last executing test programs: 1m2.194571058s ago: executing program 1 (id=88): syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000800000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2) unshare(0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}}}) fcntl$setownex(r0, 0xf, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x0, 0x0, 0x0) 58.342252523s ago: executing program 1 (id=94): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}}}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0) 57.155009915s ago: executing program 1 (id=96): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000001100)={&(0x7f0000000400)=[{0x0, 0x1, 0x0, &(0x7f0000000080)}, {0x3, 0xa001, 0x0, 0x0}, {0x7ff, 0x0, 0x3c, &(0x7f0000000180)="703a14ff06c199cdd9085ea560e8dfa24949f874e0b21dd5b347f77f214ec50c6d528b12a35692d50ed0f1cbd7d312048cc39487d71c81a1ef37fca3"}, {0x8, 0x3, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x5}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) recvmmsg(r3, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) 51.466622984s ago: executing program 1 (id=108): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020692500000000002420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000200051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2c100000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800050001000000080007000b000000"], 0x102c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4040040) read(r4, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f", 0x1a, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x101}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xd4, &(0x7f00000005c0)=""/212, 0x41100, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, r2, r0, r2, r2], &(0x7f0000000a40)=[{0x2, 0x3, 0x2, 0x7}, {0x5, 0x1, 0xb, 0x7}], 0x10, 0x4}, 0x90) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x170) 48.293553049s ago: executing program 1 (id=114): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x4}, &(0x7f0000000540)=[{}, {}, {}, {}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet(r2, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @multicast1, "a9598e73e3fb5f1f5ec74ce2d59477c9ecc1c22b"}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x4880) 46.661072867s ago: executing program 1 (id=119): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000001100)={&(0x7f0000000400)=[{0x0, 0x1, 0x0, &(0x7f0000000080)}, {0x3, 0xa001, 0x0, 0x0}, {0x7ff, 0x0, 0x3c, &(0x7f0000000180)="703a14ff06c199cdd9085ea560e8dfa24949f874e0b21dd5b347f77f214ec50c6d528b12a35692d50ed0f1cbd7d312048cc39487d71c81a1ef37fca3"}, {0x8, 0x3, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x5}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) recvmmsg(r3, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) 32.88271472s ago: executing program 2 (id=144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="000009000000d4"], 0x0, 0x0, 0x0, 0x0}) 27.670863679s ago: executing program 2 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x74}}, 0x0) 25.950329124s ago: executing program 2 (id=158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x3f5, 0x0, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@any, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40804, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x1) 24.342183046s ago: executing program 4 (id=161): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}}}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0) 23.172316094s ago: executing program 4 (id=162): socket$alg(0x26, 0x5, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1, 0x12f, 0x4000000) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xffffffffffffffe7) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x820000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d307830173230302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313430302c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030352c6d61785f726561643d3078303030303030303030303030303030392c6e6f6c617a7974696d652c6f626a5f757365723d2c61707072060073652c657569643cc29c056f978f691fd9312f73ab58cce0e2a4ebb1c273000d8c99f452ca895c62477dd2f276275d0b6f00"/223, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280), 0x4) sendto$inet6(r3, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000340)=0x6, 0x8) r5 = syz_io_uring_setup(0x0, &(0x7f0000004940), &(0x7f00000049c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004b00)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ec0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r7, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000140)=0x78) move_pages(0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x9d, 0x10001, 0xc, 0x1, 0x1}, 0x30) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x0, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a5cbd0188f5a5cb7f822ac34a3e2c06da58b5d"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22.375553226s ago: executing program 3 (id=164): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x4c00000000000000}, 0x0) socket$netlink(0x10, 0x3, 0xf) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa, 0x1}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 21.749992591s ago: executing program 4 (id=165): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020692500000000002420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000200051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2c100000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800050001000000080007000b000000"], 0x102c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4040040) read(r4, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x101}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xd4, &(0x7f00000005c0)=""/212, 0x41100, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, r2, r0, r2, r2], &(0x7f0000000a40)=[{0x2, 0x3, 0x2, 0x7}, {0x5, 0x1, 0xb, 0x7}], 0x10, 0x4}, 0x90) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x170) 21.326181993s ago: executing program 3 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="000009000000d4"], 0x0, 0x0, 0x0, 0x0}) 20.380699272s ago: executing program 2 (id=167): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x1a9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x174, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private1}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x2}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, [@algo_aead={0x82, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x1b0, 0x60, "c3a59382c716c31c769eb7aad59e76b9f7346b92891d8ee9f84154e8cc7caa4df663f950fd083923f855568d6fa161dc2102e63e2c15"}}]}, 0x174}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x6, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="030014", 0x3}]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x0, 0xff}, @extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x9, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x685b, 0xa, "aefea95d10f6512896"}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 16.771593719s ago: executing program 0 (id=169): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x4}, &(0x7f0000000540)=[{}, {}, {}, {}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet(r2, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @multicast1, "a9598e73e3fb5f1f5ec74ce2d59477c9ecc1c22b"}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x4880) 16.697066701s ago: executing program 4 (id=170): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0xc, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1c, r6, 0x1, 0x9, 0x6, @local}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b0009008000", 0x2c}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfa}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r9}, 0x10) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x90) r10 = socket$packet(0x11, 0x2165a27d0cc85db4, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r10, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.589761058s ago: executing program 3 (id=171): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}}}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0) 16.472467257s ago: executing program 2 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x78}}, 0x0) 15.328078622s ago: executing program 3 (id=173): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000001c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x48}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa}, 0x0, 0x0, 0x2, [{0x100, &(0x7f0000000380)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2cb81c5a3389dff7}}]}) 15.105530198s ago: executing program 4 (id=174): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000001b00000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000095000000000000001945066360a6a9bc9f4d88771a3010712adf71ef26e086ca72f61bdc32dae0baf62894f46b68d6111a3cfa42b714e0e682d585654975c4300a0b41cec733e6640ad50511fdefd53835353a91395c87fd1ef664ad1c9a52de9dfc4999a8227277b0da4811245ae0d4d88eeb0da83aedd119fef0ffd4b138e7a5ed1fcf8b543edf39c182dc34a0d0bac98f239d0340b0572757e4d75c9e8a1e097ed7c318994def226e86c94ae3e0f92976100f90054c5537691b3b556d7337dd9a23d0b2f2d5977ecb0b949825aaf201597c8193f8c34fa8"], 0x0, 0xffff4df1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x3fffff) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x23c, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000, 0x2}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x137, 0x3, {{'deflate\x00'}, 0x778, "efa16e6467bd638175b9f1554f7065ae05ce9d39a846cf5e863a9b404a9272b32c1c50c4020c3b2195db54f24fb7e6eea48ff56539ea24f1868d5f1dff282c918411c88380b8f66ccb29fe2950775b25f32d009a2a2035e885cb3e5468e0f38a95b00aa04849a0db7aaca7ba1f829d19e553bf1ddfd1b7b37dc08e3b04b64deb828f02ff476bb8c28f51321cb1c7f6f77d3b48a6ae614c10cf9825566ba0ef22f4758c15d1a281cd18178d7c2f91a70b8493077378b1159aeb7198aff6911344e487ab79a9c35a3700d73f1ce09fb7eadc815d1c446b7a2ad8fa77a89cd7c8db1a1633570acaee4ea89ac2ba7dde7a"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 15.101506287s ago: executing program 0 (id=175): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x4c00000000000000}, 0x0) socket$netlink(0x10, 0x3, 0xf) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa, 0x1}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 15.011452989s ago: executing program 2 (id=176): statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x8, &(0x7f00000001c0)) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex_waitv(&(0x7f0000002480)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) getpid() ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000b40)) r3 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r3, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r3, 0x52e, 0x0, 0x0, 0x0, 0x0) 7.763378098s ago: executing program 4 (id=177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x3f5, 0x0, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@any, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000003c0), 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40804, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x1) 7.671093933s ago: executing program 0 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0}], 0x0) 7.494962996s ago: executing program 3 (id=179): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020692500000000002420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000200051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2c100000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800050001000000080007000b000000"], 