last executing test programs: 16.783558995s ago: executing program 2 (id=532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) readv(r3, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 15.61131891s ago: executing program 2 (id=536): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) dup2(r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000004900), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9a57}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08190c03000aff0f03000004000411000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x4) 15.039104639s ago: executing program 1 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x20000040) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)="0ec6fc05ffdc25a9000000805b73971ff5453836", 0x14}], 0x2}}], 0x1, 0x4000c000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0xffffff7d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) 13.585046676s ago: executing program 1 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/222, 0xde) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x560a, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5f549a, 0x0, [0xfffffffffffffffe, 0x0, 0x400000, 0x8008, 0x20000000, 0x8, 0x3]}) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000800)={0x9}) 12.975239745s ago: executing program 0 (id=541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x1}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r3, 0x29, 0x38, 0x0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 12.305680309s ago: executing program 1 (id=542): geteuid() sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x94) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d507df08c410448200dc010203010902120001000000000904000000030000009073643aecb411634d74057b1cba9af4a239b2fd9d42b4df1472dc05a98ddb93602806eb173ff444db639c2ef12900f2450146f378e6cc6870cf49b9bbcca4702282f76884ec57221a64dadfefa6644b5ed01b2cea4dc8c1b97d197eed7c92ba6e8f772148a95e68ac289b2c7ce9908a5d2b439dcbabce8dacb9d040f199ff1be8307864609ec5f13799"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="003ab73495210004000000"], 0x0}) 12.201351184s ago: executing program 3 (id=543): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRES32=r0]) 11.902550777s ago: executing program 3 (id=544): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) 9.613987948s ago: executing program 3 (id=546): socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 9.213979894s ago: executing program 4 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1d}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800, 0x1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x20) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.201372591s ago: executing program 0 (id=548): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x2cdf, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0xcd7a000000000000, 0x0, 0x2a) 8.983441732s ago: executing program 1 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 7.699653964s ago: executing program 0 (id=550): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x40042, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="fc", 0xa}]) 7.542527188s ago: executing program 4 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3d}) ioctl$CAPI_GET_ERRCODE(r3, 0xc0044308, &(0x7f0000000080)) 6.502704757s ago: executing program 2 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/222, 0xde) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x560a, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5f549a, 0x0, [0xfffffffffffffffe, 0x0, 0x400000, 0x8008, 0x20000000, 0x8, 0x3]}) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000800)={0x9}) 6.420535051s ago: executing program 1 (id=553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x67, &(0x7f00000002c0)=ANY=[@ANYBLOB="0400000000000600000000005e002200850000006d00180095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r7, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e75", 0xf7, 0x40040, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 6.045842114s ago: executing program 0 (id=554): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRES32=r0]) 3.27014865s ago: executing program 4 (id=555): socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="1400140064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005"], 0x54}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 3.253378309s ago: executing program 2 (id=556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x7, 0x0, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f"]) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879310000000005002000050000000c0005"], 0x34}}, 0x0) 3.133699809s ago: executing program 1 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0xffffffff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 2.675698112s ago: executing program 2 (id=558): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x1}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r3, 0x29, 0x38, 0x0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.553244839s ago: executing program 0 (id=559): geteuid() sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x94) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d507df08c410448200dc010203010902120001000000000904000000030000009073643aecb411634d74057b1cba9af4a239b2fd9d42b4df1472dc05a98ddb93602806eb173ff444db639c2ef12900f2450146f378e6cc6870cf49b9bbcca4702282f76884ec57221a64dadfefa6644b5ed01b2cea4dc8c1b97d197eed7c92ba6e8f772148a95e68ac289b2c7ce9908a5d2b439dcbabce8dacb9d040f199ff1be8307864609ec5f13799"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="003ab73495210004000000"], 0x0}) 2.041715939s ago: executing program 4 (id=560): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x2cdf, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0xcd7a000000000000, 0x0, 0x2a) 1.773688301s ago: executing program 3 (id=561): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) read$dsp(r0, &(0x7f0000000200)=""/245, 0xf5) 1.746336475s ago: executing program 2 (id=562): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) dup2(r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000004900), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9a57}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08190c03000aff0f03000004000411000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x4) 1.677473612s ago: executing program 4 (id=563): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x31, 0x0, 0x401, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x24, 0x0, 0x0, @link_fd, r1}, 0xffffffffffffff73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f00000008c0)='big_key\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a00)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0xb, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @tail_call, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0xb}, @map_fd, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x2, 0x1, 0x9, 0xb, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f00000005c0)='GPL\x00', 0xffff, 0x2a, &(0x7f0000000600)=""/42, 0x41000, 0xb, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x8, 0xffff, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x90) syz_emit_ethernet(0x3a, &(0x7f0000002880)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="1433881b484f9b794c18cdea46625d7b", @ANYRES64=r0, @ANYRES64=r0, @ANYRES16, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16], 0x8) 1.261767653s ago: executing program 3 (id=564): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x40042, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="fc", 0xa}]) 160.935071ms ago: executing program 0 (id=565): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000010080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x181641, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 66.119968ms ago: executing program 4 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/222, 0xde) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x560a, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5f549a, 0x0, [0xfffffffffffffffe, 0x0, 0x400000, 0x8008, 0x20000000, 0x8, 0x3]}) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000800)={0x9}) 0s ago: executing program 3 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) kernel console output (not intermixed with test programs): ot using interface batadv_slave_1 (retrying later): interface not active [ 588.302736][ T30] audit: type=1400 audit(1725808635.128:285): avc: denied { ioctl } for pid=6657 comm="syz.4.132" path="socket:[19727]" dev="sockfs" ino=19727 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 588.304124][ T6387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 588.392080][ T6387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 588.536746][ T6662] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 588.547881][ T6387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 588.608865][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.617122][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.645747][ T6504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.938340][ T6463] hsr_slave_0: entered promiscuous mode [ 588.993829][ T6463] hsr_slave_1: entered promiscuous mode [ 589.024820][ T6463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.069903][ T6463] Cannot create hsr debugfs directory [ 589.101009][ T30] audit: type=1400 audit(1725808635.928:286): avc: denied { listen } for pid=6663 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 589.145433][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.178895][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.247146][ T5926] Bluetooth: hci6: unexpected event for opcode 0x0c22 [ 589.357307][ T6504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.183325][ T6504] hsr_slave_0: entered promiscuous mode [ 590.209097][ T6504] hsr_slave_1: entered promiscuous mode [ 590.228464][ T6504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.261291][ T6504] Cannot create hsr debugfs directory [ 590.622582][ T5390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.748088][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 591.080828][ T5390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.630790][ T5390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.699686][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 591.710319][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 591.720001][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 591.735656][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 591.745393][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 591.754905][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 592.685362][ T6693] syz.4.141: attempt to access beyond end of device [ 592.685362][ T6693] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 592.698568][ T6693] F2FS-fs (loop9): Unable to read 1th superblock [ 592.705408][ T6693] syz.4.141: attempt to access beyond end of device [ 592.705408][ T6693] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 592.718279][ T6693] F2FS-fs (loop9): Unable to read 2th superblock [ 592.926293][ T6690] can: request_module (can-proto-0) failed. [ 593.145353][ T5390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.842347][ T5926] Bluetooth: hci3: command tx timeout [ 594.102560][ T5390] bridge_slave_1: left allmulticast mode [ 594.108282][ T5390] bridge_slave_1: left promiscuous mode [ 594.126525][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.147803][ T5390] bridge_slave_0: left allmulticast mode [ 594.164481][ T5390] bridge_slave_0: left promiscuous mode [ 594.170325][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.192741][ T5390] bridge_slave_1: left allmulticast mode [ 594.217939][ T5390] bridge_slave_1: left promiscuous mode [ 594.281699][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.305740][ T5390] bridge_slave_0: left allmulticast mode [ 594.311493][ T5390] bridge_slave_0: left promiscuous mode [ 594.319582][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.782081][ T5390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.811869][ T5390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.832456][ T5390] bond0 (unregistering): Released all slaves [ 595.924542][ T5926] Bluetooth: hci3: command tx timeout [ 596.070180][ T5390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.094115][ T5390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.154888][ T5390] bond0 (unregistering): Released all slaves [ 598.482697][ T5926] Bluetooth: hci3: command tx timeout [ 599.107847][ T6711] netlink: 188 bytes leftover after parsing attributes in process `syz.4.145'. [ 599.117168][ T6711] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 600.249639][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 600.562320][ T5926] Bluetooth: hci3: command tx timeout [ 601.122043][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 601.302292][ T5390] hsr_slave_0: left promiscuous mode [ 601.412816][ T5390] hsr_slave_1: left promiscuous mode [ 601.472867][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.480631][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.530611][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.542471][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.556603][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.565364][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.576061][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.585448][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.594702][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 601.602833][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.635181][ T5390] hsr_slave_0: left promiscuous mode [ 601.670072][ T5390] hsr_slave_1: left promiscuous mode [ 601.685507][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.712775][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.738252][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.780392][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.877126][ T5390] veth1_macvtap: left promiscuous mode [ 601.882950][ T5390] veth0_macvtap: left promiscuous mode [ 601.889041][ T5390] veth1_vlan: left promiscuous mode [ 601.895333][ T5390] veth0_vlan: left promiscuous mode [ 601.909349][ T5390] veth1_macvtap: left promiscuous mode [ 601.915180][ T5390] veth0_macvtap: left promiscuous mode [ 601.921278][ T5390] veth1_vlan: left promiscuous mode [ 601.927910][ T5390] veth0_vlan: left promiscuous mode [ 603.694993][ T5238] Bluetooth: hci5: command tx timeout [ 603.816937][ T5926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 603.827469][ T5926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 603.845080][ T5926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 603.854613][ T5926] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 