last executing test programs: 1m58.287673353s ago: executing program 3 (id=1686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x44}}, 0x0) 1m58.154054594s ago: executing program 3 (id=1687): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) 1m58.049854485s ago: executing program 3 (id=1688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a000e"], 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x40) 1m57.962536819s ago: executing program 3 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1m51.254501646s ago: executing program 3 (id=1713): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) 1m50.968572731s ago: executing program 3 (id=1715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @pic={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) 1m39.135195156s ago: executing program 4 (id=1804): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x37, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119388f76a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x8e, &(0x7f00000001c0)}, 0x10) 1m38.997291725s ago: executing program 4 (id=1805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)) 1m35.671908341s ago: executing program 32 (id=1715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @pic={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) 1m26.702146972s ago: executing program 4 (id=1835): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044944, &(0x7f0000000040)) 1m26.285533772s ago: executing program 4 (id=1838): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m25.978834264s ago: executing program 4 (id=1839): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m25.774492978s ago: executing program 4 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1m10.815969702s ago: executing program 1 (id=1919): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x3c}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m10.500320552s ago: executing program 33 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1m10.488794058s ago: executing program 1 (id=1922): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1m10.176300596s ago: executing program 1 (id=1925): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') 1m9.841928666s ago: executing program 1 (id=1926): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r0, 0x409, 0x8) pwrite64(r0, &(0x7f0000000000)="48ed", 0x2, 0x3) 1m9.555341274s ago: executing program 1 (id=1928): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002"], 0x84}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e00001800000000000000ffdbdf25030005000000000002000000ac1e00010000000000000000030006000000000002000000000000000000000000000000040004000000000000000000000000000000000000000000000000000000000008001200000002000000000000000000060000000000000000000000000000c32f67630000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) 1m9.173251216s ago: executing program 1 (id=1930): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc8200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfe) 54.098233327s ago: executing program 34 (id=1930): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc8200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfe) 53.45433175s ago: executing program 2 (id=1983): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 53.162726267s ago: executing program 2 (id=1986): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2261010000000000140012800900010076657468000000000400028008001300", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000000) 52.504733711s ago: executing program 2 (id=1991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 52.22575289s ago: executing program 2 (id=1993): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 51.28259766s ago: executing program 2 (id=1998): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x17}) 50.762641902s ago: executing program 2 (id=2002): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 46.882518664s ago: executing program 5 (id=2022): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 46.600262112s ago: executing program 5 (id=2023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 45.624265268s ago: executing program 5 (id=2028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) rt_sigpending(0x0, 0x0) 45.449714636s ago: executing program 5 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 45.062120794s ago: executing program 5 (id=2032): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 44.782954579s ago: executing program 5 (id=2033): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TCSETA(r0, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 39.955209185s ago: executing program 6 (id=1921): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 39.784698782s ago: executing program 6 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c0002"], 0x24}}, 0x0) 39.577211469s ago: executing program 6 (id=2052): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x2, 0x440, 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)) 38.895364791s ago: executing program 6 (id=2053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4) 38.687628373s ago: executing program 6 (id=2054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe008c}) 35.64099847s ago: executing program 35 (id=2002): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 29.537766547s ago: executing program 36 (id=2033): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TCSETA(r0, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 29.126044993s ago: executing program 0 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 28.805533184s ago: executing program 0 (id=2092): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 28.442499059s ago: executing program 0 (id=2094): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r1 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 28.086583236s ago: executing program 0 (id=2097): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 27.627537205s ago: executing program 0 (id=2100): r0 = socket$inet6(0xa, 0x3, 0x38) sendto$inet6(r0, &(0x7f0000000000)="8000", 0x2, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) 27.230716619s ago: executing program 0 (id=2102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x10004, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) 23.548424708s ago: executing program 37 (id=2054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe008c}) 22.093955287s ago: executing program 7 (id=2117): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) 20.80837272s ago: executing program 8 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 20.499392388s ago: executing program 8 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 19.987937261s ago: executing program 8 (id=2121): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r1, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 19.901897323s ago: executing program 7 (id=2122): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x10, 0x0, 0x0, r0}, 0x10) 19.597740071s ago: executing program 7 (id=2123): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r0, 0x0, 0x0) 19.485857926s ago: executing program 8 (id=2124): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, &(0x7f00000000c0)) 19.259993033s ago: executing program 8 (id=2125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x802) 19.087390464s ago: executing program 8 (id=2126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)=0x2) 18.518499151s ago: executing program 7 (id=2127): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000005340)={0x78, 0x0, r1, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r2, r3, 0xb, 0x8, 0x1000000}}}, 0x78) 18.374148328s ago: executing program 7 (id=2128): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xff) 18.185568657s ago: executing program 7 (id=2129): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743c, 0x0) 16.133895728s ago: executing program 9 (id=2131): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) read$msr(r0, 0x0, 0x0) 15.698038713s ago: executing program 9 (id=2132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0)=r0, 0x4) 15.568953978s ago: executing program 9 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xd}}, {0x8, 0xb, 0xfffffff2}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 15.458834259s ago: executing program 9 (id=2134): setresuid(0x0, 0xee01, 0x0) r0 = fanotify_init(0x200, 0x0) close(r0) 15.335086571s ago: executing program 9 (id=2135): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2020) 15.216680672s ago: executing program 9 (id=2136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000003c0)={0x3}) 11.991767611s ago: executing program 38 (id=2102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x10004, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) 4.053976099s ago: executing program 39 (id=2126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)=0x2) 3.02584903s ago: executing program 40 (id=2129): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743c, 0x0) 0s ago: executing program 41 (id=2136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000003c0)={0x3}) kernel console output (not intermixed with test programs): object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.723237][ T30] audit: type=1400 audit(1751481102.504:469): avc: denied { read write } for pid=9403 comm="syz.4.1553" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.754368][ T30] audit: type=1400 audit(1751481102.504:470): avc: denied { open } for pid=9403 comm="syz.4.1553" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.887785][ T30] audit: type=1400 audit(1751481102.504:471): avc: denied { ioctl } for pid=9403 comm="syz.4.1553" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.084845][ T30] audit: type=1400 audit(1751481102.734:472): avc: denied { execmem } for pid=9407 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.177565][ T30] audit: type=1400 audit(1751481103.104:473): avc: denied { create } for pid=9412 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.322911][ T30] audit: type=1400 audit(1751481103.124:474): avc: denied { write } for pid=9412 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.864712][ T9430] netlink: 'syz.2.1566': attribute type 29 has an invalid length. [ 178.266218][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 180.582206][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 180.582221][ T30] audit: type=1400 audit(1751481107.564:509): avc: denied { create } for pid=9514 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.763491][ T30] audit: type=1400 audit(1751481107.614:510): avc: denied { setopt } for pid=9514 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.901684][ T30] audit: type=1400 audit(1751481107.614:511): avc: denied { write } for pid=9514 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.922248][ T5875] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 181.054645][ T30] audit: type=1400 audit(1751481107.624:512): avc: denied { create } for pid=9515 comm="syz.3.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.131476][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 181.175677][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 181.216442][ T30] audit: type=1400 audit(1751481107.714:513): avc: denied { allowed } for pid=9518 comm="syz.0.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.253280][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 181.352451][ T5875] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 181.384950][ T30] audit: type=1400 audit(1751481107.714:514): avc: denied { create } for pid=9518 comm="syz.0.1609" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.422947][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.492178][ T5875] usb 4-1: Product: syz [ 181.517924][ T5875] usb 4-1: Manufacturer: syz [ 181.556584][ T5875] usb 4-1: SerialNumber: syz [ 181.564237][ T30] audit: type=1400 audit(1751481108.234:515): avc: denied { create } for pid=9528 comm="syz.2.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.640188][ T5875] usb 4-1: config 0 descriptor?? [ 181.727173][ T30] audit: type=1400 audit(1751481108.274:516): avc: denied { setopt } for pid=9528 comm="syz.2.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.882598][ T30] audit: type=1400 audit(1751481108.274:517): avc: denied { listen } for pid=9528 comm="syz.2.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.224423][ T9] usb 4-1: USB disconnect, device number 21 [ 182.298357][ T30] audit: type=1400 audit(1751481109.274:518): avc: denied { create } for pid=9543 comm="syz.4.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.511421][ T5875] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 182.694494][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 182.723470][ T5875] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.771778][ T5875] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.820168][ T5875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.884880][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.968095][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.024392][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.037079][ T9557] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1627'. [ 183.099472][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 183.185265][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.268286][ T5882] usb 1-1: USB disconnect, device number 13 [ 183.300489][ T5875] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 183.380117][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.453698][ T5875] usb 3-1: config 0 descriptor?? [ 183.729959][ T5875] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 184.059011][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1635'. [ 184.081913][ T10] usb 3-1: USB disconnect, device number 16 [ 184.128632][ T10] usblp0: removed [ 184.789080][ T9588] tmpfs: Cannot disable swap on remount [ 185.604583][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 185.611662][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 185.617725][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 185.994283][ T10] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 186.187546][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 186.219152][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 186.268171][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.316760][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.362467][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.433619][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 186.459908][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 186.494025][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 186.494040][ T30] audit: type=1400 audit(1751481113.474:538): avc: denied { create } for pid=9623 comm="syz.3.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.530145][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.565459][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.587403][ T30] audit: type=1400 audit(1751481113.504:539): avc: denied { listen } for pid=9623 comm="syz.3.