0x102c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4040040) read(r4, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x101}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xd4, &(0x7f00000005c0)=""/212, 0x41100, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, r2, r0, r2, r2], &(0x7f0000000a40)=[{0x2, 0x3, 0x2, 0x7}, {0x5, 0x1, 0xb, 0x7}], 0x10, 0x4}, 0x90) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x170) 5.1105855s ago: executing program 0 (id=180): socket$alg(0x26, 0x5, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1, 0x12f, 0x4000000) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xffffffffffffffe7) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x820000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d307830173230302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313430302c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030352c6d61785f726561643d3078303030303030303030303030303030392c6e6f6c617a7974696d652c6f626a5f757365723d2c61707072060073652c657569643cc29c056f978f691fd9312f73ab58cce0e2a4ebb1c273000d8c99f452ca895c62477dd2f276275d0b6f00"/223, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280), 0x4) sendto$inet6(r3, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000340)=0x6, 0x8) r5 = syz_io_uring_setup(0x0, &(0x7f0000004940), &(0x7f00000049c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004b00)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ec0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r7, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000140)=0x78) move_pages(0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x9d, 0x10001, 0xc, 0x1, 0x1}, 0x30) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x0, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a5cbd0188f5a5cb7f822ac34a3e2c06da58b5d"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.313634765s ago: executing program 3 (id=182): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="000009000000d4"], 0x0, 0x0, 0x0, 0x0}) 380.222759ms ago: executing program 0 (id=183): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0xc, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1c, r6, 0x1, 0x9, 0x6, @local}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b0009008000", 0x2c}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfa}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r9}, 0x10) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x90) r10 = socket$packet(0x11, 0x2165a27d0cc85db4, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r10, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=184): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x4}, &(0x7f0000000540)=[{}, {}, {}, {}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet(r2, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @multicast1, "a9598e73e3fb5f1f5ec74ce2d59477c9ecc1c22b"}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x4880) kernel console output (not intermixed with test programs): [ 59.056939][ T29] audit: type=1400 audit(1722720356.091:78): avc: denied { transition } for pid=5070 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.085325][ T29] audit: type=1400 audit(1722720356.091:79): avc: denied { noatsecure } for pid=5070 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.105356][ T29] audit: type=1400 audit(1722720356.131:80): avc: denied { write } for pid=5070 comm="sh" path="pipe:[3678]" dev="pipefs" ino=3678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 59.128288][ T29] audit: type=1400 audit(1722720356.131:81): avc: denied { rlimitinh } for pid=5070 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.147978][ T29] audit: type=1400 audit(1722720356.131:82): avc: denied { siginh } for pid=5070 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.574180][ T29] audit: type=1400 audit(1722720356.611:83): avc: denied { write } for pid=5073 comm="sftp-server" path="pipe:[3698]" dev="pipefs" ino=3698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 60.102686][ T29] audit: type=1400 audit(1722720357.141:84): avc: denied { read } for pid=4651 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 60.124735][ T29] audit: type=1400 audit(1722720357.141:85): avc: denied { append } for pid=4651 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.147085][ T29] audit: type=1400 audit(1722720357.141:86): avc: denied { open } for pid=4651 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.169918][ T29] audit: type=1400 audit(1722720357.141:87): avc: denied { getattr } for pid=4651 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 69.803025][ T29] audit: type=1400 audit(1722720366.841:88): avc: denied { mounton } for pid=5208 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 69.811947][ T5208] cgroup: Unknown subsys name 'net' [ 69.831032][ T29] audit: type=1400 audit(1722720366.841:89): avc: denied { mount } for pid=5208 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.856619][ T29] audit: type=1400 audit(1722720366.901:90): avc: denied { unmount } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.978520][ T5208] cgroup: Unknown subsys name 'rlimit' [ 70.139019][ T29] audit: type=1400 audit(1722720367.181:91): avc: denied { setattr } for pid=5208 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.162503][ T29] audit: type=1400 audit(1722720367.181:92): avc: denied { create } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.184318][ T29] audit: type=1400 audit(1722720367.181:93): avc: denied { write } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.217498][ T29] audit: type=1400 audit(1722720367.181:94): avc: denied { read } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.239432][ T29] audit: type=1400 audit(1722720367.201:95): avc: denied { mounton } for pid=5208 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 70.264585][ T29] audit: type=1400 audit(1722720367.201:96): avc: denied { mount } for pid=5208 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.288134][ T29] audit: type=1400 audit(1722720367.241:97): avc: denied { read } for pid=4883 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 70.319792][ T5211] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 71.692410][ T5208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.942019][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.948730][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.228691][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.237630][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.245820][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.256182][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.266626][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.274346][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.278180][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.293720][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.301975][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.308784][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.309580][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.323690][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.327431][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.357421][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.367396][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.375455][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.383937][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.389750][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.398777][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.405407][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.406043][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.421031][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.421554][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.436515][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.436639][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.456856][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.457038][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.472630][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.481491][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.495928][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.028051][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 75.028070][ T29] audit: type=1400 audit(1722720372.071:112): avc: denied { module_request } for pid=5220 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.169907][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 75.240767][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 75.433594][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 75.543832][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.552610][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.560512][ T5220] bridge_slave_0: entered allmulticast mode [ 75.568168][ T5220] bridge_slave_0: entered promiscuous mode [ 75.576527][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 75.600259][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 75.620261][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.627604][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.634761][ T5220] bridge_slave_1: entered allmulticast mode [ 75.642265][ T5220] bridge_slave_1: entered promiscuous mode [ 75.752452][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.779653][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.786834][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.794571][ T5229] bridge_slave_0: entered allmulticast mode [ 75.801981][ T5229] bridge_slave_0: entered promiscuous mode [ 75.817033][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.876004][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.883542][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.891637][ T5229] bridge_slave_1: entered allmulticast mode [ 75.899303][ T5229] bridge_slave_1: entered promiscuous mode [ 76.013484][ T5220] team0: Port device team_slave_0 added [ 76.023719][ T5220] team0: Port device team_slave_1 added [ 76.034712][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.042667][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.050041][ T5218] bridge_slave_0: entered allmulticast mode [ 76.057027][ T5218] bridge_slave_0: entered promiscuous mode [ 76.065241][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.072464][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.080264][ T5218] bridge_slave_1: entered allmulticast mode [ 76.087364][ T5218] bridge_slave_1: entered promiscuous mode [ 76.112258][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.125727][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.209891][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.217023][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.225327][ T5219] bridge_slave_0: entered allmulticast mode [ 76.234393][ T5219] bridge_slave_0: entered promiscuous mode [ 76.267830][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.274795][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.301224][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.331641][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.342553][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.350018][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.357505][ T5219] bridge_slave_1: entered allmulticast mode [ 76.364597][ T5219] bridge_slave_1: entered promiscuous mode [ 76.374852][ T5229] team0: Port device team_slave_0 added [ 