][T11442] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 268.765112][T11442] SELinux: failed to load policy [ 268.785989][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 268.919016][T11423] chnl_net:caif_netlink_parms(): no params data found [ 269.081100][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.088485][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.113465][T11423] bridge_slave_0: entered allmulticast mode [ 269.140095][T11423] bridge_slave_0: entered promiscuous mode [ 269.152722][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.164425][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.175433][T11423] bridge_slave_1: entered allmulticast mode [ 269.185286][T11423] bridge_slave_1: entered promiscuous mode [ 269.250080][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.287360][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.291939][ T30] audit: type=1400 audit(1741652246.036:598): avc: denied { setattr } for pid=11467 comm="syz.5.2032" name="#53" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 269.399043][T11423] team0: Port device team_slave_0 added [ 269.414413][T11423] team0: Port device team_slave_1 added [ 269.485438][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.492888][ T53] Bluetooth: hci4: command tx timeout [ 269.505273][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.532311][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.575161][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.582261][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.615152][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.667272][T11423] hsr_slave_0: entered promiscuous mode [ 269.682534][T11423] hsr_slave_1: entered promiscuous mode [ 269.696037][T11423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.704201][T11423] Cannot create hsr debugfs directory [ 270.599083][T11423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.612745][T11423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.638857][T11423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.659870][T11423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.746234][T11423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.763312][T11423] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.785198][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.792295][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.812182][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.819301][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.840903][T11423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.853562][T11423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.017616][T11423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.087259][T11423] veth0_vlan: entered promiscuous mode [ 271.109080][T11423] veth1_vlan: entered promiscuous mode [ 271.137351][T11423] veth0_macvtap: entered promiscuous mode [ 271.145322][T11423] veth1_macvtap: entered promiscuous mode [ 271.157835][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.168372][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.178467][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.189039][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.194203][T11508] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.2047'. [ 271.199977][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.219016][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.229821][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2047'. [ 271.241994][T11423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.259113][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.269977][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.281621][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.292350][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.304134][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.315425][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.326417][T11423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.336935][T11423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.345840][T11423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.355008][T11423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.365889][T11423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.456705][ T8422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.469008][ T8422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.500563][ T8422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.508958][ T8422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.569716][ T53] Bluetooth: hci4: command tx timeout [ 273.153316][ T81] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 273.209402][ T5864] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 273.309700][ T81] usb 4-1: Using ep0 maxpacket: 32 [ 273.316913][ T81] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.325371][ T81] usb 4-1: config 0 has no interface number 0 [ 273.332570][ T81] usb 4-1: config 0 interface 184 has no altsetting 0 [ 273.341455][ T81] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 273.352416][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.360558][ T81] usb 4-1: Product: syz [ 273.364757][ T81] usb 4-1: Manufacturer: syz [ 273.369960][ T81] usb 4-1: SerialNumber: syz [ 