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.618092][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.655885][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 186.668774][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 186.713553][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.773381][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.832760][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.886021][ T10] usb 1-1: string descriptor 0 read error: -22 [ 186.904300][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 186.940274][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.050651][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 187.072228][ T30] audit: type=1400 audit(1751481114.044:540): avc: denied { read write } for pid=9627 comm="syz.3.1661" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.244258][ T30] audit: type=1400 audit(1751481114.044:541): avc: denied { open } for pid=9627 comm="syz.3.1661" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.739950][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1665'. [ 187.905266][ T30] audit: type=1400 audit(1751481114.884:542): avc: denied { read } for pid=9639 comm="syz.4.1667" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.939759][ T30] audit: type=1400 audit(1751481114.914:543): avc: denied { open } for pid=9639 comm="syz.4.1667" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.990624][ T30] audit: type=1400 audit(1751481114.914:544): avc: denied { ioctl } for pid=9639 comm="syz.4.1667" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.479789][ T30] audit: type=1400 audit(1751481115.454:545): avc: denied { create } for pid=9646 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.535087][ T30] audit: type=1400 audit(1751481115.494:546): avc: denied { connect } for pid=9646 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.593466][ T30] audit: type=1400 audit(1751481115.494:547): avc: denied { write } for pid=9646 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.978856][ T9652] netlink: 'syz.4.1672': attribute type 4 has an invalid length. [ 189.001437][ T9652] netlink: 'syz.4.1672': attribute type 2 has an invalid length. [ 189.543600][ T5875] usb 1-1: USB disconnect, device number 14 [ 189.658930][ T9667] sp0: Synchronizing with TNC [ 189.750237][ T9666] [U] è [ 190.324544][ T9676] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 190.358757][ T9676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.395332][ T9678] overlayfs: workdir and upperdir must be separate subtrees [ 190.902131][ T9688] ip6tnl1: entered promiscuous mode [ 190.907409][ T9688] ip6tnl1: entered allmulticast mode [ 190.924609][ T9688] team0: Device ip6tnl1 is of different type [ 192.040324][ T9692] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.1691'. [ 192.105349][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 192.105366][ T30] audit: type=1400 audit(1751481119.084:571): avc: denied { create } for pid=9693 comm="syz.1.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.171442][ T30] audit: type=1400 audit(1751481119.124:572): avc: denied { write } for pid=9693 comm="syz.1.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.190934][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.316767][ T9699] sch_fq: defrate 4294967295 ignored. [ 192.798724][ T9713] Bluetooth: MGMT ver 1.23 [ 193.165583][ T30] audit: type=1400 audit(1751481120.144:573): avc: denied { create } for pid=9724 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.201602][ T9725] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 193.223777][ T30] audit: type=1400 audit(1751481120.174:574): avc: denied { connect } for pid=9724 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.280464][ T30] audit: type=1400 audit(1751481120.184:575): avc: denied { bind } for pid=9724 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.778838][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.787175][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.637727][ T30] audit: type=1326 audit(1751481124.604:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f269a78e929 code=0x0 [ 197.794906][ T30] audit: type=1400 audit(1751481124.664:577): avc: denied { connect } for pid=9734 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.917032][ T30] audit: type=1400 audit(1751481124.684:578): avc: denied { create } for pid=9733 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.056193][ T30] audit: type=1400 audit(1751481124.694:579): avc: denied { setopt } for pid=9733 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.154805][ T30] audit: type=1400 audit(1751481124.694:580): avc: denied { write } for pid=9733 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.521583][ T5875] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 198.716128][ T5875] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 198.752620][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.779839][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.805610][ T30] audit: type=1326 audit(1751481125.774:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f269a78e929 code=0x0 [ 198.847563][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.917809][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.947885][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.991857][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.027795][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.049175][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.107171][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.146307][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.173172][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.217130][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.252918][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.291775][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.347763][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.375606][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.399371][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.444410][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.477753][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.511402][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.583148][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.633038][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.676902][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.761337][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.808534][ T5875] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 199.859043][ T5875] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 199.898983][ T30] audit: type=1400 audit(1751481126.874:582): avc: denied { connect } for pid=9767 comm="syz.4.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.929897][ T5875] usb 1-1: Product: syz [ 199.946920][ T5875] usb 1-1: Manufacturer: syz [ 199.974468][ T5875] usb 1-1: SerialNumber: syz [ 199.997763][ T5875] usb 1-1: config 0 descriptor?? [ 200.014143][ T30] audit: type=1400 audit(1751481126.874:583): avc: denied { name_connect } for pid=9767 comm="syz.4.1726" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 200.079958][ T5875] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 200.166067][ T30] audit: type=1400 audit(1751481126.924:584): avc: denied { setopt } for pid=9767 comm="syz.4.1726" lport=60887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.261537][ T30] audit: type=1400 audit(1751481127.184:585): avc: denied { ioctl } for pid=9771 comm="syz.2.1727" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 200.505564][ T5875] usb 1-1: USB disconnect, device number 15 [ 200.516258][ T5875] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 200.623918][ T9776] dummy0: entered promiscuous mode [ 201.462845][ T5875] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 201.622863][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.653872][ T5875] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.676934][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.725523][ T5875] usb 1-1: config 0 descriptor?? [ 201.954956][ T5875] usbhid 1-1:0.0: can't add hid device: -71 [ 201.973269][ T5875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 202.023156][ T5875] usb 1-1: USB disconnect, device number 16 [ 202.501779][ T5875] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 202.664860][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 202.688195][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.725261][ T5875] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 202.790187][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.857992][ T5875] usb 1-1: config 0 descriptor?? [ 202.946409][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 202.946432][ T30] audit: type=1400 audit(1751481129.924:591): avc: denied { write } for pid=9815 comm="syz.4.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.972791][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.124767][ T5875] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 203.158847][ T5875] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 203.264848][ T30] audit: type=1400 audit(1751481130.244:592): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=3143 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.289881][ C0] powermate: config urb returned -71 [ 203.301488][ C0] powermate: config urb returned -71 [ 203.307201][ C0] powermate: config urb returned -71 [ 203.312849][ T5875] usb 1-1: USB disconnect, device number 17 [ 203.319713][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 203.319752][ C0] powermate: config urb returned -71 [ 203.409993][ T30] audit: type=1400 audit(1751481130.244:593): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3143 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.575479][ T30] audit: type=1400 audit(1751481130.244:594): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3143 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.939147][ T9829] [U] `è [ 204.021688][ T30] audit: type=1400 audit(1751481130.994:595): avc: denied { append } for pid=9830 comm="syz.2.1755" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.044391][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.779247][ T30] audit: type=1400 audit(1751481131.754:596): avc: denied { mount } for pid=9844 comm="syz.2.1762" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 204.859490][ T30] audit: type=1400 audit(1751481131.834:597): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 205.005510][ T9850] random: crng reseeded on system resumption [ 205.015397][ T30] audit: type=1400 audit(1751481131.984:598): avc: denied { write } for pid=9849 comm="syz.2.1764" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 205.102030][ T30] audit: type=1400 audit(1751481131.984:599): avc: denied { open } for pid=9849 comm="syz.2.1764" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 205.125318][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.491416][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 207.709142][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.762005][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.849676][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.890263][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.951736][ T9] usb 2-1: Product: syz [ 207.955954][ T9] usb 2-1: Manufacturer: syz [ 207.960546][ T9] usb 2-1: SerialNumber: syz [ 208.026776][ T30] audit: type=1400 audit(1751481135.004:600): avc: denied { read write } for pid=9902 comm="syz.4.1787" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 208.184584][ T30] audit: type=1400 audit(1751481135.004:601): avc: denied { open } for pid=9902 comm="syz.4.1787" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 208.209761][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.524233][ T9] usb 2-1: cannot find UAC_HEADER [ 208.606907][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.662366][ T9914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1794'. [ 208.864560][ T5875] usb 2-1: USB disconnect, device number 13 [ 208.906262][ T9820] udevd[9820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.191775][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 212.669742][ T9942] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 212.669742][ T9942] The task syz.1.1807 (9942) triggered the difference, watch for misbehavior. [ 214.193357][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.203410][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.213152][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.231343][ T5882] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.245723][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.258984][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.274372][ T30] audit: type=1400 audit(1751481141.254:602): avc: denied { ioctl } for pid=9952 comm="syz-executor" path="socket:[22290]" dev="sockfs" ino=22290 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.338791][ T30] audit: type=1400 audit(1751481141.294:603): avc: denied { mounton } for pid=9952 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 214.486420][ T5882] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 214.505328][ T5882] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 214.526425][ T5882] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 214.551964][ T5882] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 214.575909][ T5882] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 214.603270][ T5882] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 214.623880][ T5882] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 214.643665][ T5882] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 214.663792][ T5882] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 214.684576][ T5882] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.705743][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.731499][ T5882] usb 2-1: Product: syz [ 214.735759][ T5882] usb 2-1: Manufacturer: syz [ 214.740356][ T5882] usb 2-1: SerialNumber: syz [ 214.772788][ T5882] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.018990][ T30] audit: type=1400 audit(1751481141.994:604): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 215.093313][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.178532][ T9952] chnl_net:caif_netlink_parms(): no params data found [ 215.473708][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.485115][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.496034][ T9952] bridge_slave_0: entered allmulticast mode [ 215.509056][ T9952] bridge_slave_0: entered promiscuous mode [ 215.533394][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.544902][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.553523][ T9952] bridge_slave_1: entered allmulticast mode [ 215.565896][ T9952] bridge_slave_1: entered promiscuous mode [ 215.685949][ T9952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.705261][ T9952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.807642][ T5882] usb 2-1: USB disconnect, device number 14 [ 215.848664][ T9952] team0: Port device team_slave_0 added [ 215.860021][ T9952] team0: Port device team_slave_1 added [ 215.953811][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.966948][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.998522][ T9952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.021885][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.028914][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.059337][ T9952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.179026][ T9952] hsr_slave_0: entered promiscuous mode [ 216.189224][ T9952] hsr_slave_1: entered promiscuous mode [ 216.199019][ T9952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.207742][ T9952] Cannot create hsr debugfs directory [ 216.402151][ T5822] Bluetooth: hci5: command tx timeout [ 216.481512][ T9] usb 2-1: Service connection timeout for: 256 [ 216.506670][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 216.538357][ T9] ath9k_htc: Failed to initialize the device [ 216.566194][ T5882] usb 2-1: ath9k_htc: USB layer deinitialized [ 216.787570][ T9952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.839064][ T9952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.869992][ T9952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.934826][ T9952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.179085][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.237210][ T9952] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.274209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.281398][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.324198][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.331432][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.548580][ T30] audit: type=1400 audit(1751481144.524:605): avc: denied { sys_module } for pid=9952 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 217.867968][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.049047][ T30] audit: type=1400 audit(1751481145.024:606): avc: denied { bind } for pid=9985 comm="syz.1.