last executing test programs: 57.164426915s ago: executing program 4 (id=756): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x8000000000000000, 0x0, 0x2]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.169033882s ago: executing program 4 (id=760): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) 53.848209907s ago: executing program 4 (id=764): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x40}}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 50.081023991s ago: executing program 4 (id=775): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 48.944001534s ago: executing program 4 (id=779): creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000540)={0x0, {}, 0x0, {}, 0x8001, 0x1, 0x3, 0x18, "5361b2a8ea45c7b73e237cb291f2f74a5f64db69cff4c756339051e17e6421ae3d10a8df55356863ecbb732d9491331068d0b38d4aed4876e63e6c8d2c90d43b", "1c93171ad47fae62c5f0d7b52aa168e7153826f9b5b81608c3f8e8d11ff5013f", [0x3, 0xde95]}) 44.977258982s ago: executing program 4 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x8208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r4, 0x0) 43.997099319s ago: executing program 0 (id=792): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) 42.824185415s ago: executing program 0 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="13005b"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) 41.479473695s ago: executing program 0 (id=796): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000008c670000000000000000000001", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000080)={0x1f, @none}, 0x8) socket(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10ffd) 39.695992241s ago: executing program 0 (id=799): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) pipe2$9p(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(r5) 37.014624855s ago: executing program 0 (id=805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r1, r5}) sendmsg$rds(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) 35.965244986s ago: executing program 0 (id=807): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 9.372100321s ago: executing program 1 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 8.5648989s ago: executing program 1 (id=849): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000740)="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", 0x5bb}], 0x1, 0xfffffffe, 0x0) 8.416108492s ago: executing program 1 (id=850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000804) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) prctl$PR_GET_KEEPCAPS(0x7) syz_usb_connect(0x0, 0xfffffffffffffffb, 0x0, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x10010, r1, 0x38179000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'pim6reg\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 6.827438826s ago: executing program 1 (id=851): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 6.694971388s ago: executing program 2 (id=853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x6040600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) 5.556230345s ago: executing program 2 (id=854): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x0) 5.487032163s ago: executing program 3 (id=855): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) fstat(0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000090000000a0000", @ANYRES32, @ANYBLOB="000000000000000000409448030000000000000000000000000000000000f9bd3123841baa60d7d923996733a16082230b268a1f6f9e040d1d23f96639bdfddf7405559e41cd15be225368b0756f6b4a8507360f5d3ee0bc788967af451ce31fc000a966b17a6dac8c1892d370d68cb3197f17f9a9019e2a50800c33e8e4a010da577582b2b75a0efbb0ff9396f631aab172581da0ea4b30fd6c46c63787dade8f64dba4765e7aee6520a1f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 4.840375927s ago: executing program 3 (id=856): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000008c670000000000000000000001", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000080)={0x1f, @none}, 0x8) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10ffd) 2.900745525s ago: executing program 3 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.834917995s ago: executing program 3 (id=858): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000740)="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", 0x5bb}], 0x1, 0xfffffffe, 0x0) 2.420020668s ago: executing program 1 (id=859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x29, 0x4, 0xfa) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x5, 0x10a, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmsg$unix(r1, &(0x7f00000008c0)={&(0x7f0000000b00), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000b80)=""/239, 0xef}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/241, 0xf1}, {&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/86, 0x56}, {&(0x7f0000000e80)=""/104, 0x68}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000780)=""/42, 0x2a}, {&(0x7f0000000f00)=""/74, 0x4a}], 0xa, &(0x7f0000003080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x10000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eded8e4a093f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x10) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) 2.172426563s ago: executing program 3 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000804) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) prctl$PR_GET_KEEPCAPS(0x7) syz_usb_connect(0x0, 0xfffffffffffffffb, 0x0, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x10010, r1, 0x38179000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095004d000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'pim6reg\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 1.936857444s ago: executing program 1 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x4b40, 0xfffffffffffffffc) 1.805573144s ago: executing program 2 (id=862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x6040600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) 728.076585ms ago: executing program 2 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000050000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 478.049922ms ago: executing program 2 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 108.624198ms ago: executing program 3 (id=865): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x80003, 0x6b) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/34, 0x22, 0x8) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffff3, 0x0, 0x6, 0x4, 0x3]}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x210}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffd}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 2 (id=866): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="52e345fa394419a856287739216e84ff4ebbce6fb7333b4eaa8fde73d8652c933b9c3f584c358f46b5cc3331f864c90aa355ac0a883cfd8cc6db453ffd4403fc8c420ddfe73011343bddd02ef41d7dad419aa61dbd3f25f1cfebfdcc4113acd76ca08108281bbd0998e84a016b3aa0a404339f32ebc1e1a8", 0x78}, {&(0x7f00000003c0)="e8f1fefcdd97b70ccb22b31d99ce6f7e4d8127a71275fa1ad6e0d71f2c5321af40176a22cefe5661e4e82a802dd21d22084e3b767edf6608c5e684bc49ae75c5a3c01e96ad4a0b524ca75c8c932482207a6ee20da93cd0501a5ee3765165fa0d3a739c2cb596079c0bb707d18fa590e62d50b5abb813506c97f579220ad674f10d1a5cd8fee818ec563289a5f80031f83f067bbb99251970e68ab9232cc8f6e5af21c0e00968f77112abfb797acc1f", 0xaf}], 0x2}}], 0x1, 0x20000810) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): ="syz.0.134" path="/16/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 448.114299][ T29] audit: type=1400 audit(1728490789.273:259): avc: denied { unmount } for pid=6572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 451.863876][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.866757][ T29] audit: type=1400 audit(1728490793.033:260): avc: denied { unmount } for pid=6644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 452.254258][ T7090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.103103][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.114436][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.203855][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.218767][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 453.219237][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 455.417986][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 455.450220][ T5232] Bluetooth: hci4: command tx timeout [ 455.744079][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.753707][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.804223][ T7088] bridge_slave_0: entered allmulticast mode [ 455.814962][ T7088] bridge_slave_0: entered promiscuous mode [ 455.857256][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.883826][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.943008][ T7088] bridge_slave_1: entered allmulticast mode [ 455.972744][ T7088] bridge_slave_1: entered promiscuous mode [ 456.115717][ T29] audit: type=1107 audit(1728490797.303:261): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 456.121162][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.383327][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.682330][ T7088] team0: Port device team_slave_0 added [ 456.710646][ T7088] team0: Port device team_slave_1 added [ 456.783049][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.814427][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.909570][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.017038][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.083525][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.183722][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.523807][ T5232] Bluetooth: hci4: command tx timeout [ 457.590592][ T7088] hsr_slave_0: entered promiscuous mode [ 457.608981][ T7088] hsr_slave_1: entered promiscuous mode [ 457.629314][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.642609][ T7088] Cannot create hsr debugfs directory [ 459.153579][ T5327] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 460.772631][ T5327] usb 2-1: Using ep0 maxpacket: 32 [ 460.806075][ T5232] Bluetooth: hci4: command tx timeout [ 461.054798][ T29] audit: type=1400 audit(1728490802.163:262): avc: denied { connect } for pid=7137 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.509763][ T7088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.513285][ T5327] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 461.554687][ T5327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.860135][ T5327] usb 2-1: config 0 descriptor?? [ 461.933648][ T5327] usb 2-1: can't set config #0, error -71 [ 461.973080][ T5327] usb 2-1: USB disconnect, device number 2 [ 462.095654][ T7088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.340179][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'. [ 462.753759][ T7088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.905798][ T5232] Bluetooth: hci4: command tx timeout [ 463.095476][ T29] audit: type=1400 audit(1728490804.273:263): avc: denied { create } for pid=7159 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 463.230970][ T29] audit: type=1400 audit(1728490804.273:264): avc: denied { write } for pid=7159 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 463.446135][ T7088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.480657][ T29] audit: type=1400 audit(1728490804.513:265): avc: denied { ioctl } for pid=7159 comm="syz.1.157" path="/dev/input/event0" dev="devtmpfs" ino=833 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 464.715629][ T7088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 465.063294][ T7088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 465.113763][ T29] audit: type=1107 audit(1728490806.293:266): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 465.328803][ T7238] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 465.445377][ T7088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 465.641805][ T7088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.744074][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.783894][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.809426][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.816666][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.286360][ T29] audit: type=1400 audit(1728490809.353:267): avc: denied { mount } for pid=7251 comm="syz.2.165" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 468.317095][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.324252][ T5361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.069815][ T29] audit: type=1400 audit(1728490810.253:268): avc: denied { map } for pid=7264 