76.382312][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.390125][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.416558][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.435689][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.443019][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.450763][ T5225] bridge_slave_0: entered allmulticast mode [ 76.458471][ T5225] bridge_slave_0: entered promiscuous mode [ 76.469121][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.498605][ T5232] Bluetooth: hci1: command tx timeout [ 76.507873][ T5232] Bluetooth: hci0: command tx timeout [ 76.508448][ T5230] Bluetooth: hci2: command tx timeout [ 76.522075][ T5229] team0: Port device team_slave_1 added [ 76.556801][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.564006][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.590006][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.601024][ T5230] Bluetooth: hci4: command tx timeout [ 76.601051][ T5232] Bluetooth: hci3: command tx timeout [ 76.609094][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.620451][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.628271][ T5225] bridge_slave_1: entered allmulticast mode [ 76.635235][ T5225] bridge_slave_1: entered promiscuous mode [ 76.660995][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.687793][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.694845][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.720919][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.772879][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.820426][ T5218] team0: Port device team_slave_0 added [ 76.862633][ T5220] hsr_slave_0: entered promiscuous mode [ 76.870198][ T5220] hsr_slave_1: entered promiscuous mode [ 76.882846][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.896409][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.909015][ T5218] team0: Port device team_slave_1 added [ 76.931187][ T5219] team0: Port device team_slave_0 added [ 76.941635][ T5219] team0: Port device team_slave_1 added [ 77.083223][ T5229] hsr_slave_0: entered promiscuous mode [ 77.090629][ T5229] hsr_slave_1: entered promiscuous mode [ 77.096782][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.104720][ T5229] Cannot create hsr debugfs directory [ 77.126154][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.133334][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.159975][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.176181][ T5225] team0: Port device team_slave_0 added [ 77.185572][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.192704][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.219231][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.232189][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.239328][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.265321][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.302034][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.309117][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.335300][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.349031][ T5225] team0: Port device team_slave_1 added [ 77.413569][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.420658][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.447566][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.514364][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.521408][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.547767][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.649027][ T5218] hsr_slave_0: entered promiscuous mode [ 77.678222][ T5218] hsr_slave_1: entered promiscuous mode [ 77.685493][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.693689][ T5218] Cannot create hsr debugfs directory [ 77.717886][ T5219] hsr_slave_0: entered promiscuous mode [ 77.724876][ T5219] hsr_slave_1: entered promiscuous mode [ 77.732163][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.739833][ T5219] Cannot create hsr debugfs directory [ 77.856858][ T5225] hsr_slave_0: entered promiscuous mode [ 77.863564][ T5225] hsr_slave_1: entered promiscuous mode [ 77.870104][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.878118][ T5225] Cannot create hsr debugfs directory [ 78.285891][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.324128][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.337075][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.363413][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.477859][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.493677][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.513034][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.526283][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.577671][ T5230] Bluetooth: hci2: command tx timeout [ 78.577769][ T5232] Bluetooth: hci0: command tx timeout [ 78.583086][ T5230] Bluetooth: hci1: command tx timeout [ 78.660347][ T5230] Bluetooth: hci3: command tx timeout [ 78.660358][ T5232] Bluetooth: hci4: command tx timeout [ 78.685209][ T5219] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.696885][ T5219] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.710666][ T5219] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.749316][ T5219] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.962571][ T5218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.974753][ T5218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.005707][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.014567][ T5218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.026560][ T5218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.050426][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.159117][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.170521][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.208085][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.228013][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.242083][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.273099][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.322594][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.330069][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.343964][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.351126][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.403358][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.410774][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.425929][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.433075][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.455733][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.598306][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.618458][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.658688][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.666571][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.681503][ T29] audit: type=1400 audit(1722720376.721:113): avc: denied { sys_module } for pid=5229 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.732294][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.739541][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.995913][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.016261][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.042552][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.113512][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.132714][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.174238][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.181487][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.210131][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.217361][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.272323][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.279556][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.334469][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.341708][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.443152][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.509037][ T5229] veth0_vlan: entered promiscuous mode [ 80.573489][ T5229] veth1_vlan: entered promiscuous mode [ 80.606579][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.624334][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.668289][ T5230] Bluetooth: hci0: command tx timeout [ 80.673756][ T5230] Bluetooth: hci1: command tx timeout [ 80.673821][ T5232] Bluetooth: hci2: command tx timeout [ 80.738127][ T5232] Bluetooth: hci4: command tx timeout [ 80.739054][ T5230] Bluetooth: hci3: command tx timeout [ 80.820929][ T5220] veth0_vlan: entered promiscuous mode [ 80.892715][ T5229] veth0_macvtap: entered promiscuous mode [ 80.922259][ T5220] veth1_vlan: entered promiscuous mode [ 80.964792][ T5229] veth1_macvtap: entered promiscuous mode [ 81.076521][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.108381][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.136019][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.173720][ T5220] veth0_macvtap: entered promiscuous mode [ 81.190273][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.200562][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.209847][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.220380][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.238005][ T5220] veth1_macvtap: entered promiscuous mode [ 81.345242][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.356209][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.374751][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.405807][ T5219] veth0_vlan: entered promiscuous mode [ 81.448980][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.460197][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.473279][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.494599][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.524246][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.533870][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.542972][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.554076][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.568199][ T5219] veth1_vlan: entered promiscuous mode [ 81.585054][ T5218] veth0_vlan: entered promiscuous mode [ 81.663475][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.679815][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.694589][ T5218] veth1_vlan: entered promiscuous mode [ 81.787049][ T5219] veth0_macvtap: entered promiscuous mode [ 81.811146][ T5219] veth1_macvtap: entered promiscuous mode [ 81.832800][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.850919][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.899200][ T29] audit: type=1400 audit(1722720378.931:114): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/root/syzkaller.VtCrU6/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 81.957702][ T29] audit: type=1400 audit(1722720378.941:115): avc: denied { mount } for pid=5229 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.979278][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.983834][ T29] audit: type=1400 audit(1722720378.941:116): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/root/syzkaller.VtCrU6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.001087][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.023341][ T29] audit: type=1400 audit(1722720378.941:117): avc: denied { mount } for pid=5229 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.028867][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.059997][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.063452][ T29] audit: type=1400 audit(1722720378.971:118): avc: denied { unmount } for