273.375855][ T81] usb 4-1: config 0 descriptor?? [ 273.382413][ T81] smsc75xx v1.0.0 [ 273.387238][ T5864] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 273.396549][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.405051][ T5864] usb 5-1: Product: syz [ 273.410607][ T5864] usb 5-1: Manufacturer: syz [ 273.415493][ T5864] usb 5-1: SerialNumber: syz [ 273.421562][ T5864] usb 5-1: config 0 descriptor?? [ 273.427615][ T5864] ch341 5-1:0.0: ch341-uart converter detected [ 273.538336][ T8644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.666082][ T5864] usb 5-1: failed to receive control message: -71 [ 273.674448][ T5864] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 273.686359][ T5864] usb 5-1: USB disconnect, device number 31 [ 273.694474][ T5864] ch341 5-1:0.0: device disconnected [ 273.986407][ T81] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 273.997359][ T81] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 275.011904][ T81] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 275.023258][ T81] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 275.033160][ T81] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 275.042799][ T81] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 275.053945][ T81] usb 4-1: USB disconnect, device number 25 [ 275.272447][ T8644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.324299][ T8644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.425772][ T8644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.721516][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.733844][ T8644] bridge_slave_1: left allmulticast mode [ 275.739986][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.753989][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.762652][ T8644] bridge_slave_1: left promiscuous mode [ 275.769096][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.776812][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.785672][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.793028][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.830177][ T8644] bridge_slave_0: left allmulticast mode [ 275.835865][ T8644] bridge_slave_0: left promiscuous mode [ 275.968533][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.659285][ T30] audit: type=1400 audit(1741652253.386:599): avc: denied { write } for pid=11567 comm="syz.4.2068" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 276.681373][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.756819][ T30] audit: type=1400 audit(1741652253.506:600): avc: denied { accept } for pid=11585 comm="syz.5.2076" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 276.785223][ T30] audit: type=1400 audit(1741652253.506:601): avc: denied { read } for pid=11585 comm="syz.5.2076" laddr=127.0.0.1 lport=35168 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 277.055942][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.070440][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.082702][ T8644] bond0 (unregistering): Released all slaves [ 277.297832][T11607] overlayfs: failed to clone upperpath [ 277.346430][T11561] chnl_net:caif_netlink_parms(): no params data found [ 277.427592][ T8644] hsr_slave_0: left promiscuous mode [ 277.437756][ T8644] hsr_slave_1: left promiscuous mode [ 277.446247][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.461610][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.473489][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.482949][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.510822][ T8644] veth1_macvtap: left promiscuous mode [ 277.516792][ T8644] veth0_macvtap: left promiscuous mode [ 277.523413][ T8644] veth1_vlan: left promiscuous mode [ 277.548354][ T8644] veth0_vlan: left promiscuous mode [ 277.668316][ T8644] [ 277.670678][ T8644] ============================================ [ 277.676822][ T8644] WARNING: possible recursive locking detected [ 277.679465][ T30] audit: type=1326 audit(1741652254.416:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.0.2088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d6558d169 code=0x0 [ 277.682953][ T8644] 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 Not tainted [ 277.682964][ T8644] -------------------------------------------- [ 277.682969][ T8644] kworker/u8:51/8644 is trying to acquire lock: [ 277.682977][ T8644] ffffc90004b090d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.734743][ T8644] [ 277.734743][ T8644] but task is already holding lock: [ 277.742082][ T8644] ffffc90004df90d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.751619][ T8644] [ 277.751619][ T8644] other info that might help us debug this: [ 277.759654][ T8644] Possible unsafe locking scenario: [ 277.759654][ T8644] [ 277.767074][ T8644] CPU0 [ 277.770325][ T8644] ---- [ 277.773588][ T8644] lock(&rb->spinlock); [ 277.777800][ T8644] lock(&rb->spinlock); [ 277.782019][ T8644] [ 277.782019][ T8644] *** DEADLOCK *** [ 277.782019][ T8644] [ 277.790141][ T8644] May be due to missing lock nesting notation [ 277.790141][ T8644] [ 277.798433][ T8644] 7 locks held by kworker/u8:51/8644: [ 277.803781][ T8644] #0: ffff88801beeb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 277.814116][ T8644] #1: ffffc900030e7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 