comm="syz.2.168" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 469.164057][ T29] audit: type=1400 audit(1728490810.253:269): avc: denied { read write } for pid=7264 comm="syz.2.168" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 469.290518][ T29] audit: type=1400 audit(1728490810.343:270): avc: denied { write } for pid=7264 comm="syz.2.168" name="event2" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 469.610835][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.036718][ T7279] netlink: 108 bytes leftover after parsing attributes in process `syz.1.172'. [ 470.877810][ T29] audit: type=1107 audit(1728490811.993:271): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 471.053753][ T5232] Bluetooth: hci0: command tx timeout [ 472.949059][ T5271] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 473.113557][ T5271] usb 2-1: Using ep0 maxpacket: 32 [ 473.195273][ T5271] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 473.218154][ T5271] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 473.220291][ T7088] veth0_vlan: entered promiscuous mode [ 473.248612][ T5271] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 473.286072][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.331758][ T5271] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 473.367548][ T7088] veth1_vlan: entered promiscuous mode [ 473.403363][ T5271] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.473177][ T5271] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 473.511622][ T7088] veth0_macvtap: entered promiscuous mode [ 473.517629][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.530107][ T7088] veth1_macvtap: entered promiscuous mode [ 473.547127][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.557753][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.567954][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.579311][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.589891][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.600629][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.613621][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.618113][ T7300] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 473.624134][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.624161][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.624180][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.625658][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.673585][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.684623][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.695095][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.705629][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.715534][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.726257][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.736273][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.746832][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.756791][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.767480][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.779862][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.792710][ T5271] usb 2-1: config 0 descriptor?? [ 473.856129][ T7088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.867295][ T7088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.903557][ T7088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.933063][ T7088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.446580][ T5271] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 474.754728][ T29] audit: type=1400 audit(1728490815.853:272): avc: denied { read write } for pid=7295 comm="syz.1.176" name="lp0" dev="devtmpfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 474.880210][ T7213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.125081][ T7213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.207696][ T29] audit: type=1400 audit(1728490815.853:273): avc: denied { open } for pid=7295 comm="syz.1.176" path="/dev/usb/lp0" dev="devtmpfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 475.214633][ T5338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.351964][ T5338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.441798][ T29] audit: type=1400 audit(1728490816.623:274): avc: denied { mounton } for pid=7088 comm="syz-executor" path="/root/syzkaller.bMD8hN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 476.188714][ T5231] usb 2-1: USB disconnect, device number 3 [ 476.477102][ T5231] usblp0: removed [ 476.549575][ T7322] syz.1.181 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 478.561062][ T29] audit: type=1400 audit(1728490819.723:275): avc: denied { execute } for pid=7332 comm="syz.3.183" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=26595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 478.587814][ T7334] xt_TCPMSS: Only works on TCP SYN packets [ 478.681661][ T7319] xt_TCPMSS: Only works on TCP SYN packets [ 483.718400][ T29] audit: type=1107 audit(1728490824.133:276): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 484.720650][ T29] audit: type=1400 audit(1728490825.203:277): avc: denied { create } for pid=7386 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 484.830289][ T29] audit: type=1400 audit(1728490825.203:278): avc: denied { ioctl } for pid=7386 comm="syz.1.197" path="socket:[26789]" dev="sockfs" ino=26789 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 485.582327][ T29] audit: type=1400 audit(1728490826.663:279): avc: denied { mount } for pid=7395 comm="syz.0.194" name="/" dev="rpc_pipefs" ino=26795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 487.239509][ T7405] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 487.438717][ T29] audit: type=1400 audit(1728490828.613:280): avc: denied { create } for pid=7406 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 489.127181][ T29] audit: type=1400 audit(1728490829.153:281): avc: denied { read } for pid=7406 comm="syz.2.202" path="socket:[26817]" dev="sockfs" ino=26817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 489.938353][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 489.947402][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 489.955874][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 489.964546][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 489.973206][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 489.980817][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 491.160665][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 491.644053][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.651322][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.659376][ T7425] bridge_slave_0: entered allmulticast mode [ 491.667473][ T7425] bridge_slave_0: entered promiscuous mode [ 491.676710][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.693156][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.718795][ T7425] bridge_slave_1: entered allmulticast mode [ 491.750733][ T29] audit: type=1400 audit(1728490832.923:282): avc: denied { create } for pid=7450 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 491.783624][ T7425] bridge_slave_1: entered promiscuous mode [ 491.905866][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.917895][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.943670][ T29] audit: type=1400 audit(1728490832.973:283): avc: denied { read write } for pid=7450 comm="syz.2.212" name="rdma_cm" dev="devtmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 492.083823][ T5236] Bluetooth: hci5: command tx timeout [ 492.129044][ T29] audit: type=1400 audit(1728490832.973:284): avc: denied { open } for pid=7450 comm="syz.2.212" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 492.400012][ T7425] team0: Port device team_slave_0 added [ 492.502089][ T29] audit: type=1400 audit(1728490833.653:285): avc: denied { block_suspend } for pid=7453 comm="syz.0.214" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 492.707191][ T7425] team0: Port device team_slave_1 added [ 493.202916][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.233163][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.333498][ T29] audit: type=1400 audit(1728490834.413:286): avc: denied { setopt } for pid=7459 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 493.347761][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.394750][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.428418][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.531469][ T29] audit: type=1107 audit(1728490834.713:287): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 493.550484][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.706472][ T7425] hsr_slave_0: entered promiscuous mode [ 493.721360][ T7425] hsr_slave_1: entered promiscuous mode [ 493.737290][ T7425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.761713][ T7425] Cannot create hsr debugfs directory [ 494.040118][ T7425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.168146][ T5232] Bluetooth: hci5: command tx timeout [ 494.640412][ T7425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.725297][ T5232] Bluetooth: hci6: command 0x0406 tx timeout [ 494.870448][ T7425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.024134][ T7425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.402581][ T7425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.425989][ T7425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.440015][ T7425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.452324][ T7425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 495.714312][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.729530][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.755401][ T7425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.766158][ T7425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.819715][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.826998][ T7217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.905078][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.912219][ T7217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.245290][ T5236] Bluetooth: hci5: command tx timeout [ 496.937459][ T29] audit: type=1400 audit(1728490837.573:288): avc: denied { ioctl } for pid=7495 comm="syz.0.227" path="socket:[26863]" dev="sockfs" ino=26863 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 497.248307][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.384625][ T29] audit: type=1400 audit(1728490838.563:289): avc: denied { mounton } for pid=7508 comm="syz.2.231" path="/proc/139/task" dev="proc" ino=26907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 497.438183][ T7425] veth0_vlan: entered promiscuous mode [ 498.172539][ T7425] veth1_vlan: entered promiscuous mode [ 498.284921][ T7425] veth0_macvtap: entered promiscuous mode [ 498.298697][ T7425] veth1_macvtap: entered promiscuous mode [ 498.319505][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.335890][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.357270][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.368272][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.378302][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.388897][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.398844][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.409428][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.419497][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.430108][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.440237][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.452825][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.507813][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.548147][ T7520] input: syz0 as /devices/virtual/input/input6 [ 498.581302][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.592387][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.602338][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.614666][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.626099][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.643591][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.653639][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.666459][ T29] audit: type=1400 audit(1728490839.853:290): avc: denied { ioctl } for pid=4660 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2344 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 498.737471][ T7520] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 498.737471][ T7520] vmx flags ' [ 498.812401][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.852086][ T7523] sctp: [Deprecated]: syz.0.229 (pid 7523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.852086][ T7523] Use struct sctp_sack_info instead [ 498.905430][ T29] audit: type=1400 audit(1728490840.083:291): avc: denied { ioctl } for pid=7522 comm="syz.1.234" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 498.953607][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.988560][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.011998][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.051113][ T5236] Bluetooth: hci5: command tx timeout [ 499.133680][ T1167] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 499.161700][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.180987][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.219596][ T7425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.229214][ T7425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.239000][ T7425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.249895][ T7425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.300935][ T1167] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 499.367183][ T1167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.420556][ T7520] process 'syz.2.232' launched './file0' with NULL argv: empty string added [ 499.432469][ T1167] usb 2-1: config 0 descriptor?? [ 499.456343][ T7215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.497005][ T29] audit: type=1400 audit(1728490840.683:292): avc: denied { execute_no_trans } for pid=7516 comm="syz.2.232" path="/42/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 499.519448][ T7215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.530200][ T1167] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 499.552331][ T7217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.611247][ T7217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.699994][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.806386][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.108799][ T7215] bridge_slave_1: left allmulticast mode [ 500.157098][ T29] audit: type=1400 audit(1728490841.333:293): avc: denied { read } for pid=7522 comm="syz.1.234" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 500.183677][ T7215] bridge_slave_1: left promiscuous mode [ 500.233696][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.268181][ T29] audit: type=1400 audit(1728490841.333:294): avc: denied { open } for pid=7522 comm="syz.1.234" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 500.400045][ T7215] bridge_slave_0: left allmulticast mode [ 500.415562][ T7215] bridge_slave_0: left promiscuous mode [ 500.426772][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.439418][ T5327] usb 2-1: USB disconnect, device number 4 [ 502.658792][ T29] audit: type=1400 audit(1728490843.843:295): avc: denied { create } for pid=7542 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 502.704317][ T7215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.745347][ T7215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.773356][ T7215] bond0 (unregistering): Released all slaves [ 502.805740][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.812235][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.871287][ T7534] team0: Port device team_slave_1 removed [ 502.933767][ T7543] Zero length message leads to an empty skb [ 503.400097][ T7557] xt_TCPMSS: Only works on TCP SYN packets [ 503.468546][ T7215] hsr_slave_0: left promiscuous mode [ 503.497937][ T7215] hsr_slave_1: left promiscuous mode [ 503.588958][ T7215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.633830][ T7215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.652117][ T7215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.673050][ T7215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.708483][ T7215] veth1_macvtap: left promiscuous mode [ 503.716842][ T7215] veth0_macvtap: left promiscuous mode [ 503.722514][ T7215] veth1_vlan: left promiscuous mode [ 503.735110][ T7215] veth0_vlan: left promiscuous mode [ 504.387381][ T7215] team0 (unregistering): Port device team_slave_1 removed [ 504.452649][ T7215] team0 (unregistering): Port device team_slave_0 removed [ 507.512364][ T29] audit: type=1400 audit(1728490848.693:296): avc: denied { create } for pid=7571 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 507.549918][ T29] audit: type=1400 audit(1728490848.733:297): avc: denied { connect } for pid=7571 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 507.606851][ T29] audit: type=1400 audit(1728490848.793:298): avc: denied { write } for pid=7571 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 509.316468][ T7579] fuse: Bad value for 'fd' [ 512.323021][ T7592] team0: Port device team_slave_1 removed [ 512.669230][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 513.906228][ T7604] netlink: 'syz.1.257': attribute type 15 has an invalid length. [ 517.486209][ T7628] fuse: Bad value for 'fd' [ 518.221136][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 518.847241][ T29] audit: type=1400 audit(1728490859.543:299): avc: denied { bind } for pid=7633 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 518.867994][ T7635] capability: warning: `syz.1.266' uses deprecated v2 capabilities in a way that may be insecure [ 519.344464][ T29] audit: type=1400 audit(1728490859.543:300): avc: denied { ioctl } for pid=7633 comm="syz.1.266" path="socket:[29044]" dev="sockfs" ino=29044 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 519.598057][ T29] audit: type=1400 audit(1728490860.523:301): avc: denied { bind } for pid=7633 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 519.693169][ T29] audit: type=1400 audit(1728490860.523:302): avc: denied { accept } for pid=7633 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 519.767424][ T29] audit: type=1400 audit(1728490860.523:303): avc: denied { write } for pid=7633 comm="syz.1.266" path="socket:[29066]" dev="sockfs" ino=29066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 519.979784][ T7654] xt_TCPMSS: Only works on TCP SYN packets [ 520.211054][ T29] audit: type=1400 audit(1728490860.573:304): avc: denied { setopt } for pid=7633 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 520.253536][ T29] audit: type=1400 audit(1728490860.923:305): avc: denied { ioctl } for pid=7647 comm="syz.2.272" path="socket:[27034]" dev="sockfs" ino=27034 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 520.372799][ T29] audit: type=1400 audit(1728490860.933:306): avc: denied { write } for pid=7647 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 521.999842][ T7677] serio: Serial port ptm0 [ 523.070663][ T29] audit: type=1400 audit(1728490864.243:307): avc: denied { create } for pid=7673 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 523.274515][ T29] audit: type=1400 audit(1728490864.463:308): avc: denied { read } for pid=7683 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 523.709805][ T7699] xt_TCPMSS: Only works on TCP SYN packets [ 524.397857][ T7708] netlink: 68 bytes leftover after parsing attributes in process `syz.2.293'. [ 524.411881][ T29] audit: type=1400 audit(1728490865.603:309): avc: denied { open } for pid=7707 comm="syz.2.293" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 524.461333][ T29] audit: type=1400 audit(1728490865.643:310): avc: denied { getopt } for pid=7707 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 524.524214][ T7708] Bluetooth: MGMT ver 1.23 [ 524.550570][ T29] audit: type=1400 audit(1728490865.643:311): avc: denied { ioctl } for pid=7707 comm="syz.2.293" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 524.637820][ T29] audit: type=1400 audit(1728490865.713:312): avc: denied { write } for pid=7707 comm="syz.2.293" path="socket:[29193]" dev="sockfs" ino=29193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 524.923972][ T29] audit: type=1400 audit(1728490866.103:313): avc: denied { search } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.920418][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 526.342815][ T7723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7723 comm=syz.3.295 [ 527.043744][ T5231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 527.282094][ T5231] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 527.310246][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.357953][ T5231] usb 3-1: config 0 descriptor?? [ 527.385890][ T5231] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 528.056090][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.100357][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.312624][ T7746] xt_TCPMSS: Only works on TCP SYN packets [ 528.354580][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 528.473973][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 528.483333][ T7750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.305'. [ 528.685158][ T7750] nbd0: detected capacity change from 0 to 4 [ 528.700362][ T29] audit: type=1400 audit(1728490869.883:314): avc: denied { create } for pid=7751 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 528.731474][ T5232] block nbd0: Receive control failed (result -104) [ 528.793572][ T29] audit: type=1400 audit(1728490869.933:315): avc: denied { getopt } for pid=7751 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 530.258727][ T1167] usb 3-1: USB disconnect, device number 4 [ 530.532673][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 531.528539][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 531.780980][ T7784] xt_TCPMSS: Only works on TCP SYN packets [ 532.409817][ T7786] team0: Port device team_slave_1 removed [ 532.472008][ T29] audit: type=1400 audit(1728490873.653:316): avc: denied { create } for pid=7787 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 532.490546][ T7788] lo speed is unknown, defaulting to 1000 [ 532.521816][ T7788] lo speed is unknown, defaulting to 1000 [ 532.619995][ T7788] lo speed is unknown, defaulting to 1000 [ 532.632782][ T29] audit: type=1400 audit(1728490873.653:317): avc: denied { write } for pid=7787 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 532.881126][ T29] audit: type=1400 audit(1728490873.773:318): avc: denied { getopt } for pid=7787 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 533.346678][ T7788] infiniband syz0: set active [ 533.353097][ T1167] lo speed is unknown, defaulting to 1000 [ 533.369280][ T7788] infiniband syz0: added lo [ 533.389607][ T7788] syz0: rxe_create_cq: returned err = -12 [ 533.400965][ T7788] infiniband syz0: Couldn't create ib_mad CQ [ 533.408328][ T7788] infiniband syz0: Couldn't open port 1 [ 533.676121][ T7788] RDS/IB: syz0: added [ 533.685101][ T7788] smc: adding ib device syz0 with port count 1 [ 533.691483][ T7788] smc: ib device syz0 port 1 has pnetid [ 533.699921][ T1167] lo speed is unknown, defaulting to 1000 [ 533.709994][ T7788] lo speed is unknown, defaulting to 1000 [ 533.736089][ T7800] tipc: Enabling of bearer rejected, failed to enable media [ 533.765612][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'. [ 533.852375][ T7788] lo speed is unknown, defaulting to 1000 [ 534.118046][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 534.313764][ T7788] lo speed is unknown, defaulting to 1000 [ 535.408707][ T7788] lo speed is unknown, defaulting to 1000 [ 535.581199][ T29] audit: type=1400 audit(1728490876.753:319): avc: denied { create } for pid=7823 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 535.683529][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 535.699727][ T29] audit: type=1400 audit(1728490876.793:320): avc: denied { write } for pid=7823 comm="syz.3.332" path="socket:[29456]" dev="sockfs" ino=29456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 535.755432][ T7788] lo speed is unknown, defaulting to 1000 [ 535.774862][ T7826] tipc: Started in network mode [ 535.779742][ T7826] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 535.811522][ T29] audit: type=1400 audit(1728490876.953:321): avc: denied { create } for pid=7825 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.850654][ T7826] tipc: Enabled bearer , priority 10 [ 535.877554][ T7826] syz.3.333 (7826) used greatest stack depth: 21088 bytes left [ 535.902487][ T29] audit: type=1400 audit(1728490876.953:322): avc: denied { ioctl } for pid=7825 comm="syz.3.333" path="socket:[29464]" dev="sockfs" ino=29464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 536.032234][ T7788] lo speed is unknown, defaulting to 1000 [ 536.458021][ T29] audit: type=1400 audit(1728490877.643:323): avc: denied { name_bind } for pid=7832 comm="syz.3.336" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 536.479844][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 