603.864573][ T5926] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 603.889026][ T5926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 604.220140][ T5390] team0 (unregistering): Port device team_slave_1 removed [ 604.311503][ T5390] team0 (unregistering): Port device team_slave_0 removed [ 605.771684][ T5238] Bluetooth: hci5: command tx timeout [ 606.006002][ T5238] Bluetooth: hci7: command tx timeout [ 606.196347][ T5390] team0 (unregistering): Port device team_slave_1 removed [ 606.303418][ T5390] team0 (unregistering): Port device team_slave_0 removed [ 607.852308][ T5238] Bluetooth: hci5: command tx timeout [ 608.082250][ T5238] Bluetooth: hci7: command tx timeout [ 608.154067][ T6752] x_tables: unsorted underflow at hook 3 [ 608.747742][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.782796][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.791097][ T6686] bridge_slave_0: entered allmulticast mode [ 608.881704][ T6686] bridge_slave_0: entered promiscuous mode [ 609.234529][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.262801][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.270153][ T6686] bridge_slave_1: entered allmulticast mode [ 609.338141][ T6686] bridge_slave_1: entered promiscuous mode [ 609.922537][ T5238] Bluetooth: hci5: command tx timeout [ 610.172288][ T5238] Bluetooth: hci7: command tx timeout [ 610.903808][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.941189][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.618729][ T6686] team0: Port device team_slave_0 added [ 611.798145][ T30] audit: type=1400 audit(1725808658.628:287): avc: denied { write } for pid=6770 comm="syz.4.156" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 611.826697][ T6686] team0: Port device team_slave_1 added [ 611.974341][ T6773] kvm: emulating exchange as write [ 612.242740][ T5238] Bluetooth: hci7: command tx timeout [ 612.685029][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.692037][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.802614][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.200610][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.219218][ T5926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.229806][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.259145][ T5926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.269271][ T5926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.278477][ T5926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.288345][ T5926] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.296109][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.376074][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.406217][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 613.741670][ T30] audit: type=1400 audit(1725808660.568:288): avc: denied { create } for pid=6792 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 613.749167][ T6793] tipc: Started in network mode [ 613.774700][ T6793] tipc: Node identity ac1414aa, cluster identity 4711 [ 613.795954][ T6793] tipc: Enabled bearer , priority 10 [ 614.103186][ T6722] chnl_net:caif_netlink_parms(): no params data found [ 614.613857][ T6686] hsr_slave_0: entered promiscuous mode [ 614.636893][ T6686] hsr_slave_1: entered promiscuous mode [ 614.652396][ T6686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.660132][ T6686] Cannot create hsr debugfs directory [ 614.924506][ T5379] tipc: Node number set to 2886997162 [ 615.116115][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.125786][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.133471][ T6739] bridge_slave_0: entered allmulticast mode [ 615.141537][ T6739] bridge_slave_0: entered promiscuous mode [ 615.362764][ T5926] Bluetooth: hci2: command tx timeout [ 615.476247][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.512411][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.531384][ T6739] bridge_slave_1: entered allmulticast mode [ 615.551626][ T6739] bridge_slave_1: entered promiscuous mode [ 615.822028][ T6722] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.869550][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.892708][ T6722] bridge_slave_0: entered allmulticast mode [ 615.912051][ T6722] bridge_slave_0: entered promiscuous mode [ 615.959488][ T6722] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.979765][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.999483][ T6722] bridge_slave_1: entered allmulticast mode [ 616.024700][ T6722] bridge_slave_1: entered promiscuous mode [ 616.561064][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.901571][ T6722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.065612][ T6722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.652440][ T5926] Bluetooth: hci2: command tx timeout [ 617.659153][ T30] audit: type=1400 audit(1725808664.428:289): avc: denied { write } for pid=6817 comm="syz.4.160" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 620.297057][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.809034][ T6739] team0: Port device team_slave_0 added [ 620.874837][ T6739] team0: Port device team_slave_1 added [ 621.032432][ T6722] team0: Port device team_slave_0 added [ 621.388368][ T6722] team0: Port device team_slave_1 added [ 621.666906][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.674224][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.701209][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.899294][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.918522][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.996881][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.098356][ T6836] capability: warning: `syz.4.163' uses deprecated v2 capabilities in a way that may be insecure [ 622.552382][ T5926] Bluetooth: hci2: command tx timeout [ 623.186794][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.194055][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.538267][ T6722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.095766][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.128088][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.160587][ T6722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.317429][ T6739] hsr_slave_0: entered promiscuous mode [ 624.335826][ T6739] hsr_slave_1: entered promiscuous mode [ 624.346396][ T6739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.354276][ T6739] Cannot create hsr debugfs directory [ 624.385592][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 624.562420][ T5926] Bluetooth: hci2: command tx timeout [ 624.941521][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 625.194965][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 625.223130][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.263757][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.303231][ T8] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 625.350401][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.407623][ T8] usb 5-1: config 0 descriptor?? [ 625.500887][ T6722] hsr_slave_0: entered promiscuous mode [ 625.534197][ T6722] hsr_slave_1: entered promiscuous mode [ 625.555896][ T6722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.563810][ T6722] Cannot create hsr debugfs directory [ 625.645180][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.669721][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.700630][ T6786] bridge_slave_0: entered allmulticast mode [ 625.709471][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.720016][ T6786] bridge_slave_0: entered promiscuous mode [ 625.738610][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.794865][ T30] audit: type=1400 audit(1725808672.628:290): avc: denied { read } for pid=6842 comm="syz.4.165" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 625.933679][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.940899][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.993200][ T6786] bridge_slave_1: entered allmulticast mode [ 626.001655][ T6786] bridge_slave_1: entered promiscuous mode [ 626.026939][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 626.049592][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 626.108750][ T8] usb 5-1: USB disconnect, device number 3 [ 626.470869][ T5390] bridge_slave_1: left allmulticast mode [ 626.491508][ T5390] bridge_slave_1: left promiscuous mode [ 626.513601][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.536565][ T5390] bridge_slave_0: left allmulticast mode [ 626.549482][ T5390] bridge_slave_0: left promiscuous mode [ 626.560448][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.586266][ T5390] bridge_slave_1: left allmulticast mode [ 626.599971][ T5390] bridge_slave_1: left promiscuous mode [ 626.607729][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.618392][ T5390] bridge_slave_0: left allmulticast mode [ 626.629302][ T5390] bridge_slave_0: left promiscuous mode [ 626.636909][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.666500][ T5390] bridge_slave_1: left allmulticast mode [ 626.673649][ T5390] bridge_slave_1: left promiscuous mode [ 626.680524][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.709380][ T5390] bridge_slave_0: left allmulticast mode [ 626.716065][ T5390] bridge_slave_0: left promiscuous mode [ 626.724191][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.925591][ T5390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.943961][ T5390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.958976][ T5390] bond0 (unregistering): Released all slaves [ 629.008643][ T5390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.030950][ T5390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.054291][ T5390] bond0 (unregistering): Released all slaves [ 629.108390][ T5390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.131082][ T5390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.150858][ T5390] bond0 (unregistering): Released all slaves [ 629.378506][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.407011][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.850432][ T5390] hsr_slave_0: left promiscuous mode [ 629.867016][ T5390] hsr_slave_1: left promiscuous mode [ 629.905548][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.933509][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.009787][ T5390] hsr_slave_0: left promiscuous mode [ 630.045765][ T5390] hsr_slave_1: left promiscuous mode [ 630.064015][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.102496][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.184257][ T5390] hsr_slave_0: left promiscuous mode [ 630.200419][ T5390] hsr_slave_1: left promiscuous mode [ 630.242733][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.266885][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.898369][ T5390] team0 (unregistering): Port device team_slave_1 removed [ 630.973474][ T5390] team0 (unregistering): Port device team_slave_0 removed [ 632.021549][ T5390] team0 (unregistering): Port device team_slave_1 removed [ 632.098988][ T5390] team0 (unregistering): Port device team_slave_0 removed [ 633.113022][ T5390] team0 (unregistering): Port device team_slave_1 removed [ 633.177907][ T5390] team0 (unregistering): Port device team_slave_0 removed [ 633.966535][ T6786] team0: Port device team_slave_0 added [ 633.992859][ T6786] team0: Port device team_slave_1 added [ 634.258880][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.273262][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.355537][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.474724][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.492445][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.552486][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.333235][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.339659][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.815522][ T6786] hsr_slave_0: entered promiscuous mode [ 635.873597][ T6786] hsr_slave_1: entered promiscuous mode [ 638.293433][ T6686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.382649][ T6686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.404544][ T30] audit: type=1400 audit(1725808685.218:291): avc: denied { mounton } for pid=6904 comm="syz.4.173" path="/70/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.456487][ T6686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.567927][ T6686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 639.412878][ T6722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.641695][ T6722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.815408][ T6722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.978574][ T6722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.188190][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.347719][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.495880][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.503230][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.603970][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.611179][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.794650][ T6722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 640.858959][ T6722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 641.013363][ T6722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 641.063395][ T6722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 641.516077][ T6686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.610079][ T30] audit: type=1400 audit(1725808688.438:292): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 641.651911][ T6786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 641.896766][ T6786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 641.939248][ T6786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 642.023340][ T6786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 642.396804][ T6739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.517140][ T6739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.583620][ T6739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.673678][ T6739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.551180][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.689020][ T6722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.675017][ T30] audit: type=1400 audit(1725808691.508:293): avc: denied { ioctl } for pid=6947 comm="syz.4.178" path="socket:[21180]" dev="sockfs" ino=21180 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.731235][ T6722] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.791841][ T30] audit: type=1400 audit(1725808691.618:294): avc: denied { ioctl } for pid=6947 comm="syz.4.178" path="socket:[22277]" dev="sockfs" ino=22277 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 