pid=5229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.075506][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.090848][ T29] audit: type=1400 audit(1722720378.981:119): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.132163][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.143603][ T29] audit: type=1400 audit(1722720379.001:120): avc: denied { mount } for pid=5229 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.168348][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.178307][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.188836][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.200842][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.228728][ T5225] veth0_vlan: entered promiscuous mode [ 82.262248][ T5219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.271394][ T5219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.286854][ T5219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.295919][ T5219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.314586][ T5218] veth0_macvtap: entered promiscuous mode [ 82.337904][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.346705][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.371013][ T5225] veth1_vlan: entered promiscuous mode [ 82.405316][ T5218] veth1_macvtap: entered promiscuous mode [ 82.437024][ T29] audit: type=1400 audit(1722720379.471:121): avc: denied { read write } for pid=5229 comm="syz-executor" name="loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.531516][ T29] audit: type=1400 audit(1722720379.501:122): avc: denied { open } for pid=5229 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.576084][ T29] audit: type=1400 audit(1722720379.501:123): avc: denied { ioctl } for pid=5229 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.645606][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.671969][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.688190][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.704597][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.724610][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.739672][ T5230] Bluetooth: hci2: command tx timeout [ 82.739686][ T5232] Bluetooth: hci0: command tx timeout [ 82.751284][ T5230] Bluetooth: hci1: command tx timeout [ 82.766347][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.779581][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.793404][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.801943][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.818047][ T5232] Bluetooth: hci4: command tx timeout [ 82.818351][ T5230] Bluetooth: hci3: command tx timeout [ 82.862484][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.891992][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.903879][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.915599][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.925932][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.938337][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.954171][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.025287][ T5218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.052147][ T5218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.087408][ T5218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.119348][ T5218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.180523][ T5225] veth0_macvtap: entered promiscuous mode [ 83.259938][ T5225] veth1_macvtap: entered promiscuous mode [ 83.726236][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.843999][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.171386][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.195590][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.197542][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.232912][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.254021][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.266788][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.281947][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.299562][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.309792][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.320752][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.333964][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.576943][ T5274] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.671429][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.724351][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.779799][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.791541][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.815499][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.829390][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.845526][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 84.853184][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.876913][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.887581][ T5274] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 84.896989][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.927165][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.954203][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.966384][ T5274] usb 1-1: config 0 descriptor?? [ 85.018542][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.134596][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.158801][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.188661][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.230145][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.288098][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.329709][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.719744][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.752438][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.311320][ T5335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.376415][ T5335] netlink: 'syz.2.9': attribute type 3 has an invalid length. [ 86.384599][ T5335] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9'. [ 86.920243][ T5330] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.938253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.947445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 86.956917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.156266][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.189046][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.198771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.234697][ T5330] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 87.283315][ T5330] bond0: (slave bond_slave_0): Releasing backup interface [ 87.313506][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 87.313523][ T29] audit: type=1400 audit(1722720384.351:158): avc: denied { bind } for pid=5339 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.368829][ T942] cfg80211: failed to load regulatory.db [ 87.377839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.410162][ T29] audit: type=1400 audit(1722720384.361:159): avc: denied { setopt } for pid=5339 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.444506][ T29] audit: type=1400 audit(1722720384.361:160): avc: denied { read } for pid=5339 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.580208][ T5274] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 87.659058][ T5274] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 87.779099][ T5274] asix 1-1:0.0: probe with driver asix failed with error -71 [ 87.867521][ T5274] usb 1-1: USB disconnect, device number 2 [ 88.047897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.056642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.066540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 88.157720][ T29] audit: type=1400 audit(1722720385.191:161): avc: denied { read write } for pid=5344 comm="syz.1.2" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.290635][ T29] audit: type=1400 audit(1722720385.191:162): avc: denied { open } for pid=5344 comm="syz.1.2" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.499252][ T5351] Zero length message leads to an empty skb [ 88.875794][ T29] audit: type=1400 audit(1722720385.561:163): avc: denied { create } for pid=5347 comm="syz.3.12" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.377606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.462545][ T29] audit: type=1400 audit(1722720385.581:164): avc: denied { write } for pid=5347 comm="syz.3.12" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.563691][ T29] audit: type=1400 audit(1722720385.581:165): avc: denied { open } for pid=5347 comm="syz.3.12" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.814008][ T29] audit: type=1400 audit(1722720385.601:166): avc: denied { ioctl } for pid=5347 comm="syz.3.12" path="/2/file0" dev="tmpfs" ino=29 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.847850][ T29] audit: type=1400 audit(1722720386.461:167): avc: denied { unlink } for pid=5218 comm="syz-executor" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.977424][ T5272] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.967378][ T5272] usb 5-1: Using ep0 maxpacket: 16 [ 91.005227][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.019557][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.047288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.089574][ T5272] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.130918][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.211133][ T5362] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 91.265192][ T5272] usb 5-1: config 0 descriptor?? [ 91.313761][ T5272] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 91.349437][ T5362] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 91.382605][ T5362] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 92.068385][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 92.617337][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.847336][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 92.863476][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.896034][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 92.905573][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.935617][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.033103][ T9] usb 1-1: config 0 descriptor?? [ 93.831653][ T5386] SELinux: Context #! ./cgroup/file0 is not valid (left unmapped). [ 94.615620][ T939] usb 5-1: USB disconnect, device number 2 [ 95.069652][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 95.117302][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 95.197564][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 95.247854][ T9] usb 1-1: USB disconnect, device number 3 [ 95.274550][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 95.274563][ T29] audit: type=1400 audit(1722720392.311:171): avc: denied { read } for pid=5394 comm="syz.1.23" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.596284][ T29] audit: type=1400 audit(1722720392.351:172): avc: denied { open } for pid=5394 comm="syz.1.23" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.913377][ T29] audit: type=1400 audit(1722720392.951:173): avc: denied { read } for pid=5391 comm="syz.4.22" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 96.065609][ T29] audit: type=1400 audit(1722720392.981:174): avc: denied { open } for pid=5391 comm="syz.4.22" path="/2/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 96.778194][ T5408] blktrace: Concurrent blktraces are not allowed on loop1 [ 98.067305][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.106246][ T29] audit: type=1400 audit(1722720395.141:175): avc: denied { create } for pid=5414 