536.518024][ T7835] netlink: 'syz.1.337': attribute type 3 has an invalid length. [ 536.697866][ T5236] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 536.965765][ T5231] tipc: Node number set to 15444650 [ 537.562312][ T7857] serio: Serial port ptm1 [ 538.429861][ T29] audit: type=1400 audit(1728490879.613:324): avc: denied { read } for pid=7863 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 542.987919][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 543.005581][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 543.013573][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.022329][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.035198][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 543.043130][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.164242][ T7907] lo speed is unknown, defaulting to 1000 [ 544.011435][ T7919] fuse: Bad value for 'fd' [ 544.448140][ T7907] chnl_net:caif_netlink_parms(): no params data found [ 545.203794][ T5232] Bluetooth: hci1: command tx timeout [ 545.870691][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.878463][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.890207][ T7907] bridge_slave_0: entered allmulticast mode [ 545.916243][ T7907] bridge_slave_0: entered promiscuous mode [ 545.963707][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.981530][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.005381][ T7907] bridge_slave_1: entered allmulticast mode [ 546.333517][ T7907] bridge_slave_1: entered promiscuous mode [ 546.766374][ T7208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.012472][ T7208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.015161][ T7946] ALSA: seq fatal error: cannot create timer (-22) [ 547.101848][ T7907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.237454][ T7208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.293653][ T5232] Bluetooth: hci1: command tx timeout [ 547.338870][ T7907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.864348][ T7208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.995909][ T7907] team0: Port device team_slave_0 added [ 548.017617][ T7907] team0: Port device team_slave_1 added [ 548.135687][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.153186][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.232151][ T29] audit: type=1400 audit(1728490889.413:325): avc: denied { write } for pid=7950 comm="syz.3.369" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.273774][ T29] audit: type=1400 audit(1728490889.413:326): avc: denied { remove_name } for pid=7950 comm="syz.3.369" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.313823][ T7907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.332293][ T29] audit: type=1400 audit(1728490889.413:327): avc: denied { unlink } for pid=7950 comm="syz.3.369" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 548.433141][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.503889][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.582609][ T7907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.219852][ T7977] random: crng reseeded on system resumption [ 550.063750][ T5232] Bluetooth: hci1: command tx timeout [ 551.256030][ T7907] hsr_slave_0: entered promiscuous mode [ 551.291228][ T7907] hsr_slave_1: entered promiscuous mode [ 551.350048][ T7907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.385373][ T7983] ALSA: seq fatal error: cannot create timer (-22) [ 551.397007][ T7907] Cannot create hsr debugfs directory [ 551.431460][ T7208] bridge_slave_1: left allmulticast mode [ 551.445793][ T7208] bridge_slave_1: left promiscuous mode [ 551.459035][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.490080][ T7208] bridge_slave_0: left allmulticast mode [ 551.498137][ T7208] bridge_slave_0: left promiscuous mode [ 551.518230][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.863633][ T5232] Bluetooth: hci1: command tx timeout [ 553.308472][ T29] audit: type=1400 audit(1728490894.103:328): avc: denied { call } for pid=7992 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 555.973138][ T5232] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 556.133108][ T7208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.197818][ T7208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.242273][ T7208] bond0 (unregistering): Released all slaves [ 556.327296][ T8009] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 557.225542][ T8039] random: crng reseeded on system resumption [ 559.150255][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 30 seconds [ 561.887239][ T7208] hsr_slave_0: left promiscuous mode [ 562.203941][ T7208] hsr_slave_1: left promiscuous mode [ 562.246906][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.254961][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.275662][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.345729][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.513251][ T7208] veth1_macvtap: left promiscuous mode [ 562.812444][ T7208] veth0_macvtap: left promiscuous mode [ 562.873914][ T7208] veth1_vlan: left promiscuous mode [ 562.879350][ T7208] veth0_vlan: left promiscuous mode [ 563.590230][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 564.554758][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.561129][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.993715][ T1167] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 565.185906][ T1167] usb 1-1: Using ep0 maxpacket: 32 [ 565.208308][ T1167] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 565.229939][ T1167] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 565.269919][ T1167] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 565.323562][ T1167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.343513][ T1167] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.397225][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 565.458311][ T1167] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 565.503533][ T1167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.528191][ T1167] usb 1-1: config 0 descriptor?? [ 565.805414][ T1167] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 566.048402][ T29] audit: type=1400 audit(1728490907.223:329): avc: denied { read write } for pid=8087 comm="syz.0.404" name="lp0" dev="devtmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 566.615538][ T29] audit: type=1400 audit(1728490907.223:330): avc: denied { open } for pid=8087 comm="syz.0.404" path="/dev/usb/lp0" dev="devtmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 568.518467][ T5300] usb 1-1: USB disconnect, device number 2 [ 568.534219][ T5300] usblp0: removed [ 569.863303][ T7208] team0 (unregistering): Port device team_slave_1 removed [ 570.036705][ T7208] team0 (unregistering): Port device team_slave_0 removed [ 571.341184][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 571.363329][ T8075] netlink: 'syz.4.398': attribute type 3 has an invalid length. [ 573.354414][ T8115] xt_TCPMSS: Only works on TCP SYN packets [ 573.848666][ T7907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 574.177025][ T7907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 574.187229][ T7907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 574.250892][ T7907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 574.621056][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.638438][ T7907] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.676338][ T7907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.686911][ T7907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.719113][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.726615][ T5361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.774968][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.782117][ T5361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.081714][ T7907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.723934][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 577.236384][ T7907] veth0_vlan: entered promiscuous mode [ 577.278977][ T7907] veth1_vlan: entered promiscuous mode [ 577.390813][ T7907] veth0_macvtap: entered promiscuous mode [ 577.491288][ T7907] veth1_macvtap: entered promiscuous mode [ 578.591284][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.906336][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.933503][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.964214][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.033675][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.061078][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.090523][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.168169][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.646069][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.646103][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.647576][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.846228][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 579.846297][ T8169] bridge_slave_1: left allmulticast mode [ 579.846321][ T8169] bridge_slave_1: left promiscuous mode [ 579.846690][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.405207][ T8169] bridge_slave_0: left allmulticast mode [ 580.405240][ T8169] bridge_slave_0: left promiscuous mode [ 580.405408][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.707642][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.737555][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.751186][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.762355][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.831572][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.842540][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.852718][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.863306][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.873441][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.884111][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.895235][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.906099][ T7907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.915639][ T7907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.924671][ T7907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.933582][ T7907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.862987][ T5328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.891425][ T5328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.139889][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.432'. [ 585.243925][ T5328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.251781][ T5328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.512200][ T8272] xt_TCPMSS: Only works on TCP SYN packets [ 588.933947][ T29] audit: type=1400 audit(1728490930.123:331): avc: denied { bind } for pid=8275 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 589.026690][ T29] audit: type=1400 audit(1728490930.143:332): avc: denied { name_bind } for pid=8275 comm="syz.1.446" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 589.088725][ T29] audit: type=1400 audit(1728490930.143:333): avc: denied { node_bind } for pid=8275 comm="syz.1.446" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 589.205225][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 60 seconds [ 593.994669][ T8316] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 596.884720][ T29] audit: type=1400 audit(1728490938.073:334): avc: denied { ioctl } for pid=8335 comm="syz.4.465" path="socket:[30900]" dev="sockfs" ino=30900 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 597.333069][ T8347] serio: Serial port ptm0 [ 598.195673][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 598.242261][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 598.252937][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 598.283154][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 598.322967][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 598.340969][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 598.558209][ T8353] lo speed is unknown, defaulting to 1000 [ 598.878678][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 599.083554][ T1167] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 599.111433][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.153264][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.187117][ T8353] bridge_slave_0: entered allmulticast mode [ 599.256066][ T1167] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 599.291962][ T1167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.352746][ T1167] usb 4-1: config 0 descriptor?? [ 599.368438][ T1167] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 599.382666][ T8353] bridge_slave_0: entered promiscuous mode [ 599.463042][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.513189][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.541978][ T8353] bridge_slave_1: entered allmulticast mode [ 599.642649][ T8353] bridge_slave_1: entered promiscuous mode [ 599.648951][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.726323][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.405396][ T5236] Bluetooth: hci6: command tx timeout [ 600.669742][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.477'. [ 600.753169][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.819777][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.137097][ T8353] team0: Port device team_slave_0 added [ 601.409615][ T8353] team0: Port device team_slave_1 added [ 601.868132][ T5231] usb 4-1: USB disconnect, device number 2 [ 602.458576][ T8408] serio: Serial port ptm0 [ 602.568246][ T5236] Bluetooth: hci6: command tx timeout [ 604.730713][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.737925][ T5236] Bluetooth: hci6: command tx timeout [ 604.793801][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.821973][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.825841][ T8397] team0: Port device team_slave_1 removed [ 605.948410][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.955508][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.982457][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.023690][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 606.327204][ T8353] hsr_slave_0: entered promiscuous mode [ 607.174200][ T8353] hsr_slave_1: entered promiscuous mode [ 607.193569][ T5236] Bluetooth: hci6: command tx timeout [ 609.063689][ T8353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.118272][ T8353] Cannot create hsr debugfs directory [ 609.833595][ T5231] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 609.995860][ T5231] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 610.271679][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.619915][ T5231] usb 4-1: config 0 descriptor?? [ 610.643231][ T5231] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 612.229159][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'. [ 612.249714][ T5371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.423370][ T5371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.052257][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 613.256746][ T5270] usb 4-1: USB disconnect, device number 3 [ 614.730365][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 616.710355][ T8505] serio: Serial port ptm0 [ 617.541600][ T29] audit: type=1400 audit(1728490958.723:335): avc: denied { write } for pid=8507 comm="syz.3.510" path="socket:[32308]" dev="sockfs" ino=32308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 617.637639][ T5371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.980444][ T5371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.221280][ T8524] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 619.055252][ T5273] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 619.900933][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 90 seconds [ 620.473624][ T5273] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 620.482679][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.881154][ T5273] usb 2-1: config 0 descriptor?? [ 620.896812][ T5371] bridge_slave_1: left allmulticast mode [ 620.902512][ T5371] bridge_slave_1: left promiscuous mode [ 620.909984][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.933501][ T5273] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 621.068415][ T5371] bridge_slave_0: left allmulticast mode [ 621.118076][ T5371] bridge_slave_0: left promiscuous mode [ 622.366612][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.644301][ T8551] serio: Serial port ptm0 [ 623.232482][ T5272] usb 2-1: USB disconnect, device number 5 [ 624.195430][ T5371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.213260][ T5371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.228916][ T5371] bond0 (unregistering): Released all slaves [ 625.307269][ T29] audit: type=1400 audit(1728490966.473:336): avc: denied { connect } for pid=8576 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 626.758690][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.765773][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.014024][ T29] audit: type=1400 audit(1728490966.473:337): avc: denied { write } for pid=8576 comm="syz.1.529" path="socket:[32591]" dev="sockfs" ino=32591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 627.364080][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 628.325076][ T29] audit: type=1400 audit(1728490969.493:338): avc: denied { read } for pid=8598 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 629.214806][ T8614] serio: Serial port ptm0 [ 630.226407][ T8617] team0: Port device team_slave_1 removed [ 631.175806][ T5371] hsr_slave_0: left promiscuous mode [ 632.273530][ T5371] hsr_slave_1: left promiscuous mode [ 632.433955][ T5371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.441566][ T5371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.377536][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 633.499912][ T5371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.508130][ T5371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.320016][ T5371] veth1_macvtap: left promiscuous mode [ 634.329132][ T5371] veth0_macvtap: left promiscuous mode [ 634.365490][ T5371] veth1_vlan: left promiscuous mode [ 634.435991][ T5371] veth0_vlan: left promiscuous mode [ 636.847233][ T5371] team0 (unregistering): Port device team_slave_0 removed [ 637.747416][ T8353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 637.817932][ T8353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 637.831442][ T8353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 637.857620][ T8353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.228996][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 639.774741][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 639.823133][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.100187][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.381661][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.388904][ T7215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.748450][ T8353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 641.759035][ T8353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.868781][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.876091][ T7221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.014799][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 642.043220][ T8716] lo speed is unknown, defaulting to 1000 [ 642.113068][ T8718] syzkaller1: entered promiscuous mode [ 642.119008][ T8718] syzkaller1: entered allmulticast mode [ 642.410225][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.269405][ T8353] veth0_vlan: entered promiscuous mode [ 643.281640][ T8353] veth1_vlan: entered promiscuous mode [ 643.305372][ T8353] veth0_macvtap: entered promiscuous mode [ 643.315194][ T8353] veth1_macvtap: entered promiscuous mode [ 643.331017][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.341688][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.351877][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.363184][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.374244][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.384782][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.394673][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.405194][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.415155][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.425648][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.437093][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.877044][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 644.669277][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.573'. [ 645.015238][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.063574][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.165057][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.220618][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.243522][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.267380][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.338855][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.349521][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.359450][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.369970][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.381212][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.400456][ T8748] lo speed is unknown, defaulting to 1000 [ 645.460037][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 645.500716][ T8763] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 645.721389][ T8353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.736191][ T8353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.808260][ T8353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.825184][ T8353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.218996][ T5328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.228713][ T5328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.417348][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.456375][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.185460][ T8806] netlink: 108 bytes leftover after parsing attributes in process `syz.1.583'. [ 649.341239][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 650.034479][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 120 seconds [ 650.228479][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 650.237957][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 650.262365][ T8813] netlink: 'syz.1.588': attribute type 15 has an invalid length. [ 650.609722][ T8817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.589'. [ 651.496380][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 651.565714][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 651.579433][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 651.590249][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 651.611777][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 651.620329][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 651.623846][ T8833] netlink: 108 bytes leftover after parsing attributes in process `syz.3.595'. [ 651.766651][ T8828] lo speed is unknown, defaulting to 1000 [ 652.440684][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 653.807884][ T5236] Bluetooth: hci0: command tx timeout [ 654.267685][ T29] audit: type=1107 audit(1728490995.413:339): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 654.336220][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 654.353493][ T29] audit: type=1400 audit(1728490995.533:340): avc: denied { nlmsg_read } for pid=8858 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 654.484062][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.605'. [ 654.494452][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.605'. [ 654.956623][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 655.855410][ T5236] Bluetooth: hci0: command tx timeout [ 657.252769][ T8887] netlink: 108 bytes leftover after parsing attributes in process `syz.0.610'. [ 657.413291][ T8892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 657.457911][ T7221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.517125][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.529010][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.539601][ T8828] bridge_slave_0: entered allmulticast mode [ 657.566208][ T8828] bridge_slave_0: entered promiscuous mode [ 657.582798][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.851210][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.871268][ T8828] bridge_slave_1: entered allmulticast mode [ 657.882533][ T8828] bridge_slave_1: entered promiscuous mode [ 657.923825][ T5236] Bluetooth: hci0: command tx timeout [ 658.127573][ T29] audit: type=1400 audit(1728490999.313:341): avc: denied { setopt } for pid=8905 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 658.154837][ T7221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.401445][ T7221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.517605][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.538898][ T29] audit: type=1400 audit(1728490999.723:342): avc: denied { listen } for pid=8909 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 