644.960006][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.003765][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.120015][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.127314][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.191568][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.198831][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.248865][ T6686] veth0_vlan: entered promiscuous mode [ 645.320989][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.257847][ T6686] veth1_vlan: entered promiscuous mode [ 646.304750][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.559832][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.567090][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.622479][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.744312][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.751621][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.046907][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.054192][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.555799][ T6960] random: crng reseeded on system resumption [ 647.875721][ T30] audit: type=1400 audit(1725808694.388:295): avc: denied { write } for pid=6956 comm="syz.4.180" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 647.970729][ T6686] veth0_macvtap: entered promiscuous mode [ 648.030357][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.037682][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.205794][ T6686] veth1_macvtap: entered promiscuous mode [ 649.581823][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.601538][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.642205][ T30] audit: type=1400 audit(1725808696.468:296): avc: denied { ioctl } for pid=6967 comm="syz.4.182" path="socket:[21284]" dev="sockfs" ino=21284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 649.668687][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.690706][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.708678][ T30] audit: type=1400 audit(1725808696.508:297): avc: denied { setopt } for pid=6967 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 649.736717][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.742555][ T30] audit: type=1400 audit(1725808696.518:298): avc: denied { bind } for pid=6967 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 649.852293][ T30] audit: type=1400 audit(1725808696.538:299): avc: denied { write } for pid=6967 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 649.919717][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.948402][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.976460][ T6786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.852720][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.124903][ T6786] veth0_vlan: entered promiscuous mode [ 651.193979][ T6786] veth1_vlan: entered promiscuous mode [ 651.307046][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 651.836145][ T6722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.856589][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 651.880117][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 651.890206][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 651.900321][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 651.908783][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 651.916652][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 652.054830][ T6786] veth0_macvtap: entered promiscuous mode [ 652.147113][ T6786] veth1_macvtap: entered promiscuous mode [ 652.469702][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.509409][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.521245][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.538261][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.548873][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.569814][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.608474][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.652190][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.694213][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.836240][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.908657][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.939116][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.010622][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.032670][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.076283][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.700219][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.034815][ T5926] Bluetooth: hci4: command tx timeout [ 654.706637][ T6722] veth0_vlan: entered promiscuous mode [ 654.770588][ T6786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.793556][ T6786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.816809][ T6786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.829965][ T6786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.950696][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.082578][ T5926] Bluetooth: hci4: command tx timeout [ 656.251988][ T6998] Bluetooth: MGMT ver 1.23 [ 656.322307][ T6722] veth1_vlan: entered promiscuous mode [ 656.780990][ T7001] xt_TPROXY: Can be used only with -p tcp or -p udp [ 657.717835][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.785567][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.911450][ T6977] chnl_net:caif_netlink_parms(): no params data found [ 658.166634][ T5926] Bluetooth: hci4: command tx timeout [ 658.250869][ T6722] veth0_macvtap: entered promiscuous mode [ 658.270705][ T6739] veth0_vlan: entered promiscuous mode [ 658.296693][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.320933][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.651452][ T6739] veth1_vlan: entered promiscuous mode [ 658.693100][ T5384] bridge_slave_1: left allmulticast mode [ 658.708516][ T5384] bridge_slave_1: left promiscuous mode [ 658.718049][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.763828][ T5384] bridge_slave_0: left allmulticast mode [ 658.769516][ T5384] bridge_slave_0: left promiscuous mode [ 658.793149][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.521927][ T5926] Bluetooth: hci4: command tx timeout [ 660.923307][ T30] audit: type=1400 audit(1725808707.748:300): avc: denied { getopt } for pid=7020 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 661.653208][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.702238][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.716219][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.725542][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 661.734094][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 661.741731][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 661.745700][ T5384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.811515][ T5384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.831927][ T5384] bond0 (unregistering): Released all slaves [ 662.066167][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 662.094838][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 662.247592][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.263960][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.271329][ T6977] bridge_slave_0: entered allmulticast mode [ 662.330002][ T6977] bridge_slave_0: entered promiscuous mode [ 662.502508][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.509749][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.603643][ T6977] bridge_slave_1: entered allmulticast mode [ 662.648039][ T6977] bridge_slave_1: entered promiscuous mode [ 662.914438][ T5384] hsr_slave_0: left promiscuous mode [ 663.734916][ T5384] hsr_slave_1: left promiscuous mode [ 663.808609][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.832661][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.843158][ T5926] Bluetooth: hci3: command tx timeout [ 663.879743][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.074208][ T5384] veth1_macvtap: left promiscuous mode [ 664.103746][ T5384] veth0_macvtap: left promiscuous mode [ 664.109603][ T5384] veth1_vlan: left promiscuous mode [ 664.133817][ T5384] veth0_vlan: left promiscuous mode [ 665.070321][ T7047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 665.409655][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.421498][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.492959][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.503279][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.512665][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 665.520348][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.932356][ T5926] Bluetooth: hci3: command tx timeout [ 666.890142][ T5384] team0 (unregistering): Port device team_slave_1 removed [ 667.023308][ T5384] team0 (unregistering): Port device team_slave_0 removed [ 667.607116][ T5926] Bluetooth: hci5: command tx timeout [ 668.002832][ T5926] Bluetooth: hci3: command tx timeout [ 668.187182][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.576904][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.095413][ T6977] team0: Port device team_slave_0 added [ 669.185133][ T6977] team0: Port device team_slave_1 added [ 669.576399][ T30] audit: type=1400 audit(1725808716.358:301): avc: denied { bind } for pid=7065 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 669.661294][ T30] audit: type=1400 audit(1725808716.358:302): avc: denied { node_bind } for pid=7065 comm="syz.4.200" saddr=fe80::15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 669.692207][ T5926] Bluetooth: hci5: command tx timeout [ 670.095954][ T5926] Bluetooth: hci3: command tx timeout [ 670.463369][ T46] IPVS: starting estimator thread 0... [ 670.544493][ T30] audit: type=1400 audit(1725808716.408:303): avc: denied { execute } for pid=7065 comm="syz.4.200" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 670.578410][ T7071] IPVS: using max 15 ests per chain, 36000 per kthread [ 670.662258][ T30] audit: type=1400 audit(1725808716.598:304): avc: denied { write } for pid=7065 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 671.684304][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.691792][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.770087][ T5926] Bluetooth: hci5: command tx timeout [ 671.804437][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.963829][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.013828][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.122384][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.282940][ T30] audit: type=1400 audit(1725808719.108:305): avc: denied { read } for pid=7082 comm="syz.4.202" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 672.365648][ T30] audit: type=1400 audit(1725808719.108:306): avc: denied { open } for pid=7082 comm="syz.4.202" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 672.519454][ T30] audit: type=1400 audit(1725808719.348:307): avc: denied { setopt } for pid=7082 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 672.666746][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.705286][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.715448][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.731382][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.767789][ T30] audit: type=1400 audit(1725808719.598:308): avc: denied { ioctl } for pid=7082 comm="syz.4.202" path="/dev/usbmon0" dev="devtmpfs" ino=707 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 672.795498][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 672.808966][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.904552][ T30] audit: type=1400 audit(1725808719.738:309): avc: denied { append } for pid=7082 comm="syz.4.202" name="nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.952228][ T30] audit: type=1400 audit(1725808719.778:310): avc: denied { open } for pid=7082 comm="syz.4.202" path="/dev/nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 673.412656][ T6977] hsr_slave_0: entered promiscuous mode [ 673.474947][ T6977] hsr_slave_1: entered promiscuous mode [ 673.536945][ T6977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.571027][ T6977] Cannot create hsr debugfs directory [ 673.842636][ T5926] Bluetooth: hci5: command tx timeout [ 674.292727][ T5384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.911346][ T5384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.968778][ T5926] Bluetooth: hci2: command tx timeout [ 675.238500][ T5384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.324361][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 675.645341][ T7105] netlink: 188 bytes leftover after parsing attributes in process `syz.4.204'. [ 675.654538][ T7105] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 676.042014][ T5384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.773028][ T7049] chnl_net:caif_netlink_parms(): no params data found [ 677.043638][ T5926] Bluetooth: hci2: command tx timeout [ 677.400589][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.440151][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.462502][ T7023] bridge_slave_0: entered allmulticast mode [ 677.482882][ T7023] bridge_slave_0: entered promiscuous mode [ 678.025499][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.048422][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.060576][ T7023] bridge_slave_1: entered allmulticast mode [ 678.073157][ T7023] bridge_slave_1: entered promiscuous mode [ 678.392012][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 678.392037][ T30] audit: type=1400 audit(1725808725.218:312): avc: denied { name_bind } for pid=7135 comm="syz.4.207" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 678.423242][ T30] audit: type=1400 audit(1725808725.228:313): avc: denied { create } for pid=7135 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 678.444066][ T30] audit: type=1400 audit(1725808725.248:314): avc: denied { getopt } for pid=7135 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 679.123108][ T5926] Bluetooth: hci2: command tx timeout [ 679.216364][ T30] audit: type=1400 audit(1725808725.628:315): avc: denied { bind } for pid=7135 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 680.431842][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.497773][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.869893][ T7023] team0: Port device team_slave_0 added [ 680.917529][ T7023] team0: Port device team_slave_1 added [ 681.205995][ T5926] Bluetooth: hci2: command tx timeout [ 682.026034][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.072508][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.089634][ T7049] bridge_slave_0: entered allmulticast mode [ 682.108488][ T7049] bridge_slave_0: entered promiscuous mode [ 682.121359][ T7087] chnl_net:caif_netlink_parms(): no params data found [ 