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.388187][ T9952] veth0_vlan: entered promiscuous mode [ 218.416184][ T9952] veth1_vlan: entered promiscuous mode [ 218.461697][ T5882] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.481913][ T5822] Bluetooth: hci5: command tx timeout [ 218.497694][ T9952] veth0_macvtap: entered promiscuous mode [ 218.510268][ T9952] veth1_macvtap: entered promiscuous mode [ 218.538515][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.562710][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.586350][ T9952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.598408][ T9952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.608523][ T9952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.624561][ T9952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.641603][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 218.656407][ T5882] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 218.674212][ T5882] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 218.687613][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 218.711815][ T5882] usb 2-1: config 1 has no interface number 0 [ 218.717989][ T5882] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.758889][ T5882] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 218.824529][ T5882] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 218.848250][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.865311][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.889701][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.943294][ T5882] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 218.984186][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.002729][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.050013][ T30] audit: type=1400 audit(1751481146.024:607): avc: denied { mounton } for pid=9952 comm="syz-executor" path="/root/syzkaller.ff1RrR/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 219.119260][ T30] audit: type=1400 audit(1751481146.054:608): avc: denied { mount } for pid=9952 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 219.186850][ T5882] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 219.244680][ T30] audit: type=1400 audit(1751481146.064:609): avc: denied { mounton } for pid=9952 comm="syz-executor" path="/root/syzkaller.ff1RrR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 219.360474][ T30] audit: type=1400 audit(1751481146.064:610): avc: denied { mounton } for pid=9952 comm="syz-executor" path="/root/syzkaller.ff1RrR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 219.531945][ T30] audit: type=1400 audit(1751481146.064:611): avc: denied { unmount } for pid=9952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 219.584520][ T30] audit: type=1400 audit(1751481146.084:612): avc: denied { mounton } for pid=9952 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 219.663952][ T30] audit: type=1400 audit(1751481146.084:613): avc: denied { mount } for pid=9952 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 219.716064][ T10] usb 2-1: USB disconnect, device number 15 [ 219.740493][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 219.813348][ T30] audit: type=1400 audit(1751481146.084:614): avc: denied { mounton } for pid=9952 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 219.893821][ T30] audit: type=1326 audit(1751481146.324:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454d8e929 code=0x7ffc0000 [ 219.979858][ T30] audit: type=1326 audit(1751481146.324:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa454d8e929 code=0x7ffc0000 [ 220.098483][ T30] audit: type=1326 audit(1751481146.324:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454d8e929 code=0x7ffc0000 [ 220.168766][ T30] audit: type=1326 audit(1751481146.324:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454d8e929 code=0x7ffc0000 [ 220.265580][ T30] audit: type=1326 audit(1751481146.324:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa454d8e929 code=0x7ffc0000 [ 220.566667][ T5822] Bluetooth: hci5: command tx timeout [ 221.651495][ T5875] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 221.815126][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.827092][ T5875] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.838827][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.866736][ T5875] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.878903][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.893110][ T5875] usb 2-1: Product: syz [ 221.897301][ T5875] usb 2-1: Manufacturer: syz [ 221.902919][ T5875] usb 2-1: SerialNumber: syz [ 221.915373][ T5875] hub 2-1:1.0: bad descriptor, ignoring hub [ 221.929621][ T5875] hub 2-1:1.0: probe with driver hub failed with error -5 [ 222.200554][ T5875] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.552200][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 222.645950][ T5822] Bluetooth: hci5: command tx timeout [ 222.761425][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 222.774897][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.774930][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.774965][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 222.774986][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.777249][ T10] usb 3-1: config 0 descriptor?? [ 222.822767][ T5875] usb 2-1: USB disconnect, device number 16 [ 222.836390][ T5875] usblp0: removed [ 223.220613][ T10] corsair 0003:1B1C:1B02.0027: invalid report_count 26673 [ 223.263929][ T10] corsair 0003:1B1C:1B02.0027: item 0 2 1 9 parsing failed [ 223.306027][ T10] corsair 0003:1B1C:1B02.0027: parse failed [ 223.345852][ T10] corsair 0003:1B1C:1B02.0027: probe with driver corsair failed with error -22 [ 223.446324][ T10] usb 3-1: USB disconnect, device number 17 [ 224.191651][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 224.381500][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 224.420592][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.453374][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 224.476937][ T10] usb 2-1: string descriptor 0 read error: -22 [ 224.509174][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 224.559412][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.624387][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 224.705861][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.802051][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 224.809295][ T10] usb 2-1: media controller created [ 224.989537][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.922193][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 226.100212][ T10] usb 2-1: USB disconnect, device number 17 [ 226.761412][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 226.843309][T10071] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1851'. [ 226.994810][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 227.047090][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.111430][ T10] usb 3-1: Product: syz [ 227.124883][T10074] netlink: 'syz.0.1852': attribute type 10 has an invalid length. [ 227.136713][ T10] usb 3-1: Manufacturer: syz [ 227.161682][ T10] usb 3-1: SerialNumber: syz [ 227.190481][T10074] team0: Device ipvlan1 failed to register rx_handler [ 227.207412][ T10] usb 3-1: config 0 descriptor?? [ 227.232992][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 227.233010][ T30] audit: type=1400 audit(1751481154.204:628): avc: denied { setopt } for pid=10075 comm="syz.1.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.259678][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.296978][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 227.394300][ T30] audit: type=1400 audit(1751481154.264:629): avc: denied { create } for pid=10073 comm="syz.0.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.942781][ T10] gspca_sunplus: reg_w_riv err -71 [ 227.952551][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 228.039221][ T10] usb 3-1: USB disconnect, device number 18 [ 228.861435][ T30] audit: type=1400 audit(1751481155.834:630): avc: denied { create } for pid=10082 comm="syz.1.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 229.105018][ T30] audit: type=1400 audit(1751481156.084:631): avc: denied { connect } for pid=10082 comm="syz.1.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 229.799252][T10109] IPVS: stopping master sync thread 10110 ... [ 229.815307][T10110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 231.662197][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.709280][T10144] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.831507][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 231.848868][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 231.901528][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.961121][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.018913][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 232.071513][T10146] sp0: Synchronizing with TNC [ 232.111362][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 232.149612][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.219169][ T9] usb 2-1: config 0 descriptor?? [ 232.708561][ T9] redragon 0003:0C45:760B.0028: unknown main item tag 0x6 [ 232.762616][ T9] redragon 0003:0C45:760B.0028: unexpected long global item [ 232.795861][ T9] redragon 0003:0C45:760B.0028: probe with driver redragon failed with error -22 [ 232.827107][ T30] audit: type=1400 audit(1751481159.794:632): avc: denied { setopt } for pid=10149 comm="syz.5.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.906618][ T9] usb 2-1: USB disconnect, device number 18 [ 233.287565][ T30] audit: type=1400 audit(1751481160.264:633): avc: denied { append } for pid=10153 comm="syz.5.1887" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.389495][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.423792][ T30] audit: type=1400 audit(1751481161.404:634): avc: denied { setopt } for pid=10170 comm="syz.1.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.167559][ T30] audit: type=1400 audit(1751481162.144:635): avc: denied { watch } for pid=10183 comm="syz.5.1902" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.211960][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.291017][ T10] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 235.463566][ T30] audit: type=1400 audit(1751481162.144:636): avc: denied { watch_sb watch_reads } for pid=10183 comm="syz.5.1902" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.508880][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.545223][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 235.584847][ T10] usb 2-1: config 0 has no interface number 0 [ 235.617742][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.706919][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 235.765562][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 235.820146][T10193] support for the xor transformation has been removed. [ 235.867118][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 235.947057][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 236.044234][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.135230][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 236.159901][T10196] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 236.199591][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.259729][ T10] usb 2-1: config 0 descriptor?? [ 236.297412][T10181] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.338874][T10181] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.452431][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 236.823161][ T30] audit: type=1800 audit(1751481163.804:637): pid=10207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1911" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 236.849099][ T10] usb 2-1: USB disconnect, device number 19 [ 236.918740][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 237.684461][T10215] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1916'. [ 238.130600][ T30] audit: type=1400 audit(1751481165.104:638): avc: denied { connect } for pid=10220 comm="syz.1.1919" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.736712][ T30] audit: type=1326 audit(1751481165.714:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.5.1924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa454d8e929 code=0x0 [ 239.416573][ T30] audit: type=1400 audit(1751481166.384:640): avc: denied { create } for pid=10238 comm="syz.1.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 239.592310][ T30] audit: type=1400 audit(1751481166.454:641): avc: denied { write } for pid=10238 comm="syz.1.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 239.795952][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.808436][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.822342][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.832239][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.839810][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.185440][ T30] audit: type=1400 audit(1751481167.154:642): avc: denied { create } for pid=10251 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.321791][ T30] audit: type=1400 audit(1751481167.194:643): avc: denied { bind } for pid=10251 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.765786][ T30] audit: type=1400 audit(1751481167.744:644): avc: denied { read open } for pid=10262 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.964494][T10266] futex_wake_op: syz.0.1938 tries to shift op by -1; fix this program [ 240.994680][ T30] audit: type=1400 audit(1751481167.774:645): avc: denied { getattr } for pid=10262 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.226764][ T30] audit: type=1400 audit(1751481167.804:646): avc: denied { listen } for pid=10261 comm="syz.5.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.413996][ T30] audit: type=1400 audit(1751481167.834:647): avc: denied { read } for pid=10261 comm="syz.5.1937" path="socket:[23881]" dev="sockfs" ino=23881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.921385][ T5820] Bluetooth: hci1: command tx timeout [ 242.385868][T10242] chnl_net:caif_netlink_parms(): no params data found [ 242.966716][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.021722][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.028967][T10242] bridge_slave_0: entered allmulticast mode [ 243.089489][T10242] bridge_slave_0: entered promiscuous mode [ 243.117153][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.181439][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.188668][T10242] bridge_slave_1: entered allmulticast mode [ 243.262280][T10242] bridge_slave_1: entered promiscuous mode [ 243.533904][T10242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.951502][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 244.002831][ T5820] Bluetooth: hci1: command tx timeout [ 244.115167][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.127663][ T9] usb 6-1: config 0 has no interface number 0 [ 244.135213][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.150585][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.170599][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 244.186335][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.199499][ T9] usb 6-1: config 0 descriptor?? [ 244.634040][ T9] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 244.654084][ T9] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 244.666985][ T9] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 244.676645][ T9] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 244.691650][ T9] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 244.698895][ T9] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 244.710613][ T9] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 244.733359][ T9] prodikeys 0003:041E:2801.0029: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 244.760163][ T9] hid_prodikeys: hid-prodikeys: failed to find output report [ 244.760163][ T9] [ 244.907027][ T9] usb 6-1: USB disconnect, device number 2 [ 245.982295][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 245.982310][ T30] audit: type=1400 audit(1751481172.964:654): avc: denied { append } for pid=10331 comm="syz.5.1965" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.039586][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 246.083798][ T5820] Bluetooth: hci1: command tx timeout [ 246.723812][T10146] [U] è`è`è [ 247.025000][T10334] Falling back ldisc for ttynull. [ 247.041663][ T5820] Bluetooth: hci2: command 0x0405 tx timeout [ 247.452096][ T30] audit: type=1400 audit(1751481174.434:655): avc: denied { watch watch_reads } for pid=10349 comm="syz.5.1973" path="/58" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 247.474947][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.131407][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 248.162899][ T5822] Bluetooth: hci1: command tx timeout [ 248.281613][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 248.298374][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 248.309352][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.320445][ T9] usb 6-1: Product: syz [ 248.329201][ T9] usb 6-1: Manufacturer: syz [ 248.336816][ T9] usb 6-1: SerialNumber: syz [ 248.352288][ T9] usb 6-1: config 0 descriptor?? [ 248.366902][ T9] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 249.004487][ T9] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 249.017839][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 249.037189][ T9] usb 6-1: USB disconnect, device number 3 [ 249.851785][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 250.038863][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 250.053224][ T9] usb 6-1: no configurations [ 250.058074][ T9] usb 6-1: can't read configurations, error -22 [ 252.092168][ T5820] Bluetooth: hci5: command tx timeout [ 254.164822][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 255.019113][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.036042][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.053732][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.065111][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.073750][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.205662][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.212704][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.232934][T10314] kthread_run failed with err -4 [ 255.248454][T10242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.587777][T10242] team0: Port device team_slave_0 added [ 255.684317][T10242] team0: Port device team_slave_1 added [ 256.089171][T10382] veth3: entered promiscuous mode [ 256.108893][T10242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.163875][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.352653][T10242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.403360][ T30] audit: type=1400 audit(1751481183.384:656): avc: denied { getopt } for pid=10388 comm="syz.0.