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.267260][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 98.286705][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.366956][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.400787][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 98.495619][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.562775][ T46] usb 1-1: config 0 descriptor?? [ 98.596200][ T46] hub 1-1:0.0: USB hub found [ 98.697513][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.713334][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.722917][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.746182][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 98.767382][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.776310][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.807401][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.821513][ T46] hub 1-1:0.0: 2 ports detected [ 98.838841][ T29] audit: type=1400 audit(1722720395.881:176): avc: denied { mounton } for pid=5421 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 103.317465][ T5232] Bluetooth: hci5: command tx timeout [ 103.680957][ T942] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 103.959173][ T942] usb 1-1: USB disconnect, device number 4 [ 104.293377][ T5448] blktrace: Concurrent blktraces are not allowed on loop1 [ 105.084081][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 105.331283][ T5451] fuse: Bad value for 'fd' [ 105.417398][ T5232] Bluetooth: hci5: command tx timeout [ 105.577044][ T5456] netlink: 'syz.4.37': attribute type 3 has an invalid length. [ 105.584888][ T5456] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.37'. [ 105.991012][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.107525][ T5274] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.337581][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 106.372193][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.433761][ T5274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.473133][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.541123][ T5274] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 106.553940][ T5421] chnl_net:caif_netlink_parms(): no params data found [ 106.587417][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.635666][ T5274] usb 1-1: config 0 descriptor?? [ 106.836240][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.846222][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 107.169038][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.197011][ T5274] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 107.222831][ T5274] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 107.244010][ T5274] microsoft 0003:045E:07DA.0001: no inputs found [ 107.255305][ T5274] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 107.328155][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.453346][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.459798][ T5232] Bluetooth: hci5: command tx timeout [ 107.472409][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.487069][ T5421] bridge_slave_0: entered allmulticast mode [ 107.501052][ T5472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.530368][ T5421] bridge_slave_0: entered promiscuous mode [ 107.535646][ T5472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.537790][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 107.578548][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.579103][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.609748][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.610283][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.630939][ T5421] bridge_slave_1: entered allmulticast mode [ 107.644389][ T5421] bridge_slave_1: entered promiscuous mode [ 107.680113][ T9] usb 2-1: config 0 descriptor?? [ 107.829614][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.876713][ T5274] usb 1-1: USB disconnect, device number 5 [ 107.943999][ T29] audit: type=1400 audit(1722720404.971:177): avc: denied { search } for pid=4883 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.955668][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.245869][ T58] bridge_slave_1: left allmulticast mode [ 108.282485][ T58] bridge_slave_1: left promiscuous mode [ 108.307484][ T29] audit: type=1400 audit(1722720405.341:178): avc: denied { read } for pid=5477 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.340766][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.425490][ T58] bridge_slave_0: left allmulticast mode [ 108.431668][ T58] bridge_slave_0: left promiscuous mode [ 108.444920][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.465424][ T29] audit: type=1400 audit(1722720405.371:179): avc: denied { open } for pid=5477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.605656][ T29] audit: type=1400 audit(1722720405.371:180): avc: denied { getattr } for pid=5477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.920207][ T29] audit: type=1400 audit(1722720405.951:181): avc: denied { sys_module } for pid=5467 comm="syz.1.41" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 109.538289][ T5232] Bluetooth: hci5: command tx timeout [ 110.207605][ T29] audit: type=1400 audit(1722720407.241:182): avc: denied { write } for pid=5474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.273916][ T29] audit: type=1400 audit(1722720407.251:183): avc: denied { add_name } for pid=5474 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.327130][ T29] audit: type=1400 audit(1722720407.361:184): avc: denied { remove_name } for pid=5500 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.943662][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.038125][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.230640][ T58] bond0 (unregistering): Released all slaves [ 111.272139][ T5421] team0: Port device team_slave_0 added [ 111.318518][ T5493] tunl0: entered promiscuous mode [ 111.329071][ T5493] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 111.336664][ T5493] netlink: 9 bytes leftover after parsing attributes in process `syz.0.42'. [ 111.478918][ T5495] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 111.598728][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 111.654214][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 111.709813][ T5421] team0: Port device team_slave_1 added [ 112.011504][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 112.031668][ T29] audit: type=1400 audit(1722720409.071:185): avc: denied { read } for pid=5504 comm="syz.0.45" dev="sockfs" ino=8199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.061161][ T9] usb 2-1: USB disconnect, device number 2 [ 112.171535][ T29] audit: type=1400 audit(1722720409.211:186): avc: denied { ioctl } for pid=5515 comm="syz.3.48" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.322140][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.357903][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.392003][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.415860][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.425823][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.462769][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.527670][ T5305] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.729282][ T5305] usb 4-1: Using ep0 maxpacket: 8 [ 112.739542][ T5305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.771927][ T5305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.804486][ T5305] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.820653][ T5421] hsr_slave_0: entered promiscuous mode [ 112.836634][ T5305] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.849516][ T5421] hsr_slave_1: entered promiscuous mode [ 112.864584][ T5421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.880126][ T5305] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.896727][ T5421] Cannot create hsr debugfs directory [ 113.064310][ T5305] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.228316][ T5305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.238897][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.643960][ T5305] usb 4-1: Product: syz [ 113.650493][ T5305] usb 4-1: SerialNumber: syz [ 113.707440][ T939] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.754268][ T29] audit: type=1400 audit(1722720410.231:187): avc: denied { write } for pid=5521 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.817020][ T29] audit: type=1400 audit(1722720410.231:188): avc: denied { nlmsg_write } for pid=5521 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.874359][ T29] audit: type=1400 audit(1722720410.341:189): avc: denied { write } for pid=5521 comm="syz.4.50" path="socket:[8262]" dev="sockfs" ino=8262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.938586][ T939] usb 5-1: Using ep0 maxpacket: 8 [ 113.980141][ T939] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.991515][ T5305] cdc_ncm 4-1:1.0: bind() failure [ 114.008006][ T939] usb 5-1: config 1 has no interface number 1 [ 114.019191][ T5305] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 114.026069][ T29] audit: type=1400 audit(1722720411.051:190): avc: denied { write } for pid=5519 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.052141][ T939] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.067627][ T5305] cdc_ncm 4-1:1.1: bind() failure [ 114.094694][ T939] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.108155][ T5305] usb 4-1: USB disconnect, device number 2 [ 114.139910][ T939] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.193518][ T939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.217881][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.259409][ T939] usb 5-1: Product: syz [ 114.263628][ T939] usb 5-1: Manufacturer: syz [ 114.279051][ T939] usb 5-1: SerialNumber: syz [ 114.303965][ T5526] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 114.338442][ T58] hsr_slave_0: left promiscuous mode [ 114.439557][ T58] hsr_slave_1: left promiscuous mode [ 114.503874][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.559800][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.615636][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.635884][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.685438][ T58] veth1_macvtap: left promiscuous mode [ 114.692081][ T58] veth0_macvtap: left promiscuous mode [ 114.698101][ T58] veth1_vlan: left promiscuous mode [ 114.704831][ T58] veth0_vlan: left promiscuous mode [ 115.466283][ T5538] kexec: Could not allocate control_code_buffer [ 116.196305][ T29] audit: type=1400 audit(1722720413.231:191): avc: denied { name_bind } for pid=5546 comm="syz.1.54" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 116.314216][ T29] audit: type=1400 audit(1722720413.341:192): avc: denied { shutdown } for pid=5546 comm="syz.1.54" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.853558][ T939] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 116.954834][ T939] usb 5-1: USB disconnect, device number 3 [ 117.094548][ T58] team0 (unregistering): Port device team_slave_1 removed [ 117.095462][ T29] audit: type=1400 audit(1722720414.131:193): avc: denied { write } for pid=5550 comm="syz.4.55" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.159011][ T29] audit: type=1400 audit(1722720414.131:194): avc: denied { open } for pid=5550 comm="syz.4.55" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.182669][ T29] audit: type=1400 audit(1722720414.171:195): avc: denied { ioctl } for pid=5550 