682.290464][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.312415][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.422317][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.463665][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.470765][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.607854][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.702651][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.732520][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.739899][ T7049] bridge_slave_1: entered allmulticast mode [ 682.757370][ T7049] bridge_slave_1: entered promiscuous mode [ 683.121877][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.083434][ T6977] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.178365][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.261095][ T30] audit: type=1400 audit(1725808731.088:316): avc: denied { write } for pid=7169 comm="syz.4.212" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 684.455174][ T7023] hsr_slave_0: entered promiscuous mode [ 684.490501][ T7023] hsr_slave_1: entered promiscuous mode [ 684.499228][ T7023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.542262][ T7023] Cannot create hsr debugfs directory [ 684.626089][ T6977] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 684.676987][ T6977] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 686.027351][ T6977] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 686.177528][ T7049] team0: Port device team_slave_0 added [ 686.778521][ T30] audit: type=1400 audit(1725808733.548:317): avc: denied { create } for pid=7181 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 686.996996][ T30] audit: type=1400 audit(1725808733.578:318): avc: denied { setopt } for pid=7181 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 687.277508][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.285332][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.313781][ T7087] bridge_slave_0: entered allmulticast mode [ 687.336197][ T7087] bridge_slave_0: entered promiscuous mode [ 687.431437][ T7049] team0: Port device team_slave_1 added [ 687.757250][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.789904][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.807420][ T7087] bridge_slave_1: entered allmulticast mode [ 687.837683][ T7087] bridge_slave_1: entered promiscuous mode [ 688.267423][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.435347][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.561670][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.580176][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.606354][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.840730][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.866522][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.887261][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.207875][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.710309][ T7087] team0: Port device team_slave_0 added [ 691.767150][ T7087] team0: Port device team_slave_1 added [ 692.583901][ T30] audit: type=1400 audit(1725808739.418:319): avc: denied { read write } for pid=7204 comm="syz.4.218" name="vhost-vsock" dev="devtmpfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 692.993108][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.014522][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.051898][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.123083][ T7211] input: syz1 as /devices/virtual/input/input6 [ 693.156702][ T30] audit: type=1400 audit(1725808739.988:320): avc: denied { read } for pid=4661 comm="acpid" name="event4" dev="devtmpfs" ino=2356 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 694.039703][ T30] audit: type=1400 audit(1725808739.988:321): avc: denied { open } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2356 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 694.116884][ T30] audit: type=1400 audit(1725808739.988:322): avc: denied { ioctl } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2356 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 694.306001][ T7049] hsr_slave_0: entered promiscuous mode [ 694.370422][ T7049] hsr_slave_1: entered promiscuous mode [ 694.411350][ T7049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.430052][ T7049] Cannot create hsr debugfs directory [ 694.443631][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.470938][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.521461][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.366161][ T7087] hsr_slave_0: entered promiscuous mode [ 695.391313][ T7087] hsr_slave_1: entered promiscuous mode [ 695.404910][ T7087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.432465][ T7087] Cannot create hsr debugfs directory [ 696.390396][ T7227] netlink: 104 bytes leftover after parsing attributes in process `syz.4.221'. [ 696.402191][ T30] audit: type=1400 audit(1725808743.218:323): avc: denied { nlmsg_read } for pid=7226 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 696.656185][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.670486][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.866423][ T5384] bridge_slave_1: left allmulticast mode [ 696.872730][ T5384] bridge_slave_1: left promiscuous mode [ 696.908699][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.970818][ T5384] bridge_slave_0: left allmulticast mode [ 696.987504][ T5384] bridge_slave_0: left promiscuous mode [ 697.009118][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.040986][ T5384] bridge_slave_1: left allmulticast mode [ 697.067033][ T5384] bridge_slave_1: left promiscuous mode [ 697.082638][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.111547][ T5384] bridge_slave_0: left allmulticast mode [ 697.127949][ T5384] bridge_slave_0: left promiscuous mode [ 697.138368][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.175474][ T5384] bridge_slave_1: left allmulticast mode [ 697.181207][ T5384] bridge_slave_1: left promiscuous mode [ 697.197955][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.239749][ T5384] bridge_slave_0: left allmulticast mode [ 697.269807][ T5384] bridge_slave_0: left promiscuous mode [ 697.278207][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.437493][ T7233] netlink: 188 bytes leftover after parsing attributes in process `syz.4.223'. [ 697.446753][ T7233] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 700.077648][ T5384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.108317][ T5384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.126134][ T5384] bond0 (unregistering): Released all slaves [ 700.394573][ T5384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.410921][ T5384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.443340][ T5384] bond0 (unregistering): Released all slaves [ 700.699426][ T5384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.728940][ T5384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.762925][ T5384] bond0 (unregistering): Released all slaves [ 701.296665][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.788351][ T6977] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.824550][ T30] audit: type=1400 audit(1725808748.628:324): avc: denied { setopt } for pid=7238 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 702.127356][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.134615][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.196813][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.204202][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.431456][ T5384] hsr_slave_0: left promiscuous mode [ 702.466044][ T5384] hsr_slave_1: left promiscuous mode [ 702.491083][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.506140][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.537937][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.556232][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.640482][ T5384] hsr_slave_0: left promiscuous mode [ 702.687844][ T5384] hsr_slave_1: left promiscuous mode [ 702.733451][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.780167][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.839625][ T5384] hsr_slave_0: left promiscuous mode [ 702.892985][ T5384] hsr_slave_1: left promiscuous mode [ 702.915795][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.944553][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.148124][ T5384] veth1_macvtap: left promiscuous mode [ 703.164999][ T5384] veth0_macvtap: left promiscuous mode [ 703.187559][ T5384] veth1_vlan: left promiscuous mode [ 703.206683][ T5384] veth0_vlan: left promiscuous mode [ 703.232940][ T5384] veth1_vlan: left promiscuous mode [ 703.249238][ T5384] veth0_vlan: left promiscuous mode [ 703.268411][ T5384] veth0_macvtap: left promiscuous mode [ 703.282251][ T5384] veth1_vlan: left promiscuous mode [ 703.297830][ T5384] veth0_vlan: left promiscuous mode [ 706.454726][ T5384] team0 (unregistering): Port device team_slave_1 removed [ 706.653551][ T5384] team0 (unregistering): Port device team_slave_0 removed [ 708.857564][ T5384] team0 (unregistering): Port device team_slave_1 removed [ 708.969682][ T5384] team0 (unregistering): Port device team_slave_0 removed [ 711.366508][ T5384] team0 (unregistering): Port device team_slave_1 removed [ 711.613264][ T5384] team0 (unregistering): Port device team_slave_0 removed [ 711.755732][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 711.768723][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 711.779959][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 711.802644][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 711.831269][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 711.849015][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 713.521062][ T7023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 713.607137][ T7023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 713.755455][ T5281] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 713.900595][ T7023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 713.922800][ T54] Bluetooth: hci7: command tx timeout [ 713.940738][ T7023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 713.973452][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 713.994052][ T5281] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 714.057851][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.108472][ T5281] usb 5-1: config 0 descriptor?? [ 716.003778][ T54] Bluetooth: hci7: command tx timeout [ 716.236523][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 716.477658][ T5281] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 716.513315][ T5281] asix 5-1:0.0: probe with driver asix failed with error -71 [ 716.528428][ T5281] usb 5-1: USB disconnect, device number 4 [ 716.849262][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.028370][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.042497][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.050965][ T7261] bridge_slave_0: entered allmulticast mode [ 717.080864][ T7261] bridge_slave_0: entered promiscuous mode [ 717.163137][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.183295][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.193504][ T7261] bridge_slave_1: entered allmulticast mode [ 717.215806][ T7261] bridge_slave_1: entered promiscuous mode [ 717.545466][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.575944][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.234'. [ 717.774572][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.925640][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.082396][ T54] Bluetooth: hci7: command tx timeout [ 718.206061][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.213448][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.481417][ T7087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 718.545640][ T7087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 718.604713][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.612010][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.953660][ T7261] team0: Port device team_slave_0 added [ 718.961421][ T7087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 719.007202][ T7087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 719.201760][ T7261] team0: Port device team_slave_1 added [ 719.683326][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.711223][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.799899][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.056948][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.090307][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.130801][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.162486][ T54] Bluetooth: hci7: command tx timeout [ 720.528347][ T7049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 720.732817][ T7049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 720.942348][ T7049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 721.014145][ T7261] hsr_slave_0: entered promiscuous mode [ 721.047886][ T7261] hsr_slave_1: entered promiscuous mode [ 721.320695][ T7049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 721.998343][ T5384] bridge_slave_1: left allmulticast mode [ 722.012453][ T5384] bridge_slave_1: left promiscuous mode [ 722.065669][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.108754][ T5384] bridge_slave_0: left allmulticast mode [ 722.132210][ T5384] bridge_slave_0: left promiscuous mode [ 722.138215][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.513703][ T5926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 722.530625][ T5926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 722.548630][ T5926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 722.560109][ T5926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 722.570779][ T5926] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 722.578418][ T5926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.759809][ T5384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.787154][ T5384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.815520][ T5384] bond0 (unregistering): Released all slaves [ 724.698462][ T54] Bluetooth: hci4: command tx timeout [ 725.131878][ T5384] hsr_slave_0: left promiscuous mode [ 725.166939][ T5384] hsr_slave_1: left promiscuous mode [ 725.221981][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.392788][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.738967][ T30] audit: type=1400 audit(1725808772.568:325): avc: denied { create } for pid=7338 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 726.375422][ T5926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 726.386623][ T5926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 726.395759][ T5926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 