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.446668][T10242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.514367][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.612944][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1992'. [ 256.672856][T10242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.822908][T10397] netlink: zone id is out of range [ 256.873163][T10397] netlink: zone id is out of range [ 256.908439][T10397] netlink: zone id is out of range [ 256.933426][T10397] netlink: zone id is out of range [ 256.956061][T10397] netlink: zone id is out of range [ 257.002009][T10397] netlink: zone id is out of range [ 257.029604][T10397] netlink: zone id is out of range [ 257.057640][T10397] netlink: zone id is out of range [ 257.093149][T10397] netlink: zone id is out of range [ 257.126170][ T5822] Bluetooth: hci3: command tx timeout [ 257.157420][T10242] hsr_slave_0: entered promiscuous mode [ 257.167539][T10397] netlink: zone id is out of range [ 257.222166][T10242] hsr_slave_1: entered promiscuous mode [ 257.228310][T10242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.344585][T10242] Cannot create hsr debugfs directory [ 257.425942][ T30] audit: type=1400 audit(1751481184.404:657): avc: denied { create } for pid=10402 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.571571][ T30] audit: type=1400 audit(1751481184.444:658): avc: denied { bind } for pid=10402 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.144297][ T30] audit: type=1400 audit(1751481185.124:659): avc: denied { read append } for pid=10411 comm="syz.5.2000" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.190221][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.384530][ T30] audit: type=1400 audit(1751481185.124:660): avc: denied { open } for pid=10411 comm="syz.5.2000" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.578122][ T30] audit: type=1400 audit(1751481185.204:661): avc: denied { ioctl } for pid=10411 comm="syz.5.2000" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.677681][T10416] gretap0: entered promiscuous mode [ 258.745873][T10416] vlan2: entered promiscuous mode [ 259.161378][ T30] audit: type=1400 audit(1751481186.134:662): avc: denied { getopt } for pid=10426 comm="syz.5.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.201551][ T5822] Bluetooth: hci3: command tx timeout [ 259.243230][ T30] audit: type=1400 audit(1751481186.134:663): avc: denied { name_connect } for pid=10426 comm="syz.5.2007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 259.796631][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 260.309820][T10443] netlink: 'syz.0.2014': attribute type 4 has an invalid length. [ 260.309841][T10443] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2014'. [ 261.091464][T10242] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.167175][T10242] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.282208][ T5822] Bluetooth: hci3: command tx timeout [ 261.289478][T10242] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.340263][ T30] audit: type=1400 audit(1751481188.314:664): avc: denied { write } for pid=10453 comm="syz.0.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 261.374763][T10454] atomic_op ffff888035947198 conn xmit_atomic 0000000000000000 [ 261.425673][T10369] chnl_net:caif_netlink_parms(): no params data found [ 261.495745][T10242] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 262.089007][ T30] audit: type=1800 audit(1751481189.064:665): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2022" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 262.313061][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.329317][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.368872][T10369] bridge_slave_0: entered allmulticast mode [ 262.408448][T10369] bridge_slave_0: entered promiscuous mode [ 262.468363][T10369] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.521671][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.528900][T10369] bridge_slave_1: entered allmulticast mode [ 262.605487][T10369] bridge_slave_1: entered promiscuous mode [ 262.637211][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 262.687719][T10479] net_ratelimit: 3 callbacks suppressed [ 262.687738][T10479] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 262.718485][T10479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.940245][T10369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.031911][T10369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.324980][T10242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.364076][ T5822] Bluetooth: hci3: command tx timeout [ 263.452359][T10369] team0: Port device team_slave_0 added [ 263.511857][T10242] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.568151][T10369] team0: Port device team_slave_1 added [ 263.577686][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2029'. [ 263.607374][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2029'. [ 263.806874][T10369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.860430][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.915028][ T30] audit: type=1400 audit(1751481190.884:666): avc: denied { connect } for pid=10491 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.045933][T10369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.068772][ T30] audit: type=1400 audit(1751481190.884:667): avc: denied { setopt } for pid=10491 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.088387][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.168551][T10369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.208450][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.279014][T10369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.329883][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.337929][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.390333][T10495] mkiss: ax0: crc mode is auto. [ 264.458110][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'. [ 264.590008][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2036'. [ 264.618592][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.625835][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.648172][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2036'. [ 264.795710][T10369] hsr_slave_0: entered promiscuous mode [ 264.805987][T10369] hsr_slave_1: entered promiscuous mode [ 264.815826][T10369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.826696][T10369] Cannot create hsr debugfs directory [ 265.026354][T10242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.499356][T10510] raw_sendmsg: syz.0.2039 forgot to set AF_INET. Fix it! [ 265.983887][T10369] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.039180][T10369] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.118846][T10369] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 266.183806][T10242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.209318][T10369] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 266.227978][T10518] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2042'. [ 266.719737][T10369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.819885][T10369] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.883831][ T3113] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.891014][ T3113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.009929][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.017112][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.426945][T10242] veth0_vlan: entered promiscuous mode [ 267.514925][T10242] veth1_vlan: entered promiscuous mode [ 267.651519][T10242] veth0_macvtap: entered promiscuous mode [ 267.684180][T10242] veth1_macvtap: entered promiscuous mode [ 267.739601][T10242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.815185][T10242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.884774][T10242] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.931751][T10242] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.954781][T10242] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.968076][T10242] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.065234][T10369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.307477][T10549] netlink: 'syz.0.2049': attribute type 7 has an invalid length. [ 268.334524][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.352741][T10549] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 268.381603][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.509798][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.552575][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.125857][T10369] veth0_vlan: entered promiscuous mode [ 269.177195][T10369] veth1_vlan: entered promiscuous mode [ 269.279171][T10369] veth0_macvtap: entered promiscuous mode [ 269.337511][T10369] veth1_macvtap: entered promiscuous mode [ 269.390003][T10369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.414205][T10369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.429945][T10369] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.449758][T10369] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.470317][T10369] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.487448][T10369] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.644703][ T3113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.679965][ T3113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.736702][ T3113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.748177][ T3113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.283333][T10570] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 270.478838][ T30] audit: type=1400 audit(1751481197.454:668): avc: denied { setopt } for pid=10571 comm="syz.7.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.809011][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.823705][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.837686][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.856853][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.868603][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.404971][T10609] chnl_net:caif_netlink_parms(): no params data found [ 274.634910][T10609] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.647704][T10609] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.657464][T10609] bridge_slave_0: entered allmulticast mode [ 274.669690][T10609] bridge_slave_0: entered promiscuous mode [ 274.690020][T10609] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.698738][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.713037][T10609] bridge_slave_1: entered allmulticast mode [ 274.720504][T10609] bridge_slave_1: entered promiscuous mode [ 274.860554][T10609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.879977][T10609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.016625][T10609] team0: Port device team_slave_0 added [ 275.028175][T10609] team0: Port device team_slave_1 added [ 275.167711][T10609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.178948][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.218717][T10609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.236635][T10609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.244848][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.284062][T10609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.570196][T10609] hsr_slave_0: entered promiscuous mode [ 275.579946][T10609] hsr_slave_1: entered promiscuous mode [ 275.589175][T10609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.600347][T10609] Cannot create hsr debugfs directory [ 275.695578][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.922022][ T5820] Bluetooth: hci0: command tx timeout [ 276.126377][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2074'. [ 276.255361][T10609] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 276.342225][T10609] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 276.385735][T10609] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 276.487387][T10609] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 276.763140][T10609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.846915][T10609] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.904659][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.911862][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.987436][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.994640][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.378155][T10639] ALSA: mixer_oss: invalid OSS volume 'u' [ 277.835764][T10609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.001606][ T5820] Bluetooth: hci0: command tx timeout [ 278.157116][T10653] netlink: 504 bytes leftover after parsing attributes in process `syz.7.2084'. [ 278.686895][T10609] veth0_vlan: entered promiscuous mode [ 278.742149][T10609] veth1_vlan: entered promiscuous mode [ 278.844229][T10609] veth0_macvtap: entered promiscuous mode [ 278.899966][T10609] veth1_macvtap: entered promiscuous mode [ 278.960441][T10609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.004035][T10609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.036918][T10609] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.069932][T10609] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.106228][T10609] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.125365][T10609] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.513558][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.579892][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.829029][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.900348][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.082005][ T5820] Bluetooth: hci0: command tx timeout [ 280.918063][T10685] sd 0:0:1:0: device reset [ 280.943891][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.953256][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.962638][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.970448][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.980213][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.369403][ T30] audit: type=1400 audit(1751481208.344:669): avc: denied { read } for pid=10690 comm="syz.0.2100" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.162105][ T5820] Bluetooth: hci0: command tx timeout [ 282.184851][T10693] orangefs_mount: mount request failed with -4 [ 282.913922][T10686] chnl_net:caif_netlink_parms(): no params data found [ 283.042139][ T5820] Bluetooth: hci6: command tx timeout [ 283.316854][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.338392][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.367330][T10686] bridge_slave_0: entered allmulticast mode [ 283.407434][T10686] bridge_slave_0: entered promiscuous mode [ 283.422441][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.429884][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.468634][T10686] bridge_slave_1: entered allmulticast mode [ 283.521801][T10686] bridge_slave_1: entered promiscuous mode [ 283.744593][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.779290][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.098727][T10686] team0: Port device team_slave_0 added [ 284.119686][T10686] team0: Port device team_slave_1 added [ 284.266539][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.276357][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.312482][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 284.320619][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.342850][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.357698][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.394060][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.481530][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 284.489404][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.521574][ T9] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 284.538545][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.556978][ T9] usb 9-1: config 0 descriptor?? [ 284.597305][T10686] hsr_slave_0: entered promiscuous mode [ 284.637217][T10686] hsr_slave_1: entered promiscuous mode [ 284.665311][T10686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.678827][T10686] Cannot create hsr debugfs directory [ 285.033720][ T9] steelseries 0003:1038:1410.002A: not enough fields in HID_OUTPUT_REPORT 0 [ 285.122056][ T5820] Bluetooth: hci6: command tx timeout [ 285.320604][ T5882] usb 9-1: USB disconnect, device number 2 [ 285.393017][T10686] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 285.447753][T10686] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 285.506064][T10686] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 285.554378][T10686] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 286.083413][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.223266][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.348621][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.355838][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.530098][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.530204][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.648343][ T5822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.650238][ T5822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.652830][ T5822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.654008][ T5822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.654519][ T5822] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.742981][T10686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.202398][ T5820] Bluetooth: hci6: command tx timeout [ 287.630055][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.489684][T10758] netlink: 'syz.8.2120': attribute type 7 has an invalid length. [ 288.643713][T10758] : entered promiscuous mode [ 288.721733][ T5820] Bluetooth: hci7: command tx timeout [ 289.079591][T10739] chnl_net:caif_netlink_parms(): no params data found [ 289.090266][ T30] audit: type=1400 audit(1751481216.064:670): avc: denied { create } for pid=10765 comm="syz.7.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.213873][ T30] audit: type=1400 audit(1751481216.094:671): avc: denied { bind } for pid=10765 comm="syz.7.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.301501][ T5820] Bluetooth: hci6: command tx timeout [ 289.417151][ T30] audit: type=1326 audit(1751481216.394:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.7.2123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f132b78e929 code=0x0 [ 289.752563][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.810353][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.850059][T10739] bridge_slave_0: entered allmulticast mode [ 289.874832][T10739] bridge_slave_0: entered promiscuous mode [ 289.907288][T10686] veth0_vlan: entered promiscuous mode [ 289.954109][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.984916][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.995800][T10739] bridge_slave_1: entered allmulticast mode [ 290.014693][T10739] bridge_slave_1: entered promiscuous mode [ 290.035690][T10686] veth1_vlan: entered promiscuous mode [ 290.199725][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.219660][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.366013][T10780] CUSE: info not properly terminated [ 290.480265][T10739] team0: Port device team_slave_0 added [ 290.519273][T10739] team0: Port device team_slave_1 added [ 290.739840][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.766964][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.799188][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.824067][ T5820] Bluetooth: hci7: command tx timeout [ 290.929619][T10686] veth0_macvtap: entered promiscuous mode [ 290.970644][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.971958][T10785] syz.7.2129 (10785) used obsolete PPPIOCDETACH ioctl [ 290.994753][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.035254][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.126839][T10686] veth1_macvtap: entered promiscuous mode [ 291.327587][T10739] hsr_slave_0: entered promiscuous mode [ 291.337944][T10739] hsr_slave_1: entered promiscuous mode [ 291.348611][T10739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.360018][T10739] Cannot create hsr debugfs directory [ 291.388787][T10686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.432276][T10686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.526618][T10686] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.544626][T10686] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.557982][T10686] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.573917][T10686] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.981799][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.027750][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.096850][ T4167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.116553][ T4167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.342706][ T30] audit: type=1400 audit(1751481219.324:673): avc: denied { name_bind } for pid=10786 comm="syz.9.2088" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 292.425685][ T30] audit: type=1400 audit(1751481219.344:674): avc: denied { node_bind } for pid=10786 comm="syz.9.2088" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 292.535497][T10789] new mount options do not match the existing superblock, will be ignored [ 292.553937][ T30] audit: type=1400 audit(1751481219.534:675): avc: denied { mount } for pid=10788 comm="syz.9.2130" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 292.584803][T10789] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 292.636320][ T30] audit: type=1400 audit(1751481219.564:676): avc: denied { remount } for pid=10788 comm="syz.9.2130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 292.673678][ T30] audit: type=1400 audit(1751481219.644:677): avc: denied { unmount } for pid=10686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 292.789992][ T30] audit: type=1400 audit(1751481219.764:678): avc: denied { read write } for pid=10790 comm="syz.9.2131" name="mouse0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 292.877681][ T30] audit: type=1400 audit(1751481219.764:679): avc: denied { open } for pid=10790 comm="syz.9.2131" path="/dev/input/mouse0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 292.915923][ T5820] Bluetooth: hci7: command tx timeout [ 294.962699][ T5820] Bluetooth: hci7: command tx timeout [ 297.569474][ T5822] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 297.606093][ T5822] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 297.615431][ T5822] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 297.628662][ T5822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 297.638301][ T5822] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 299.681980][ T5822] Bluetooth: hci8: command tx timeout [ 301.761477][ T5822] Bluetooth: hci8: command tx timeout [ 303.844468][ T5822] Bluetooth: hci8: command tx timeout [ 305.240562][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.253145][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.270014][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.278473][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.288162][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.923106][ T5820] Bluetooth: hci8: command tx timeout [ 306.193184][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.208575][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.231914][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.240206][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.253927][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.362106][ T5822] Bluetooth: hci1: command tx timeout [ 308.323781][ T5822] Bluetooth: hci2: command tx timeout [ 308.906357][T10804] chnl_net:caif_netlink_parms(): no params data found [ 309.441744][ T5822] Bluetooth: hci1: command tx timeout [ 309.523223][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.530353][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.587394][T10804] bridge_slave_0: entered allmulticast mode [ 309.643233][T10804] bridge_slave_0: entered promiscuous mode [ 309.705017][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.741362][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.748615][T10804] bridge_slave_1: entered allmulticast mode [ 309.809393][T10804] bridge_slave_1: entered promiscuous mode [ 309.880381][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.892278][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.900121][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.913841][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.922695][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.084766][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.143742][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.411513][ T5820] Bluetooth: hci2: command tx timeout [ 310.499358][T10804] team0: Port device team_slave_0 added [ 310.545421][T10804] team0: Port device team_slave_1 added [ 310.872453][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.879444][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.980008][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.999377][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.007982][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.053453][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.078815][T10811] chnl_net:caif_netlink_parms(): no params data found [ 311.453657][T10804] hsr_slave_0: entered promiscuous mode [ 311.467780][T10804] hsr_slave_1: entered promiscuous mode [ 311.475733][T10804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.490194][T10804] Cannot create hsr debugfs directory [ 311.536190][ T5820] Bluetooth: hci1: command tx timeout [ 311.999080][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.007341][ T5820] Bluetooth: hci5: command tx timeout [ 312.047346][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.056232][T10811] bridge_slave_0: entered allmulticast mode [ 312.097816][T10811] bridge_slave_0: entered promiscuous mode [ 312.120246][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.136083][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.146606][T10811] bridge_slave_1: entered allmulticast mode [ 312.176139][T10811] bridge_slave_1: entered promiscuous mode [ 312.226400][T10816] chnl_net:caif_netlink_parms(): no params data found [ 312.453783][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.481653][ T5820] Bluetooth: hci2: command tx timeout [ 312.550606][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.935418][T10826] chnl_net:caif_netlink_parms(): no params data found [ 312.959686][T10811] team0: Port device team_slave_0 added [ 313.037194][T10811] team0: Port device team_slave_1 added [ 313.456069][T10816] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.467809][T10816] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.479529][T10816] bridge_slave_0: entered allmulticast mode [ 313.506270][T10816] bridge_slave_0: entered promiscuous mode [ 313.545052][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.557367][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.598042][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.609048][ T5820] Bluetooth: hci1: command tx timeout [ 313.624225][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.649525][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.665462][T10816] bridge_slave_1: entered allmulticast mode [ 313.676614][T10816] bridge_slave_1: entered promiscuous mode [ 313.716042][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.735079][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.778560][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.046275][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.062035][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.070346][T10826] bridge_slave_0: entered allmulticast mode [ 314.081743][ T5820] Bluetooth: hci5: command tx timeout [ 314.099120][T10826] bridge_slave_0: entered promiscuous mode [ 314.123708][T10816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.218028][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.232090][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.239348][T10826] bridge_slave_1: entered allmulticast mode [ 314.260060][T10826] bridge_slave_1: entered promiscuous mode [ 314.278743][T10816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.555342][T10811] hsr_slave_0: entered promiscuous mode [ 314.561912][ T5820] Bluetooth: hci2: command tx timeout [ 314.577348][T10811] hsr_slave_1: entered promiscuous mode [ 314.588083][T10811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.605840][T10811] Cannot create hsr debugfs directory [ 314.687592][T10816] team0: Port device team_slave_0 added [ 314.783051][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.805855][T10816] team0: Port device team_slave_1 added [ 314.840341][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.196908][T10826] team0: Port device team_slave_0 added [ 315.227288][T10826] team0: Port device team_slave_1 added [ 315.249467][T10816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.257925][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.295284][T10816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.552671][T10816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.559641][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.602908][T10816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.696892][T10826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.711341][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.759762][T10826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.880040][T10826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.889754][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.929664][T10826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.113589][T10816] hsr_slave_0: entered promiscuous mode [ 316.123486][T10816] hsr_slave_1: entered promiscuous mode [ 316.140601][T10816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.150368][T10816] Cannot create hsr debugfs directory [ 316.161591][ T5820] Bluetooth: hci5: command tx timeout [ 316.408210][T10826] hsr_slave_0: entered promiscuous mode [ 316.429255][T10826] hsr_slave_1: entered promiscuous mode [ 316.445374][T10826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.457981][T10826] Cannot create hsr debugfs directory [ 316.659418][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.673504][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.242131][ T5820] Bluetooth: hci5: command tx timeout [ 322.752334][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.043949][ T13] bridge_slave_1: left allmulticast mode [ 347.049759][ T13] bridge_slave_1: left promiscuous mode [ 347.098640][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.160128][ T13] bridge_slave_0: left allmulticast mode [ 347.208538][ T13] bridge_slave_0: left promiscuous mode [ 347.231584][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.298876][ T13] tipc: Resetting bearer [ 347.507496][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.520138][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.529991][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.538770][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.547432][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.939047][ T13] tipc: Disabling bearer [ 349.600979][ T5822] Bluetooth: hci0: command tx timeout [ 351.691203][ T5822] Bluetooth: hci0: command tx timeout [ 353.762665][ T5822] Bluetooth: hci0: command tx timeout [ 355.845641][ T5822] Bluetooth: hci0: command tx timeout [ 357.000078][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 357.000094][ T30] audit: type=1400 audit(1751481283.974:681): avc: denied { recv } for pid=9663 comm="kworker/1:10" saddr=10.128.0.169 src=49772 daddr=10.128.0.127 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.966708][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.975955][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.984016][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.992171][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.999677][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.081416][ T5822] Bluetooth: hci3: command tx timeout [ 362.161631][ T5822] Bluetooth: hci3: command tx timeout [ 364.241170][ T5822] Bluetooth: hci3: command tx timeout [ 366.061913][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.070962][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.079982][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.088539][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.097938][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.321273][ T5822] Bluetooth: hci3: command tx timeout [ 366.736755][ T5820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.749092][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.760907][ T5820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.769182][ T5820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.777912][ T5820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.161529][ T5820] Bluetooth: hci4: command tx timeout [ 368.399862][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.452634][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.483342][ T13] bond0 (unregistering): Released all slaves [ 368.801131][ T5820] Bluetooth: hci6: command tx timeout [ 369.645058][T10856] chnl_net:caif_netlink_parms(): no params data found [ 370.241923][ T5820] Bluetooth: hci4: command tx timeout [ 370.262086][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.269212][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.290169][ T5822] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 370.304764][ T5822] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 370.313203][ T5822] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 370.327461][ T5822] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 370.335237][ T5822] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 370.402337][T10856] bridge_slave_0: entered allmulticast mode [ 370.409753][T10856] bridge_slave_0: entered promiscuous mode [ 370.453536][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.482122][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.501574][T10856] bridge_slave_1: entered allmulticast mode [ 370.508974][T10856] bridge_slave_1: entered promiscuous mode [ 370.899051][ T5822] Bluetooth: hci6: command tx timeout [ 370.916648][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.978012][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.356653][T10856] team0: Port device team_slave_0 added [ 371.448093][T10856] team0: Port device team_slave_1 added [ 371.672705][T10853] chnl_net:caif_netlink_parms(): no params data found [ 371.687301][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.703400][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.746010][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.887518][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.897938][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.930879][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.321519][ T5822] Bluetooth: hci4: command tx timeout [ 372.401885][ T5822] Bluetooth: hci9: command tx timeout [ 372.438595][T10867] chnl_net:caif_netlink_parms(): no params data found [ 372.466139][T10853] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.488180][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.498228][T10853] bridge_slave_0: entered allmulticast mode [ 372.521283][T10853] bridge_slave_0: entered promiscuous mode [ 372.537830][T10853] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.556283][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.571080][T10853] bridge_slave_1: entered allmulticast mode [ 372.593562][T10853] bridge_slave_1: entered promiscuous mode [ 372.659250][T10856] hsr_slave_0: entered promiscuous mode [ 372.676512][T10856] hsr_slave_1: entered promiscuous mode [ 372.697310][T10856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.707566][T10856] Cannot create hsr debugfs directory [ 372.961967][ T5822] Bluetooth: hci6: command tx timeout [ 373.242057][T10853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.317920][T10861] chnl_net:caif_netlink_parms(): no params data found [ 373.348725][T10853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.896284][T10853] team0: Port device team_slave_0 added [ 373.925582][T10853] team0: Port device team_slave_1 added [ 373.949911][T10877] chnl_net:caif_netlink_parms(): no params data found [ 373.977898][T10867] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.996457][T10867] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.014363][T10867] bridge_slave_0: entered allmulticast mode [ 374.031074][T10867] bridge_slave_0: entered promiscuous mode [ 374.055690][T10867] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.077154][T10867] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.091237][T10867] bridge_slave_1: entered allmulticast mode [ 374.102194][T10867] bridge_slave_1: entered promiscuous mode [ 374.384389][T10853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.404244][ T5822] Bluetooth: hci4: command tx timeout [ 374.410098][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.456474][T10853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.481074][ T5822] Bluetooth: hci9: command tx timeout [ 374.649439][T10867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.678722][T10867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.698770][T10853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.708462][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.751965][T10853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.041058][ T5822] Bluetooth: hci6: command tx timeout [ 375.255810][T10853] hsr_slave_0: entered promiscuous mode [ 375.269666][T10853] hsr_slave_1: entered promiscuous mode [ 375.280001][T10853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.301980][T10853] Cannot create hsr debugfs directory [ 375.363070][T10861] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.371142][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.378409][T10861] bridge_slave_0: entered allmulticast mode [ 375.397254][T10861] bridge_slave_0: entered promiscuous mode [ 375.424188][T10867] team0: Port device team_slave_0 added [ 375.450469][T10861] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.460777][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.468070][T10861] bridge_slave_1: entered allmulticast mode [ 375.485561][T10861] bridge_slave_1: entered promiscuous mode [ 375.654753][T10867] team0: Port device team_slave_1 added [ 375.943475][T10877] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.962056][T10877] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.969392][T10877] bridge_slave_0: entered allmulticast mode [ 375.986508][T10877] bridge_slave_0: entered promiscuous mode [ 376.071234][T10867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.078215][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.118206][T10867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.258841][T10877] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.286174][T10877] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.301087][T10877] bridge_slave_1: entered allmulticast mode [ 376.318699][T10877] bridge_slave_1: entered promiscuous mode [ 376.397137][T10867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.410780][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.454714][T10867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.488411][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.561295][ T5822] Bluetooth: hci9: command tx timeout [ 376.607331][T10877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.656786][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.749351][T10877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.095486][T10861] team0: Port device team_slave_0 added [ 377.252417][T10877] team0: Port device team_slave_0 added [ 377.268409][T10867] hsr_slave_0: entered promiscuous mode [ 377.302144][T10867] hsr_slave_1: entered promiscuous mode [ 377.308612][T10867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.331308][T10867] Cannot create hsr debugfs directory [ 377.350501][T10861] team0: Port device team_slave_1 added [ 377.395717][T10877] team0: Port device team_slave_1 added [ 377.732171][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.739147][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.784014][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.820421][T10877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.843423][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.884046][T10877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.991092][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.998063][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.046264][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.077682][T10877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.116814][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.123620][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.140709][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.183867][T10877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.569085][T10877] hsr_slave_0: entered promiscuous mode [ 378.587831][T10877] hsr_slave_1: entered promiscuous mode [ 378.598345][T10877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.615743][T10877] Cannot create hsr debugfs directory [ 378.643195][ T5822] Bluetooth: hci9: command tx timeout [ 378.688213][T10861] hsr_slave_0: entered promiscuous mode [ 378.706435][T10861] hsr_slave_1: entered promiscuous mode [ 378.734441][T10861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.752566][T10861] Cannot create hsr debugfs directory [ 381.747535][ T13] tipc: Disabling bearer [ 381.768338][ T13] tipc: Left network mode [ 381.879490][ T13] IPVS: stopping master sync thread 7312 ... [ 407.380469][ T5820] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 407.398813][ T5820] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 407.408962][ T5820] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 407.417563][ T5820] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 407.426286][ T5820] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 408.192444][T10905] chnl_net:caif_netlink_parms(): no params data found [ 408.488299][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.509861][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.531296][T10905] bridge_slave_0: entered allmulticast mode [ 408.544308][T10905] bridge_slave_0: entered promiscuous mode [ 408.563222][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.570382][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.593589][T10905] bridge_slave_1: entered allmulticast mode [ 408.610383][T10905] bridge_slave_1: entered promiscuous mode [ 408.794574][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.855255][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.003187][T10905] team0: Port device team_slave_0 added [ 409.023081][T10905] team0: Port device team_slave_1 added [ 409.206701][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.220739][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.269358][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.402162][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.409134][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.459393][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.525508][ T5815] Bluetooth: hci10: command tx timeout [ 409.679413][T10905] hsr_slave_0: entered promiscuous mode [ 409.689383][T10905] hsr_slave_1: entered promiscuous mode [ 409.711005][T10905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.718588][T10905] Cannot create hsr debugfs directory [ 410.880989][ T5815] Bluetooth: hci7: command 0x0406 tx timeout [ 411.601053][ T5820] Bluetooth: hci10: command tx timeout [ 413.681391][ T5820] Bluetooth: hci10: command tx timeout [ 415.761357][ T5820] Bluetooth: hci10: command tx timeout [ 418.693049][ T5815] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 418.703357][ T5815] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 418.712090][ T5815] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 418.721239][ T5815] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 418.730266][ T5815] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 419.562674][T10916] chnl_net:caif_netlink_parms(): no params data found [ 419.894597][T10916] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.910919][T10916] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.918309][T10916] bridge_slave_0: entered allmulticast mode [ 419.939209][T10916] bridge_slave_0: entered promiscuous mode [ 419.959155][T10916] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.983586][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.011164][T10916] bridge_slave_1: entered allmulticast mode [ 420.027124][T10916] bridge_slave_1: entered promiscuous mode [ 420.176806][T10916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.216746][T10916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.418173][T10916] team0: Port device team_slave_0 added [ 420.442493][T10916] team0: Port device team_slave_1 added [ 420.713608][T10916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.720578][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.765070][T10916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.797648][T10916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.810948][ T5815] Bluetooth: hci11: command tx timeout [ 420.828552][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.871046][T10916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.092154][T10916] hsr_slave_0: entered promiscuous mode [ 421.099631][T10916] hsr_slave_1: entered promiscuous mode [ 421.123295][ T5815] Bluetooth: hci8: command 0x0406 tx timeout [ 421.129827][T10916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.148216][T10916] Cannot create hsr debugfs directory [ 422.881420][ T5820] Bluetooth: hci11: command tx timeout [ 424.961718][ T5820] Bluetooth: hci11: command tx timeout [ 426.524113][ T5815] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 426.533378][ T5815] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 426.546681][ T5815] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 426.555392][ T5815] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 426.563354][ T5815] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 427.040983][ T5815] Bluetooth: hci11: command tx timeout [ 427.305090][ T5820] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 427.315540][ T5820] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 427.325041][ T5820] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 427.334147][ T5820] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 427.342298][ T5820] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 427.845234][T10929] chnl_net:caif_netlink_parms(): no params data found [ 