comm="syz.4.55" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.211093][ T58] team0 (unregistering): Port device team_slave_0 removed [ 117.293698][ T5342] udevd[5342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.321479][ T29] audit: type=1400 audit(1722720414.361:196): avc: denied { read } for pid=5552 comm="syz.4.56" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.526265][ T5542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.561690][ T5542] team0: Port device bond0 added [ 118.582528][ T5544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.53'. [ 118.897357][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 118.897377][ T29] audit: type=1400 audit(1722720415.911:200): avc: denied { create } for pid=5562 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.939136][ T29] audit: type=1400 audit(1722720415.961:201): avc: denied { create } for pid=5562 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.068208][ T29] audit: type=1400 audit(1722720415.971:202): avc: denied { ioctl } for pid=5562 comm="syz.4.59" path="socket:[8316]" dev="sockfs" ino=8316 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.161970][ T29] audit: type=1400 audit(1722720416.141:203): avc: denied { name_bind } for pid=5562 comm="syz.4.59" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.198580][ T5571] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 119.259708][ T5571] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.59'. [ 119.292303][ T29] audit: type=1400 audit(1722720416.171:204): avc: denied { create } for pid=5562 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 119.407891][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.445797][ T29] audit: type=1400 audit(1722720416.171:205): avc: denied { write } for pid=5562 comm="syz.4.59" path="socket:[8325]" dev="sockfs" ino=8325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 119.546580][ T29] audit: type=1400 audit(1722720416.171:206): avc: denied { nlmsg_write } for pid=5562 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 119.569012][ T29] audit: type=1400 audit(1722720416.191:207): avc: denied { create } for pid=5562 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.589520][ T29] audit: type=1400 audit(1722720416.201:208): avc: denied { read } for pid=5570 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.769438][ T29] audit: type=1400 audit(1722720416.201:209): avc: denied { open } for pid=5570 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.266367][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 120.274924][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.288150][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.332731][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.386874][ T5232] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 120.401186][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.467247][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.629166][ T9] usb 1-1: config 0 descriptor?? [ 121.921100][ T5587] sched: RT throttling activated [ 122.927361][ T5305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.072230][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.128456][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.137914][ T5305] usb 2-1: Using ep0 maxpacket: 8 [ 123.154774][ T5305] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.165338][ T5305] usb 2-1: config 1 has no interface number 1 [ 123.172843][ T5305] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.191613][ T5305] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 123.231446][ T5305] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.260850][ T5600] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.284636][ T5305] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.306089][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.328891][ T5305] usb 2-1: Product: syz [ 123.346713][ T5305] usb 2-1: Manufacturer: syz [ 123.368372][ T5305] usb 2-1: SerialNumber: syz [ 123.414454][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 123.439626][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 123.474663][ T9] usb 1-1: USB disconnect, device number 6 [ 123.572564][ T5305] usb 2-1: can't set config #1, error -71 [ 123.652019][ T5305] usb 2-1: USB disconnect, device number 3 [ 123.811771][ T5272] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.853654][ T5421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.881458][ T5421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.911029][ T5421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.931826][ T5421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.017833][ T5272] usb 4-1: Using ep0 maxpacket: 8 [ 124.045629][ T5272] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.045691][ T5272] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.045743][ T5272] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.045776][ T5272] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 124.045812][ T5272] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.045843][ T5272] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 124.053513][ T5272] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.053554][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.053585][ T5272] usb 4-1: Product: syz [ 124.053608][ T5272] usb 4-1: SerialNumber: syz [ 124.292735][ T5272] cdc_ncm 4-1:1.0: bind() failure [ 124.322477][ T5272] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 124.322550][ T5272] cdc_ncm 4-1:1.1: bind() failure [ 125.288696][ T5626] kexec: Could not allocate control_code_buffer [ 125.348839][ T5272] usb 4-1: USB disconnect, device number 3 [ 125.634866][ T5620] tty tty28: ldisc open failed (-12), clearing slot 27 [ 125.671004][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.753091][ T5421] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.843984][ T939] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.851258][ T939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.992781][ T5305] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.000032][ T5305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.691809][ T5638] kexec: Could not allocate control_code_buffer [ 126.985594][ T5421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.367121][ T5659] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 128.392198][ T5659] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.74'. [ 128.621371][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.917146][ T5421] veth0_vlan: entered promiscuous mode [ 129.020545][ T5421] veth1_vlan: entered promiscuous mode [ 129.182282][ T5421] veth0_macvtap: entered promiscuous mode [ 129.208473][ T5232] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 129.257959][ T5421] veth1_macvtap: entered promiscuous mode [ 130.103350][ T5275] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.150164][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.246284][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.285905][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.368083][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 130.378080][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.390490][ T5275] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.414214][ T5275] usb 1-1: config 1 has no interface number 1 [ 130.422420][ T5275] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.425253][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.457851][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.471573][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.499827][ T5275] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.536194][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.556758][ T5275] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.611816][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.640035][ T5275] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.689754][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.692395][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.720312][ T5275] usb 1-1: Product: syz [ 130.729683][ T5275] usb 1-1: Manufacturer: syz [ 130.749016][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.755790][ T5275] usb 1-1: SerialNumber: syz [ 130.781361][ T5675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.793882][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.845808][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.896466][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.936161][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.979367][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.046673][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.068749][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.461739][ T5421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.492000][ T5421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.091650][ T5696] kexec: Could not allocate control_code_buffer [ 132.187833][ T5421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.247551][ T5421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.479423][ T5275] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.530177][ T5275] usb 1-1: USB disconnect, device number 7 [ 134.570338][ T5708] kexec: Could not allocate control_code_buffer [ 134.792690][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.817614][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.921548][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.272344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.352495][ T5710] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.763104][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 135.907336][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.953977][ T5710] usb 4-1: device descriptor read/all, error -71 [ 136.060873][ T5716] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 136.078520][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.100436][ T5716] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.85'. [ 136.122825][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.312720][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 136.312738][ T29] audit: type=1400 audit(1722720433.351:218): avc: denied { mount } for pid=5421 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.542408][ T5746] kexec: Could not allocate control_code_buffer [ 138.498019][ T5759] netlink: 'syz.2.27': attribute type 3 has an invalid length. [ 138.505674][ T5759] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.27'. [ 139.644089][ T5278] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.027295][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 140.040799][ T5278] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 140.057125][ T5278] usb 5-1: config 1 has no interface number 1 [ 140.064296][ T5278] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.081708][ T5278] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 140.100984][ T5278] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.116636][ T5278] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.144889][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.180439][ T5278] usb 5-1: Product: syz [ 140.199877][ T5278] usb 5-1: Manufacturer: syz [ 140.204483][ T5278] usb 5-1: SerialNumber: syz [ 140.395896][ T5762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.228471][ T5769] kexec: Could not allocate control_code_buffer [ 142.536793][ T5278] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.634700][ T5232] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 142.659054][ T5278] usb 5-1: USB disconnect, device