last executing test programs: 21.393714097s ago: executing program 4 (id=620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000"], 0x104}}, 0x0) 17.190803802s ago: executing program 4 (id=632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r1 = socket$inet(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x3) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x48, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x12, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2}, @sack_perm={0x4, 0x2}, @eol, @generic={0x0, 0x7, "3836eb47eb"}, @md5sig={0x13, 0x12, "befc8d6bff11af9777d6d7f97676be3d"}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}]}}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000097000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 16.088968583s ago: executing program 4 (id=635): syz_io_uring_setup(0x768f, &(0x7f0000000080)={0x0, 0x6b05, 0x200, 0x2, 0x271}, &(0x7f0000000800), &(0x7f0000000140)) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000005c0), 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601040000000000000000000000000d000300686173683a6d6163000000000c000780080012000000000d00020073797a320004000005000100070000000500040000000000482debace952e547e9ec0b4eb6b692762ed5ce5defec27e84e42bef2c4f0e6c8262b3e70ee339da0747dc8797d645759f0c7cc51"], 0x4c}}, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCGETA(r5, 0x8926, &(0x7f0000000140)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000004c0)=0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x101100) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4111, &(0x7f00000001c0)={0x8, [[0x800002, 0x7, 0xfc, 0x8, 0xeb, 0x2, 0x8, 0x3ff], [0x2, 0x4, 0x8000002, 0xfbf, 0x4, 0x9, 0x6090, 0x6], [0x1, 0x9, 0x7, 0x5, 0x8, 0x6, 0x3, 0x16d]], '\x00', [{0x3ff, 0x8, 0x0, 0x1}, {0x2, 0x106f08, 0x0, 0x1, 0x1, 0x1}, {0x44, 0x3b, 0x1, 0x0, 0x0, 0x1}, {0xa, 0x800, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x4ce, 0x1, 0x0, 0x0, 0x1}, {0xe0, 0x8, 0x0, 0x0, 0x1}, {0x8001, 0x1, 0x1, 0x0, 0x1}, {0x81, 0x96, 0x0, 0x0, 0x1}, {0xd0f, 0x3ff, 0x1, 0x1, 0x1}, {0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, {0xfffffffe, 0x24, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x750d}) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x4}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2, 0xfffc}, @void, @val={0x25, 0x3, {0x0, 0x88}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 15.980820586s ago: executing program 0 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x3, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) 14.221332475s ago: executing program 0 (id=638): syz_clone(0x20200400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_extract_tcp_res(&(0x7f00000008c0), 0x7, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xf7, 0xe0, 0x6, [{{0x9, 0x4, 0x0, 0xf9, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xb0, 0x0, 0x1, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x2, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x81, 0x75, 0x4, 0x20, 0x1}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0}}], 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) 14.015596429s ago: executing program 2 (id=640): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00') r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x682e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4008800) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000045c0)={0x2020}, 0x2020) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x5091, &(0x7f0000000040)={0x0, 0x2, 0x2}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x5608, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f0000000040), 0x4) 12.714674408s ago: executing program 2 (id=641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.487540842s ago: executing program 3 (id=642): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0xc0, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xc0}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.315360332s ago: executing program 2 (id=643): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8d, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e30000000000000000000000008000300000000001400"], 0x50}}, 0x0) 12.12397859s ago: executing program 4 (id=644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 11.243787325s ago: executing program 3 (id=645): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x20000400) syz_open_dev$evdev(0x0, 0xc0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = syz_io_uring_setup(0x231, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x3, 0x17f}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_io_uring_setup(0x2ddd, &(0x7f0000000440)={0x0, 0x1, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x175c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, r6}, 0x0, &(0x7f0000000180)) openat$autofs(0xffffff9c, &(0x7f0000000380), 0x801, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x37, 0x88000) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f00000000c0)=0x1) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r6, 0x4e07, 0x0, 0x0, 0x0, 0x0) 11.167541169s ago: executing program 2 (id=646): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c000100", @ANYRES32=r1], 0xb4}}, 0x0) 11.045966225s ago: executing program 2 (id=647): r0 = syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x0, 0x3de}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcee0817896735dd1}) io_uring_enter(r0, 0x7d79, 0x0, 0x0, 0x0, 0x0) 10.947259701s ago: executing program 2 (id=648): syz_io_uring_setup(0x4b5, 0x0, &(0x7f00000193c0), &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r2, &(0x7f0000000100)='./file2\x00') lsm_set_self_attr(0x65, 0x0, 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000019340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r2, 0x5605) r4 = socket$inet(0x2, 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000019380)}, {&(0x7f0000000200)="2e85d88a3798dda0d406865d77e485cd159af87eb38e93ca663691b776e060", 0x1f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000019300)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES8=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r6, &(0x7f0000001980)=""/179, 0xb3) 10.819255684s ago: executing program 0 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 10.591089552s ago: executing program 4 (id=650): r0 = io_uring_setup(0x410f, &(0x7f0000000200)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80), 0x0}, 0x20) 10.563309656s ago: executing program 0 (id=651): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14141008"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f041}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a8170088a8", 0x33fe0}], 0x1}, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6(0xa, 0x1, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) add_key(&(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000100)='&', 0x1, 0xffffffffffffffff) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x43) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) 10.156369795s ago: executing program 4 (id=652): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e7000905"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r4, r4, 0x0, 0x20000000003f) dup(r4) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x6020) r5 = fsmount(r0, 0x0, 0xf1) execveat(r5, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) r7 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000300)) lstat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x3001402, &(0x7f0000000500)=ANY=[@ANYBLOB='W`=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB=',blksize=0x0000000000000a00,blksize=0x0000000000001400,blksize=0x0000000000000c00,default_permissions,default_permissions,blksize=0x0000000000001200,default_permissions,fscontext=sysadm_u,\x00']) signalfd4(r7, &(0x7f0000000040)={[0x1]}, 0x8, 0x80000) sendmmsg$inet(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x3, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x800) 9.325725722s ago: executing program 0 (id=653): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.906016356s ago: executing program 1 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 8.902120868s ago: executing program 3 (id=655): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0xc0, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xc0}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.751167995s ago: executing program 0 (id=656): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000280)=@l={0x92, 0x0, 0xb0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x70f252fca1664463, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x11) r6 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x48, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x3732b5141d6e849c}, 0x4000800) 8.696850727s ago: executing program 1 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 8.487439891s ago: executing program 1 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001640)={&(0x7f00005f8000/0x1000)=nil, &(0x7f00002b7000/0x3000)=nil, &(0x7f00009c0000/0x3000)=nil, &(0x7f000086a000/0x1000)=nil, &(0x7f000091f000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000733000/0x2000)=nil, &(0x7f000022c000/0x3000)=nil, &(0x7f0000827000/0x3000)=nil, &(0x7f00008f4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001540)="88e6a144f66bd1158044169cad6f3d4b6129fc6c3c55869b69c858f62092d196554a0b0d7427284e8b0043423b5d98a0c6aef02ab6ce1a4d62e2668073864907f156789260b68a974df24ea4ec2ab9416ff7cbcd92272811a7", 0x59}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, 0x0, 0x228001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x50, [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff], [0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe61], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.524443838s ago: executing program 3 (id=659): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.215690782s ago: executing program 1 (id=660): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x8001, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000300)=ANY=[], 0x823) 6.135358217s ago: executing program 3 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 5.161396727s ago: executing program 3 (id=662): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x0, 0x0, 0xd18f}) fcntl$lock(r4, 0x6, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r5, 0x0, 0x0) 5.004875121s ago: executing program 1 (id=663): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0xc0, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xc0}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 1 (id=664): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0b00000007000000020020000400000007090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000200f94a37f9000000000000000000f8ff000000230000000000fcff005070883e332fb9026981fa99312899d4996f9c8f8e1bb7241b1743f3b02f92f38d090d5a49fe2197b7655868fa7b97f23fb17f5dd212c8494ffe7ed7a1ac27a78408000000d49e642c3fbc806026f758f47ec2c28f03b28057d0b084ff326d67"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}}}, 0xb8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) connect$unix(r0, &(0x7f0000001400)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) kernel console output (not intermixed with test programs): [ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.798265][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.811731][ T52] bond0 (unregistering): Released all slaves [ 349.841253][ T7037] hsr_slave_0: entered promiscuous mode [ 349.860249][ T7037] hsr_slave_1: entered promiscuous mode [ 349.875974][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.899021][ T7037] Cannot create hsr debugfs directory [ 351.318376][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 351.735760][ T52] hsr_slave_0: left promiscuous mode [ 351.795276][ T52] hsr_slave_1: left promiscuous mode [ 351.806261][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.841849][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.934413][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.942112][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.989688][ T52] veth1_macvtap: left promiscuous mode [ 353.006829][ T52] veth0_macvtap: left promiscuous mode [ 353.018295][ T52] veth1_vlan: left promiscuous mode [ 353.024818][ T52] veth0_vlan: left promiscuous mode [ 354.198385][ T52] team0 (unregistering): Port device team_slave_1 removed [ 354.296967][ T52] team0 (unregistering): Port device team_slave_0 removed [ 359.738570][ T7049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.803259][ T7049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.338957][ T7037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.464677][ T7049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.508053][ T7049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.652365][ T7037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.845615][ T7037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.279050][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.296432][ T7288] tc_dump_action: action bad kind [ 362.754355][ T7037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.870859][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.342775][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.350124][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.377792][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.384974][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.433643][ T7049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.503620][ T7049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.840838][ T7037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.356600][ T7037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.451805][ T7037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.740058][ T7037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.344099][ T7311] netlink: 'syz.2.341': attribute type 9 has an invalid length. [ 366.352051][ T7311] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.341'. [ 366.465598][ T7313] vivid-008: disconnect [ 366.517936][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.535734][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.555812][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.562960][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.608267][ T7313] netlink: 'syz.4.342': attribute type 9 has an invalid length. [ 366.621808][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.629038][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.652854][ T7313] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.342'. [ 366.720095][ T7037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.746865][ T7037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.772923][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.101283][ T7312] vivid-008: reconnect [ 367.243582][ T7049] veth0_vlan: entered promiscuous mode [ 367.948734][ T7049] veth1_vlan: entered promiscuous mode [ 368.006406][ T7049] veth0_macvtap: entered promiscuous mode [ 368.016327][ T7049] veth1_macvtap: entered promiscuous mode [ 368.032559][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.043326][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.053915][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.064998][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.074968][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.085707][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.095676][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.106255][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.116194][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.126778][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.137053][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.147718][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.160417][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.170691][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.181257][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.191437][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.202006][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.211959][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.222504][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.232426][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.243017][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.252962][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.263920][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.274485][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.285137][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.296418][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.343226][ T7049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.357042][ T7049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.376037][ T7049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.384915][ T7049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.311867][ T7344] tc_dump_action: action bad kind [ 369.318265][ T7350] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 369.454362][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.653111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.676396][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.734093][ T7361] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 369.734120][ T29] audit: type=1400 audit(1728251282.770:459): avc: denied { mac_admin } for pid=7357 comm="syz.0.350" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.771440][ T29] audit: type=1400 audit(1728251282.810:460): avc: denied { relabelto } for pid=7357 comm="syz.0.350" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 369.875237][ T5277] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 369.906646][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.925715][ T29] audit: type=1400 audit(1728251282.810:461): avc: denied { associate } for pid=7357 comm="syz.0.350" name="ptmx" dev="devtmpfs" ino=615 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_state_t:s0" [ 369.927457][ T7037] veth0_vlan: entered promiscuous mode [ 369.969139][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.062985][ T7365] netlink: 'syz.0.352': attribute type 9 has an invalid length. [ 370.063018][ T7365] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.352'. [ 370.075190][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 370.077261][ T5277] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.077307][ T5277] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.077352][ T5277] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.077394][ T5277] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.077452][ T5277] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.077493][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.166547][ T7037] veth1_vlan: entered promiscuous mode [ 370.265848][ T7037] veth0_macvtap: entered promiscuous mode [ 370.273436][ T7037] veth1_macvtap: entered promiscuous mode [ 370.292457][ T29] audit: type=1400 audit(1728251283.330:462): avc: denied { create } for pid=7369 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.301681][ T29] audit: type=1400 audit(1728251283.340:463): avc: denied { write } for pid=7369 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.302704][ T29] audit: type=1400 audit(1728251283.340:464): avc: denied { nlmsg_write } for pid=7369 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.302729][ T7370] netlink: 104 bytes leftover after parsing attributes in process `syz.1.283'. [ 370.317037][ T29] audit: type=1326 audit(1728251283.360:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a58f7dff9 code=0x7ffc0000 [ 370.317186][ T29] audit: type=1326 audit(1728251283.360:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a58f7dff9 code=0x7ffc0000 [ 370.321418][ T5277] usb 3-1: GET_CAPABILITIES returned 0 [ 370.321464][ T5277] usbtmc 3-1:16.0: can't read capabilities [ 370.346311][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.585860][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.585878][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.585898][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.585910][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.585928][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.585950][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.585967][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.585986][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.586003][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.586020][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.586037][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.586057][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.586074][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.587274][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.589225][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.589247][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.589259][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.589277][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.589289][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.589305][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.589319][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.589336][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.589349][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.589366][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.589378][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.589395][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.589408][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.589424][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.590337][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.592490][ T7037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.592550][ T7037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.592603][ T7037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.592639][ T7037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.645329][ T29] audit: type=1326 audit(1728251283.640:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3a58f7dff9 code=0x7ffc0000 [ 370.645394][ T29] audit: type=1400 audit(1728251283.640:468): avc: denied { connect } for pid=7369 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.494720][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.906792][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.947416][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.947447][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.435710][ T5281] usb 3-1: USB disconnect, device number 4 [ 374.238308][ T7402] netlink: 'syz.0.356': attribute type 9 has an invalid length. [ 374.238334][ T7402] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.356'. [ 374.432988][ T7400] tty tty23: ldisc open failed (-12), clearing slot 22 [ 374.869248][ T7417] tc_dump_action: action bad kind [ 375.417981][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 375.418005][ T29] audit: type=1400 audit(1728251288.460:489): avc: denied { mount } for pid=7403 comm="syz.0.358" name="/" dev="ramfs" ino=21761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 377.718640][ T29] audit: type=1400 audit(1728251290.760:490): avc: denied { setopt } for pid=7436 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.756080][ T7442] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 0, id = 0 [ 377.771915][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 378.119424][ T7441] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.364'. [ 378.145479][ T29] audit: type=1326 audit(1728251291.190:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 378.170739][ T29] audit: type=1326 audit(1728251291.190:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 378.170822][ T29] audit: type=1326 audit(1728251291.200:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 378.170883][ T29] audit: type=1326 audit(1728251291.200:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 378.170946][ T29] audit: type=1326 audit(1728251291.200:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 378.181204][ T29] audit: type=1326 audit(1728251291.210:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 378.181269][ T29] audit: type=1326 audit(1728251291.210:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 378.181320][ T29] audit: type=1326 audit(1728251291.210:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 379.170344][ T7455] fuse: Bad value for 'fd' [ 379.982227][ T7462] netlink: 'syz.0.370': attribute type 9 has an invalid length. [ 380.256358][ T7462] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.370'. [ 380.725193][ T6953] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 380.915189][ T6953] usb 2-1: Using ep0 maxpacket: 32 [ 381.160708][ T5239] Bluetooth: hci0: command 0x0406 tx timeout [ 381.723468][ T6953] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 381.731045][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 381.731070][ T29] audit: type=1400 audit(1728251294.730:506): avc: denied { shutdown } for pid=7475 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.731964][ T6953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.772508][ T29] audit: type=1400 audit(1728251294.810:507): avc: denied { connect } for pid=7475 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.784842][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 381.801246][ T6953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.808665][ T29] audit: type=1400 audit(1728251294.810:508): avc: denied { name_connect } for pid=7475 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 381.845843][ T7482] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.375'. [ 381.885168][ T6953] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 381.891697][ T29] audit: type=1400 audit(1728251294.870:509): avc: denied { setopt } for pid=7475 comm="syz.2.376" laddr=::ffff:172.20.20.170 lport=37925 faddr=::ffff:172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.894265][ T6953] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 381.946331][ T6953] usb 2-1: Product: syz [ 381.954276][ T6953] usb 2-1: Manufacturer: syz [ 381.972403][ T6953] usb 2-1: SerialNumber: syz [ 382.025660][ T6953] usb 2-1: config 0 descriptor?? [ 382.036602][ T6953] ldusb 2-1:0.0: Interrupt in endpoint not found [ 382.094513][ T29] audit: type=1326 audit(1728251294.990:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 382.245245][ T29] audit: type=1326 audit(1728251295.010:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 382.497906][ T938] usb 2-1: USB disconnect, device number 6 [ 382.532339][ T29] audit: type=1326 audit(1728251295.010:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 382.557556][ T29] audit: type=1326 audit(1728251295.010:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 382.586591][ T29] audit: type=1326 audit(1728251295.020:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 382.613934][ T29] audit: type=1326 audit(1728251295.020:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 382.836588][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 382.924087][ T7500] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.382'. [ 383.730621][ T7507] netlink: 'syz.1.383': attribute type 9 has an invalid length. [ 383.752234][ T7509] netlink: 'syz.3.385': attribute type 9 has an invalid length. [ 383.765478][ T7507] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.383'. [ 383.779848][ T7509] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.385'. [ 383.827841][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.834370][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.871848][ T7511] misc userio: Invalid payload size [ 383.906870][ T7511] misc userio: No port type given on /dev/userio [ 385.134760][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 385.890023][ T7520] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.389'. [ 387.585277][ T6953] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 387.785516][ T6953] usb 3-1: Using ep0 maxpacket: 32 [ 388.014910][ T6953] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 388.043713][ T6953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.085185][ T6953] usb 3-1: config 0 interface 0 has no altsetting 0 [ 388.126086][ T6953] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 388.168052][ T6953] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 388.434212][ T6953] usb 3-1: Product: syz [ 388.448561][ T6953] usb 3-1: Manufacturer: syz [ 388.472947][ T6953] usb 3-1: SerialNumber: syz [ 388.498193][ T6953] usb 3-1: config 0 descriptor?? [ 388.570835][ T6953] ldusb 3-1:0.0: Interrupt in endpoint not found [ 388.798539][ T7547] netlink: 64 bytes leftover after parsing attributes in process `syz.4.395'. [ 388.819209][ T5277] usb 3-1: USB disconnect, device number 5 [ 389.209522][ T7553] netlink: 'syz.3.398': attribute type 9 has an invalid length. [ 389.448098][ T7553] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.398'. [ 391.255375][ T5308] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 391.335231][ T51] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 391.425191][ T5308] usb 4-1: Using ep0 maxpacket: 32 [ 391.441321][ T5308] usb 4-1: config 0 has no interfaces? [ 391.450609][ T5308] usb 4-1: New USB device found, idVendor=19d2, idProduct=1589, bcdDevice=24.5f [ 391.470129][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.484388][ T5308] usb 4-1: Product: syz [ 391.925324][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 392.442512][ T5308] usb 4-1: Manufacturer: syz [ 392.447262][ T5308] usb 4-1: SerialNumber: syz [ 392.454242][ T5308] usb 4-1: config 0 descriptor?? [ 392.967783][ T51] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.978237][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.988489][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.004081][ T51] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.017523][ T51] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.026696][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.096059][ T5277] usb 4-1: USB disconnect, device number 8 [ 393.385951][ T51] usb 1-1: GET_CAPABILITIES returned 0 [ 393.406029][ T51] usbtmc 1-1:16.0: can't read capabilities [ 395.817594][ T6953] usb 1-1: USB disconnect, device number 4 [ 396.037171][ T7599] tc_dump_action: action bad kind [ 397.785006][ T7613] netlink: 'syz.0.412': attribute type 9 has an invalid length. [ 397.792800][ T7613] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.412'. [ 397.900985][ T7615] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 397.939818][ T7615] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 397.985397][ T7615] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 399.510662][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'. [ 399.520162][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 400.571942][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 400.676762][ T7650] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.421'. [ 401.048496][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 401.048552][ T29] audit: type=1326 audit(1728251313.910:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 401.317651][ T29] audit: type=1326 audit(1728251314.330:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 401.478958][ T29] audit: type=1326 audit(1728251314.340:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 401.525385][ T29] audit: type=1326 audit(1728251314.340:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 401.549588][ T29] audit: type=1326 audit(1728251314.340:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 401.574235][ T29] audit: type=1326 audit(1728251314.490:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 401.599635][ T29] audit: type=1326 audit(1728251314.490:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ee97dff9 code=0x7ffc0000 [ 403.200581][ T7662] netlink: 'syz.0.428': attribute type 9 has an invalid length. [ 403.208553][ T7662] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.428'. [ 403.704334][ T7668] input: syz0 as /devices/virtual/input/input7 [ 404.273230][ T29] audit: type=1400 audit(1728251316.730:540): avc: denied { read write } for pid=7664 comm="syz.4.430" name="uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 404.508582][ T7671] tc_dump_action: action bad kind [ 404.857324][ T29] audit: type=1400 audit(1728251316.730:541): avc: denied { open } for pid=7664 comm="syz.4.430" path="/dev/uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 404.883173][ T29] audit: type=1400 audit(1728251316.740:542): avc: denied { ioctl } for pid=7664 comm="syz.4.430" path="/dev/uinput" dev="devtmpfs" ino=835 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 405.145124][ T51] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 405.676843][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 406.461425][ T51] usb 1-1: device descriptor read/all, error -71 [ 407.902759][ T7694] vivid-000: disconnect [ 407.918737][ T7694] netlink: 'syz.0.438': attribute type 9 has an invalid length. [ 407.948809][ T7694] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.438'. [ 408.155345][ T7696] vivid-002: disconnect [ 408.203392][ T7696] netlink: 'syz.1.439': attribute type 9 has an invalid length. [ 408.271861][ T7696] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.439'. [ 408.557231][ T7693] vivid-000: reconnect [ 408.770075][ T7695] vivid-002: reconnect [ 410.387641][ T7714] input: syz0 as /devices/virtual/input/input8 [ 410.604156][ T29] audit: type=1400 audit(1728251323.640:543): avc: denied { read } for pid=4660 comm="acpid" name="event4" dev="devtmpfs" ino=2445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.972879][ T29] audit: type=1400 audit(1728251323.670:544): avc: denied { open } for pid=4660 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.073979][ T938] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 411.197619][ T29] audit: type=1400 audit(1728251323.680:545): avc: denied { ioctl } for pid=4660 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2445 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.222788][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.245196][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 411.279367][ T938] usb 3-1: config 0 has no interfaces? [ 411.304861][ T938] usb 3-1: New USB device found, idVendor=19d2, idProduct=1589, bcdDevice=24.5f [ 411.314270][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.359570][ T938] usb 3-1: Product: syz [ 411.365279][ T938] usb 3-1: Manufacturer: syz [ 411.371256][ T938] usb 3-1: SerialNumber: syz [ 411.381307][ T938] usb 3-1: config 0 descriptor?? [ 413.209085][ T7726] team_slave_0: entered promiscuous mode [ 413.215378][ T7726] team_slave_1: entered promiscuous mode [ 413.316770][ T7726] macsec1: entered promiscuous mode [ 413.336762][ T7726] team0: entered promiscuous mode [ 413.356501][ T7726] macsec1: entered allmulticast mode [ 413.361877][ T7726] team0: entered allmulticast mode [ 413.369431][ T7730] vivid-002: disconnect [ 413.376184][ T7730] netlink: 'syz.1.448': attribute type 9 has an invalid length. [ 413.386912][ T5277] usb 3-1: USB disconnect, device number 6 [ 413.404811][ T7726] team_slave_0: entered allmulticast mode [ 413.411034][ T7730] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.448'. [ 413.422151][ T7726] team_slave_1: entered allmulticast mode [ 415.028473][ T7729] vivid-002: reconnect [ 415.069171][ T7737] team_slave_0: entered promiscuous mode [ 415.074971][ T7737] team_slave_1: entered promiscuous mode [ 415.135283][ T7737] macsec1: entered promiscuous mode [ 415.140554][ T7737] team0: entered promiscuous mode [ 415.146509][ T7737] macsec1: entered allmulticast mode [ 415.151855][ T7737] team0: entered allmulticast mode [ 415.198821][ T7737] team_slave_0: entered allmulticast mode [ 415.245431][ T7737] team_slave_1: entered allmulticast mode [ 416.675192][ T5277] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 416.693353][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.711760][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.722031][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.748209][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.759343][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 416.768735][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.966283][ T5277] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.229867][ T5277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.415373][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 417.445174][ T5277] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 417.465158][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.497118][ T7756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.558637][ T5277] hub 2-1:1.0: bad descriptor, ignoring hub [ 417.564632][ T5277] hub 2-1:1.0: probe with driver hub failed with error -5 [ 417.591469][ T5277] cdc_wdm 2-1:1.0: skipping garbage [ 417.597043][ T5277] cdc_wdm 2-1:1.0: skipping garbage [ 417.620805][ T5277] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 417.627075][ T5277] cdc_wdm 2-1:1.0: Unknown control protocol [ 418.210870][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.217761][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.225294][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.231976][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.241017][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.247695][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.254892][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.261557][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.268096][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.274769][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.281137][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.287937][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.294317][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.300981][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.307663][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.314325][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.320832][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.327472][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.335372][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 418.342041][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 418.397367][ T7757] chnl_net:caif_netlink_parms(): no params data found [ 418.563986][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.641904][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.773057][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.834552][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.857145][ T5239] Bluetooth: hci1: command tx timeout [ 418.923739][ T7757] bridge_slave_0: entered allmulticast mode [ 418.931402][ T7757] bridge_slave_0: entered promiscuous mode [ 418.942798][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.951395][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.981276][ T7757] bridge_slave_1: entered allmulticast mode [ 419.020587][ T7757] bridge_slave_1: entered promiscuous mode [ 419.185497][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.269037][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.275134][ T938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 419.416832][ T7757] team0: Port device team_slave_0 added [ 419.437566][ T7757] team0: Port device team_slave_1 added [ 419.467547][ T7782] vivid-000: disconnect [ 419.473933][ T7782] netlink: 'syz.0.462': attribute type 9 has an invalid length. [ 419.475181][ T938] usb 3-1: Using ep0 maxpacket: 8 [ 419.507670][ T7782] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.462'. [ 419.525255][ T938] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.551583][ T29] audit: type=1400 audit(1728251332.580:546): avc: denied { mounton } for pid=7783 comm="syz.3.463" path="/proc/69/task" dev="proc" ino=22805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 419.578751][ T938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.593903][ T7784] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 419.601300][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.610562][ T938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.622155][ T938] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.640837][ T938] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.651334][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.679322][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.849567][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.864629][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.874805][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.922206][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.959211][ T938] usb 3-1: GET_CAPABILITIES returned 0 [ 419.965459][ T938] usbtmc 3-1:16.0: can't read capabilities [ 420.429813][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.464'. [ 420.930446][ T7781] vivid-000: reconnect [ 420.947275][ T5239] Bluetooth: hci1: command tx timeout [ 421.010023][ T7757] hsr_slave_0: entered promiscuous mode [ 421.185835][ T29] audit: type=1326 audit(1728251334.210:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 421.220763][ T7757] hsr_slave_1: entered promiscuous mode [ 421.253102][ T7757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.261991][ T7757] Cannot create hsr debugfs directory [ 421.311495][ T29] audit: type=1326 audit(1728251334.210:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 421.400641][ T6953] usb 2-1: USB disconnect, device number 7 [ 421.400734][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 421.634831][ T7794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.465'. [ 421.781455][ T7798] vivid-006: disconnect [ 421.836948][ T7798] netlink: 'syz.3.467': attribute type 9 has an invalid length. [ 421.890688][ T7798] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.467'. [ 421.937953][ T6953] usb 3-1: USB disconnect, device number 7 [ 421.940313][ T7757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.965250][ T7800] vivid-002: disconnect [ 421.970994][ T7800] netlink: 'syz.1.468': attribute type 9 has an invalid length. [ 422.106853][ T7800] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.468'. [ 422.485135][ T51] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 422.569685][ T7757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.015743][ T5239] Bluetooth: hci1: command tx timeout [ 423.345793][ T7797] vivid-006: reconnect [ 423.365168][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 423.453392][ T51] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 423.465050][ T51] usb 1-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 423.475410][ T51] usb 1-1: config 0 has no interface number 0 [ 423.481679][ T51] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 423.493351][ T51] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 11 [ 423.504835][ T51] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x82 has invalid maxpacket 25303, setting to 1024 [ 423.516240][ T51] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.529349][ T51] usb 1-1: config 0 interface 52 has no altsetting 0 [ 423.540978][ T51] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 423.550614][ T7799] vivid-002: reconnect [ 423.568632][ T51] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 423.673104][ T51] usb 1-1: Product: syz [ 423.679188][ T51] usb 1-1: SerialNumber: syz [ 423.688357][ T51] usb 1-1: config 0 descriptor?? [ 423.955782][ T51] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input9 [ 424.864893][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'. [ 425.095171][ T5239] Bluetooth: hci1: command tx timeout [ 425.569235][ T29] audit: type=1326 audit(1728251338.560:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 425.801956][ T29] audit: type=1326 audit(1728251338.570:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 425.845110][ T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 426.005113][ T29] audit: type=1326 audit(1728251338.830:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 426.035793][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 426.044933][ T51] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 426.075056][ T29] audit: type=1326 audit(1728251338.830:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 426.143969][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.213680][ T7757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.288466][ T29] audit: type=1400 audit(1728251338.870:553): avc: denied { write } for pid=7801 comm="syz.0.469" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.765255][ T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 426.774536][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.980909][ T29] audit: type=1400 audit(1728251338.910:554): avc: denied { write } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.002759][ T29] audit: type=1400 audit(1728251338.910:555): avc: denied { remove_name } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.026095][ T29] audit: type=1400 audit(1728251338.910:556): avc: denied { rename } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 427.049753][ T29] audit: type=1400 audit(1728251338.910:557): avc: denied { add_name } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.085319][ T51] usb 3-1: config 0 descriptor?? [ 427.085451][ T29] audit: type=1400 audit(1728251338.910:558): avc: denied { unlink } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 427.115699][ T51] usb 3-1: can't set config #0, error -71 [ 427.194015][ T51] usb 3-1: USB disconnect, device number 8 [ 427.441458][ T5277] usb 1-1: USB disconnect, device number 7 [ 427.687594][ T7757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.215136][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 428.332427][ T7757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.362916][ T7757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.395264][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 428.426221][ T51] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.454186][ T7757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.455132][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.483886][ T7757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.545066][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.607420][ T51] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.645131][ T51] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.705162][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.779803][ T7757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.853625][ T7757] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.905307][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.912551][ T7762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.958122][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.965371][ T7762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.978511][ T51] usb 3-1: GET_CAPABILITIES returned 0 [ 429.013940][ T51] usbtmc 3-1:16.0: can't read capabilities [ 429.217409][ T7844] vivid-000: disconnect [ 429.271077][ T7844] netlink: 'syz.0.479': attribute type 9 has an invalid length. [ 429.687462][ T7844] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.479'. [ 430.286826][ T7843] vivid-000: reconnect [ 430.350957][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.495419][ T51] usb 3-1: USB disconnect, device number 9 [ 430.675168][ T938] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 430.710360][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 430.849731][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 430.870817][ T938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.905272][ T938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.935832][ T938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.969529][ T938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.013238][ T938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.062223][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.206567][ T7757] veth0_vlan: entered promiscuous mode [ 431.286021][ T7757] veth1_vlan: entered promiscuous mode [ 431.385934][ T5309] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 431.412516][ T938] usb 4-1: GET_CAPABILITIES returned 0 [ 431.423806][ T938] usbtmc 4-1:16.0: can't read capabilities [ 431.436375][ T7757] veth0_macvtap: entered promiscuous mode [ 431.459661][ T7757] veth1_macvtap: entered promiscuous mode [ 431.518319][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.538890][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.553564][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.565265][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.585264][ T5309] usb 1-1: Using ep0 maxpacket: 32 [ 431.595640][ T5309] usb 1-1: config 0 has no interfaces? [ 431.606712][ T5309] usb 1-1: New USB device found, idVendor=19d2, idProduct=1589, bcdDevice=24.5f [ 431.617138][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.653090][ T5309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.665217][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.680552][ T5309] usb 1-1: Product: syz [ 431.687451][ T5309] usb 1-1: Manufacturer: syz [ 431.692222][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.703019][ T5309] usb 1-1: SerialNumber: syz [ 431.711085][ T5309] usb 1-1: config 0 descriptor?? [ 431.717267][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.728071][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.785436][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 431.785475][ T29] audit: type=1400 audit(1728251344.810:562): avc: denied { ioctl } for pid=7873 comm="syz.2.486" path="socket:[23300]" dev="sockfs" ino=23300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.862475][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.943876][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.998286][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.056925][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.102138][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.112726][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.123980][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.204806][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.399695][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.439301][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.474590][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.485815][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.496170][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.509568][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.520765][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.531747][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.560884][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.573942][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.584608][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.595783][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.613674][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.630304][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.642573][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.653586][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.666086][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.700225][ T7883] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 432.713510][ T7757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.723766][ T7883] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 432.735035][ T7757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.743867][ T7757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.757727][ T7883] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 432.765681][ T7757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.831236][ T51] usb 1-1: USB disconnect, device number 8 [ 432.976857][ T6653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.984700][ T6653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.037752][ T5308] usb 4-1: USB disconnect, device number 9 [ 433.058580][ T6653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.087707][ T6653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.252266][ T7929] netlink: 'syz.1.499': attribute type 9 has an invalid length. [ 440.252293][ T7929] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.499'. [ 440.765237][ T5279] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 440.855166][ T7939] vivid-000: disconnect [ 440.856490][ T7939] netlink: 'syz.0.502': attribute type 9 has an invalid length. [ 440.856512][ T7939] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.502'. [ 440.896353][ T5277] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 440.925104][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 440.927337][ T5279] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.928511][ T5279] usb 2-1: config 1 interface 0 altsetting 249 bulk endpoint 0x82 has invalid maxpacket 16 [ 440.928546][ T5279] usb 2-1: config 1 interface 0 altsetting 249 bulk endpoint 0x3 has invalid maxpacket 64 [ 440.928575][ T5279] usb 2-1: config 1 interface 0 has no altsetting 0 [ 440.929224][ T5279] usb 2-1: language id specifier not provided by device, defaulting to English [ 440.934122][ T5279] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.934156][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.934183][ T5279] usb 2-1: Product: syz [ 440.934203][ T5279] usb 2-1: Manufacturer: 㰊 [ 440.934222][ T5279] usb 2-1: SerialNumber: syz [ 440.938199][ T7932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 440.938389][ T7932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 441.159842][ T29] audit: type=1400 audit(1728251354.200:563): avc: denied { bind } for pid=7931 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.223592][ T29] audit: type=1400 audit(1728251354.250:564): avc: denied { node_bind } for pid=7931 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 441.232703][ T5279] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 441.236218][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 441.276880][ T5277] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 441.276946][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 441.276985][ T5277] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 441.277012][ T5277] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.277055][ T5277] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.277084][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.317528][ T5277] usbtmc 5-1:16.0: bulk endpoints not found [ 441.826935][ T7937] netlink: 'syz.4.501': attribute type 8 has an invalid length. [ 441.826960][ T7937] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.501'. [ 441.829471][ T51] usb 5-1: USB disconnect, device number 8 [ 441.839409][ T5279] usb 2-1: USB disconnect, device number 8 [ 441.971172][ T7938] vivid-000: reconnect [ 442.243803][ T7949] vivid-002: disconnect [ 442.244913][ T7949] netlink: 'syz.1.505': attribute type 9 has an invalid length. [ 442.244935][ T7949] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.505'. [ 444.596622][ T7948] vivid-002: reconnect [ 445.259848][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.277423][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.645387][ T941] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 448.795199][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 448.804453][ T941] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.804659][ T941] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.804763][ T941] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.804865][ T941] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.805269][ T941] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.805361][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.480077][ T7989] bond_slave_0: entered promiscuous mode [ 449.480202][ T7989] bond_slave_1: entered promiscuous mode [ 449.480334][ T7989] macsec2: entered promiscuous mode [ 449.480358][ T7989] bond0: entered promiscuous mode [ 449.480724][ T7989] macsec2: entered allmulticast mode [ 449.480743][ T7989] bond0: entered allmulticast mode [ 449.480763][ T7989] bond_slave_0: entered allmulticast mode [ 449.480788][ T7989] bond_slave_1: entered allmulticast mode [ 449.499383][ T941] usb 2-1: GET_CAPABILITIES returned 0 [ 449.499418][ T941] usbtmc 2-1:16.0: can't read capabilities [ 449.620309][ T7989] bond0: left allmulticast mode [ 449.620341][ T7989] bond_slave_0: left allmulticast mode [ 449.620367][ T7989] bond_slave_1: left allmulticast mode [ 449.620423][ T7989] bond0: left promiscuous mode [ 449.621084][ T7989] bond_slave_0: left promiscuous mode [ 449.621146][ T7989] bond_slave_1: left promiscuous mode [ 451.571749][ T5279] usb 2-1: USB disconnect, device number 9 [ 451.985994][ T8005] vivid-000: disconnect [ 452.008539][ T8005] netlink: 'syz.0.519': attribute type 9 has an invalid length. [ 452.048331][ T8005] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.519'. [ 452.207983][ T8010] vivid-002: disconnect [ 452.215807][ T8010] netlink: 'syz.1.521': attribute type 9 has an invalid length. [ 452.223619][ T8010] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.521'. [ 452.550711][ T8019] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 452.595272][ T8004] vivid-000: reconnect [ 452.675369][ T8019] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 452.736161][ T8019] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 453.404957][ T8024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.132646][ T8009] vivid-002: reconnect [ 454.246497][ T8026] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3976 [ 454.432318][ T8028] netlink: 'syz.1.527': attribute type 9 has an invalid length. [ 454.505601][ T8028] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.527'. [ 455.123231][ T8038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.755123][ T5308] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 456.974478][ T5308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.993384][ T5308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.004731][ T5308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 457.031158][ T5308] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 457.046810][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.081160][ T8043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 457.421722][ T8049] input: syz0 as /devices/virtual/input/input10 [ 458.112451][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 458.119125][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 458.130486][ T5308] hub 1-1:1.0: bad descriptor, ignoring hub [ 458.136904][ T5308] hub 1-1:1.0: probe with driver hub failed with error -5 [ 458.145960][ T5308] cdc_wdm 1-1:1.0: skipping garbage [ 458.151344][ T5308] cdc_wdm 1-1:1.0: skipping garbage [ 458.225906][ T5308] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 458.276823][ T5308] cdc_wdm 1-1:1.0: Unknown control protocol [ 458.761925][ T8055] bond_slave_0: entered promiscuous mode [ 458.768011][ T8055] bond_slave_1: entered promiscuous mode [ 458.773994][ T8055] macsec1: entered promiscuous mode [ 458.781333][ T8055] bond0: entered promiscuous mode [ 458.787335][ T8055] macsec1: entered allmulticast mode [ 458.792708][ T8055] bond0: entered allmulticast mode [ 458.799243][ T8055] bond_slave_0: entered allmulticast mode [ 458.896107][ C0] wdm_int_callback: 11746 callbacks suppressed [ 458.896147][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 458.909012][ C0] wdm_int_callback: 11746 callbacks suppressed [ 458.909040][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 458.921779][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 458.928459][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 458.986156][ T8055] bond_slave_1: entered allmulticast mode [ 459.033056][ T8055] bond0: left allmulticast mode [ 459.038309][ T8055] bond_slave_0: left allmulticast mode [ 459.060721][ T8055] bond_slave_1: left allmulticast mode [ 459.083639][ T8055] bond0: left promiscuous mode [ 459.092718][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.116841][ T8055] bond_slave_0: left promiscuous mode [ 459.122371][ T8055] bond_slave_1: left promiscuous mode [ 459.128446][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.325280][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.331923][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.338990][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.345645][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.352314][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.359124][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.365537][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.372166][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.378469][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.385088][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.391405][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.398020][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.405851][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.412506][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.419771][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 459.426429][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 459.440654][ T8060] vivid-004: disconnect [ 459.459577][ T8060] netlink: 'syz.2.537': attribute type 9 has an invalid length. [ 459.525182][ T8060] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.537'. [ 460.483881][ T8059] vivid-004: reconnect [ 460.591011][ T8066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.935176][ T5280] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 462.187840][ T5309] usb 1-1: USB disconnect, device number 9 [ 463.981376][ T8082] vivid-000: disconnect [ 464.006461][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 464.030985][ T8082] netlink: 'syz.0.543': attribute type 9 has an invalid length. [ 464.046330][ T8082] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.543'. [ 464.105913][ T5280] usb 4-1: config 0 has no interfaces? [ 464.117266][ T8085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.544'. [ 464.230776][ T5280] usb 4-1: New USB device found, idVendor=19d2, idProduct=1589, bcdDevice=24.5f [ 464.240274][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.248460][ T5280] usb 4-1: Product: syz [ 464.252684][ T5280] usb 4-1: Manufacturer: syz [ 464.257464][ T5280] usb 4-1: SerialNumber: syz [ 464.346078][ T5280] usb 4-1: config 0 descriptor?? [ 464.551182][ T8081] vivid-000: reconnect [ 464.795877][ T5280] usb 4-1: USB disconnect, device number 10 [ 466.609502][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 466.619541][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 466.627410][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 466.641334][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 466.649459][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 466.659141][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 466.725262][ T941] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 466.795666][ T51] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 467.525462][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 467.633561][ T941] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.735110][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 467.760807][ T51] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 467.825389][ T51] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 467.845124][ T941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 467.871151][ T51] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 467.882366][ T941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.902873][ T941] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.916251][ T51] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 467.926517][ T51] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 467.940070][ T941] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 467.949735][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.958084][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 467.987784][ T51] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 468.005046][ T51] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 468.034556][ T51] usb 3-1: Product: syz [ 468.045121][ T51] usb 3-1: Manufacturer: syz [ 468.049836][ T51] usb 3-1: SerialNumber: syz [ 468.126526][ T51] usb 3-1: config 0 descriptor?? [ 468.198430][ T51] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 468.248780][ T941] usb 1-1: GET_CAPABILITIES returned 0 [ 468.254331][ T941] usbtmc 1-1:16.0: can't read capabilities [ 468.261939][ T51] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 468.358009][ T5308] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 468.645401][ T5308] usb 4-1: Using ep0 maxpacket: 8 [ 468.710249][ T5308] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.951235][ T5308] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.108675][ T8099] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 469.145383][ T5308] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.161585][ T8102] chnl_net:caif_netlink_parms(): no params data found [ 469.175449][ T5308] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.206833][ T5308] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.245941][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.376899][ T8119] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 469.385752][ T54] Bluetooth: hci3: command tx timeout [ 469.810003][ T938] usb 3-1: USB disconnect, device number 10 [ 469.854017][ T938] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 470.129181][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.137295][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.162061][ T8102] bridge_slave_0: entered allmulticast mode [ 470.181385][ T5308] usb 4-1: GET_CAPABILITIES returned 0 [ 470.187908][ T5308] usbtmc 4-1:16.0: can't read capabilities [ 470.221863][ T8102] bridge_slave_0: entered promiscuous mode [ 470.259281][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.275539][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.310149][ T8102] bridge_slave_1: entered allmulticast mode [ 470.347652][ T8102] bridge_slave_1: entered promiscuous mode [ 471.183526][ T5280] usb 1-1: USB disconnect, device number 10 [ 471.628515][ T54] Bluetooth: hci3: command tx timeout [ 472.378317][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.457527][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.571943][ T8102] team0: Port device team_slave_0 added [ 472.593780][ T8102] team0: Port device team_slave_1 added [ 472.688064][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.707261][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.750874][ T8102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.771854][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.804408][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.832601][ T8102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.977096][ T8102] hsr_slave_0: entered promiscuous mode [ 473.011427][ T8102] hsr_slave_1: entered promiscuous mode [ 473.032903][ T8102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.094535][ T8102] Cannot create hsr debugfs directory [ 473.496391][ T5279] usb 4-1: USB disconnect, device number 11 [ 473.555154][ T51] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 473.655257][ T54] Bluetooth: hci3: command tx timeout [ 473.715141][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 473.731231][ T8102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.742494][ T51] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.768340][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.807908][ T5280] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 473.821130][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.845873][ T51] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.878532][ T51] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.924299][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.965177][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 473.982010][ T5280] usb 1-1: unable to get BOS descriptor or descriptor too short [ 473.992507][ T5280] usb 1-1: config 1 interface 0 altsetting 249 bulk endpoint 0x82 has invalid maxpacket 16 [ 474.018815][ T5280] usb 1-1: config 1 interface 0 altsetting 249 bulk endpoint 0x3 has invalid maxpacket 64 [ 474.022454][ T8102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.090405][ T5280] usb 1-1: config 1 interface 0 has no altsetting 0 [ 474.123000][ T5280] usb 1-1: language id specifier not provided by device, defaulting to English [ 474.163654][ T5280] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.176077][ T51] usb 3-1: usb_control_msg returned -71 [ 474.181712][ T51] usbtmc 3-1:16.0: can't read capabilities [ 474.188861][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.238288][ T51] usb 3-1: USB disconnect, device number 11 [ 474.247260][ T5280] usb 1-1: Product: syz [ 474.256083][ T5280] usb 1-1: Manufacturer: 㰊 [ 474.284896][ T5280] usb 