659.567238][ T29] audit: type=1400 audit(1728490999.723:343): avc: denied { accept } for pid=8909 comm="syz.1.618" lport=50512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 660.722035][ T5236] Bluetooth: hci0: command tx timeout [ 661.311120][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.955594][ T7221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.170482][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 663.195892][ T8828] team0: Port device team_slave_0 added [ 663.251188][ T8828] team0: Port device team_slave_1 added [ 664.485098][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.492205][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.547622][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.564942][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.571942][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.609135][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.717992][ T8828] hsr_slave_0: entered promiscuous mode [ 664.752325][ T8828] hsr_slave_1: entered promiscuous mode [ 665.026298][ T8828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.203662][ T8828] Cannot create hsr debugfs directory [ 667.043863][ T7221] bridge_slave_1: left allmulticast mode [ 667.064039][ T7221] bridge_slave_1: left promiscuous mode [ 667.069857][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.247492][ T7221] bridge_slave_0: left allmulticast mode [ 667.253215][ T7221] bridge_slave_0: left promiscuous mode [ 667.295838][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.984068][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 671.945127][ T7221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.029961][ T7221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.045663][ T7221] bond0 (unregistering): Released all slaves [ 677.550940][ T9032] netlink: 'syz.0.647': attribute type 72 has an invalid length. [ 677.559525][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'. [ 677.671981][ T7221] hsr_slave_0: left promiscuous mode [ 677.679032][ T7221] hsr_slave_1: left promiscuous mode [ 677.696557][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.704345][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.713601][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.729858][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.763479][ T7221] veth1_macvtap: left promiscuous mode [ 677.769121][ T7221] veth0_macvtap: left promiscuous mode [ 677.779286][ T7221] veth1_vlan: left promiscuous mode [ 677.800265][ T7221] veth0_vlan: left promiscuous mode [ 678.881037][ T7221] team0 (unregistering): Port device team_slave_0 removed [ 680.166378][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 150 seconds [ 680.195605][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.651'. [ 683.771888][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 683.781591][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 683.821831][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 683.836136][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 683.849669][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 683.857175][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 685.963659][ T5236] Bluetooth: hci4: command tx timeout [ 686.676478][ T8828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 686.737047][ T8828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 686.762272][ T8828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 686.771485][ T9083] netlink: 'syz.3.660': attribute type 72 has an invalid length. [ 686.797417][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.660'. [ 686.822413][ T9069] lo speed is unknown, defaulting to 1000 [ 686.831882][ T8828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.095642][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.129064][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.138952][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.577869][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.642109][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.649292][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.752481][ T2551] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.759637][ T2551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.019797][ T5236] Bluetooth: hci4: command tx timeout [ 688.329513][ T8828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.376744][ T8828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.656163][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 688.851843][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.107638][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.146959][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.180752][ T9069] bridge_slave_0: entered allmulticast mode [ 689.220756][ T9069] bridge_slave_0: entered promiscuous mode [ 689.293840][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.351971][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.410129][ T9069] bridge_slave_1: entered allmulticast mode [ 689.445917][ T9069] bridge_slave_1: entered promiscuous mode [ 689.527038][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.557065][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.790958][ T9069] team0: Port device team_slave_0 added [ 689.822369][ T9069] team0: Port device team_slave_1 added [ 689.991183][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.039370][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.094961][ T5232] Bluetooth: hci4: command tx timeout [ 690.143881][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.165460][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.172414][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.201941][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.300090][ T9069] hsr_slave_0: entered promiscuous mode [ 690.315056][ T9069] hsr_slave_1: entered promiscuous mode [ 690.335408][ T9069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.363364][ T9069] Cannot create hsr debugfs directory [ 690.646157][ T9069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.569886][ T9147] netlink: 'syz.3.669': attribute type 72 has an invalid length. [ 691.590762][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.669'. [ 691.688158][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 691.697642][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 691.706491][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 691.716559][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 691.725914][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 691.734594][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 691.832966][ T8828] veth0_vlan: entered promiscuous mode [ 691.849399][ T8828] veth1_vlan: entered promiscuous mode [ 691.876416][ T8828] veth0_macvtap: entered promiscuous mode [ 691.889972][ T8828] veth1_macvtap: entered promiscuous mode [ 691.904956][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.915667][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.925992][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.943800][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.958633][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.969715][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.984577][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.002107][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.017599][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.028685][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.044877][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.108536][ T9069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.146920][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.168289][ T5236] Bluetooth: hci4: command tx timeout [ 692.223744][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.253171][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.264462][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.275452][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.286884][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.297190][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.310178][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.330985][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.343958][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.366330][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.382906][ T9149] lo speed is unknown, defaulting to 1000 [ 692.404696][ T8828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.445909][ T8828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.469917][ T8828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.546217][ T8828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.776993][ T9069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.228500][ T9069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.455141][ T5371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.463103][ T5371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.658157][ T2551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.716395][ T2551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.731465][ T9069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 693.767294][ T5236] Bluetooth: hci2: command tx timeout [ 693.790216][ T9149] chnl_net:caif_netlink_parms(): no params data found [ 693.952053][ T9069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 694.038479][ T9069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 694.103075][ T9069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 694.141624][ T9165] syz_tun: entered promiscuous mode [ 694.196924][ T9165] batadv_slave_0: entered promiscuous mode [ 694.270356][ T9165] hsr1: entered allmulticast mode [ 694.290760][ T9165] syz_tun: entered allmulticast mode [ 694.340851][ T9165] batadv_slave_0: entered allmulticast mode [ 695.193857][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.206929][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.248329][ T9149] bridge_slave_0: entered allmulticast mode [ 695.309025][ T9149] bridge_slave_0: entered promiscuous mode [ 695.326811][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.345190][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.357613][ T9149] bridge_slave_1: entered allmulticast mode [ 695.374569][ T9149] bridge_slave_1: entered promiscuous mode [ 695.417332][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.675'. [ 695.509584][ T7208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.777365][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.828786][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.847142][ T5236] Bluetooth: hci2: command tx timeout [ 695.906536][ T9149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.925153][ T9149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.977337][ T9069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 695.988444][ T9069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.220199][ T7208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.314183][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.321353][ T7221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.358679][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.365928][ T7221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.907315][ T7208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.992363][ T9149] team0: Port device team_slave_0 added [ 697.029157][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.159690][ T7208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.301355][ T9149] team0: Port device team_slave_1 added [ 697.664008][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.671015][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.697358][ T9149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.869576][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.876736][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.902837][ T9149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.924041][ T5236] Bluetooth: hci2: command tx timeout [ 697.990812][ T9069] veth0_vlan: entered promiscuous mode [ 698.258786][ T9149] hsr_slave_0: entered promiscuous mode [ 698.310438][ T9149] hsr_slave_1: entered promiscuous mode [ 698.395527][ T9149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.415198][ T9149] Cannot create hsr debugfs directory [ 698.470590][ T9069] veth1_vlan: entered promiscuous mode [ 698.636488][ T7208] bridge_slave_1: left allmulticast mode [ 698.662680][ T7208] bridge_slave_1: left promiscuous mode [ 698.683139][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.702104][ T7208] bridge_slave_0: left allmulticast mode [ 