number 4 [ 142.818913][ T5792] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 142.867486][ T5792] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.98'. [ 142.928114][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.170291][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.417453][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 143.462282][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.498735][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.508871][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.518870][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 143.528871][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.587648][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 143.976278][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.997893][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.030408][ T9] usb 1-1: Product: syz [ 144.063054][ T9] usb 1-1: SerialNumber: syz [ 146.269296][ T9] cdc_ncm 1-1:1.0: bind() failure [ 146.312672][ T5814] kexec: Could not allocate control_code_buffer [ 146.343821][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 146.393530][ T9] cdc_ncm 1-1:1.1: bind() failure [ 146.529870][ T9] usb 1-1: USB disconnect, device number 8 [ 146.768894][ T5710] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.967294][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 146.984395][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.016572][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.034073][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.063760][ T5710] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.091251][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.113892][ T5710] usb 4-1: config 0 descriptor?? [ 148.281917][ T5831] kexec: Could not allocate control_code_buffer [ 148.467401][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.574876][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.897961][ T5710] usbhid 4-1:0.0: can't add hid device: -71 [ 149.744984][ T5710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 149.777440][ T5272] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.852379][ T5710] usb 4-1: USB disconnect, device number 6 [ 149.922527][ T5844] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 149.931769][ T5844] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.112'. [ 150.007406][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 150.035033][ T5272] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.065238][ T5272] usb 1-1: config 1 has no interface number 1 [ 150.095783][ T5272] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.120909][ T5272] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 150.168853][ T5272] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.216697][ T5272] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.246643][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.265378][ T5272] usb 1-1: Product: syz [ 150.270568][ T5272] usb 1-1: Manufacturer: syz [ 150.285298][ T5272] usb 1-1: SerialNumber: syz [ 150.332455][ T5841] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.732626][ T5272] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.037445][ T5272] usb 1-1: USB disconnect, device number 9 [ 153.599977][ T29] audit: type=1400 audit(1722720449.181:219): avc: denied { setopt } for pid=5856 comm="syz.4.116" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.605736][ T5863] kexec: Could not allocate control_code_buffer [ 154.152071][ T5232] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 155.010718][ T5272] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.028625][ T5877] kexec: Could not allocate control_code_buffer [ 155.311272][ T5880] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 155.328762][ T5880] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.123'. [ 157.052479][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.252454][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.497534][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 158.531328][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.571720][ T9] usb 1-1: config 1 has no interface number 1 [ 158.619352][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.357254][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 159.381166][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.396345][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.405919][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.955350][ T5915] kexec: Could not allocate control_code_buffer [ 160.225827][ T9] usb 1-1: Product: syz [ 160.230200][ T9] usb 1-1: Manufacturer: syz [ 160.235409][ T9] usb 1-1: SerialNumber: syz [ 160.899585][ T5917] kexec: Could not allocate control_code_buffer [ 161.160335][ T9] usb 1-1: can't set config #1, error -71 [ 161.192183][ T9] usb 1-1: USB disconnect, device number 11 [ 162.328713][ T5928] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 162.347494][ T5928] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.135'. [ 162.487446][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.685413][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 162.714823][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.427518][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.439727][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.471961][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.556019][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.590214][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 163.611818][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.626887][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.657139][ T9] usb 5-1: Product: syz [ 163.906201][ T9] usb 5-1: SerialNumber: syz [ 164.180461][ T9] cdc_ncm 5-1:1.0: bind() failure [ 164.229230][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 164.237466][ T9] cdc_ncm 5-1:1.1: bind() failure [ 164.251462][ T9] usb 5-1: USB disconnect, device number 5 [ 164.679871][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.732052][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.741697][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.762486][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.265841][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.288069][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.306705][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.812647][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.747329][ T5958] kexec: Could not allocate control_code_buffer [ 167.122103][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.385960][ T939] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.463291][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.618346][ T939] usb 3-1: Using ep0 maxpacket: 32 [ 167.623614][ T5230] Bluetooth: hci3: command tx timeout [ 167.648401][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 167.669146][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 167.680485][ T939] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 167.689689][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.701699][ T939] usb 3-1: config 0 descriptor?? [ 167.708147][ T5959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.717010][ T939] hub 3-1:0.0: USB hub found [ 167.733792][ T5710] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.746983][ T5230] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 167.962421][ T939] hub 3-1:0.0: 2 ports detected [ 168.017337][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 168.025894][ T5710] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.040536][ T5710] usb 5-1: config 1 has no interface number 1 [ 168.046738][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.075922][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.165327][ T5710] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.211866][ T5971] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 168.222263][ T5710] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.233645][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.243479][ T5710] usb 5-1: Product: syz [ 168.248418][ T5710] usb 5-1: Manufacturer: syz [ 168.259377][ T5710] usb 5-1: SerialNumber: syz [ 168.269953][ T5971] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.149'. [ 168.280142][ T5963] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 168.373380][ T11] bridge_slave_1: left allmulticast mode [ 168.388411][ T11] bridge_slave_1: left promiscuous mode [ 168.401824][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.445674][ T11] bridge_slave_0: left allmulticast mode [ 168.463940][ T11] bridge_slave_0: left promiscuous mode [ 168.473902][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.698683][ T5230] Bluetooth: hci3: command tx timeout [ 170.171849][ T5275] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 170.335201][ T29] audit: type=1400 audit(1722720467.371:220): avc: denied { getopt } for pid=5983 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.777624][ T5230] Bluetooth: hci3: command tx timeout [ 171.958694][ T5275] hub 3-1:0.0: set hub depth failed [ 171.964811][ T939] usb 3-1: USB disconnect, device number 2 [ 171.974828][ T6004] fuse: Bad value for 'user_id' [ 171.997456][ T6004] fuse: Bad value for 'user_id' [ 172.079621][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.115729][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.133146][ T5710] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 172.149876][ T11] bond0 (unregistering): Released all slaves [ 172.227321][ T5272] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 172.245115][ T5710] usb 5-1: USB disconnect, device number 6 [ 172.448948][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 172.466163][ T5272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.495370][ T5272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.539138][ T5272] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.762285][ T5272] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 173.583210][ T6017] kexec: Could not allocate control_code_buffer [ 173.679273][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.720380][ T5272] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.750825][ T5272] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 173.833465][ T5272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.867678][ T5230] Bluetooth: hci3: command tx timeout [ 173.891760][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.900385][ T5272] usb 1-1: Product: syz [ 173.904961][ T5272] usb 1-1: SerialNumber: syz [ 174.005092][ T6024] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 174.053479][ T6024] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.159'. [ 174.074460][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 174.155750][ T5272] cdc_ncm 1-1:1.0: bind() failure [ 174.371055][ T5272] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 175.198815][ T6031] kexec: Could not allocate control_code_buffer [ 175.320273][ T5272] cdc_ncm 1-1:1.1: bind() failure [ 175.413049][ T11] hsr_slave_0: left promiscuous mode [ 175.433146][ T11] hsr_slave_1: left promiscuous mode [ 175.467533][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.505983][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.538717][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.574969][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.690407][ T11] veth1_macvtap: left promiscuous mode [ 175.696482][ T11] veth0_macvtap: left promiscuous mode [ 176.095078][ T5272] usb 1-1: USB disconnect, device number 12 [ 