726.404364][ T5926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 726.413774][ T5926] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 726.421297][ T5926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 726.722947][ T5926] Bluetooth: hci4: command tx timeout [ 726.975883][ T5384] team0 (unregistering): Port device team_slave_1 removed [ 727.185988][ T5384] team0 (unregistering): Port device team_slave_0 removed [ 728.572989][ T5926] Bluetooth: hci3: command tx timeout [ 728.811382][ T5926] Bluetooth: hci4: command tx timeout [ 731.262194][ T54] Bluetooth: hci3: command tx timeout [ 731.267724][ T54] Bluetooth: hci4: command tx timeout [ 731.807231][ T7374] netlink: 'syz.4.243': attribute type 20 has an invalid length. [ 731.873481][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 732.963974][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 732.974731][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 732.984814][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.010719][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.032859][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 733.042643][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.292150][ T54] Bluetooth: hci3: command tx timeout [ 733.468195][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 734.657428][ T7396] input: syz1 as /devices/virtual/input/input7 [ 735.142799][ T54] Bluetooth: hci2: command tx timeout [ 735.363010][ T54] Bluetooth: hci3: command tx timeout [ 735.516566][ T30] audit: type=1400 audit(1725808782.348:326): avc: denied { create } for pid=7400 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 736.163288][ T5311] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 736.290172][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.297952][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.307878][ T7326] bridge_slave_0: entered allmulticast mode [ 736.328040][ T7326] bridge_slave_0: entered promiscuous mode [ 736.339577][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.349661][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.357698][ T7326] bridge_slave_1: entered allmulticast mode [ 736.366479][ T5311] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 736.366585][ T7326] bridge_slave_1: entered promiscuous mode [ 736.382197][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.392233][ T7261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 736.425282][ T5311] usb 5-1: config 0 descriptor?? [ 736.465693][ T5311] cp210x 5-1:0.0: cp210x converter detected [ 736.585852][ T7261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 736.601595][ T7261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 736.629252][ T7261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 736.729791][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.760628][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.880253][ T5311] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 736.963616][ T5311] usb 5-1: cp210x converter now attached to ttyUSB0 [ 737.091436][ T7345] chnl_net:caif_netlink_parms(): no params data found [ 737.206044][ T54] Bluetooth: hci2: command tx timeout [ 737.254171][ T7326] team0: Port device team_slave_0 added [ 737.299716][ T8] usb 5-1: USB disconnect, device number 5 [ 737.326221][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 737.373420][ T8] cp210x 5-1:0.0: device disconnected [ 737.505848][ T7326] team0: Port device team_slave_1 added [ 737.720507][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.728232][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.755393][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.860772][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.869127][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.898877][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.141476][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.149252][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.157465][ T7345] bridge_slave_0: entered allmulticast mode [ 738.168602][ T7345] bridge_slave_0: entered promiscuous mode [ 738.195298][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.249'. [ 738.311347][ T7326] hsr_slave_0: entered promiscuous mode [ 738.319485][ T7326] hsr_slave_1: entered promiscuous mode [ 738.339266][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.350831][ T7326] Cannot create hsr debugfs directory [ 738.389279][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.397896][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.412176][ T7345] bridge_slave_1: entered allmulticast mode [ 738.430212][ T7345] bridge_slave_1: entered promiscuous mode [ 738.644671][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 738.684896][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.802937][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.237653][ T7345] team0: Port device team_slave_0 added [ 739.268636][ T7345] team0: Port device team_slave_1 added [ 739.282980][ T54] Bluetooth: hci2: command tx timeout [ 739.719896][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.737028][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.765599][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.798971][ T1121] bridge_slave_1: left allmulticast mode [ 739.808135][ T1121] bridge_slave_1: left promiscuous mode [ 739.814416][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.825230][ T1121] bridge_slave_0: left allmulticast mode [ 739.830971][ T1121] bridge_slave_0: left promiscuous mode [ 739.837249][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.853765][ T1121] bridge_slave_1: left allmulticast mode [ 739.859497][ T1121] bridge_slave_1: left promiscuous mode [ 739.867360][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.883848][ T1121] bridge_slave_0: left allmulticast mode [ 739.889575][ T1121] bridge_slave_0: left promiscuous mode [ 739.899077][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.836061][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.865220][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.889280][ T1121] bond0 (unregistering): Released all slaves [ 741.134462][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.152969][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.167053][ T1121] bond0 (unregistering): Released all slaves [ 741.366160][ T54] Bluetooth: hci2: command tx timeout [ 741.460536][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.492431][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.519466][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.606071][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.623319][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.630823][ T7382] bridge_slave_0: entered allmulticast mode [ 741.640581][ T7382] bridge_slave_0: entered promiscuous mode [ 741.664478][ T1121] hsr_slave_0: left promiscuous mode [ 741.671287][ T1121] hsr_slave_1: left promiscuous mode [ 741.678439][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.694627][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.731720][ T1121] hsr_slave_0: left promiscuous mode [ 741.743375][ T1121] hsr_slave_1: left promiscuous mode [ 741.782703][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.803804][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.480746][ T7471] kvm: kvm [7470]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfdf00000800 [ 742.494171][ T7471] kvm: kvm [7470]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x150000000000 [ 742.500811][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 742.505486][ T7471] kvm: kvm [7470]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x154500000800 [ 742.595534][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 743.387853][ T30] audit: type=1400 audit(1725808790.218:327): avc: denied { name_bind } for pid=7476 comm="syz.4.256" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 743.695033][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 743.765925][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 744.524690][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.531974][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.542506][ T7382] bridge_slave_1: entered allmulticast mode [ 744.550898][ T7382] bridge_slave_1: entered promiscuous mode [ 744.627552][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.745164][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.949676][ T7345] hsr_slave_0: entered promiscuous mode [ 744.959478][ T7345] hsr_slave_1: entered promiscuous mode [ 744.974229][ T7345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.981871][ T7345] Cannot create hsr debugfs directory [ 745.234233][ T7382] team0: Port device team_slave_0 added [ 745.289616][ T7382] team0: Port device team_slave_1 added [ 745.309639][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.656891][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.678925][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.720919][ T7382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.772516][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.779568][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.813777][ T7382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.092566][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.285155][ T7382] hsr_slave_0: entered promiscuous mode [ 746.295231][ T7382] hsr_slave_1: entered promiscuous mode [ 746.314744][ T7382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 746.331064][ T7382] Cannot create hsr debugfs directory [ 746.475328][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.482650][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.511279][ T7326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 746.537355][ T7326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 746.653923][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.661127][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.690578][ T7326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 746.809716][ T7326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 748.357075][ T7345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 748.378888][ T7345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 748.460221][ T7345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 748.529211][ T7345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 748.687826][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.831132][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.094618][ T1121] bridge_slave_1: left allmulticast mode [ 749.100514][ T1121] bridge_slave_1: left promiscuous mode [ 749.114598][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.163638][ T1121] bridge_slave_0: left allmulticast mode [ 749.178011][ T1121] bridge_slave_0: left promiscuous mode [ 749.185053][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.201170][ T1121] bridge_slave_1: left allmulticast mode [ 749.210148][ T1121] bridge_slave_1: left promiscuous mode [ 749.216309][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.229960][ T1121] bridge_slave_0: left allmulticast mode [ 749.242263][ T1121] bridge_slave_0: left promiscuous mode [ 749.248191][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.320786][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.339845][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.353336][ T1121] bond0 (unregistering): Released all slaves [ 750.377007][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.390852][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.414646][ T1121] bond0 (unregistering): Released all slaves [ 750.477568][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.604407][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.611713][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.699345][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.706664][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.081004][ T7261] veth0_vlan: entered promiscuous mode [ 751.144933][ T7261] veth1_vlan: entered promiscuous mode [ 751.261131][ T1121] hsr_slave_0: left promiscuous mode [ 751.281942][ T1121] hsr_slave_1: left promiscuous mode [ 751.298531][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.307554][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.321829][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.339769][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.367355][ T1121] hsr_slave_0: left promiscuous mode [ 751.375078][ T1121] hsr_slave_1: left promiscuous mode [ 751.381651][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.394040][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.424148][ T1121] veth1_macvtap: left promiscuous mode [ 751.429823][ T1121] veth0_macvtap: left promiscuous mode [ 751.437783][ T1121] veth1_vlan: left promiscuous mode [ 751.443649][ T1121] veth0_vlan: left promiscuous mode [ 752.288625][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 752.352308][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 753.368600][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 753.410052][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 753.778815][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.018972][ T7382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 754.051891][ T7382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 754.083424][ T7382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 754.102442][ T7382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 754.145166][ T7345] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.160856][ T7261] veth0_macvtap: entered promiscuous mode [ 754.176428][ T7261] veth1_macvtap: entered promiscuous mode [ 754.276122][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.330401][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.337766][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.361238][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.371997][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.388161][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.399398][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.413394][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.455721][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.463250][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.476795][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.487759][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.501776][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.512921][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.541512][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.576677][ T7261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.586820][ T7261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.596363][ T7261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.606465][ T7261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.984675][ T7326] veth0_vlan: entered promiscuous mode [ 755.087594][ T7326] veth1_vlan: entered promiscuous mode [ 755.156239][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.180916][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.383892][ T5390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.396628][ T5390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.436269][ T7326] veth0_macvtap: entered promiscuous mode [ 755.499506][ T7326] veth1_macvtap: entered promiscuous mode [ 755.580773][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.636775][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.704121][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.736848][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.744139][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.756495][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.771437][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.788898][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.799463][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.809542][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.820552][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.834055][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.851431][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.864502][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.879675][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.890898][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.901112][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.915780][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.929423][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.948323][ T7326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.958032][ T7326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.967604][ T7326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.977080][ T7326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.020058][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.027367][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.116082][ T5279] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 756.259201][ T7345] veth0_vlan: entered promiscuous mode [ 756.281046][ T5384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.300926][ T5384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.323264][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 756.358605][ T5279] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 756.403003][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.411088][ T5279] usb 4-1: Product: syz [ 756.445113][ T5279] usb 4-1: Manufacturer: syz [ 756.449939][ T5279] usb 4-1: SerialNumber: syz [ 756.485400][ T5279] usb 4-1: config 0 descriptor?? [ 756.508622][ T5279] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 756.556407][ T7345] veth1_vlan: entered promiscuous mode [ 756.593263][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.615708][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.869606][ T7345] veth0_macvtap: entered promiscuous mode [ 756.957075][ T7345] veth1_macvtap: entered promiscuous mode [ 757.082855][ T5279] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 757.113688][ T5279] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 757.137256][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.167517][ T5279] usb 4-1: USB disconnect, device number 2 [ 757.182311][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.242207][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.273805][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.302806][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.347510][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.363054][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.377588][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.410053][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.458037][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.503943][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.552171][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.602953][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.678421][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.707353][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.735256][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.764006][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.801378][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.918591][ T7345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.954757][ T7345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.989435][ T7345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.013407][ T30] audit: type=1400 audit(1725808804.818:328): avc: denied { unmount } for pid=7261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 758.030626][ T7345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.096328][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.103426][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.389636][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.443406][ T30] audit: type=1400 audit(1725808805.278:329): avc: denied { search } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.503997][ T7542] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.902464][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.920888][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.193146][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.244636][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.429958][ T7382] veth0_vlan: entered promiscuous mode [ 759.668480][ T7382] veth1_vlan: entered promiscuous mode [ 759.834469][ T30] audit: type=1400 audit(1725808806.668:330): avc: denied { create } for pid=7565 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 760.071951][ T30] audit: type=1400 audit(1725808806.858:331): avc: denied { append } for pid=7565 comm="syz.2.79" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 760.293834][ T7382] veth0_macvtap: entered promiscuous mode [ 760.391144][ T7382] veth1_macvtap: entered promiscuous mode [ 760.547733][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.555995][ T30] audit: type=1400 audit(1725808807.378:332): avc: denied { unmount } for pid=7261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 760.589359][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.610083][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.667859][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.694579][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.706025][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.717986][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.730943][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.746019][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.767007][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.829814][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.919988][ T30] audit: type=1400 audit(1725808807.748:333): avc: denied { open } for pid=7580 comm="syz.3.273" path="/dev/ptyqa" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 760.946176][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.991916][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.036540][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.071794][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.106631][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.132224][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.162482][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.183480][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.196091][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.210807][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.228290][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.329032][ T7382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.365039][ T7382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.401112][ T7382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.442405][ T7382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.707061][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.871545][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.886940][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.902352][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.916890][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.932461][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 761.940271][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 762.093339][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.142247][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.477596][ T5384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.524330][ T5384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.368256][ T7622] netlink: 'syz.1.199': attribute type 4 has an invalid length. [ 764.015823][ T5238] Bluetooth: hci0: command tx timeout [ 764.621108][ T7597] chnl_net:caif_netlink_parms(): no params data found [ 764.823257][ T30] audit: type=1400 audit(1725808811.658:334): avc: denied { connect } for pid=7642 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 764.902300][ T30] audit: type=1400 audit(1725808811.678:335): avc: denied { write } for pid=7642 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 765.246542][ T30] audit: type=1400 audit(1725808812.078:336): avc: denied { read } for pid=7652 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 765.550513][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.589435][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.632731][ T7597] bridge_slave_0: entered allmulticast mode [ 765.659759][ T7597] bridge_slave_0: entered promiscuous mode [ 765.711172][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.745287][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.778189][ T7597] bridge_slave_1: entered allmulticast mode [ 765.817870][ T7597] bridge_slave_1: entered promiscuous mode [ 766.082795][ T5238] Bluetooth: hci0: command tx timeout [ 766.099876][ T30] audit: type=1400 audit(1725808812.918:337): avc: denied { connect } for pid=7661 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 766.344915][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.452317][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.775369][ T30] audit: type=1400 audit(1725808813.598:338): avc: denied { ioctl } for pid=7682 comm="syz.2.297" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 766.889861][ T7597] team0: Port device team_slave_0 added [ 766.944932][ T7597] team0: Port device team_slave_1 added [ 767.268811][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.301663][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.387574][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.474259][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.503976][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.530114][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.643832][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.974881][ T30] audit: type=1400 audit(1725808814.808:339): avc: denied { create } for pid=7710 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 768.067365][ T30] audit: type=1400 audit(1725808814.868:340): avc: denied { write } for pid=7710 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 768.139123][ T7716] netlink: 'syz.2.307': attribute type 20 has an invalid length. [ 768.151814][ T7597] hsr_slave_0: entered promiscuous mode [ 768.157548][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 768.171963][ T5238] Bluetooth: hci0: command tx timeout [ 768.211243][ T7597] hsr_slave_1: entered promiscuous mode [ 768.229230][ T7597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.246818][ T7597] Cannot create hsr debugfs directory [ 769.545755][ T7597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.957697][ T7597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.243817][ T5238] Bluetooth: hci0: command tx timeout [ 770.248156][ T7597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.289561][ T7757] serio: Serial port pts0 [ 770.504938][ T7597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.371247][ T7597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 771.461114][ T7597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 771.556809][ T7597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 771.653551][ T7597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 771.790576][ T30] audit: type=1400 audit(1725808818.618:341): avc: denied { setattr } for pid=7778 comm="syz.1.330" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 772.486575][ T7785] serio: Serial port pts0 [ 772.522528][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.726676][ T7597] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.819001][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.826730][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.854108][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.861456][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.017085][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.337130][ T7597] veth0_vlan: entered promiscuous mode [ 775.451740][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.520880][ T7597] veth1_vlan: entered promiscuous mode [ 775.958131][ T7848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 776.122928][ T7597] veth0_macvtap: entered promiscuous mode [ 776.147203][ T7597] veth1_macvtap: entered promiscuous mode [ 776.433102][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.524544][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.559331][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.592975][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.624867][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.658952][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.702448][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.742398][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.771028][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.782884][ T5311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 776.791336][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.814838][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.835424][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.850410][ T30] audit: type=1326 audit(1725808823.678:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78ff7cef9 code=0x7ffc0000 [ 776.855038][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.896742][ T30] audit: type=1326 audit(1725808823.718:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa78ff7cef9 code=0x7ffc0000 [ 776.967697][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.992265][ T5311] usb 4-1: Using ep0 maxpacket: 8 [ 