428.313841][T10929] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.330962][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.341643][T10929] bridge_slave_0: entered allmulticast mode [ 428.360288][T10929] bridge_slave_0: entered promiscuous mode [ 428.380586][T10929] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.411233][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.418537][T10929] bridge_slave_1: entered allmulticast mode [ 428.442759][T10929] bridge_slave_1: entered promiscuous mode [ 428.642183][ T5820] Bluetooth: hci12: command tx timeout [ 428.668572][T10929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.698068][T10929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.982005][T10929] team0: Port device team_slave_0 added [ 429.013141][T10934] chnl_net:caif_netlink_parms(): no params data found [ 429.038708][T10929] team0: Port device team_slave_1 added [ 429.221628][T10929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.228601][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.273690][T10929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.391722][T10929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.398700][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.451116][ T5810] Bluetooth: hci13: command tx timeout [ 429.521266][T10929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.795570][T10929] hsr_slave_0: entered promiscuous mode [ 429.823144][T10929] hsr_slave_1: entered promiscuous mode [ 429.851017][T10929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.878393][T10929] Cannot create hsr debugfs directory [ 430.131350][ T5822] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 430.146152][ T5822] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 430.158844][ T5822] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 430.168104][ T5822] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 430.183671][ T5822] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 430.263325][T10934] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.270458][T10934] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.289776][T10934] bridge_slave_0: entered allmulticast mode [ 430.300515][T10934] bridge_slave_0: entered promiscuous mode [ 430.341824][T10934] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.348950][T10934] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.371197][T10934] bridge_slave_1: entered allmulticast mode [ 430.382894][T10934] bridge_slave_1: entered promiscuous mode [ 430.675418][T10934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.722115][ T5822] Bluetooth: hci12: command tx timeout [ 430.759631][T10934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.074401][T10934] team0: Port device team_slave_0 added [ 431.198994][T10934] team0: Port device team_slave_1 added [ 431.364358][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 431.370417][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 431.468477][T10934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.480694][T10934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.519549][T10934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.545590][ T5820] Bluetooth: hci13: command tx timeout [ 431.583943][T10934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.601092][T10934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.646230][T10934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.884854][T10934] hsr_slave_0: entered promiscuous mode [ 431.901984][T10934] hsr_slave_1: entered promiscuous mode [ 431.910545][T10934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.930797][T10934] Cannot create hsr debugfs directory [ 432.246521][ T5820] Bluetooth: hci14: command tx timeout [ 432.515551][T10949] chnl_net:caif_netlink_parms(): no params data found [ 432.800934][ T5820] Bluetooth: hci12: command tx timeout [ 432.819372][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.838948][T10949] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.863272][T10949] bridge_slave_0: entered allmulticast mode [ 432.873086][T10949] bridge_slave_0: entered promiscuous mode [ 432.903873][T10949] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.919876][T10949] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.939681][T10949] bridge_slave_1: entered allmulticast mode [ 432.951787][T10949] bridge_slave_1: entered promiscuous mode [ 433.137082][T10949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.169278][T10949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.383366][T10949] team0: Port device team_slave_0 added [ 433.408155][T10949] team0: Port device team_slave_1 added [ 433.562728][T10949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.569705][T10949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.611773][ T5820] Bluetooth: hci13: command tx timeout [ 433.636787][T10949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.669710][T10949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.695509][T10949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.749705][T10949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.984652][T10949] hsr_slave_0: entered promiscuous mode [ 434.007238][T10949] hsr_slave_1: entered promiscuous mode [ 434.031391][T10949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.038980][T10949] Cannot create hsr debugfs directory [ 434.321293][ T5820] Bluetooth: hci14: command tx timeout [ 434.881160][ T5815] Bluetooth: hci12: command tx timeout [ 435.681933][ T5815] Bluetooth: hci13: command tx timeout [ 436.409274][ T5815] Bluetooth: hci14: command tx timeout [ 436.481369][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 438.490519][ T5820] Bluetooth: hci14: command tx timeout [ 439.526635][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.533450][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.178799][ T13] hsr_slave_0: left promiscuous mode [ 442.204493][ T13] hsr_slave_1: left promiscuous mode [ 442.271011][ T13] veth1_macvtap: left promiscuous mode [ 442.276865][ T13] veth0_macvtap: left promiscuous mode [ 442.297925][ T13] veth1_vlan: left promiscuous mode [ 442.314665][ T13] veth0_vlan: left promiscuous mode [ 444.212188][ T13] team0 (unregistering): Port device team_slave_1 removed [ 444.387942][ T13] team0 (unregistering): Port device team_slave_0 removed [ 464.484951][T10804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.762591][ T31] INFO: task syz-executor:10811 blocked for more than 143 seconds. [ 465.770520][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 465.808811][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.834032][ T30] audit: type=1400 audit(1751481392.804:682): avc: denied { write } for pid=5796 comm="syz-executor" path="pipe:[4225]" dev="pipefs" ino=4225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 465.880687][ T31] task:syz-executor state:D stack:24304 pid:10811 tgid:10811 ppid:1 task_flags:0x400140 flags:0x00004004 [ 465.970834][ T31] Call Trace: [ 465.974161][ T31] [ 465.977100][ T31] __schedule+0x116a/0x5de0 [ 466.051000][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 466.056250][ T31] ? kernel_text_address+0x8d/0x100 [ 466.080962][ T31] ? __lock_acquire+0x622/0x1c90 [ 466.085962][ T31] ? __pfx___schedule+0x10/0x10 [ 466.110861][ T31] ? find_held_lock+0x2b/0x80 [ 466.115596][ T31] ? schedule+0x2d7/0x3a0 [ 466.119942][ T31] schedule+0xe7/0x3a0 [ 466.137816][ T31] schedule_preempt_disabled+0x13/0x30 [ 466.149195][ T31] __mutex_lock+0x6c7/0xb90 [ 466.161505][ T31] ? del_device_store+0xd1/0x4a0 [ 466.166487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 466.192317][ T31] ? __pfx_sscanf+0x10/0x10 [ 466.196869][ T31] ? __lock_acquire+0x622/0x1c90 [ 466.220495][ T31] ? del_device_store+0xd1/0x4a0 [ 466.226240][ T31] del_device_store+0xd1/0x4a0 [ 466.241460][ T31] ? __pfx_del_device_store+0x10/0x10 [ 466.246886][ T31] ? find_held_lock+0x2b/0x80 [ 466.260709][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 466.265612][ T31] ? __pfx_del_device_store+0x10/0x10 [ 466.288224][ T31] bus_attr_store+0x74/0xb0 [ 466.297684][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 466.319565][ T31] sysfs_kf_write+0xef/0x150 [ 466.325752][ T31] kernfs_fop_write_iter+0x354/0x510 [ 466.339942][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 466.351302][ T31] vfs_write+0x6c4/0x1150 [ 466.355664][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 466.372288][ T31] ? __pfx_vfs_write+0x10/0x10 [ 466.390944][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 466.396189][ T31] ksys_write+0x12a/0x250 [ 466.400530][ T31] ? __pfx_ksys_write+0x10/0x10 [ 466.425986][ T31] do_syscall_64+0xcd/0x4c0 [ 466.430506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.457545][ T31] RIP: 0033:0x7fda5d18d3df [ 466.468364][ T31] RSP: 002b:00007ffea4487b90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 466.491073][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fda5d18d3df [ 466.499079][ T31] RDX: 0000000000000001 RSI: 00007ffea4487be0 RDI: 0000000000000005 [ 466.519166][ T31] RBP: 00007fda5d211d8d R08: 0000000000000000 R09: 00007ffea44879e7 [ 466.530988][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 466.538985][ T31] R13: 00007ffea4487be0 R14: 00007fda5dee4620 R15: 0000000000000003 [ 466.569764][ T31] [ 466.583844][ T31] INFO: task syz-executor:10816 blocked for more than 144 seconds. [ 466.600840][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 466.608496][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.672804][ T31] task:syz-executor state:D stack:24296 pid:10816 tgid:10816 ppid:1 task_flags:0x400140 flags:0x00004004 [ 466.702091][ T31] Call Trace: [ 466.705405][ T31] [ 466.708341][ T31] __schedule+0x116a/0x5de0 [ 466.758823][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 466.775608][ T31] ? kernel_text_address+0x8d/0x100 [ 466.800900][ T31] ? __lock_acquire+0x622/0x1c90 [ 466.805898][ T31] ? __pfx___schedule+0x10/0x10 [ 466.821097][ T31] ? find_held_lock+0x2b/0x80 [ 466.825817][ T31] ? schedule+0x2d7/0x3a0 [ 466.830163][ T31] schedule+0xe7/0x3a0 [ 466.840783][ T31] schedule_preempt_disabled+0x13/0x30 [ 466.846275][ T31] __mutex_lock+0x6c7/0xb90 [ 466.863215][ T31] ? del_device_store+0xd1/0x4a0 [ 466.868213][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 466.883485][ T31] ? __pfx_sscanf+0x10/0x10 [ 466.902112][ T31] ? __lock_acquire+0x622/0x1c90 [ 466.907105][ T31] ? del_device_store+0xd1/0x4a0 [ 466.925866][ T31] del_device_store+0xd1/0x4a0 [ 466.938813][ T31] ? __pfx_del_device_store+0x10/0x10 [ 466.945007][ T31] ? find_held_lock+0x2b/0x80 [ 466.949719][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 466.969185][ T31] ? __pfx_del_device_store+0x10/0x10 [ 466.983133][ T31] bus_attr_store+0x74/0xb0 [ 467.002843][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 467.008084][ T31] sysfs_kf_write+0xef/0x150 [ 467.025115][ T31] kernfs_fop_write_iter+0x354/0x510 [ 467.041849][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 467.047093][ T31] vfs_write+0x6c4/0x1150 [ 467.061411][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 467.067264][ T31] ? __pfx_vfs_write+0x10/0x10 [ 467.081649][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.086921][ T31] ksys_write+0x12a/0x250 [ 467.118319][ T31] ? __pfx_ksys_write+0x10/0x10 [ 467.130975][ T31] do_syscall_64+0xcd/0x4c0 [ 467.135533][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.151571][ T31] RIP: 0033:0x7fa42158d3df [ 467.160364][ T31] RSP: 002b:00007ffc74ac4bc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 467.181042][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa42158d3df [ 467.189068][ T31] RDX: 0000000000000001 RSI: 00007ffc74ac4c10 RDI: 0000000000000005 [ 467.222778][ T31] RBP: 00007fa421611d8d R08: 0000000000000000 R09: 00007ffc74ac4a17 [ 467.241594][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 467.249609][ T31] R13: 00007ffc74ac4c10 R14: 00007fa4222e4620 R15: 0000000000000003 [ 467.274144][ T31] [ 467.277420][ T31] INFO: task syz-executor:10826 blocked for more than 144 seconds. [ 467.299800][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 467.322858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.349720][ T31] task:syz-executor state:D stack:24472 pid:10826 tgid:10826 ppid:1 task_flags:0x400140 flags:0x00004004 [ 467.376413][ T31] Call Trace: [ 467.379725][ T31] [ 467.390427][ T31] __schedule+0x116a/0x5de0 [ 467.402193][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 467.407433][ T31] ? kernel_text_address+0x8d/0x100 [ 467.424594][ T31] ? __lock_acquire+0x622/0x1c90 [ 467.429584][ T31] ? __pfx___schedule+0x10/0x10 [ 467.460951][ T31] ? find_held_lock+0x2b/0x80 [ 467.465679][ T31] ? schedule+0x2d7/0x3a0 [ 467.470020][ T31] schedule+0xe7/0x3a0 [ 467.481070][ T31] schedule_preempt_disabled+0x13/0x30 [ 467.486573][ T31] __mutex_lock+0x6c7/0xb90 [ 467.507785][ T31] ? del_device_store+0xd1/0x4a0 [ 467.521031][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 467.526104][ T31] ? __pfx_sscanf+0x10/0x10 [ 467.543287][ T31] ? __lock_acquire+0x622/0x1c90 [ 467.548275][ T31] ? del_device_store+0xd1/0x4a0 [ 467.567266][ T31] del_device_store+0xd1/0x4a0 [ 467.578303][ T31] ? __pfx_del_device_store+0x10/0x10 [ 467.590835][ T31] ? find_held_lock+0x2b/0x80 [ 467.595552][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 467.600418][ T31] ? __pfx_del_device_store+0x10/0x10 [ 467.626606][ T31] bus_attr_store+0x74/0xb0 [ 467.639667][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 467.653023][ T31] sysfs_kf_write+0xef/0x150 [ 467.657663][ T31] kernfs_fop_write_iter+0x354/0x510 [ 467.678203][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 467.692291][ T31] vfs_write+0x6c4/0x1150 [ 467.696668][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 467.719341][ T31] ? __pfx_vfs_write+0x10/0x10 [ 467.728546][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.746781][ T31] ksys_write+0x12a/0x250 [ 467.752062][ T31] ? __pfx_ksys_write+0x10/0x10 [ 467.756956][ T31] do_syscall_64+0xcd/0x4c0 [ 467.781219][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.787324][ T31] RIP: 0033:0x7f3f54f8d3df [ 467.800968][ T31] RSP: 002b:00007ffdbc2bfb90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 467.827217][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3f54f8d3df [ 467.841519][ T31] RDX: 0000000000000001 RSI: 00007ffdbc2bfbe0 RDI: 0000000000000005 [ 467.849521][ T31] RBP: 00007f3f55011d8d R08: 0000000000000000 R09: 00007ffdbc2bf9e7 [ 467.870185][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 467.898783][ T31] R13: 00007ffdbc2bfbe0 R14: 00007f3f55ce4620 R15: 0000000000000003 [ 467.921360][ T31] [ 467.924504][ T31] [ 467.924504][ T31] Showing all locks held in the system: [ 467.940778][ T31] 4 locks held by kworker/0:0/9: [ 467.945750][ T31] #0: ffff888072ecc548 ((wq_completion)wg-kex-wg2#20){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 467.974684][ T31] #1: ffffc900000e7d10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 468.047101][ T31] #2: ffff888047d11308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 468.072488][ T31] #3: ffff88806bcd2ad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 468.098159][ T31] 4 locks held by kworker/u8:1/13: [ 468.108824][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 468.141294][ T31] #1: ffffc90000127d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 468.162401][ T31] #2: ffffffff903367d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 468.180819][ T31] #3: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 468.200791][ T31] 1 lock held by khungtaskd/31: [ 468.205667][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 468.234610][ T31] 2 locks held by getty/5568: [ 468.239351][ T31] #0: ffff8880324910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 468.260845][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 468.287737][ T31] 3 locks held by kworker/0:3/5814: [ 468.301017][ T31] #0: ffff888059731d48 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 468.331281][ T31] #1: ffffc90003affd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 468.396779][ T31] #2: ffff88802996f030 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 [ 468.428487][ T31] 2 locks held by kworker/1:3/5861: [ 468.440843][ T31] 3 locks held by kworker/1:4/5868: [ 468.446069][ T31] 4 locks held by kworker/1:6/5917: [ 468.463472][ T31] 2 locks held by kworker/1:9/9648: [ 468.468697][ T31] 5 locks held by