176.127830][ T11] veth1_vlan: left promiscuous mode [ 176.150130][ T11] veth0_vlan: left promiscuous mode [ 177.502234][ T5230] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 177.531967][ T5710] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.737508][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 177.755336][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 177.839923][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 177.870584][ T5710] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 177.890095][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.911524][ T5710] usb 4-1: config 0 descriptor?? [ 177.930009][ T6047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 178.003459][ T5710] hub 4-1:0.0: USB hub found [ 178.221273][ T5710] hub 4-1:0.0: 2 ports detected [ 178.676923][ T11] team0 (unregistering): Port device team_slave_1 removed [ 178.786268][ T11] team0 (unregistering): Port device team_slave_0 removed [ 179.031393][ T5278] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.271983][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 179.301895][ T5278] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.337460][ T5278] usb 3-1: config 1 has no interface number 1 [ 179.358621][ T5278] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.400331][ T5278] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 179.445686][ T5278] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.086013][ T5278] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.117321][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.125395][ T5278] usb 3-1: Product: syz [ 180.130530][ T5278] usb 3-1: Manufacturer: syz [ 180.137822][ T5278] usb 3-1: SerialNumber: syz [ 180.154682][ T6059] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 180.239324][ T5710] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 181.588452][ T6067] kexec: Could not allocate control_code_buffer [ 181.750173][ T5710] hub 4-1:0.0: set hub depth failed [ 181.756102][ T5274] usb 4-1: USB disconnect, device number 7 [ 182.033814][ T5278] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 182.098830][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.116638][ T6076] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 182.163262][ T5278] usb 3-1: USB disconnect, device number 3 [ 182.167729][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.176428][ T6076] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.170'. [ 182.340918][ T5949] bridge_slave_0: entered allmulticast mode [ 182.350853][ T5949] bridge_slave_0: entered promiscuous mode [ 182.361352][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.370502][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.386081][ T5949] bridge_slave_1: entered allmulticast mode [ 183.050550][ T6085] kexec: Could not allocate control_code_buffer [ 183.180119][ T5949] bridge_slave_1: entered promiscuous mode [ 183.268429][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.512053][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.585662][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.144947][ T6115] kexec: Could not allocate control_code_buffer [ 193.972095][ T5949] team0: Port device team_slave_0 added [ 194.889522][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.895876][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.946767][ T5949] team0: Port device team_slave_1 added [ 196.907660][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 196.979285][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 196.985923][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 197.010679][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.027510][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.039738][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.049096][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.068401][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.078242][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.176265][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.222418][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.276394][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.322603][ T6133] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 198.350013][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.358807][ T6133] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.183'. [ 198.376653][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.447226][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.927629][ T942] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.137539][ T5232] Bluetooth: hci4: command tx timeout [ 200.948206][ T942] usb 4-1: Using ep0 maxpacket: 32 [ 201.217513][ T5232] Bluetooth: hci4: command tx timeout [ 306.997195][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 307.004175][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5270/1:b..l [ 307.012371][ C1] rcu: (detected by 1, t=10502 jiffies, g=16409, q=249 ncpus=2) [ 307.020072][ C1] task:udevd state:R running task stack:26400 pid:5270 tgid:5270 ppid:4669 flags:0x00004002 [ 307.032419][ C1] Call Trace: [ 307.035684][ C1] [ 307.038602][ C1] __schedule+0xe37/0x5490 [ 307.043015][ C1] ? __pfx_mark_lock+0x10/0x10 [ 307.047766][ C1] ? __pfx_mark_lock+0x10/0x10 [ 307.052519][ C1] ? __pfx___schedule+0x10/0x10 [ 307.057355][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.062538][ C1] preempt_schedule_irq+0x51/0x90 [ 307.067550][ C1] irqentry_exit+0x36/0x90 [ 307.071952][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.077947][ C1] RIP: 0010:write_comp_data+0x3/0x90 [ 307.083222][ C1] Code: b3 66 79 7e 48 8b 80 10 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 <49> 89 f8 49 89 f1 65 48 8b 15 7f 66 79 7e 65 8b 05 80 66 79 7e a9 [ 307.102815][ C1] RSP: 0018:ffffc9000324f490 EFLAGS: 00000246 [ 307.108866][ C1] RAX: 0000000000000000 RBX: ffffc9000324f4c0 RCX: ffffffff813cd86c [ 307.116824][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 307.124781][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 307.132733][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000324f4c0 [ 307.140687][ C1] R13: ffffffff81761170 R14: ffffc9000324f580 R15: ffff888058069e00 [ 307.148732][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.154875][ C1] ? unwind_get_return_address+0x3c/0xe0 [ 307.160493][ C1] unwind_get_return_address+0x3c/0xe0 [ 307.165935][ C1] arch_stack_walk+0xc1/0x170 [ 307.170598][ C1] ? do_syscall_64+0xcd/0x250 [ 307.175308][ C1] stack_trace_save+0x95/0xd0 [ 307.179968][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 307.185345][ C1] save_stack+0x162/0x1f0 [ 307.189662][ C1] ? __pfx_save_stack+0x10/0x10 [ 307.194496][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 307.199591][ C1] ? free_unref_folios+0x9e9/0x1390 [ 307.204773][ C1] ? folios_put_refs+0x560/0x760 [ 307.209694][ C1] ? free_pages_and_swap_cache+0x45f/0x510 [ 307.215484][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 307.221631][ C1] ? tlb_finish_mmu+0x168/0x7b0 [ 307.226471][ C1] ? exit_mmap+0x3d1/0xb20 [ 307.230873][ C1] ? __mmput+0x12a/0x480 [ 307.235104][ C1] ? mmput+0x62/0x70 [ 307.238986][ C1] ? do_exit+0x9bf/0x2bb0 [ 307.243308][ C1] ? do_group_exit+0xd3/0x2a0 [ 307.247976][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 307.253156][ C1] ? x64_sys_call+0x14a9/0x16a0 [ 307.258001][ C1] __reset_page_owner+0x8d/0x400 [ 307.262927][ C1] free_unref_folios+0x9e9/0x1390 [ 307.267945][ C1] folios_put_refs+0x560/0x760 [ 307.272694][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 307.278052][ C1] ? free_pages_and_swap_cache+0x25e/0x510 [ 307.283839][ C1] ? kasan_check_range+0x10e/0x1a0 [ 307.288939][ C1] free_pages_and_swap_cache+0x45f/0x510 [ 307.294556][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 307.300696][ C1] ? native_tlb_remove_table+0x2e/0x50 [ 307.306156][ C1] ? __pfx___might_resched+0x10/0x10 [ 307.311428][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 307.317404][ C1] tlb_finish_mmu+0x168/0x7b0 [ 307.322074][ C1] exit_mmap+0x3d1/0xb20 [ 307.326304][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 307.331058][ C1] __mmput+0x12a/0x480 [ 307.335117][ C1] mmput+0x62/0x70 [ 307.338831][ C1] do_exit+0x9bf/0x2bb0 [ 307.342973][ C1] ? do_group_exit+0x1c3/0x2a0 [ 307.347724][ C1] ? __pfx_lock_release+0x10/0x10 [ 307.352732][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 307.357759][ C1] ? __pfx_do_exit+0x10/0x10 [ 307.362335][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.367696][ C1] do_group_exit+0xd3/0x2a0 [ 307.372183][ C1] __x64_sys_exit_group+0x3e/0x50 [ 307.377195][ C1] x64_sys_call+0x14a9/0x16a0 [ 307.381875][ C1] do_syscall_64+0xcd/0x250 [ 307.386372][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.392256][ C1] RIP: 0033:0x7f624aafca90 [ 307.396660][ C1] RSP: 002b:00007ffd17f85b98 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 307.405062][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f624aafca90 [ 307.413015][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 307.420970][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: a7244c18d9f5a84c [ 307.428924][ C1] R10: 00000000ffffffff R11: 0000000000000206 R12: 000055de6f782ac0 [ 307.436875][ C1] R13: 00007ffd17f85bd8 R14: 0000000000000001 R15: 000055de6f74f2c0 [ 307.444835][ C1] [ 307.447841][ C1] rcu: rcu_preempt kthread starved for 10345 jiffies! g16409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 307.459013][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 307.468959][ C1] rcu: RCU grace-period kthread stack dump: [ 307.474824][ C1] task:rcu_preempt state:R running task stack:28640 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 307.486547][ C1] Call Trace: [ 307.489809][ C1] [ 307.492727][ C1] __schedule+0xe37/0x5490 [ 307.497133][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 307.502324][ C1] ? __pfx___schedule+0x10/0x10 [ 307.507161][ C1] ? schedule+0x298/0x350 [ 307.511474][ C1] ? __pfx_lock_release+0x10/0x10 [ 307.516485][ C1] ? __pfx___mod_timer+0x10/0x10 [ 307.521413][ C1] ? lock_acquire+0x1b1/0x560 [ 307.526075][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 307.531528][ C1] schedule+0xe7/0x350 [ 307.535583][ C1] schedule_timeout+0x136/0x2a0 [ 307.540427][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 307.545883][ C1] ? __pfx_process_timeout+0x10/0x10 [ 307.551161][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.556954][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 307.562401][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 307.567149][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 307.572417][ C1] ? rcu_gp_init+0xc82/0x1630 [ 307.577075][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 307.582256][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.588044][ C1] rcu_gp_kthread+0x271/0x380 [ 307.592707][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 307.597894][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.603075][ C1] ? __kthread_parkme+0x148/0x220 [ 307.608090][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 307.613270][ C1] kthread+0x2c1/0x3a0 [ 307.617322][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.622513][ C1] ? __pfx_kthread+0x10/0x10 [ 307.627106][ C1] ret_from_fork+0x45/0x80 [ 307.631527][ C1] ? __pfx_kthread+0x10/0x10 [ 307.636100][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.640856][ C1] [ 307.643855][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 307.650166][ C1] Sending NMI from CPU 1 to CPUs 0: [ 307.655396][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20