776.997697][ T30] audit: type=1326 audit(1725808823.718:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78ff7cef9 code=0x7ffc0000 [ 777.004224][ T5311] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 777.024637][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.046317][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.057704][ T30] audit: type=1326 audit(1725808823.728:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fa78ff7cef9 code=0x7ffc0000 [ 777.093124][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.102277][ T5311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.131166][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.160057][ T30] audit: type=1326 audit(1725808823.728:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78ff7cef9 code=0x7ffc0000 [ 777.161862][ T5311] usb 4-1: Product: syz [ 777.188253][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.202011][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.214832][ T30] audit: type=1326 audit(1725808823.778:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78ff7cef9 code=0x7ffc0000 [ 777.241638][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.252532][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.269294][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.280508][ T5311] usb 4-1: Manufacturer: syz [ 777.280546][ T5311] usb 4-1: SerialNumber: syz [ 777.307230][ T5311] usb 4-1: config 0 descriptor?? [ 777.328499][ T5311] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 777.330702][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.360274][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.403928][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.465095][ T7597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.493906][ T7597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.520575][ T7597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.570751][ T7597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.765226][ T5311] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 777.814755][ T5311] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 777.898955][ T5311] usb 4-1: USB disconnect, device number 3 [ 778.106561][ T5390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.125022][ T5390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.326257][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.382240][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.673575][ T30] audit: type=1326 audit(1725808826.468:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.3.371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ffc97cef9 code=0x0 [ 780.042336][ T5311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 780.269647][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.272634][ T5311] usb 1-1: Using ep0 maxpacket: 8 [ 780.308402][ T5311] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 780.332006][ T5311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.372100][ T5311] usb 1-1: Product: syz [ 780.379541][ T5311] usb 1-1: Manufacturer: syz [ 780.392513][ T5311] usb 1-1: SerialNumber: syz [ 780.459124][ T5311] usb 1-1: config 0 descriptor?? [ 780.515725][ T5311] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 780.954107][ T7912] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.038895][ T5311] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 781.093550][ T5311] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 781.108923][ T7911] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 781.148492][ T5311] usb 1-1: USB disconnect, device number 2 [ 781.172259][ T7911] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 781.630568][ T30] audit: type=1400 audit(1725808828.458:349): avc: denied { read } for pid=7922 comm="syz.1.384" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 781.698583][ T30] audit: type=1400 audit(1725808828.458:350): avc: denied { open } for pid=7922 comm="syz.1.384" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 781.787415][ T30] audit: type=1400 audit(1725808828.468:351): avc: denied { ioctl } for pid=7922 comm="syz.1.384" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 782.013148][ T30] audit: type=1400 audit(1725808828.848:352): avc: denied { connect } for pid=7927 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 783.211775][ T7941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.389'. [ 783.285842][ T7941] syz.0.389[7941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.286104][ T7941] syz.0.389[7941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.377356][ T7948] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 783.510175][ T30] audit: type=1400 audit(1725808830.338:353): avc: denied { name_connect } for pid=7949 comm="syz.3.392" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 783.555680][ T7948] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 785.536544][ T30] audit: type=1400 audit(1725808832.368:354): avc: denied { watch watch_reads } for pid=7974 comm="syz.4.400" path="/8/control" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 787.809497][ T30] audit: type=1326 audit(1725808834.638:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 787.969861][ T30] audit: type=1326 audit(1725808834.638:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 788.051861][ T30] audit: type=1326 audit(1725808834.638:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 788.155876][ T30] audit: type=1326 audit(1725808834.638:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 788.273905][ T30] audit: type=1326 audit(1725808834.638:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 788.416575][ T30] audit: type=1326 audit(1725808834.638:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 788.508209][ T30] audit: type=1326 audit(1725808834.678:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 788.606249][ T30] audit: type=1326 audit(1725808834.678:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 788.709241][ T30] audit: type=1326 audit(1725808834.698:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 793.009089][ T30] audit: type=1326 audit(1725808834.708:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 793.145293][ T30] audit: type=1326 audit(1725808834.708:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 793.287573][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.414'. [ 793.324109][ T30] audit: type=1326 audit(1725808834.708:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 793.332748][ T8017] openvswitch: netlink: Flow key attr not present in new flow. [ 793.359169][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 793.422282][ T30] audit: type=1326 audit(1725808834.748:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed7cef9 code=0x7ffc0000 [ 793.534874][ T30] audit: type=1400 audit(1725808834.878:368): avc: denied { create } for pid=8001 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 794.393068][ T30] audit: type=1326 audit(1725808835.398:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffc97cef9 code=0x7ffc0000 [ 794.517831][ T30] audit: type=1326 audit(1725808835.398:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffc97cef9 code=0x7ffc0000 [ 794.844384][ T30] audit: type=1326 audit(1725808835.438:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffc97cef9 code=0x7ffc0000 [ 794.868170][ T30] audit: type=1326 audit(1725808835.438:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffc97cef9 code=0x7ffc0000 [ 794.904932][ T30] audit: type=1326 audit(1725808835.438:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffc97cef9 code=0x7ffc0000 [ 795.166730][ T8044] syz.2.425 uses obsolete (PF_INET,SOCK_PACKET) [ 795.619276][ T8049] warning: `syz.2.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 796.282262][ T6280] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 797.182252][ T6280] usb 2-1: Using ep0 maxpacket: 8 [ 797.217074][ T6280] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 797.239551][ T6280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.290819][ T6280] usb 2-1: Product: syz [ 797.295347][ T6280] usb 2-1: Manufacturer: syz [ 797.300093][ T6280] usb 2-1: SerialNumber: syz [ 797.312140][ T5379] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 797.333819][ T6280] usb 2-1: config 0 descriptor?? [ 797.359749][ T6280] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 797.822134][ T5379] usb 3-1: Using ep0 maxpacket: 32 [ 797.965579][ T5379] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 798.013149][ T5379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.032994][ T6280] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 798.042883][ T5379] usb 3-1: Product: syz [ 798.047194][ T5379] usb 3-1: Manufacturer: syz [ 798.051847][ T5379] usb 3-1: SerialNumber: syz [ 798.064199][ T6280] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 798.098350][ T5379] usb 3-1: config 0 descriptor?? [ 798.111604][ T6280] usb 2-1: USB disconnect, device number 2 [ 798.151283][ T5379] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 798.555538][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 798.555564][ T30] audit: type=1400 audit(1725808845.388:382): avc: denied { read write } for pid=8070 comm="syz.4.436" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 798.701934][ T30] audit: type=1400 audit(1725808845.428:383): avc: denied { open } for pid=8070 comm="syz.4.436" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 799.133072][ T5379] gspca_stk1135: reg_w 0x3 err -110 [ 799.139399][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.176782][ T5379] gspca_stk1135: Sensor write failed [ 799.187623][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.238683][ T5379] gspca_stk1135: Sensor write failed [ 799.267001][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.291486][ T5379] gspca_stk1135: Sensor read failed [ 799.327261][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.352434][ T5379] gspca_stk1135: Sensor read failed [ 799.385899][ T5379] gspca_stk1135: Detected sensor type unknown (0x0) [ 799.420352][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.441926][ T5379] gspca_stk1135: Sensor read failed [ 799.457872][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.484693][ T5379] gspca_stk1135: Sensor read failed [ 799.520864][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.547161][ T5379] gspca_stk1135: Sensor write failed [ 799.569103][ T5379] gspca_stk1135: serial bus timeout: status=0x00 [ 799.592101][ T5379] gspca_stk1135: Sensor write failed [ 799.623636][ T5379] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 801.394394][ T5379] usb 3-1: USB disconnect, device number 3 [ 802.232622][ T5311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 802.542199][ T5311] usb 1-1: Using ep0 maxpacket: 8 [ 802.566780][ T5311] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 802.587066][ T5311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.599987][ T5311] usb 1-1: Product: syz [ 802.604436][ T5311] usb 1-1: Manufacturer: syz [ 802.610135][ T5311] usb 1-1: SerialNumber: syz [ 802.628358][ T5311] usb 1-1: config 0 descriptor?? [ 802.645406][ T5311] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 803.110289][ T5311] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 803.141264][ T5311] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 803.182951][ T5311] usb 1-1: USB disconnect, device number 3 [ 807.726664][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 808.921204][ T8183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 813.462578][ T8226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 816.913417][ T8256] netlink: 'syz.3.491': attribute type 20 has an invalid length. [ 816.951837][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 818.022473][ T30] audit: type=1400 audit(1725808864.848:384): avc: denied { getattr } for pid=8265 comm="syz.3.496" path="net:[4026532848]" dev="nsfs" ino=4026532848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 819.531015][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.692993][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.646555][ T8309] netlink: 'syz.1.506': attribute type 20 has an invalid length. [ 823.673660][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 823.752314][ T5379] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 823.952347][ T5379] usb 1-1: Using ep0 maxpacket: 8 [ 823.985680][ T5379] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 824.011342][ T5379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.037161][ T5379] usb 1-1: Product: syz [ 824.047562][ T5379] usb 1-1: Manufacturer: syz [ 824.057949][ T5379] usb 1-1: SerialNumber: syz [ 824.080154][ T5379] usb 1-1: config 0 descriptor?? [ 824.091090][ T30] audit: type=1400 audit(1725808870.918:385): avc: denied { write } for pid=8311 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 824.117782][ T5379] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 824.536427][ T5379] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 824.556932][ T5379] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 824.579486][ T5379] usb 1-1: USB disconnect, device number 4 [ 828.832258][ T30] audit: type=1400 audit(1725808875.628:386): avc: denied { setopt } for pid=8349 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 831.237533][ T8365] usb usb7: usbfs: process 8365 (syz.4.520) did not claim interface 0 before use [ 831.716021][ T5394] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 831.954170][ T5394] usb 3-1: Using ep0 maxpacket: 8 [ 832.452928][ T5394] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 832.492208][ T5394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.505245][ T5394] usb 3-1: Product: syz [ 832.515207][ T5394] usb 3-1: Manufacturer: syz [ 832.542585][ T5394] usb 3-1: SerialNumber: syz [ 832.590872][ T5394] usb 3-1: config 0 descriptor?? [ 832.645865][ T5394] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 833.224070][ T5394] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 833.244659][ T5394] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 833.272761][ T5394] usb 3-1: USB disconnect, device number 4 [ 835.812193][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 836.357542][ T46] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 836.400891][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.446043][ T46] usb 4-1: config 0 descriptor?? [ 837.092777][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 837.181218][ T46] cp210x 4-1:0.0: cp210x converter detected [ 837.997582][ T46] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 838.913525][ T8428] netlink: 'syz.4.540': attribute type 20 has an invalid length. [ 838.968705][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 838.972858][ T46] usb 4-1: cp210x