kworker/1:15/10658: [ 468.487361][ T31] 1 lock held by syz-executor/10739: [ 468.503724][ T31] #0: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 468.528016][ T31] 7 locks held by syz-executor/10804: [ 468.542021][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.560831][ T31] #1: ffff888047f5c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 468.581012][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 468.611847][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 468.639216][ T31] #4: ffff88805ab8c0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 468.663774][ T31] #5: ffff88805ab8d250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 468.686166][ T31] #6: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 468.707538][ T31] 4 locks held by syz-executor/10811: [ 468.721934][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.749884][ T31] #1: ffff88803447ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 468.770844][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 468.791076][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 468.816992][ T31] 4 locks held by syz-executor/10816: [ 468.835774][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.858068][ T31] #1: ffff8880691b4488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 468.880039][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 468.900774][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 468.926871][ T31] 4 locks held by syz-executor/10826: [ 468.951241][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.960263][ T31] #1: ffff8880691b7488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 468.985596][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.008337][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.044410][ T31] 4 locks held by syz-executor/10853: [ 469.049813][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.070761][ T31] #1: ffff88803b934c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.080562][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.113743][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.147972][ T31] 4 locks held by syz-executor/10856: [ 469.161444][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.170470][ T31] #1: ffff888040bca888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.192982][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.220736][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.245767][ T31] 4 locks held by syz-executor/10861: [ 469.263245][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.289523][ T31] #1: ffff888075bf7088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.315462][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.338284][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.366820][ T31] 4 locks held by syz-executor/10867: [ 469.374321][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.397938][ T31] #1: ffff88803cca5088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.412770][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.435924][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.460681][ T31] 4 locks held by syz-executor/10877: [ 469.466080][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.494838][ T31] #1: ffff88804ff47888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.517584][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.540987][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.568028][ T31] 4 locks held by syz-executor/10905: [ 469.578589][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.603654][ T31] #1: ffff88806bf56088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.623755][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.648781][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.670699][ T31] 4 locks held by syz-executor/10916: [ 469.676092][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.705218][ T31] #1: ffff8880881fb488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.728375][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.751016][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.778477][ T31] 4 locks held by syz-executor/10929: [ 469.784668][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.808525][ T31] #1: ffff88808054a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.833592][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.860226][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.880726][ T31] 4 locks held by syz-executor/10934: [ 469.886133][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.908318][ T31] #1: ffff888084867088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 469.937271][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 469.962179][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 469.980662][ T31] 4 locks held by syz-executor/10949: [ 469.986066][ T31] #0: ffff888034122428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 470.010277][ T31] #1: ffff888034ac4c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 470.031614][ T31] #2: ffff88802506ad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 470.064549][ T31] #3: ffffffff8f8e9168 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 470.088842][ T31] [ 470.091570][ T31] ============================================= [ 470.091570][ T31] [ 470.099980][ T31] NMI backtrace for cpu 0 [ 470.099994][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 470.100015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.100025][ T31] Call Trace: [ 470.100031][ T31] [ 470.100039][ T31] dump_stack_lvl+0x116/0x1f0 [ 470.100069][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 470.100091][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 470.100115][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 470.100138][ T31] watchdog+0xf70/0x12c0 [ 470.100164][ T31] ? __pfx_watchdog+0x10/0x10 [ 470.100181][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.100206][ T31] ? __kthread_parkme+0x19e/0x250 [ 470.100232][ T31] ? __pfx_watchdog+0x10/0x10 [ 470.100251][ T31] kthread+0x3c2/0x780 [ 470.100267][ T31] ? __pfx_kthread+0x10/0x10 [ 470.100284][ T31] ? rcu_is_watching+0x12/0xc0 [ 470.100306][ T31] ? __pfx_kthread+0x10/0x10 [ 470.100323][ T31] ret_from_fork+0x5d4/0x6f0 [ 470.100347][ T31] ? __pfx_kthread+0x10/0x10 [ 470.100363][ T31] ret_from_fork_asm+0x1a/0x30 [ 470.100392][ T31] [ 470.100399][ T31] Sending NMI from CPU 0 to CPUs 1: [ 470.224335][ C1] NMI backtrace for cpu 1 [ 470.224349][ C1] CPU: 1 UID: 0 PID: 9648 Comm: kworker/1:9 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 470.224369][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.224378][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 470.224399][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 470.224423][ C1] Code: c6 e0 7c 15 8c 48 c7 c7 20 7d 15 8c e9 f9 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 60 7d 15 8c e9 cd fe ff ff 66 2e 0f [ 470.224436][ C1] RSP: 0000:ffffc90000a07f78 EFLAGS: 00000006 [ 470.224446][ C1] RAX: 0000000000000000 RBX: ffffffff8e5c4940 RCX: ffffc90003ed0001 [ 470.224456][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df0c4e7 [ 470.224464][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 470.224472][ C1] R10: 0000000000000000 R11: 00000000000083b4 R12: ffffffff816acad4 [ 470.224481][ C1] R13: 0000000000000206 R14: ffff88802daac880 R15: ffffc90000a0806c [ 470.224490][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 470.224504][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.224514][ C1] CR2: 0000001b2ef17ff8 CR3: 000000000e382000 CR4: 00000000003526f0 [ 470.224523][ C1] Call Trace: [ 470.224529][ C1] [ 470.224533][ C1] lock_release+0x9c/0x2f0 [ 470.224558][ C1] unwind_next_frame+0x3f9/0x20a0 [ 470.224580][ C1] ? worker_thread+0x6c8/0xf10 [ 470.224595][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.224615][ C1] arch_stack_walk+0x94/0x100 [ 470.224630][ C1] ? kthread+0x3c2/0x780 [ 470.224644][ C1] stack_trace_save+0x8e/0xc0 [ 470.224661][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 470.224684][ C1] ? stack_trace_save+0x8e/0xc0 [ 470.224700][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 470.224716][ C1] ? stack_depot_save_flags+0x28/0xa40 [ 470.224736][ C1] kasan_save_stack+0x33/0x60 [ 470.224752][ C1] ? kasan_save_stack+0x33/0x60 [ 470.224767][ C1] ? kasan_save_track+0x14/0x30 [ 470.224783][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 470.224800][ C1] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 470.224817][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 470.224830][ C1] ? __alloc_skb+0x166/0x380 [ 470.224846][ C1] ? synproxy_send_client_synack+0x1af/0x8f0 [ 470.224859][ C1] ? nft_synproxy_do_eval+0xa63/0xd80 [ 470.224875][ C1] ? nft_do_chain+0x2e6/0x1920 [ 470.224888][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 470.224901][ C1] ? nf_hook_slow+0xbe/0x200 [ 470.224919][ C1] ? nf_hook.constprop.0+0x422/0x750 [ 470.224938][ C1] ? ip_local_deliver+0x169/0x1f0 [ 470.224956][ C1] ? ip_rcv+0x2c3/0x5d0 [ 470.224973][ C1] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 470.224991][ C1] ? __netif_receive_skb+0x1d/0x160 [ 470.225007][ C1] ? process_backlog+0x442/0x15e0 [ 470.225022][ C1] ? __napi_poll.constprop.0+0xb7/0x550 [ 470.225038][ C1] ? net_rx_action+0xa9f/0xfe0 [ 470.225054][ C1] ? handle_softirqs+0x219/0x8e0 [ 470.225068][ C1] ? do_softirq+0xb2/0xf0 [ 470.225083][ C1] ? __local_bh_enable_ip+0x100/0x120 [ 470.225098][ C1] ? kernel_fpu_end+0x5e/0x70 [ 470.225110][ C1] ? blake2s_compress+0x7f/0xe0 [ 470.225123][ C1] ? blake2s_update+0xef/0x360 [ 470.225139][ C1] ? hmac.constprop.0+0x23f/0x420 [ 470.225156][ C1] ? kdf.constprop.0+0x122/0x280 [ 470.225172][ C1] ? wg_noise_handshake_consume_initiation+0x4b9/0x880 [ 470.225192][ C1] ? wg_receive_handshake_packet+0x219/0xbf0 [ 470.225206][ C1] ? wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 470.225221][ C1] ? process_one_work+0x9cf/0x1b70 [ 470.225234][ C1] ? worker_thread+0x6c8/0xf10 [ 470.225255][ C1] kasan_save_track+0x14/0x30 [ 470.225271][ C1] __kasan_slab_alloc+0x89/0x90 [ 470.225289][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 470.225306][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 470.225321][ C1] kmalloc_reserve+0x18b/0x2c0 [ 470.225335][ C1] __alloc_skb+0x166/0x380 [ 470.225351][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 470.225372][ C1] synproxy_send_client_synack+0x1af/0x8f0 [ 470.225387][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 470.225401][ C1] ? nft_redir_eval+0x3d0/0x470 [ 470.225424][ C1] nft_synproxy_do_eval+0xa63/0xd80 [ 470.225441][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 470.225456][ C1] ? ip_vs_conn_out_get+0x67f/0xb20 [ 470.225475][ C1] ? ip_vs_service_find+0x19d/0x1020 [ 470.225494][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 470.225510][ C1] nft_do_chain+0x2e6/0x1920 [ 470.225528][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 470.225542][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.225563][ C1] ? ip_vs_in_hook+0xe10/0x27a0 [ 470.225581][ C1] ? ip_vs_in_hook+0x329/0x27a0 [ 470.225607][ C1] nft_do_chain_inet+0x18a/0x340 [ 470.225621][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 470.225638][ C1] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 470.225656][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 470.225679][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 470.225693][ C1] nf_hook_slow+0xbe/0x200 [ 470.225713][ C1] nf_hook.constprop.0+0x422/0x750 [ 470.225731][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 470.225751][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 470.225770][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 470.225790][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 470.225813][ C1] ip_local_deliver+0x169/0x1f0 [ 470.225831][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 470.225855][ C1] ip_rcv+0x2c3/0x5d0 [ 470.225874][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 470.225892][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 470.225909][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 470.225927][ C1] ? lock_acquire+0x179/0x350 [ 470.225949][ C1] ? process_backlog+0x3f0/0x15e0 [ 470.225966][ C1] __netif_receive_skb+0x1d/0x160 [ 470.225982][ C1] process_backlog+0x442/0x15e0 [ 470.226002][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 470.226020][ C1] net_rx_action+0xa9f/0xfe0 [ 470.226041][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 470.226058][ C1] ? find_held_lock+0x2b/0x80 [ 470.226075][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 470.226092][ C1] ? sched_clock+0x38/0x60 [ 470.226108][ C1] ? sched_clock_cpu+0x6c/0x530 [ 470.226132][ C1] ? mark_held_locks+0x49/0x80 [ 470.226153][ C1] handle_softirqs+0x219/0x8e0 [ 470.226170][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 470.226187][ C1] ? kernel_fpu_end+0x59/0x70 [ 470.226200][ C1] do_softirq+0xb2/0xf0 [ 470.226214][ C1] [ 470.226219][ C1] [ 470.226224][ C1] __local_bh_enable_ip+0x100/0x120 [ 470.226240][ C1] kernel_fpu_end+0x5e/0x70 [ 470.226253][ C1] blake2s_compress+0x7f/0xe0 [ 470.226266][ C1] blake2s_update+0xef/0x360 [ 470.226286][ C1] hmac.constprop.0+0x23f/0x420 [ 470.226305][ C1] ? __pfx_hmac.constprop.0+0x10/0x10 [ 470.226329][ C1] ? kdf.constprop.0+0x223/0x280 [ 470.226348][ C1] ? __pfx_curve25519_arch+0x10/0x10 [ 470.226366][ C1] kdf.constprop.0+0x122/0x280 [ 470.226384][ C1] ? __pfx_kdf.constprop.0+0x10/0x10 [ 470.226403][ C1] ? wg_peer_get_maybe_zero+0x18d/0x2a0 [ 470.226425][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 470.226440][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.226464][ C1] ? __crypto_memneq+0x203/0x430 [ 470.226480][ C1] wg_noise_handshake_consume_initiation+0x4b9/0x880 [ 470.226502][ C1] ? kernel_fpu_end+0x59/0x70 [ 470.226514][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 470.226530][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 470.226553][ C1] ? debug_object_activate+0x2ec/0x4c0 [ 470.226578][ C1] ? __crypto_memneq+0x203/0x430 [ 470.226596][ C1] ? wg_cookie_validate_packet+0x16f/0x360 [ 470.226615][ C1] ? __pfx_wg_cookie_validate_packet+0x10/0x10 [ 470.226638][ C1] wg_receive_handshake_packet+0x219/0xbf0 [ 470.226654][ C1] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 470.226677][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 470.226694][ C1] wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 470.226713][ C1] process_one_work+0x9cf/0x1b70 [ 470.226730][ C1] ? __pfx_neigh_managed_work+0x10/0x10 [ 470.226744][ C1] ? __pfx_process_one_work+0x10/0x10 [ 470.226761][ C1] ? assign_work+0x1a0/0x250 [ 470.226782][ C1] worker_thread+0x6c8/0xf10 [ 470.226800][ C1] ? __pfx_worker_thread+0x10/0x10 [ 470.226814][ C1] kthread+0x3c2/0x780 [ 470.226827][ C1] ? __pfx_kthread+0x10/0x10 [ 470.226840][ C1] ? rcu_is_watching+0x12/0xc0 [ 470.226856][ C1] ? __pfx_kthread+0x10/0x10 [ 470.226869][ C1] ret_from_fork+0x5d4/0x6f0 [ 470.226887][ C1] ? __pfx_kthread+0x10/0x10 [ 470.226899][ C1] ret_from_fork_asm+0x1a/0x30 [ 470.226919][ C1] [ 470.530783][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 470.530802][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 470.530825][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.530836][ T31] Call Trace: [ 470.530843][ T31] [ 470.530851][ T31] dump_stack_lvl+0x3d/0x1f0 [ 470.530881][ T31] panic+0x71c/0x800 [ 470.530906][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 470.530930][ T31] ? __pfx_panic+0x10/0x10 [ 470.530954][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 470.530979][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 470.531003][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 470.531026][ T31] ? watchdog+0xdda/0x12c0 [ 470.531045][ T31] ? watchdog+0xdcd/0x12c0 [ 470.531067][ T31] watchdog+0xdeb/0x12c0 [ 470.531091][ T31] ? __pfx_watchdog+0x10/0x10 [ 470.531109][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.531135][ T31] ? __kthread_parkme+0x19e/0x250 [ 470.531161][ T31] ? __pfx_watchdog+0x10/0x10 [ 470.531180][ T31] kthread+0x3c2/0x780 [ 470.531197][ T31] ? __pfx_kthread+0x10/0x10 [ 470.531215][ T31] ? rcu_is_watching+0x12/0xc0 [ 470.531236][ T31] ? __pfx_kthread+0x10/0x10 [ 470.531254][ T31] ret_from_fork+0x5d4/0x6f0 [ 470.531278][ T31] ? __pfx_kthread+0x10/0x10 [ 470.531295][ T31] ret_from_fork_asm+0x1a/0x30 [ 470.531324][ T31] [ 470.531530][ T31] Kernel Offset: disabled