698.708744][ T7208] bridge_slave_0: left promiscuous mode [ 698.719881][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.093513][ T5236] Bluetooth: hci2: command tx timeout [ 702.929332][ T7208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.969216][ T7208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.006370][ T7208] bond0 (unregistering): Released all slaves [ 703.200577][ T9069] veth0_macvtap: entered promiscuous mode [ 703.406106][ T9069] veth1_macvtap: entered promiscuous mode [ 704.396709][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.423539][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.688196][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.700038][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.878414][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.917249][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.026451][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.037630][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.180918][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.485605][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.495671][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.513696][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.533082][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.782906][ T9252] serio: Serial port ptm0 [ 706.392727][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.420015][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.454642][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.473568][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.493824][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.535649][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.566087][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.631229][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 706.648994][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 706.657475][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 706.667872][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 706.676405][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 706.684142][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 706.700330][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.741083][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.785204][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.819807][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.866985][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.931062][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.987690][ T9256] tipc: Started in network mode [ 707.013708][ T9256] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 707.060645][ T9256] tipc: Enabled bearer , priority 10 [ 707.196826][ T9069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.300586][ T9069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.341365][ T9069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.378890][ T9069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.740266][ T7208] hsr_slave_0: left promiscuous mode [ 707.798360][ T7208] hsr_slave_1: left promiscuous mode [ 707.869608][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.920295][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.958675][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.992380][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.062739][ T7208] veth1_macvtap: left promiscuous mode [ 708.092861][ T7208] veth0_macvtap: left promiscuous mode [ 708.115757][ T7208] veth1_vlan: left promiscuous mode [ 708.132993][ T7208] veth0_vlan: left promiscuous mode [ 708.163717][ T5231] tipc: Node number set to 15444650 [ 708.731246][ T5232] Bluetooth: hci6: command tx timeout [ 709.189714][ T7208] team0 (unregistering): Port device team_slave_1 removed [ 709.322601][ T7208] team0 (unregistering): Port device team_slave_0 removed [ 710.860691][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 180 seconds [ 710.880726][ T5232] Bluetooth: hci6: command tx timeout [ 711.718083][ T9258] lo speed is unknown, defaulting to 1000 [ 712.969100][ T5232] Bluetooth: hci6: command tx timeout [ 715.050147][ T5232] Bluetooth: hci6: command tx timeout [ 715.502615][ T9149] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 715.567622][ T9149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 716.532947][ T9149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 716.691657][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.699728][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.726692][ T9149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 716.891159][ T7221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.140774][ T7221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.369844][ T9258] chnl_net:caif_netlink_parms(): no params data found [ 718.437569][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.609682][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.629381][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.674914][ T9258] bridge_slave_0: entered allmulticast mode [ 718.751519][ T9258] bridge_slave_0: entered promiscuous mode [ 718.836804][ T9149] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.993762][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.001230][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.017360][ T9258] bridge_slave_1: entered allmulticast mode [ 720.024877][ T9258] bridge_slave_1: entered promiscuous mode [ 720.063386][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.070568][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.175009][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.182167][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.265421][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.373343][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.356447][ T9258] team0: Port device team_slave_0 added [ 721.384595][ T9149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.422607][ T9258] team0: Port device team_slave_1 added [ 721.906017][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.913326][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.018369][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.051996][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.059383][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.085503][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.421869][ T9149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.472681][ T9258] hsr_slave_0: entered promiscuous mode [ 722.510028][ T9258] hsr_slave_1: entered promiscuous mode [ 722.549178][ T9258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.574754][ T9258] Cannot create hsr debugfs directory [ 724.566489][ T9149] veth0_vlan: entered promiscuous mode [ 724.578961][ T9149] veth1_vlan: entered promiscuous mode [ 724.602127][ T9149] veth0_macvtap: entered promiscuous mode [ 724.610593][ T9149] veth1_macvtap: entered promiscuous mode [ 724.623673][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.634634][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.644804][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.655500][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.668315][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.678955][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.688906][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.699497][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.713024][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.724590][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.734562][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.765824][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.777879][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.877590][ T9426] team0: Port device team_slave_1 removed [ 724.917121][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.945495][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.963746][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.985431][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.995436][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.011535][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.022520][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.044425][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.060018][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.101937][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.241717][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.376382][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.929265][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.147698][ T9149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.156754][ T9149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.183648][ T9149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.192423][ T9149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.404492][ T9258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.690135][ T9258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.946080][ T9258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.038728][ T7215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.053217][ T7215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.117805][ T9258] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.478890][ T5371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.518182][ T5371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.169624][ T9468] serio: Serial port ptm0 [ 730.893766][ T5232] Bluetooth: hci4: command tx timeout [ 732.207260][ T9258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 733.174668][ T5236] Bluetooth: hci4: command tx timeout [ 733.760077][ T9258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 733.804517][ T9258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 734.051699][ T9258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 734.153538][ T5270] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 734.199730][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.208861][ T9489] xt_TCPMSS: Only works on TCP SYN packets [ 734.269109][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.308492][ T9258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 734.319075][ T9258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.364973][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.372200][ T5328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.381392][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.388867][ T5328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.228134][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 735.247209][ T5270] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 735.274910][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.422453][ T5270] usb 5-1: config 0 descriptor?? [ 735.499777][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.621086][ T5270] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 736.214183][ T5270] gspca_sunplus: reg_w_riv err -110 [ 736.233233][ T5270] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 736.795238][ T9258] veth0_vlan: entered promiscuous mode [ 736.809191][ T9258] veth1_vlan: entered promiscuous mode [ 736.875688][ T9258] veth0_macvtap: entered promiscuous mode [ 736.895206][ T9258] veth1_macvtap: entered promiscuous mode [ 736.913111][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.924356][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.934277][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.539706][ T5231] usb 5-1: USB disconnect, device number 2 [ 737.567457][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.580461][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.591551][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.711702][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.770438][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.807181][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.087491][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.308050][ T9529] serio: Serial port ptm0 [ 738.875495][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.914639][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.952192][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.998657][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.086178][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.388554][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.808577][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.751'. [ 