converter now attached to ttyUSB0 [ 839.047710][ T46] usb 4-1: USB disconnect, device number 4 [ 839.073896][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 839.101978][ T46] cp210x 4-1:0.0: device disconnected [ 839.751545][ T6280] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 841.620580][ T6280] usb 2-1: Using ep0 maxpacket: 8 [ 842.564643][ T6280] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 842.574131][ T6280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.736646][ T8452] bridge_slave_1: left allmulticast mode [ 842.742628][ T8452] bridge_slave_1: left promiscuous mode [ 842.748583][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.484013][ T6280] usb 2-1: config 0 descriptor?? [ 843.721089][ T6280] usb 2-1: can't set config #0, error -71 [ 843.729692][ T6280] usb 2-1: USB disconnect, device number 3 [ 847.975579][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 848.460946][ T8488] netlink: 'syz.4.555': attribute type 20 has an invalid length. [ 848.485343][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 848.869969][ T8496] tipc: Enabling of bearer rejected, failed to enable media [ 849.052260][ T5281] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 849.283002][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 849.307119][ T5281] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 849.334452][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.356467][ T5281] usb 1-1: Product: syz [ 849.364229][ T5281] usb 1-1: Manufacturer: syz [ 849.379923][ T5281] usb 1-1: SerialNumber: syz [ 849.397568][ T5281] usb 1-1: config 0 descriptor?? [ 849.421194][ T5281] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 849.872401][ T5281] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 849.985977][ T5281] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 850.023825][ T5281] usb 1-1: USB disconnect, device number 5 [ 854.604458][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 865.608181][ T5926] Bluetooth: hci2: command tx timeout [ 975.621981][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 975.629007][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8490/1:b..l [ 975.637748][ C1] rcu: (detected by 1, t=10503 jiffies, g=77541, q=321 ncpus=2) [ 975.645600][ C1] task:syz.1.557 state:R running task stack:26544 pid:8490 tgid:8478 ppid:7382 flags:0x00004002 [ 975.658785][ C1] Call Trace: [ 975.662204][ C1] [ 975.665186][ C1] __schedule+0xe37/0x5490 [ 975.669780][ C1] ? find_held_lock+0x2d/0x110 [ 975.674634][ C1] ? __pfx___schedule+0x10/0x10 [ 975.679815][ C1] ? hlock_class+0x4e/0x130 [ 975.684384][ C1] ? mark_lock+0xb5/0xc60 [ 975.688782][ C1] ? hlock_class+0x4e/0x130 [ 975.693434][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 975.698262][ C1] preempt_schedule_irq+0x51/0x90 [ 975.703358][ C1] irqentry_exit+0x36/0x90 [ 975.707845][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 975.714093][ C1] RIP: 0010:kasan_check_range+0x105/0x1a0 [ 975.719875][ C1] Code: 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 a1 ea ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 41 80 38 00 74 f2 eb b2 41 bc 08 00 00 00 [ 975.739734][ C1] RSP: 0018:ffffc9000ddcef38 EFLAGS: 00000246 [ 975.746035][ C1] RAX: fffff52001bb9e06 RBX: fffff52001bb9e07 RCX: ffffffff813d12e6 [ 975.754143][ C1] RDX: fffff52001bb9e07 RSI: 0000000000000060 RDI: ffffc9000ddcefd8 [ 975.762163][ C1] RBP: fffff52001bb9dfb R08: 0000000000000001 R09: fffff52001bb9e06 [ 975.770210][ C1] R10: ffffc9000ddcf037 R11: 0000000000000000 R12: 0000000000000000 [ 975.778225][ C1] R13: 0000000000000000 R14: ffffc9000ddcf000 R15: ffff888060cc8000 [ 975.786355][ C1] ? __unwind_start+0x36/0x880 [ 975.791279][ C1] __asan_memset+0x23/0x50 [ 975.795764][ C1] __unwind_start+0x36/0x880 [ 975.800417][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 975.806647][ C1] arch_stack_walk+0xb2/0x170 [ 975.811577][ C1] stack_trace_save+0x95/0xd0 [ 975.816315][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 975.821762][ C1] save_stack+0x162/0x1f0 [ 975.826156][ C1] ? __pfx_save_stack+0x10/0x10 [ 975.831090][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 975.836210][ C1] __reset_page_owner+0x8d/0x400 [ 975.841230][ C1] free_unref_folios+0x9e9/0x1390 [ 975.846316][ C1] ? perf_trace_mm_lru_activate+0x420/0x460 [ 975.852385][ C1] folios_put_refs+0x560/0x760 [ 975.857212][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 975.862561][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 975.868693][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 975.875184][ C1] shmem_undo_range+0x5a1/0x1160 [ 975.880206][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 975.885644][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 975.890683][ C1] ? mark_lock+0xb5/0xc60 [ 975.895082][ C1] ? hlock_class+0x4e/0x130 [ 975.899729][ C1] ? mark_lock+0xb5/0xc60 [ 975.904247][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 975.909510][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 975.914856][ C1] ? hlock_class+0x4e/0x130 [ 975.919428][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 975.924522][ C1] ? percpu_counter_add_batch+0xb5/0x1e0 [ 975.930221][ C1] shmem_evict_inode+0x3a3/0xba0 [ 975.935351][ C1] ? find_held_lock+0x2d/0x110 [ 975.940180][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 975.945714][ C1] ? evict+0x361/0x8c0 [ 975.949934][ C1] ? __pfx_lock_release+0x10/0x10 [ 975.955022][ C1] ? __pfx_wake_bit_function+0x10/0x10 [ 975.960551][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 975.966168][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 975.971696][ C1] evict+0x398/0x8c0 [ 975.975658][ C1] ? __pfx_evict+0x10/0x10 [ 975.980131][ C1] ? __pfx_lock_release+0x10/0x10 [ 975.985216][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 975.990657][ C1] iput.part.0+0x5a8/0x7f0 [ 975.995132][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 976.000911][ C1] iput+0x5c/0x80 [ 976.004613][ C1] dentry_unlink_inode+0x29c/0x480 [ 976.009814][ C1] __dentry_kill+0x1d0/0x600 [ 976.014656][ C1] dput.part.0+0x4b1/0x9b0 [ 976.019169][ C1] dput+0x1f/0x30 [ 976.022882][ C1] __fput+0x54e/0xbb0 [ 976.026946][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.032219][ C1] task_work_run+0x14e/0x250 [ 976.036887][ C1] ? __pfx_task_work_run+0x10/0x10 [ 976.042074][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 976.047366][ C1] do_exit+0xaa3/0x2bb0 [ 976.051606][ C1] ? get_signal+0x8f2/0x2770 [ 976.056268][ C1] ? __pfx_do_exit+0x10/0x10 [ 976.060937][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 976.066033][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 976.071488][ C1] do_group_exit+0xd3/0x2a0 [ 976.076169][ C1] get_signal+0x25fb/0x2770 [ 976.080850][ C1] ? __pfx_get_signal+0x10/0x10 [ 976.085821][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 976.091499][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 976.097756][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 976.103670][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 976.109491][ C1] do_syscall_64+0xda/0x250 [ 976.114258][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.120224][ C1] RIP: 0033:0x7fafbf17cef9 [ 976.124693][ C1] RSP: 002b:00007fafbfec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 976.133279][ C1] RAX: 0000000000010106 RBX: 00007fafbf336058 RCX: 00007fafbf17cef9 [ 976.141317][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 976.149346][ C1] RBP: 00007fafbf1ef046 R08: 0000000000000000 R09: 0000000000000000 [ 976.157390][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 976.165420][ C1] R13: 0000000000000000 R14: 00007fafbf336058 R15: 00007ffc062b5858 [ 976.173488][ C1] [ 976.176649][ C1] rcu: rcu_preempt kthread starved for 9356 jiffies! g77541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 976.187815][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 976.197843][ C1] rcu: RCU grace-period kthread stack dump: [ 976.203780][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 976.215695][ C1] Call Trace: [ 976.219024][ C1] [ 976.221995][ C1] __schedule+0xe37/0x5490 [ 976.226474][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 976.231775][ C1] ? __pfx___schedule+0x10/0x10 [ 976.236701][ C1] ? schedule+0x298/0x350 [ 976.241096][ C1] ? __pfx_lock_release+0x10/0x10 [ 976.246199][ C1] ? __pfx___mod_timer+0x10/0x10 [ 976.251307][ C1] ? lock_acquire+0x1b1/0x560 [ 976.256064][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 976.261604][ C1] schedule+0xe7/0x350 [ 976.265748][ C1] schedule_timeout+0x136/0x2a0 [ 976.270694][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 976.276130][ C1] ? __pfx_process_timeout+0x10/0x10 [ 976.281483][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 976.287361][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 976.292946][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 976.297782][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 976.303127][ C1] ? rcu_gp_init+0xc82/0x1630 [ 976.307869][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 976.313318][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 976.319193][ C1] rcu_gp_kthread+0x271/0x380 [ 976.323935][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 976.329199][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 976.334472][ C1] ? __kthread_parkme+0x148/0x220 [ 976.339585][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 976.344844][ C1] kthread+0x2c1/0x3a0 [ 976.348965][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.354231][ C1] ? __pfx_kthread+0x10/0x10 [ 976.358884][ C1] ret_from_fork+0x45/0x80 [ 976.363376][ C1] ? __pfx_kthread+0x10/0x10 [ 976.368024][ C1] ret_from_fork_asm+0x1a/0x30 [ 976.372875][ C1] [ 976.375934][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 976.382296][ C1] Sending NMI from CPU 1 to CPUs 0: [ 976.387566][ C0] NMI backtrace for cpu 0 [ 976.387588][ C0] CPU: 0 UID: 0 PID: 8515 Comm: syz.0.565 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 976.387621][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 976.387637][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x8/0x20 [ 976.387687][ C0] Code: bf 02 00 00 00 e9 18 ff ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 04 00 00 00 e9 ea fe ff ff 66 2e 0f 1f 84 00 00 00 [ 976.387713][ C0] RSP: 0018:ffffc9000df4f800 EFLAGS: 00000006 [ 976.387739][ C0] RAX: 00000000000a4001 RBX: ffffc9000df4f888 RCX: ffffffff813cf13d [ 976.387758][ C0] RDX: 0000000000040000 RSI: 00000000000a4000 RDI: 000000000000757e [ 976.387775][ C0] RBP: 0000000000000001 R08: 0000000000000006 R09: ffffffff81757e11 [ 976.387792][ C0] R10: ffffffff8b400000 R11: 0000000000000000 R12: ffffffff81757e11 [ 976.387809][ C0] R13: 000000000000757e R14: 00000000000a4000 R15: ffffc9000df4f8bd [ 976.387826][ C0] FS: 00007fa790e406c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 976.387853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.387872][ C0] CR2: 00007f707fb91f40 CR3: 0000000059c48000 CR4: 00000000003506f0 [ 976.387889][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 976.387906][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 976.387922][ C0] Call Trace: [ 976.387930][ C0] [ 976.387939][ C0] ? show_regs+0x8c/0xa0 [ 976.387980][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 976.388020][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 976.388058][ C0] ? nmi_handle+0x1a9/0x5c0 [ 976.388083][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 976.388127][ C0] ? default_do_nmi+0x6a/0x160 [ 976.388156][ C0] ? exc_nmi+0x170/0x1e0 [ 976.388183][ C0] ? end_repeat_nmi+0xf/0x53 [ 976.388212][ C0] ? syscall_trace_enter+0x1b1/0x240 [ 976.388241][ C0] ? syscall_trace_enter+0x1b1/0x240 [ 976.388274][ C0] ? unwind_next_frame+0x23d/0x23a0 [ 976.388301][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 976.388344][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 976.388388][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 976.388431][ C0] [ 976.388439][ C0] [ 976.388447][ C0] unwind_next_frame+0x23d/0x23a0 [ 976.388475][ C0] ? syscall_trace_enter+0x1b2/0x240 [ 976.388505][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 976.388541][ C0] arch_stack_walk+0x100/0x170 [ 976.388574][ C0] ? syscall_trace_enter+0x1b2/0x240 [ 976.388605][ C0] stack_trace_save+0x95/0xd0 [ 976.388638][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 976.388677][ C0] kasan_save_stack+0x33/0x60 [ 976.388716][ C0] ? kasan_save_stack+0x33/0x60 [ 976.388760][ C0] ? kasan_save_track+0x14/0x30 [ 976.388797][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 976.388837][ C0] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 976.388878][ C0] ? __sigqueue_alloc+0x244/0x6b0 [ 976.388914][ C0] ? __send_signal_locked+0x74b/0x11c0 [ 976.388954][ C0] ? group_send_sig_info+0x2aa/0x300 [ 976.388985][ C0] ? bpf_send_signal_common+0x2e8/0x3a0 [ 976.389018][ C0] ? bpf_send_signal+0x19/0x30 [ 976.389049][ C0] ? bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 976.389070][ C0] ? bpf_trace_run2+0x231/0x590 [ 976.389104][ C0] ? syscall_trace_enter+0x1b2/0x240 [ 976.389157][ C0] kasan_save_track+0x14/0x30 [ 976.389196][ C0] __kasan_slab_alloc+0x89/0x90 [ 976.389238][ C0] kmem_cache_alloc_noprof+0x121/0x2f0 [ 976.389280][ C0] ? __sigqueue_alloc+0x244/0x6b0 [ 976.389320][ C0] __sigqueue_alloc+0x244/0x6b0 [ 976.389360][ C0] __send_signal_locked+0x74b/0x11c0 [ 976.389407][ C0] group_send_sig_info+0x2aa/0x300 [ 976.389440][ C0] ? __pfx_group_send_sig_info+0x10/0x10 [ 976.389473][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 976.389517][ C0] bpf_send_signal_common+0x2e8/0x3a0 [ 976.389554][ C0] bpf_send_signal+0x19/0x30 [ 976.389587][ C0] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 976.389608][ C0] bpf_trace_run2+0x231/0x590 [ 976.389644][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 976.389683][ C0] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 976.389723][ C0] syscall_trace_enter+0x1b2/0x240 [ 976.389774][ C0] do_syscall_64+0x1ee/0x250 [ 976.389815][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.389843][ C0] RIP: 0033:0x7fa78ff18859 [ 976.389863][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 976.389887][ C0] RSP: 002b:00007fa790e3fb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 976.389911][ C0] RAX: ffffffffffffffda RBX: 00007fa790135f88 RCX: 00007fa78ff18859 [ 976.389930][ C0] RDX: 00007fa790e3fb40 RSI: 00007fa790e3fc70 RDI: 0000000000000011 [ 976.389948][ C0] RBP: 00007fa790135f80 R08: 0000000000000000 R09: 0000000000000000 [ 976.389966][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa790135f8c [ 976.389983][ C0] R13: 0000000000000000 R14: 00007fff9f44baa0 R15: 00007fff9f44bb88 [ 976.390010][ C0] [ 976.602253][ T31] INFO: task syz.4.262:7502 blocked for more than 207 seconds.