277.824010][ T8644] #2: ffffffff8fee2250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 277.833293][ T8644] #3: ffffffff8fef7f68 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8c/0xae0 [ 277.843278][ T8644] #4: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run3+0x1d1/0x5a0 [ 277.852652][ T8644] #5: ffffc90004df90d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.862636][ T8644] #6: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 277.872012][ T8644] [ 277.872012][ T8644] stack backtrace: [ 277.877874][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: kworker/u8:51 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 277.877889][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.877898][ T8644] Workqueue: netns cleanup_net [ 277.877911][ T8644] Call Trace: [ 277.877915][ T8644] [ 277.877921][ T8644] dump_stack_lvl+0x116/0x1f0 [ 277.877938][ T8644] print_deadlock_bug+0x2e3/0x410 [ 277.877956][ T8644] __lock_acquire+0x2117/0x3c40 [ 277.877976][ T8644] ? __pfx___lock_acquire+0x10/0x10 [ 277.877992][ T8644] ? __lock_acquire+0xcc5/0x3c40 [ 277.878009][ T8644] lock_acquire.part.0+0x11b/0x380 [ 277.878026][ T8644] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878043][ T8644] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 277.878060][ T8644] ? rcu_is_watching+0x12/0xc0 [ 277.878073][ T8644] ? trace_lock_acquire+0x14e/0x1f0 [ 277.878087][ T8644] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878102][ T8644] ? lock_acquire+0x2f/0xb0 [ 277.878118][ T8644] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878133][ T8644] _raw_spin_lock_irqsave+0x3a/0x60 [ 277.878147][ T8644] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878162][ T8644] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878178][ T8644] ? trace_lock_acquire+0x14e/0x1f0 [ 277.878191][ T8644] ? bpf_trace_run2+0x1c2/0x590 [ 277.878206][ T8644] bpf_ringbuf_reserve+0x57/0x90 [ 277.878227][ T8644] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 277.878238][ T8644] bpf_trace_run2+0x231/0x590 [ 277.878254][ T8644] ? __pfx_bpf_trace_run2+0x10/0x10 [ 277.878270][ T8644] ? hlock_class+0x4e/0x130 [ 277.878284][ T8644] __bpf_trace_contention_begin+0xca/0x110 [ 277.878302][ T8644] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 277.878320][ T8644] ? __lock_acquire+0x15a9/0x3c40 [ 277.878338][ T8644] trace_contention_begin.constprop.0+0xf3/0x170 [ 277.878358][ T8644] __pv_queued_spin_lock_slowpath+0x10b/0xc90 [ 277.878375][ T8644] ? __pfx___lock_acquire+0x10/0x10 [ 277.878390][ T8644] ? __lock_acquire+0xcc5/0x3c40 [ 277.878407][ T8644] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 277.878426][ T8644] do_raw_spin_lock+0x210/0x2c0 [ 277.878437][ T8644] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 277.878449][ T8644] ? lock_acquire+0x2f/0xb0 [ 277.878464][ T8644] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878480][ T8644] _raw_spin_lock_irqsave+0x42/0x60 [ 277.878492][ T8644] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878507][ T8644] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 277.878521][ T8644] ? trace_lock_acquire+0x14e/0x1f0 [ 277.878535][ T8644] ? bpf_trace_run3+0x1d1/0x5a0 [ 277.878551][ T8644] bpf_ringbuf_reserve+0x57/0x90 [ 277.878567][ T8644] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 277.878576][ T8644] bpf_trace_run3+0x240/0x5a0 [ 277.878591][ T8644] ? __pfx_bpf_trace_run3+0x10/0x10 [ 277.878607][ T8644] ? mark_lock+0xb5/0xc60 [ 277.878622][ T8644] ? skb_free_head+0x18a/0x1d0 [ 277.878637][ T8644] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.878651][ T8644] ? __pfx_mark_lock+0x10/0x10 [ 277.878668][ T8644] kmem_cache_free+0x1e9/0x4d0 [ 277.878682][ T8644] skb_free_head+0x18a/0x1d0 [ 277.878697][ T8644] skb_release_data+0x560/0x730 [ 277.878715][ T8644] ? rcu_is_watching+0x12/0xc0 [ 277.878727][ T8644] consume_skb+0xbf/0x100 [ 277.878745][ T8644] netlink_broadcast_filtered+0x3d5/0xef0 [ 277.878765][ T8644] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 277.878781][ T8644] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.878797][ T8644] ? __nla_reserve+0x9c/0xc0 [ 277.878810][ T8644] nlmsg_notify+0x9e/0x220 [ 277.878827][ T8644] inet_ifmcaddr_notify+0x514/0x640 [ 277.878842][ T8644] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 277.878857][ T8644] __ip_mc_dec_group+0x442/0x5b0 [ 277.878872][ T8644] inetdev_event+0x3b4/0x18a0 [ 277.878889][ T8644] ? ib_netdevice_event+0xfd/0x330 [ 277.878906][ T8644] ? __pfx_inetdev_event+0x10/0x10 [ 277.878922][ T8644] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 277.878938][ T8644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 277.878957][ T8644] notifier_call_chain+0xb7/0x410 [ 277.878971][ T8644] ? __pfx_inetdev_event+0x10/0x10 [ 277.878988][ T8644] call_netdevice_notifiers_info+0xbe/0x140 [ 277.879002][ T8644] dev_close_many+0x333/0x6a0 [ 277.879014][ T8644] ? find_held_lock+0x2d/0x110 [ 277.879026][ T8644] ? __pfx_dev_close_many+0x10/0x10 [ 277.879039][ T8644] ? batadv_tt_local_event+0x456/0x7f0 [ 277.879057][ T8644] ? __pfx_lock_release+0x10/0x10 [ 277.879074][ T8644] unregister_netdevice_many_notify+0x48a/0x1f30 [ 277.879094][ T8644] ? __local_bh_enable_ip+0xa4/0x120 [ 277.879114][ T8644] ? batadv_tt_local_event+0x456/0x7f0 [ 277.879131][ T8644] ? __local_bh_enable_ip+0xa4/0x120 [ 277.879148][ T8644] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 277.879170][ T8644] ? unregister_netdevice_queue+0x22f/0x3f0 [ 277.879189][ T8644] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 277.879209][ T8644] ? batadv_softif_destroy_vlan+0xdf/0x160 [ 277.879236][ T8644] default_device_exit_batch+0x867/0xae0 [ 277.879262][ T8644] ? __pfx_default_device_exit_batch+0x10/0x10 [ 277.879286][ T8644] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 277.879308][ T8644] ? __pfx___might_resched+0x10/0x10 [ 277.879333][ T8644] ? __pfx_default_device_exit_batch+0x10/0x10 [ 277.879358][ T8644] ops_exit_list+0x128/0x180 [ 277.879382][ T8644] cleanup_net+0x5c6/0xb30 [ 277.879398][ T8644] ? __pfx_cleanup_net+0x10/0x10 [ 277.879414][ T8644] ? lock_acquire+0x2f/0xb0 [ 277.879434][ T8644] ? process_one_work+0x921/0x1ba0 [ 277.879456][ T8644] process_one_work+0x9c5/0x1ba0 [ 277.879480][ T8644] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 277.879497][ T8644] ? __pfx_process_one_work+0x10/0x10 [ 277.879520][ T8644] ? assign_work+0x1a0/0x250 [ 277.879540][ T8644] worker_thread+0x6c8/0xf00 [ 277.879563][ T8644] ? __kthread_parkme+0x148/0x220 [ 277.879579][ T8644] ? __pfx_worker_thread+0x10/0x10 [ 277.879601][ T8644] kthread+0x3af/0x750 [ 277.879620][ T8644] ? __pfx_kthread+0x10/0x10 [ 277.879637][ T8644] ? lock_acquire+0x2f/0xb0 [ 277.879654][ T8644] ? __pfx_kthread+0x10/0x10 [ 277.879668][ T8644] ret_from_fork+0x45/0x80 [ 277.879686][ T8644] ? __pfx_kthread+0x10/0x10 [ 277.879700][ T8644] ret_from_fork_asm+0x1a/0x30 [ 277.879716][ T8644] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.468571][ T5819] Bluetooth: hci4: command tx timeout [ 279.025231][ T8644] team0 (unregistering): Port device team_slave_1 removed [ 279.059971][ T8644] team0 (unregistering): Port device team_slave_0 removed [ 279.391745][T11561] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 279.843682][ T8644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.912687][ T8644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.952154][ T8644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.001682][ T8644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.080784][ T8644] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.111797][ T8644] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.162050][ T8644] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.212325][ T8644] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.269874][ T8644] bridge_slave_1: left allmulticast mode [ 280.275513][ T8644] bridge_slave_1: left promiscuous mode [ 280.281201][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.288873][ T8644] bridge_slave_0: left allmulticast mode [ 280.294677][ T8644] bridge_slave_0: left promiscuous mode [ 280.300487][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.375335][ T8644] bond1 (unregistering): (slave gretap1): Releasing active interface [ 280.407590][ T8644] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 280.417420][ T8644] geneve2 (unregistering): left promiscuous mode [ 280.425861][ T8644] geneve2 (unregistering): left allmulticast mode [ 280.621012][ T8644] bond0 (unregistering): Released all slaves [ 280.630693][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.641573][ T8644] bond0 (unregistering): Released all slaves [ 280.651009][ T8644] bond1 (unregistering): Released all slaves [ 280.658557][ T8644] bond2 (unregistering): Released all slaves [ 280.668375][ T8644] bond3 (unregistering): (slave bond4): Releasing backup interface [ 280.677355][ T8644] bond3 (unregistering): Released all slaves [ 280.776007][ T8644] bond4 (unregistering): Released all slaves [ 280.869504][ T8644] bond5 (unregistering): Released all slaves [ 280.961620][ T8644] bond0 (unregistering): Released all slaves [ 281.066561][ T8644] bond1 (unregistering): Released all slaves [ 281.156562][ T8644] bond2 (unregistering): Released all slaves [ 281.250361][ T8644] bond3 (unregistering): Released all slaves [ 281.593441][ T8644] hsr_slave_0: left promiscuous mode [ 281.599089][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.606647][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.614147][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.621579][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.631080][ T8644] hsr_slave_0: left promiscuous mode [ 281.636548][ T8644] hsr_slave_1: left promiscuous mode [ 281.644435][ T8644] hsr_slave_1: left allmulticast mode [ 281.650015][ T8644] hsr_slave_1: left promiscuous mode [ 281.655360][ T8644] veth1_macvtap: left promiscuous mode [ 281.660946][ T8644] veth0_macvtap: left promiscuous mode [ 281.666500][ T8644] veth1_vlan: left promiscuous mode [ 281.671878][ T8644] veth0_vlan: left promiscuous mode [ 281.677498][ T8644] veth1_macvtap: left promiscuous mode [ 281.683754][ T8644] veth0_macvtap: left promiscuous mode [ 281.689302][ T8644] veth1_vlan: left promiscuous mode [ 281.694565][ T8644] veth0_vlan: left promiscuous mode [ 281.841766][ T8644] team0 (unregistering): Port device team_slave_1 removed [ 281.863425][ T8644] team0 (unregistering): Port device team_slave_0 removed [ 282.721197][ T8644] IPVS: stop unused estimator thread 0...