1-1: SerialNumber: syz [ 474.319817][ T8140] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 474.336501][ T8140] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 474.358952][ T8102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.596962][ T8102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.633346][ T29] audit: type=1400 audit(1728251387.670:565): avc: denied { name_bind } for pid=8139 comm="syz.0.557" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 474.981998][ T8102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 475.013131][ T8102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 475.064154][ T8102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 475.068826][ T51] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 475.102162][ T5280] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 475.122833][ T5280] usb 1-1: USB disconnect, device number 11 [ 475.131248][ T8102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 475.245086][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 475.289112][ T51] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 475.302624][ T51] usb 3-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 475.735446][ T54] Bluetooth: hci3: command tx timeout [ 475.852865][ T51] usb 3-1: config 0 has no interface number 0 [ 475.864919][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.882806][ T51] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 475.901937][ T8102] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.932046][ T51] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 11 [ 476.012109][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.019300][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.029604][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.036804][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.049192][ T51] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x82 has invalid maxpacket 25303, setting to 1024 [ 476.579281][ T51] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.594232][ T51] usb 3-1: config 0 interface 52 has no altsetting 0 [ 476.733524][ T51] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 476.742832][ T51] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 476.751313][ T51] usb 3-1: Product: syz [ 476.755667][ T51] usb 3-1: SerialNumber: syz [ 476.819030][ T51] usb 3-1: config 0 descriptor?? [ 477.135537][ T5280] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 477.208038][ T51] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input11 [ 477.320491][ T5280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.341112][ T5280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 477.380836][ T5280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 477.402078][ T5280] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 477.465246][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.485277][ T5279] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 477.511349][ T8161] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.567942][ T5280] hub 5-1:1.0: bad descriptor, ignoring hub [ 477.611914][ T5280] hub 5-1:1.0: probe with driver hub failed with error -5 [ 477.622258][ T5280] cdc_wdm 5-1:1.0: skipping garbage [ 477.628221][ T5280] cdc_wdm 5-1:1.0: skipping garbage [ 477.651505][ T5280] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 477.663203][ T5280] cdc_wdm 5-1:1.0: Unknown control protocol [ 477.685080][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 477.694285][ T5279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.705682][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 477.725054][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.799081][ T5279] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.995141][ T5279] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.036082][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.104357][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.261739][ T5279] usb 1-1: GET_CAPABILITIES returned 0 [ 478.267331][ T5279] usbtmc 1-1:16.0: can't read capabilities [ 478.294851][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.379441][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.525593][ T8102] veth0_vlan: entered promiscuous mode [ 478.847284][ C1] wdm_int_callback: 12521 callbacks suppressed [ 478.847319][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.847351][ C1] wdm_int_callback: 12521 callbacks suppressed [ 478.847377][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.847604][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.847629][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.847844][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.847886][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.848106][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.848134][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.848347][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.848372][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.850231][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.850268][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.850503][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.850539][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.850759][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.850793][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.851009][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.851043][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 478.851260][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 478.851295][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 479.302007][ T8102] veth1_vlan: entered promiscuous mode [ 479.527571][ T8102] veth0_macvtap: entered promiscuous mode [ 479.892374][ T62] bridge_slave_1: left allmulticast mode [ 479.907623][ T62] bridge_slave_1: left promiscuous mode [ 479.929807][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.958168][ T5278] usb 3-1: USB disconnect, device number 12 [ 479.964489][ T62] bridge_slave_0: left allmulticast mode [ 480.008709][ T62] bridge_slave_0: left promiscuous mode [ 480.027298][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.176394][ T941] usb 1-1: USB disconnect, device number 12 [ 480.688576][ T938] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 480.798996][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.811496][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.823876][ T62] bond0 (unregistering): Released all slaves [ 480.843664][ T8180] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 480.851574][ T8180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.566'. [ 480.862176][ T8180] team0: entered promiscuous mode [ 480.865270][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 480.868410][ T8180] team_slave_0: entered promiscuous mode [ 480.880227][ T938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 480.892285][ T938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 480.905062][ T938] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.916353][ T938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.925426][ T8180] team_slave_1: entered promiscuous mode [ 480.936565][ T8180] team0: entered allmulticast mode [ 480.941940][ T8180] team_slave_0: entered allmulticast mode [ 480.944447][ T938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 480.959757][ T8180] team_slave_1: entered allmulticast mode [ 480.967248][ T8180] bridge0: port 3(team0) entered blocking state [ 480.973735][ T8180] bridge0: port 3(team0) entered disabled state [ 480.984428][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.987204][ T8180] bridge0: port 3(team0) entered blocking state [ 481.000151][ T8180] bridge0: port 3(team0) entered forwarding state [ 481.025738][ T938] usbtmc 1-1:16.0: bulk endpoints not found [ 481.042919][ T8102] veth1_macvtap: entered promiscuous mode [ 481.052931][ T62] IPVS: stopping master sync thread 7442 ... [ 481.144636][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.157969][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.179395][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.185881][ T941] usb 5-1: USB disconnect, device number 9 [ 481.455134][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.482739][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.627048][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.769088][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.915607][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.221034][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.291878][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.345093][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.390234][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.412278][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.422884][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.436030][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.446620][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.456750][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.467639][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.479470][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.108120][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.125091][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.134950][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.175400][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.195046][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.215059][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.228288][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.239080][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.249031][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.261038][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.271636][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.282227][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.292136][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.302627][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.312534][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.323085][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.326008][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.571'. [ 483.332966][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.352873][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.366559][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.431995][ T51] usb 1-1: USB disconnect, device number 13 [ 483.673567][ T8102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.703068][ T8102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.735536][ T8102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.746537][ T8102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.048600][ T8203] bond_slave_0: entered promiscuous mode [ 485.054356][ T8203] bond_slave_1: entered promiscuous mode [ 485.266119][ T8203] macsec1: entered promiscuous mode [ 485.271395][ T8203] bond0: entered promiscuous mode [ 485.298767][ T8203] macsec1: entered allmulticast mode [ 485.313622][ T8203] bond0: entered allmulticast mode [ 486.113122][ T29] audit: type=1400 audit(1728251398.400:566): avc: denied { connect } for pid=8214 comm="syz.4.577" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 486.408487][ T8203] bond_slave_0: entered allmulticast mode [ 486.434645][ T8203] bond_slave_1: entered allmulticast mode [ 486.450156][ T8203] bond0: left allmulticast mode [ 486.468010][ T8203] bond_slave_0: left allmulticast mode [ 486.473618][ T8203] bond_slave_1: left allmulticast mode [ 486.493549][ T8203] bond0: left promiscuous mode [ 486.506085][ T8203] bond_slave_0: left promiscuous mode [ 486.511625][ T8203] bond_slave_1: left promiscuous mode [ 486.834416][ T62] hsr_slave_0: left promiscuous mode [ 486.909254][ T62] hsr_slave_1: left promiscuous mode [ 486.981459][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.009215][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.037986][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.061113][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.103902][ T62] veth1_macvtap: left promiscuous mode [ 487.125784][ T62] veth0_macvtap: left promiscuous mode [ 487.138308][ T62] veth1_vlan: left promiscuous mode [ 487.158042][ T62] veth0_vlan: left promiscuous mode [ 487.295664][ T5278] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 487.455450][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 487.472360][ T5278] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.496400][ T5278] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.524550][ T5278] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.540980][ T5278] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.599709][ T5278] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.645153][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.910099][ T5278] usb 3-1: GET_CAPABILITIES returned 0 [ 487.926308][ T5278] usbtmc 3-1:16.0: can't read capabilities [ 490.098638][ T6953] usb 3-1: USB disconnect, device number 13 [ 491.290477][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'. [ 491.346764][ T62] team0 (unregistering): Port device team_slave_1 removed [ 491.585094][ T941] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 491.756111][ T941] usb 3-1: Using ep0 maxpacket: 32 [ 491.758439][ T941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 491.765585][ T941] usb 3-1: config 1 interface 0 altsetting 249 bulk endpoint 0x82 has invalid maxpacket 16 [ 491.765635][ T941] usb 3-1: config 1 interface 0 altsetting 249 bulk endpoint 0x3 has invalid maxpacket 64 [ 491.765678][ T941] usb 3-1: config 1 interface 0 has no altsetting 0 [ 491.766175][ T941] usb 3-1: language id specifier not provided by device, defaulting to English [ 491.767878][ T941] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.767917][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.767943][ T941] usb 3-1: Product: syz [ 491.767962][ T941] usb 3-1: Manufacturer: 㰊 [ 491.767981][ T941] usb 3-1: SerialNumber: syz [ 491.770481][ T8253] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 491.770574][ T8253] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 491.801843][ T62] team0 (unregistering): Port device team_slave_0 removed [ 492.061565][ T941] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 492.079408][ T941] usb 3-1: USB disconnect, device number 14 [ 492.574598][ T29] audit: type=1400 audit(1728251405.610:567): avc: denied { create } for pid=8256 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 492.945218][ T938] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 492.977075][ T8261] netlink: 'syz.0.589': attribute type 9 has an invalid length. [ 492.986903][ T8261] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.589'. [ 493.117795][ T938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.129245][ T938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 493.163845][ T938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 493.204308][ T938] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 493.239356][ T8238] bond_slave_0: entered promiscuous mode [ 493.245146][ T8238] bond_slave_1: entered promiscuous mode [ 493.273432][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.290801][ T8238] macsec2: entered promiscuous mode [ 493.313162][ T8259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 493.325166][ T8238] bond0: entered promiscuous mode [ 493.332291][ T938] hub 3-1:1.0: bad descriptor, ignoring hub [ 493.354322][ T8238] macsec2: entered allmulticast mode [ 493.374006][ T938] hub 3-1:1.0: probe with driver hub failed with error -5 [ 493.387840][ T8238] bond0: entered allmulticast mode [ 493.399300][ T938] cdc_wdm 3-1:1.0: skipping garbage [ 493.400685][ T8238] bond_slave_0: entered allmulticast mode [ 493.404681][ T938] cdc_wdm 3-1:1.0: skipping garbage [ 493.410351][ T8238] bond_slave_1: entered allmulticast mode [ 493.515767][ T29] audit: type=1400 audit(1728251406.530:568): avc: denied { bind } for pid=8262 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 493.673672][ T8238] bond0: left allmulticast mode [ 493.741346][ T8238] bond_slave_0: left allmulticast mode [ 493.777346][ T8238] bond_slave_1: left allmulticast mode [ 493.817110][ T8238] bond0: left promiscuous mode [ 493.861235][ T8238] bond_slave_0: left promiscuous mode [ 493.866815][ T8238] bond_slave_1: left promiscuous mode [ 493.976173][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.999486][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.198054][ T8257] netlink: 'syz.4.587': attribute type 9 has an invalid length. [ 494.199473][ T938] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 494.214340][ T938] cdc_wdm 3-1:1.0: Unknown control protocol [ 494.233310][ T8257] bond_slave_0: entered promiscuous mode [ 494.239174][ T8257] bond_slave_1: entered promiscuous mode [ 494.285396][ T8257] macvlan2: entered promiscuous mode [ 494.290847][ T8257] bond0: entered promiscuous mode [ 494.303509][ T8257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 494.362130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.421015][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.123284][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 495.358703][ T6653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.375402][ T6653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.935605][ T938] usb 3-1: USB disconnect, device number 15 [ 497.042031][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.598'. [ 500.388314][ T8316] bond_slave_0: entered promiscuous mode [ 500.394051][ T8316] bond_slave_1: entered promiscuous mode [ 500.402597][ T8316] macsec1: entered promiscuous mode [ 500.408109][ T8316] bond0: entered promiscuous mode [ 501.015690][ T8316] macsec1: entered allmulticast mode [ 501.060234][ T8316] bond0: entered allmulticast mode [ 501.065854][ T8316] bond_slave_0: entered allmulticast mode [ 501.073581][ T8316] bond_slave_1: entered allmulticast mode [ 501.095826][ T8316] bond0: left allmulticast mode [ 501.100719][ T8316] bond_slave_0: left allmulticast mode [ 501.226744][ T8316] bond_slave_1: left allmulticast mode [ 501.232309][ T8316] bond0: left promiscuous mode [ 501.291481][ T8316] bond_slave_0: left promiscuous mode [ 501.297040][ T8316] bond_slave_1: left promiscuous mode [ 501.355805][ T29] audit: type=1400 audit(1728251414.350:569): avc: denied { write } for pid=8319 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 501.474178][ T29] audit: type=1400 audit(1728251414.510:570): avc: denied { watch watch_reads } for pid=8323 comm="syz.0.605" path="/147" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 501.506154][ T743] bond0: (slave bond_slave_0): interface is now down [ 501.514223][ T743] bond0: (slave bond_slave_1): interface is now down [ 501.551164][ T743] bond0: now running without any active interface! [ 501.595957][ T8324] siw: device registration error -23 [ 501.618271][ T12] bond0: (slave bond_slave_0): interface is now down [ 501.632348][ T12] bond0: (slave bond_slave_1): interface is now down [ 501.659803][ T8321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 501.681907][ T12] bond0: now running without any active interface! [ 501.692580][ T8321] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 502.112608][ T4598] bond0: (slave bond_slave_0): interface is now down [ 502.129565][ T4598] bond0: (slave bond_slave_1): interface is now down [ 502.145785][ T8336] siw: device registration error -23 [ 502.154602][ T4598] bond0: now running without any active interface! [ 503.898240][ T8357] siw: device registration error -23 [ 503.987232][ T8356] netlink: 'syz.4.614': attribute type 9 has an invalid length. [ 503.987258][ T8356] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.614'. [ 505.042784][ T8367] tty tty23: ldisc open failed (-12), clearing slot 22 [ 505.191295][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'. [ 505.200311][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'. [ 505.715185][ T5308] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 505.834402][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.620'. [ 505.865300][ T5308] usb 1-1: Using ep0 maxpacket: 32 [ 505.872438][ T5308] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 505.945611][ T5308] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 506.015424][ T5308] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 506.126981][ T5308] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 506.219981][ T5308] usb 1-1: config 0 interface 0 has no altsetting 0 [ 506.237619][ T5308] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 506.251239][ T5308] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 506.258278][ T8381] tipc: Enabling of bearer rejected, failed to enable media [ 506.271592][ T5308] usb 1-1: Product: syz [ 506.285114][ T5308] usb 1-1: Manufacturer: syz [ 506.289984][ T5308] usb 1-1: SerialNumber: syz [ 506.324434][ T5308] usb 1-1: config 0 descriptor?? [ 506.392632][ T5308] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 506.434880][ T5308] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 506.650414][ T5278] usb 1-1: USB disconnect, device number 14 [ 506.707392][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.714067][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.724537][ T5278] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 506.753167][ T8386] netlink: 104 bytes leftover after parsing attributes in process `syz.3.624'. [ 506.821917][ T29] audit: type=1326 audit(1728251419.860:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 507.545328][ T29] audit: type=1326 audit(1728251420.580:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 507.640147][ T29] audit: type=1326 audit(1728251420.580:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 507.775139][ T29] audit: type=1326 audit(1728251420.580:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 507.825070][ T29] audit: type=1326 audit(1728251420.620:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 507.897500][ T29] audit: type=1326 audit(1728251420.620:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 507.936543][ T29] audit: type=1326 audit(1728251420.620:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 507.973102][ T29] audit: type=1326 audit(1728251420.630:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 508.037297][ T8393] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 508.046953][ T29] audit: type=1326 audit(1728251420.750:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 508.070831][ T5278] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 508.088862][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.626'. [ 508.110746][ T8393] bridge0: port 3(team0) entered blocking state [ 508.124219][ T29] audit: type=1326 audit(1728251420.750:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96517dff9 code=0x7ffc0000 [ 508.163429][ T8393] bridge0: port 3(team0) entered disabled state [ 508.176752][ T8393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 508.245481][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 508.255368][ T5278] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 508.272479][ T5278] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 508.304867][ T5278] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.342859][ T5278] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.384267][ T5278] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.442009][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.472993][ T5278] usbtmc 3-1:16.0: bulk endpoints not found [ 511.791733][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.635'. [ 512.287428][ T8420] sp0: Synchronizing with TNC [ 512.554046][ T5280] usb 3-1: USB disconnect, device number 16 [ 514.625682][ T5280] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 515.433342][ T8445] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 515.623630][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 515.635623][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.646'. [ 515.707551][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 515.841179][ T5280] usb 1-1: device descriptor read/all, error -71 [ 515.875859][ T6953] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 516.086216][ T6953] usb 4-1: Using ep0 maxpacket: 8 [ 516.120511][ T6953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.144505][ T6953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.180955][ T6953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.199595][ T6953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.199656][ T6953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.199695][ T6953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.434808][ T6953] usb 4-1: GET_CAPABILITIES returned 0 [ 516.440535][ T6953] usbtmc 4-1:16.0: can't read capabilities [ 516.472587][ T8466] vivid-000: disconnect [ 516.508258][ T8466] netlink: 'syz.0.651': attribute type 9 has an invalid length. [ 516.516474][ T8466] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.651'. [ 516.526213][ T8466] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 517.165355][ T5308] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 517.209352][ T8464] vivid-000: reconnect [ 517.345543][ T5308] usb 5-1: Using ep0 maxpacket: 8 [ 517.386478][ T5308] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 517.455339][ T5308] usb 5-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 517.497147][ T5280] usb 4-1: USB disconnect, device number 12 [ 517.554921][ T5308] usb 5-1: config 0 has no interface number 0 [ 517.563336][ T5308] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 517.649407][ T5308] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 11 [ 517.683150][ T5308] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x82 has invalid maxpacket 25303, setting to 1024 [ 517.744436][ T5308] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.805103][ T5308] usb 5-1: config 0 interface 52 has no altsetting 0 [ 517.813391][ T11] bridge_slave_1: left allmulticast mode [ 517.875018][ T11] bridge_slave_1: left promiscuous mode [ 517.880837][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.881279][ T5308] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 517.928057][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 518.001591][ T5308] usb 5-1: Product: syz [ 518.027295][ T5308] usb 5-1: SerialNumber: syz [ 518.036288][ T11] bridge_slave_0: left allmulticast mode [ 518.042068][ T11] bridge_slave_0: left promiscuous mode [ 518.047962][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.079570][ T5308] usb 5-1: config 0 descriptor?? [ 518.349059][ T5308] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input12 [ 519.693224][ T8492] input: syz0 as /devices/virtual/input/input13 [ 520.450010][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 520.450029][ T29] audit: type=1400 audit(1728251433.340:582): avc: denied { bind } for pid=8495 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 520.477514][ T29] audit: type=1400 audit(1728251433.360:583): avc: denied { write } for pid=8495 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 532.084990][ C0] sched: DL replenish lagged too much [ 541.105088][ T5280] usb 5-1: USB disconnect, device number 10 [ 541.328526][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 542.026499][ T8526] netlink: 104 bytes leftover after parsing attributes in process `syz.1.664'. [ 542.467625][ T29] audit: type=1326 audit(1728251455.510:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8877dff9 code=0x7ffc0000 [ 542.685212][ T29] audit: type=1326 audit(1728251455.510:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8877dff9 code=0x7ffc0000 [ 542.994319][ T29] audit: type=1326 audit(1728251455.550:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3b8877dff9 code=0x7ffc0000 [ 543.275268][ T29] audit: type=1326 audit(1728251455.550:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8877dff9 code=0x7ffc0000 [ 543.535042][ T29] audit: type=1326 audit(1728251455.550:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8877dff9 code=0x7ffc0000 [ 544.406874][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.416435][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 544.428686][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.436788][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.446000][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 544.470471][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 544.477908][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.489254][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 544.497429][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 544.505812][ T8537] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 544.516611][ T8537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.523999][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 544.673865][ T8537] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 544.685440][ T8537] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 544.699025][ T8537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.708338][ T8537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.717251][ T8537] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 544.724660][ T8537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.765941][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 544.786475][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 544.828177][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 544.842953][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 544.851329][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 544.867815][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 544.966879][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.989145][ T5239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 545.006044][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 545.020779][ T5239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 545.030631][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 545.038609][ T5239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 545.047378][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 545.124545][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.189377][ T11] bond0 (unregistering): Released all slaves [ 546.775482][ T5239] Bluetooth: hci4: command tx timeout [ 546.781773][ T5239] Bluetooth: hci1: command tx timeout [ 546.787747][ T54] Bluetooth: hci0: command tx timeout [ 546.935391][ T5239] Bluetooth: hci6: command tx timeout [ 547.104317][ T5239] Bluetooth: hci7: command tx timeout [ 548.855208][ T54] Bluetooth: hci4: command tx timeout [ 548.860690][ T54] Bluetooth: hci0: command tx timeout [ 548.885026][ T5239] Bluetooth: hci1: command tx timeout [ 549.025552][ T5239] Bluetooth: hci6: command tx timeout [ 549.185527][ T5239] Bluetooth: hci7: command tx timeout [ 550.935442][ T5239] Bluetooth: hci1: command tx timeout [ 550.941846][ T5239] Bluetooth: hci0: command tx timeout [ 550.951613][ T54] Bluetooth: hci4: command tx timeout [ 551.095307][ T5239] Bluetooth: hci6: command tx timeout [ 551.255417][ T5239] Bluetooth: hci7: command tx timeout [ 553.015269][ T54] Bluetooth: hci4: command tx timeout [ 553.020735][ T54] Bluetooth: hci1: command tx timeout [ 553.026349][ T5239] Bluetooth: hci0: command tx timeout [ 553.180432][ T54] Bluetooth: hci6: command tx timeout [ 553.335397][ T54] Bluetooth: hci7: command tx timeout [ 568.151214][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.157858][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.709165][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.719603][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.730195][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 600.738745][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 600.749665][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 600.758863][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 602.162051][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 602.175638][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 602.183561][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 602.193505][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 602.201427][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 602.209930][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 602.856472][ T5239] Bluetooth: hci2: command tx timeout [ 603.764885][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 603.785110][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 603.796240][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 603.804308][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 603.813949][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 603.821523][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.941059][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 603.950515][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 603.959341][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 603.968029][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 603.995348][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 604.005434][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 604.110006][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 604.119692][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 604.128262][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 604.136505][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 604.145722][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 604.159807][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 604.305274][ T5239] Bluetooth: hci3: command tx timeout [ 604.935397][ T5239] Bluetooth: hci2: command tx timeout [ 605.895404][ T5239] Bluetooth: hci5: command tx timeout [ 606.055504][ T5239] Bluetooth: hci8: command tx timeout [ 606.215222][ T5239] Bluetooth: hci9: command tx timeout [ 606.375159][ T5239] Bluetooth: hci3: command tx timeout [ 607.015284][ T5239] Bluetooth: hci2: command tx timeout [ 607.975963][ T5239] Bluetooth: hci5: command tx timeout [ 608.135246][ T5239] Bluetooth: hci8: command tx timeout [ 608.306572][ T5239] Bluetooth: hci9: command tx timeout [ 608.455253][ T5239] Bluetooth: hci3: command tx timeout [ 609.097834][ T5239] Bluetooth: hci2: command tx timeout [ 610.055254][ T5239] Bluetooth: hci5: command tx timeout [ 610.215248][ T5239] Bluetooth: hci8: command tx timeout [ 610.375489][ T5239] Bluetooth: hci9: command tx timeout [ 610.536183][ T5239] Bluetooth: hci3: command tx timeout [ 612.135198][ T5239] Bluetooth: hci5: command tx timeout [ 612.305697][ T5239] Bluetooth: hci8: command tx timeout [ 612.465303][ T5239] Bluetooth: hci9: command tx timeout [ 629.578093][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.585995][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 662.486422][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 662.505183][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 662.517296][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 662.525857][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 662.535672][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 662.543192][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 663.092738][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 663.259991][ T5239] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 663.269398][ T5239] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 663.279115][ T5239] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 663.288066][ T5239] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 663.299691][ T5239] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 663.309011][ T5239] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 663.511517][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.545034][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.552346][ T8567] bridge_slave_0: entered allmulticast mode [ 663.629193][ T8567] bridge_slave_0: entered promiscuous mode [ 663.676349][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.684433][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.775514][ T8567] bridge_slave_1: entered allmulticast mode [ 663.801922][ T8567] bridge_slave_1: entered promiscuous mode [ 664.138647][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.208723][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.507588][ T8567] team0: Port device team_slave_0 added [ 664.557394][ T8567] team0: Port device team_slave_1 added [ 664.616189][ T5239] Bluetooth: hci10: command tx timeout [ 664.751227][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 664.762763][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 664.771379][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 664.782305][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 664.791863][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 664.801900][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 664.862654][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.874944][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.932980][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 664.948576][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 664.957449][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 664.969686][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 664.977736][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 664.985302][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 664.995723][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 665.006311][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 665.017873][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 665.048962][ T5244] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 665.063158][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.076720][ T5244] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 665.084648][ T5244] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 665.189738][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.204950][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.290478][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.335585][ T5244] Bluetooth: hci11: command tx timeout [ 665.464656][ T8567] hsr_slave_0: entered promiscuous mode [ 665.493899][ T8567] hsr_slave_1: entered promiscuous mode [ 665.527983][ T8567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.543849][ T8567] Cannot create hsr debugfs directory [ 665.886843][ T8567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.198779][ T8567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.411058][ T8567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.695350][ T8591] Bluetooth: hci10: command tx timeout [ 667.095197][ T8591] Bluetooth: hci13: command tx timeout [ 667.175500][ T8591] Bluetooth: hci14: command tx timeout [ 667.335622][ T8591] Bluetooth: hci12: command tx timeout [ 667.415231][ T8591] Bluetooth: hci11: command tx timeout [ 667.505423][ T8591] Bluetooth: hci7: command 0x0406 tx timeout [ 667.511526][ T8591] Bluetooth: hci1: command 0x0406 tx timeout [ 667.521141][ T8591] Bluetooth: hci0: command 0x0406 tx timeout [ 667.527294][ T8591] Bluetooth: hci4: command 0x0406 tx timeout [ 667.533362][ T8591] Bluetooth: hci6: command 0x0406 tx timeout [ 668.775295][ T54] Bluetooth: hci10: command tx timeout [ 669.175203][ T54] Bluetooth: hci13: command tx timeout [ 669.255508][ T54] Bluetooth: hci14: command tx timeout [ 669.425551][ T5244] Bluetooth: hci12: command tx timeout [ 669.495137][ T5244] Bluetooth: hci11: command tx timeout [ 670.855134][ T5244] Bluetooth: hci10: command tx timeout [ 671.255137][ T5244] Bluetooth: hci13: command tx timeout [ 671.346963][ T5244] Bluetooth: hci14: command tx timeout [ 671.495328][ T5244] Bluetooth: hci12: command tx timeout [ 671.576812][ T5244] Bluetooth: hci11: command tx timeout [ 673.335319][ T5244] Bluetooth: hci13: command tx timeout [ 673.415317][ T5244] Bluetooth: hci14: command tx timeout [ 673.575530][ T5244] Bluetooth: hci12: command tx timeout [ 691.022253][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.029304][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.775322][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 712.783059][ T30] Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 712.805054][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.813884][ T30] task:kworker/u8:0 state:D stack:22688 pid:11 tgid:11 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 712.865011][ T29] audit: type=1400 audit(1728251625.900:589): avc: denied { write } for pid=5213 comm="syz-executor" path="pipe:[4356]" dev="pipefs" ino=4356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 712.924913][ T30] Workqueue: netns cleanup_net [ 712.929951][ T30] Call Trace: [ 712.933279][ T30] [ 712.985075][ T30] __schedule+0xef5/0x5750 [ 712.989587][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 713.089968][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 713.139389][ T30] ? __pfx___schedule+0x10/0x10 [ 713.183546][ T30] ? schedule+0x298/0x350 [ 713.206738][ T30] ? __pfx_lock_release+0x10/0x10 [ 713.211852][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 713.264917][ T30] ? lock_acquire+0x2f/0xb0 [ 713.269521][ T30] ? schedule+0x1fd/0x350 [ 713.273949][ T30] schedule+0xe7/0x350 [ 713.345821][ T30] schedule_preempt_disabled+0x13/0x30 [ 713.351386][ T30] __mutex_lock+0x5b8/0x9c0 [ 713.394916][ T30] ? wiphy_unregister+0x13e/0xc10 [ 713.400074][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 713.438063][ T30] ? wiphy_unregister+0x13e/0xc10 [ 713.443196][ T30] ? rtnl_lock+0x9/0x20 [ 713.480012][ T30] wiphy_unregister+0x13e/0xc10 [ 713.495697][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 713.501292][ T30] ? rate_control_deinitialize+0x113/0x160 [ 713.550448][ T30] ieee80211_unregister_hw+0x248/0x3a0 [ 713.575250][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 713.580026][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 713.614920][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 713.620384][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 713.654906][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 713.660324][ T30] ops_exit_list+0xb0/0x180 [ 713.700091][ T30] cleanup_net+0x5b7/0xb40 [ 713.704600][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 713.743009][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 713.780341][ T30] ? process_one_work+0x921/0x1ba0 [ 713.800645][ T30] ? lock_acquire+0x2f/0xb0 [ 713.823905][ T30] ? process_one_work+0x921/0x1ba0 [ 713.829662][ T30] process_one_work+0x9c5/0x1ba0 [ 713.834671][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 713.864908][ T30] ? __pfx_process_one_work+0x10/0x10 [ 713.870382][ T30] ? assign_work+0x1a0/0x250 [ 713.902138][ T30] worker_thread+0x6c8/0xf00 [ 713.914927][ T30] ? __pfx_worker_thread+0x10/0x10 [ 713.920131][ T30] kthread+0x2c1/0x3a0 [ 713.924258][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 714.006840][ T30] ? __pfx_kthread+0x10/0x10 [ 714.011565][ T30] ret_from_fork+0x45/0x80 [ 714.039968][ T30] ? __pfx_kthread+0x10/0x10 [ 714.044637][ T30] ret_from_fork_asm+0x1a/0x30 [ 714.084934][ T30] [ 714.088125][ T30] INFO: task kworker/u8:1:12 blocked for more than 144 seconds. [ 714.124919][ T30] Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 714.132645][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.208237][ T30] task:kworker/u8:1 state:D stack:22432 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 714.249349][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 714.284020][ T30] Call Trace: [ 714.294905][ T30] [ 714.297917][ T30] __schedule+0xef5/0x5750 [ 714.302437][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 714.349136][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 714.354438][ T30] ? __pfx___schedule+0x10/0x10 [ 714.394911][ T30] ? schedule+0x298/0x350 [ 714.399358][ T30] ? __pfx_lock_release+0x10/0x10 [ 714.404449][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 714.464925][ T30] ? lock_acquire+0x2f/0xb0 [ 714.469538][ T30] ? schedule+0x1fd/0x350 [ 714.505292][ T30] schedule+0xe7/0x350 [ 714.509454][ T30] schedule_preempt_disabled+0x13/0x30 [ 714.545371][ T30] __mutex_lock+0x5b8/0x9c0 [ 714.549991][ T30] ? cfg80211_dfs_channels_update_work+0xd0/0x640 [ 714.578166][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 714.583310][ T30] ? debug_object_deactivate+0x1f0/0x370 [ 714.614922][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 714.625842][ T30] ? cfg80211_dfs_channels_update_work+0xd0/0x640 [ 714.632356][ T30] cfg80211_dfs_channels_update_work+0xd0/0x640 [ 714.684986][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 714.714936][ T30] ? rcu_is_watching+0x12/0xc0 [ 714.719817][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 714.754923][ T30] ? lock_acquire+0x2f/0xb0 [ 714.759516][ T30] ? process_one_work+0x921/0x1ba0 [ 714.764790][ T30] process_one_work+0x9c5/0x1ba0 [ 714.822585][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 714.845381][ T30] ? __pfx_process_one_work+0x10/0x10 [ 714.850939][ T30] ? assign_work+0x1a0/0x250 [ 714.899619][ T30] worker_thread+0x6c8/0xf00 [ 714.904408][ T30] ? __pfx_worker_thread+0x10/0x10 [ 714.934912][ T30] kthread+0x2c1/0x3a0 [ 714.939091][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 714.944361][ T30] ? __pfx_kthread+0x10/0x10 [ 715.021204][ T30] ret_from_fork+0x45/0x80 [ 715.045187][ T30] ? __pfx_kthread+0x10/0x10 [ 715.049866][ T30] ret_from_fork_asm+0x1a/0x30 [ 715.054724][ T30] [ 715.090473][ T30] INFO: task syz-executor:8538 blocked for more than 145 seconds. [ 715.127556][ T30] Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 715.144931][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.153672][ T30] task:syz-executor state:D stack:26112 pid:8538 tgid:8538 ppid:1 flags:0x00004006 [ 715.207975][ T30] Call Trace: [ 715.211325][ T30] [ 715.214304][ T30] __schedule+0xef5/0x5750 [ 715.244935][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 715.250244][ T30] ? stack_depot_save_flags+0x28/0x8f0 [ 715.285488][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 715.294952][ T30] ? __pfx___schedule+0x10/0x10 [ 715.299892][ T30] ? schedule+0x298/0x350 [ 715.304290][ T30] ? __pfx_lock_release+0x10/0x10 [ 715.345377][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 715.350667][ T30] ? lock_acquire+0x2f/0xb0 [ 715.374932][ T30] ? schedule+0x1fd/0x350 [ 715.379366][ T30] schedule+0xe7/0x350 [ 715.383486][ T30] schedule_preempt_disabled+0x13/0x30 [ 715.425171][ T30] __mutex_lock+0x5b8/0x9c0 [ 715.429877][ T30] ? find_held_lock+0x2d/0x110 [ 715.434799][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 715.460662][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 715.495302][ T30] ? __pfx_lock_release+0x10/0x10 [ 715.500407][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 715.526628][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 715.532235][ T30] ? __pfx_vxlan_init_net+0x10/0x10 [ 715.555669][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 715.561609][ T30] ? rtnl_lock+0x9/0x20 [ 715.580127][ T30] register_nexthop_notifier+0x1b/0x70 [ 715.594908][ T30] ops_init+0x1df/0x5f0 [ 715.614794][ T30] setup_net+0x21f/0x860 [ 715.619207][ T30] ? __pfx_setup_net+0x10/0x10 [ 715.624026][ T30] ? down_read_killable+0xcc/0x380 [ 715.659767][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 715.670242][ T30] ? __raw_spin_lock_init+0x3a/0x110 [ 715.689998][ T30] ? debug_mutex_init+0x37/0x70 [ 715.705120][ T30] copy_net_ns+0x2b4/0x6b0 [ 715.709636][ T30] create_new_namespaces+0x3ea/0xad0 [ 715.745135][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 715.750959][ T30] ksys_unshare+0x45d/0xa40 [ 715.774910][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 715.780095][ T30] __x64_sys_unshare+0x31/0x40 [ 715.805156][ T30] do_syscall_64+0xcd/0x250 [ 715.824912][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.831001][ T30] RIP: 0033:0x7f0eb377f7f7 [ 715.860970][ T30] RSP: 002b:00007ffc000f2268 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 715.885169][ T30] RAX: ffffffffffffffda RBX: 00007f0eb3935f40 RCX: 00007f0eb377f7f7 [ 715.893210][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 715.939563][ T30] RBP: 00007f0eb3936a38 R08: 0000000000000000 R09: 0000000000000000 [ 715.986246][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 715.994409][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 716.052996][ T30] [ 716.064930][ T30] INFO: task syz-executor:8539 blocked for more than 146 seconds. [ 716.072816][ T30] Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 716.110366][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.142296][ T30] task:syz-executor state:D stack:26112 pid:8539 tgid:8539 ppid:1 flags:0x00004006 [ 716.174992][ T30] Call Trace: [ 716.178353][ T30] [ 716.181333][ T30] __schedule+0xef5/0x5750 [ 716.199758][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.225209][ T30] ? stack_depot_save_flags+0x28/0x8f0 [ 716.230795][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.254925][ T30] ? __pfx___schedule+0x10/0x10 [ 716.259876][ T30] ? schedule+0x298/0x350 [ 716.264259][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.298981][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 716.304298][ T30] ? lock_acquire+0x2f/0xb0 [ 716.332469][ T30] ? schedule+0x1fd/0x350 [ 716.344937][ T30] schedule+0xe7/0x350 [ 716.349116][ T30] schedule_preempt_disabled+0x13/0x30 [ 716.354636][ T30] __mutex_lock+0x5b8/0x9c0 [ 716.394907][ T30] ? find_held_lock+0x2d/0x110 [ 716.399792][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 716.420837][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 716.439281][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.444383][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 716.475089][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 716.480667][ T30] ? __pfx_vxlan_init_net+0x10/0x10 [ 716.514913][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 716.534907][ T30] ? rtnl_lock+0x9/0x20 [ 716.544253][ T30] register_nexthop_notifier+0x1b/0x70 [ 716.569055][ T30] ops_init+0x1df/0x5f0 [ 716.573287][ T30] setup_net+0x21f/0x860 [ 716.595188][ T30] ? __pfx_setup_net+0x10/0x10 [ 716.600026][ T30] ? down_read_killable+0xcc/0x380 [ 716.622273][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 716.655268][ T30] ? __raw_spin_lock_init+0x3a/0x110 [ 716.660644][ T30] ? debug_mutex_init+0x37/0x70 [ 716.685655][ T30] copy_net_ns+0x2b4/0x6b0 [ 716.690269][ T30] create_new_namespaces+0x3ea/0xad0 [ 716.720076][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 716.735186][ T30] ksys_unshare+0x45d/0xa40 [ 716.739879][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 716.776686][ T30] __x64_sys_unshare+0x31/0x40 [ 716.781541][ T30] do_syscall_64+0xcd/0x250 [ 716.804911][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.811009][ T30] RIP: 0033:0x7fc32e37f7f7 [ 716.835184][ T30] RSP: 002b:00007ffecb176ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 716.843701][ T30] RAX: ffffffffffffffda RBX: 00007fc32e535f40 RCX: 00007fc32e37f7f7 [ 716.886814][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 716.915111][ T30] RBP: 00007fc32e536a38 R08: 0000000000000000 R09: 0000000000000000 [ 716.923155][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 716.975067][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 716.983136][ T30] [ 717.065340][ T30] INFO: task syz-executor:8543 blocked for more than 147 seconds. [ 717.073215][ T30] Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 717.104279][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.131279][ T30] task:syz-executor state:D stack:26112 pid:8543 tgid:8543 ppid:1 flags:0x00000004 [ 717.174904][ T30] Call Trace: [ 717.178265][ T30] [ 717.181378][ T30] __schedule+0xef5/0x5750 [ 717.215565][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.220851][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.243073][ T30] ? __pfx___schedule+0x10/0x10 [ 717.251470][ T30] ? schedule+0x298/0x350 [ 717.269317][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.274422][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 717.299833][ T30] ? lock_acquire+0x2f/0xb0 [ 717.304411][ T30] ? schedule+0x1fd/0x350 [ 717.325258][ T30] schedule+0xe7/0x350 [ 717.329398][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.362094][ T30] __mutex_lock+0x5b8/0x9c0 [ 717.379379][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 717.384580][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.412702][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 717.435095][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 717.440144][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 717.458899][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.464193][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.494945][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 717.500091][ T30] netlink_rcv_skb+0x16b/0x440 [ 717.533673][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 717.545100][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.550504][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 717.585241][ T30] netlink_unicast+0x53c/0x7f0 [ 717.590114][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 717.614923][ T30] netlink_sendmsg+0x8b8/0xd70 [ 717.619842][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.650441][ T30] __sys_sendto+0x479/0x4d0 [ 717.655795][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 717.660940][ T30] ? __fput+0x684/0xb60 [ 717.704961][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 717.709856][ T30] ? do_syscall_64+0x91/0x250 [ 717.714604][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 717.763047][ T30] do_syscall_64+0xcd/0x250 [ 717.785325][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.791316][ T30] RIP: 0033:0x7f64d9d7fe8c [ 717.834915][ T30] RSP: 002b:00007ffe705be0c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 717.843428][ T30] RAX: ffffffffffffffda RBX: 00007f64daa64620 RCX: 00007f64d9d7fe8c [ 717.905038][ T30] RDX: 000000000000002c RSI: 00007f64daa64670 RDI: 0000000000000003 [ 717.913124][ T30] RBP: 0000000000000000 R08: 00007ffe705be114 R09: 000000000000000c [ 717.964908][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 717.973003][ T30] R13: 0000000000000000 R14: 00007f64daa64670 R15: 0000000000000000 [ 718.037135][ T30] [ 718.064950][ T30] [ 718.064950][ T30] Showing all locks held in the system: [ 718.072754][ T30] 4 locks held by kworker/u8:0/11: [ 718.104407][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 718.142945][ T30] #1: ffffc90000107d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 718.180170][ T30] #2: ffffffff8fecb810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 718.214906][ T30] #3: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x13e/0xc10 [ 718.224396][ T30] 3 locks held by kworker/u8:1/12: [ 718.256132][ T30] #0: ffff88801bfdd948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 718.304916][ T30] #1: ffffc90000117d80 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 718.345393][ T30] #2: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xd0/0x640 [ 718.368811][ T30] 1 lock held by khungtaskd/30: [ 718.373733][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 718.415272][ T30] 3 locks held by kworker/u8:2/35: [ 718.420455][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 718.445228][ T30] #1: ffffc90000ab7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 718.466028][ T30] #2: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 718.484933][ T30] 3 locks held by kworker/u8:7/2945: [ 718.490286][ T30] 2 locks held by getty/4982: [ 718.510439][ T30] #0: ffff88802e84d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 718.529391][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 718.545379][ T30] 6 locks held by kworker/0:5/5278: [ 718.550646][ T30] 3 locks held by kworker/0:6/5308: [ 718.568033][ T30] 3 locks held by kworker/u8:11/6653: [ 718.573480][ T30] #0: ffff88814bbe1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 718.600457][ T30] #1: ffffc9000374fd80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 718.624909][ T30] #2: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 718.634476][ T30] 3 locks held by kworker/1:7/6953: [ 718.655144][ T30] #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 718.675131][ T30] #1: ffffc9000c317d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 718.701546][ T30] #2: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 718.716869][ T30] 2 locks held by syz-executor/8533: [ 718.722225][ T30] #0: ffffffff8fecb810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 718.750954][ T30] #1: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x40b/0x860 [ 718.769406][ T30] 2 locks held by syz-executor/8534: [ 718.785014][ T30] #0: ffffffff8fecb810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 718.803577][ T30] #1: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x40b/0x860 [ 718.814903][ T30] 2 locks held by syz-executor/8538: [ 718.820243][ T30] #0: ffffffff8fecb810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 718.846366][ T30] #1: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 718.864968][ T30] 2 locks held by syz-executor/8539: [ 718.870320][ T30] #0: ffffffff8fecb810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 718.896761][ T30] #1: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 718.914918][ T30] 1 lock held by syz-executor/8543: [ 718.920186][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 718.943951][ T30] 1 lock held by syz-executor/8548: [ 718.954907][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 718.964636][ T30] 1 lock held by syz-executor/8554: [ 718.991731][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.004904][ T30] 1 lock held by syz-executor/8559: [ 719.010256][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.033900][ T30] 1 lock held by syz-executor/8561: [ 719.044923][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.054486][ T30] 1 lock held by syz-executor/8563: [ 719.076176][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.115143][ T30] 8 locks held by syz-executor/8567: [ 719.120517][ T30] #0: ffff888033712420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 719.143311][ T30] #1: ffff8880233d1488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 719.164961][ T30] #2: ffff888140f34e18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 719.194911][ T30] #3: ffffffff8f47aba8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 719.214934][ T30] #4: ffff88803295c0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 719.235256][ T30] #5: ffff888062fd2250 (&devlink->lock_key#13){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 719.255229][ T30] #6: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6b0 [ 719.264231][ T30] #7: ffffffff8e05b950 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x54d/0x1e50 [ 719.291310][ T30] 1 lock held by syz-executor/8575: [ 719.305201][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.314725][ T30] 1 lock held by syz-executor/8584: [ 719.334402][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.348454][ T30] 1 lock held by syz-executor/8586: [ 719.353704][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.374610][ T30] 1 lock held by syz-executor/8588: [ 719.380226][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 719.408434][ T30] [ 719.410826][ T30] ============================================= [ 719.410826][ T30] [ 719.424971][ T30] NMI backtrace for cpu 1 [ 719.429367][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 719.439923][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 719.450033][ T30] Call Trace: [ 719.453352][ T30] [ 719.456326][ T30] dump_stack_lvl+0x116/0x1f0 [ 719.461071][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 719.466069][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 719.472137][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 719.478202][ T30] watchdog+0xf0c/0x1240 [ 719.482514][ T30] ? __pfx_watchdog+0x10/0x10 [ 719.487265][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.492538][ T30] ? __kthread_parkme+0x148/0x220 [ 719.497636][ T30] ? __pfx_watchdog+0x10/0x10 [ 719.502365][ T30] kthread+0x2c1/0x3a0 [ 719.506497][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.511760][ T30] ? __pfx_kthread+0x10/0x10 [ 719.516416][ T30] ret_from_fork+0x45/0x80 [ 719.520895][ T30] ? __pfx_kthread+0x10/0x10 [ 719.525560][ T30] ret_from_fork_asm+0x1a/0x30 [ 719.530408][ T30] [ 719.534439][ T30] Sending NMI from CPU 1 to CPUs 0: [ 719.540114][ C0] NMI backtrace for cpu 0 [ 719.540139][ C0] CPU: 0 UID: 0 PID: 5278 Comm: kworker/0:5 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 719.540172][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 719.540188][ C0] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 719.540217][ C0] RIP: 0010:unwind_next_frame+0x11/0x20c0 [ 719.540249][ C0] Code: 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa <41> 57 48 c1 ea 03 41 56 41 55 49 89 fd 41 54 55 53 48 83 ec 38 0f [ 719.540275][ C0] RSP: 0018:ffffc90000007070 EFLAGS: 00000202 [ 719.540294][ C0] RAX: dffffc0000000000 RBX: ffffc90000007078 RCX: 0000000000000000 [ 719.540313][ C0] RDX: ffffc90000007078 RSI: ffffffff88fbcfe3 RDI: ffffc90000007078 [ 719.540330][ C0] RBP: ffffc90000007108 R08: ffffc900000070ac R09: ffffffff917fed46 [ 719.540348][ C0] R10: ffffc90000007078 R11: 000000000007fbc2 R12: ffffffff81794de0 [ 719.540366][ C0] R13: ffffc90000007138 R14: 0000000000000000 R15: ffff88802d8d5a00 [ 719.540384][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 719.540409][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.540428][ C0] CR2: 0000001b32df4ff8 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 719.540444][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 719.540460][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 719.540476][ C0] Call Trace: [ 719.540483][ C0] [ 719.540493][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 719.540535][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 719.540575][ C0] ? nmi_handle+0x1a9/0x5c0 [ 719.540603][ C0] ? unwind_next_frame+0x11/0x20c0 [ 719.540631][ C0] ? default_do_nmi+0x6a/0x160 [ 719.540672][ C0] ? exc_nmi+0x170/0x1e0 [ 719.540710][ C0] ? end_repeat_nmi+0xf/0x53 [ 719.540762][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 719.540801][ C0] ? process_backlog+0x443/0x15f0 [ 719.540835][ C0] ? unwind_next_frame+0x11/0x20c0 [ 719.540864][ C0] ? unwind_next_frame+0x11/0x20c0 [ 719.540894][ C0] ? unwind_next_frame+0x11/0x20c0 [ 719.540923][ C0] [ 719.540932][ C0] [ 719.540940][ C0] arch_stack_walk+0x95/0x100 [ 719.540974][ C0] ? process_backlog+0x443/0x15f0 [ 719.541010][ C0] stack_trace_save+0x95/0xd0 [ 719.541042][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 719.541076][ C0] ? unwind_next_frame+0x38a/0x20c0 [ 719.541104][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 719.541145][ C0] kasan_save_stack+0x33/0x60 [ 719.541172][ C0] ? kasan_save_stack+0x33/0x60 [ 719.541199][ C0] ? kasan_save_track+0x14/0x30 [ 719.541225][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 719.541255][ C0] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 719.541299][ C0] ? __alloc_skb+0x2b1/0x380 [ 719.541333][ C0] ? synproxy_send_client_synack+0x1ad/0xcf0 [ 719.541363][ C0] ? nft_synproxy_do_eval+0xa49/0xd60 [ 719.541394][ C0] ? nft_do_chain+0x2e6/0x18f0 [ 719.541422][ C0] ? nft_do_chain_inet+0x18b/0x350 [ 719.541449][ C0] ? nf_hook_slow+0xbb/0x200 [ 719.541487][ C0] ? nf_hook.constprop.0+0x42e/0x750 [ 719.541530][ C0] ? ip_local_deliver+0x169/0x1f0 [ 719.541568][ C0] ? ip_rcv+0x2c3/0x5d0 [ 719.541604][ C0] ? __netif_receive_skb_one_core+0x199/0x1e0 [ 719.541637][ C0] ? __netif_receive_skb+0x1d/0x160 [ 719.541669][ C0] ? process_backlog+0x443/0x15f0 [ 719.541719][ C0] kasan_save_track+0x14/0x30 [ 719.541745][ C0] __kasan_slab_alloc+0x89/0x90 [ 719.541776][ C0] kmem_cache_alloc_node_noprof+0x153/0x310 [ 719.541806][ C0] ? __alloc_skb+0x2b1/0x380 [ 719.541844][ C0] __alloc_skb+0x2b1/0x380 [ 719.541880][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 719.541918][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 719.541943][ C0] ? find_held_lock+0x2d/0x110 [ 719.541977][ C0] synproxy_send_client_synack+0x1ad/0xcf0 [ 719.542008][ C0] ? kmem_cache_free+0x152/0x4b0 [ 719.542037][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 719.542071][ C0] nft_synproxy_do_eval+0xa49/0xd60 [ 719.542105][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 719.542136][ C0] ? mark_lock+0xb5/0xc60 [ 719.542159][ C0] ? mark_lock+0xb5/0xc60 [ 719.542182][ C0] ? mark_lock+0xb5/0xc60 [ 719.542206][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 719.542238][ C0] nft_do_chain+0x2e6/0x18f0 [ 719.542268][ C0] ? wg_packet_receive+0xfdf/0x2340 [ 719.542298][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 719.542327][ C0] ? ipt_do_table+0xd4c/0x1aa0 [ 719.542360][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 719.542392][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.542433][ C0] nft_do_chain_inet+0x18b/0x350 [ 719.542460][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 719.542490][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 719.542525][ C0] ? nf_nat_ipv4_local_in+0x181/0x720 [ 719.542565][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 719.542593][ C0] nf_hook_slow+0xbb/0x200 [ 719.542632][ C0] nf_hook.constprop.0+0x42e/0x750 [ 719.542670][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 719.542711][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 719.542749][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 719.542790][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 719.542835][ C0] ip_local_deliver+0x169/0x1f0 [ 719.542874][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 719.542914][ C0] ip_rcv+0x2c3/0x5d0 [ 719.542952][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 719.542990][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 719.543024][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 719.543059][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 719.543092][ C0] ? process_backlog+0x3f1/0x15f0 [ 719.543127][ C0] ? process_backlog+0x3f1/0x15f0 [ 719.543158][ C0] __netif_receive_skb+0x1d/0x160 [ 719.543191][ C0] process_backlog+0x443/0x15f0 [ 719.543227][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 719.543263][ C0] net_rx_action+0xa92/0x1010 [ 719.543296][ C0] ? tmigr_handle_remote+0x153/0xdd0 [ 719.543328][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 719.543360][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 719.543388][ C0] ? run_timer_base+0x119/0x190 [ 719.543432][ C0] ? run_timer_base+0x11e/0x190 [ 719.543467][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 719.543504][ C0] handle_softirqs+0x213/0x8f0 [ 719.543543][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 719.543573][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 719.543603][ C0] ? wg_socket_send_skb_to_peer+0x14c/0x220 [ 719.543632][ C0] do_softirq+0xb2/0xf0 [ 719.543660][ C0] [ 719.543668][ C0] [ 719.543675][ C0] __local_bh_enable_ip+0x100/0x120 [ 719.543706][ C0] wg_socket_send_skb_to_peer+0x14c/0x220 [ 719.543738][ C0] wg_packet_tx_worker+0x1aa/0x810 [ 719.543767][ C0] process_one_work+0x9c5/0x1ba0 [ 719.543797][ C0] ? __pfx_ovs_dp_masks_rebalance+0x10/0x10 [ 719.543862][ C0] ? __pfx_process_one_work+0x10/0x10 [ 719.543893][ C0] ? assign_work+0x1a0/0x250 [ 719.543935][ C0] worker_thread+0x6c8/0xf00 [ 719.543965][ C0] ? __kthread_parkme+0x148/0x220 [ 719.544000][ C0] ? __pfx_worker_thread+0x10/0x10 [ 719.544026][ C0] kthread+0x2c1/0x3a0 [ 719.544057][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.544085][ C0] ? __pfx_kthread+0x10/0x10 [ 719.544118][ C0] ret_from_fork+0x45/0x80 [ 719.544142][ C0] ? __pfx_kthread+0x10/0x10 [ 719.544174][ C0] ret_from_fork_asm+0x1a/0x30 [ 719.544219][ C0] [ 720.330598][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 720.337522][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 720.348176][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 720.358279][ T30] Call Trace: [ 720.361596][ T30] [ 720.364565][ T30] dump_stack_lvl+0x3d/0x1f0 [ 720.369226][ T30] panic+0x71d/0x800 [ 720.373188][ T30] ? __pfx_panic+0x10/0x10 [ 720.377670][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 720.383102][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 720.389167][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 720.394608][ T30] ? watchdog+0xd76/0x1240 [ 720.399085][ T30] ? watchdog+0xd69/0x1240 [ 720.403563][ T30] watchdog+0xd87/0x1240 [ 720.407872][ T30] ? __pfx_watchdog+0x10/0x10 [ 720.412603][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 720.417865][ T30] ? __kthread_parkme+0x148/0x220 [ 720.422955][ T30] ? __pfx_watchdog+0x10/0x10 [ 720.427686][ T30] kthread+0x2c1/0x3a0 [ 720.431911][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 720.437191][ T30] ? __pfx_kthread+0x10/0x10 [ 720.441847][ T30] ret_from_fork+0x45/0x80 [ 720.446324][ T30] ? __pfx_kthread+0x10/0x10 [ 720.450990][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.455853][ T30] [ 720.459236][ T30] Kernel Offset: disabled [ 720.463590][ T30] Rebooting in 86400 seconds..