739.835022][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.996996][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.178636][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.189104][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.200185][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.210835][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.227541][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.237861][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.257166][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.267615][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.288448][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.311335][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.342661][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.368806][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.412864][ T9258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.422213][ T9258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.441028][ T9258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.459180][ T9258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.673130][ T2551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.878374][ T2551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.933891][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 210 seconds [ 742.155979][ T2551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.187592][ T2551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.436515][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 742.930356][ T9573] serio: Serial port ptm0 [ 748.566435][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.583353][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.719695][ T29] audit: type=1400 audit(1728491089.903:344): avc: denied { unmount } for pid=9149 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 749.582451][ T9629] fuse: Bad value for 'fd' [ 754.878451][ T9679] fuse: Bad value for 'fd' [ 755.302015][ T9675] xt_TCPMSS: Only works on TCP SYN packets [ 759.020340][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.800'. [ 759.419709][ T9712] random: crng reseeded on system resumption [ 764.126285][ T9744] xt_TCPMSS: Only works on TCP SYN packets [ 764.974244][ T7091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 764.983354][ T7091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 764.995385][ T7091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 765.007481][ T7091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 765.015245][ T7091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 765.022657][ T7091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 765.049439][ T9750] lo speed is unknown, defaulting to 1000 [ 766.673720][ T9768] serio: Serial port ptm0 [ 767.100455][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 767.283784][ T7091] Bluetooth: hci1: command tx timeout [ 769.368958][ T7091] Bluetooth: hci1: command tx timeout [ 769.967644][ T9781] random: crng reseeded on system resumption [ 770.786445][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.839061][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.905303][ T9750] bridge_slave_0: entered allmulticast mode [ 770.941334][ T9750] bridge_slave_0: entered promiscuous mode [ 770.976221][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.984556][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.991892][ T9750] bridge_slave_1: entered allmulticast mode [ 771.028121][ T9750] bridge_slave_1: entered promiscuous mode [ 771.566571][ T7091] Bluetooth: hci1: command tx timeout [ 771.629095][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 240 seconds [ 773.230363][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.381879][ T9792] xt_TCPMSS: Only works on TCP SYN packets [ 773.604713][ T7091] Bluetooth: hci1: command tx timeout [ 773.944844][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.955246][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.963567][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.972607][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.980443][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 773.987875][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.113636][ T9682] syz_tun (unregistering): left promiscuous mode [ 774.326663][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.100520][ T5236] Bluetooth: hci0: command tx timeout [ 776.171997][ T7221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.576013][ T7221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.764212][ T9810] tipc: Enabling of bearer rejected, already enabled [ 778.163811][ T5236] Bluetooth: hci0: command tx timeout [ 778.753076][ T7221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.788085][ T9799] lo speed is unknown, defaulting to 1000 [ 780.073169][ T9750] team0: Port device team_slave_0 added [ 780.243562][ T5236] Bluetooth: hci0: command tx timeout [ 780.552153][ T7221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.588161][ T9750] team0: Port device team_slave_1 added [ 780.723568][ T933] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 780.754995][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.781911][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.863600][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.903566][ T933] usb 4-1: Using ep0 maxpacket: 32 [ 780.918937][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.928844][ T933] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 780.936857][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.943525][ T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.017908][ T933] usb 4-1: config 0 descriptor?? [ 781.025318][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.032883][ T933] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 781.379563][ T9750] hsr_slave_0: entered promiscuous mode [ 781.409620][ T9750] hsr_slave_1: entered promiscuous mode [ 781.432035][ T9750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.437571][ T933] gspca_sunplus: reg_w_riv err -71 [ 781.453001][ T933] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 781.479780][ T9750] Cannot create hsr debugfs directory [ 781.502152][ T933] usb 4-1: USB disconnect, device number 4 [ 781.850276][ T7221] bridge_slave_1: left allmulticast mode [ 781.873557][ T7221] bridge_slave_1: left promiscuous mode [ 781.879360][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.936467][ T7221] bridge_slave_0: left allmulticast mode [ 781.942262][ T7221] bridge_slave_0: left promiscuous mode [ 781.954519][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.981417][ T7221] tipc: Resetting bearer [ 782.624654][ T5236] Bluetooth: hci0: command tx timeout [ 784.067829][ T7221] tipc: Disabling bearer [ 784.619501][ T7221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.711335][ T7221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.756419][ T7221] bond0 (unregistering): Released all slaves [ 785.020224][ T7221] tipc: Left network mode [ 785.540536][ T9799] chnl_net:caif_netlink_parms(): no params data found [ 786.068646][ T7221] batadv_slave_0: left promiscuous mode [ 786.204670][ T7221] hsr_slave_0: left promiscuous mode [ 786.216526][ T7221] hsr_slave_1: left promiscuous mode [ 786.222867][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.237782][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.249286][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.261776][ T29] audit: type=1107 audit(1728491127.453:345): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 786.281903][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.326139][ T7221] veth1_macvtap: left promiscuous mode [ 786.331704][ T7221] veth0_macvtap: left promiscuous mode [ 786.339918][ T7221] veth1_vlan: left promiscuous mode [ 786.351635][ T7221] veth0_vlan: left promiscuous mode [ 788.656650][ T7221] team0 (unregistering): Port device team_slave_1 removed [ 788.836600][ T7221] team0 (unregistering): Port device team_slave_0 removed [ 791.175282][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.190384][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.933737][ T9799] bridge_slave_0: entered allmulticast mode [ 791.942531][ T9799] bridge_slave_0: entered promiscuous mode [ 791.966025][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.973150][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.981022][ T9799] bridge_slave_1: entered allmulticast mode [ 791.988365][ T9799] bridge_slave_1: entered promiscuous mode [ 792.248271][ T9908] xt_TCPMSS: Only works on TCP SYN packets [ 792.305602][ T9550] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 792.628938][ T9799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.706214][ T9799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.747935][ T9750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 792.765543][ T9550] usb 3-1: Using ep0 maxpacket: 32 [ 792.783824][ T9550] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 792.814213][ T9750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 792.821565][ T9550] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 792.834356][ T9550] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 792.845426][ T9550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 792.855913][ T9550] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 792.869925][ T9550] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 792.884291][ T9550] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 792.937383][ T9550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.956506][ T9550] usb 3-1: config 0 descriptor?? [ 793.427772][ T9550] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 793.674595][ T9799] team0: Port device team_slave_0 added [ 793.682812][ T9750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 793.816113][ T9750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 793.951603][ T9799] team0: Port device team_slave_1 added [ 794.823480][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.856608][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.911352][ T9799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.993692][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.017359][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.103692][ T9799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.390561][ T9799] hsr_slave_0: entered promiscuous mode [ 795.438005][ T9799] hsr_slave_1: entered promiscuous mode [ 795.471231][ T9799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 795.498362][ T9799] Cannot create hsr debugfs directory [ 795.654604][ T933] usb 3-1: USB disconnect, device number 5 [ 795.663036][ T933] usblp0: removed [ 795.709630][ T29] audit: type=1400 audit(1728491136.853:346): avc: denied { write } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.742793][ T29] audit: type=1400 audit(1728491136.853:347): avc: denied { remove_name } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.019336][ T29] audit: type=1400 audit(1728491136.853:348): avc: denied { add_name } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.263922][ T7221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.057703][ T7221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.247465][ T7221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.517203][ T4675] udevd[4675]: worker [6814] /devices/virtual/block/nbd0 timeout; kill it [ 802.989221][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 270 seconds [ 803.173436][ C0] sched: DL replenish lagged too much [ 805.978289][ T4675] udevd[4675]: seq 22605 '/devices/virtual/block/nbd0' killed [ 809.545851][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 861.142397][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 300 seconds [ 861.467625][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 861.483635][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.744572][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.762009][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.166490][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.184041][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 978.528834][ T41] block nbd0: Possible stuck request ffff888025b70000: control (read@0,2048B). Runtime 330 seconds [ 987.507036][ T5236] Bluetooth: hci6: command tx timeout [ 989.941551][ T7091] Bluetooth: hci0: command tx timeout [ 989.947159][ T7091] Bluetooth: hci1: command tx timeout [ 994.328215][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.334952][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.158653][ T7221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.437813][ T9976] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 997.446844][ T9976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 997.458596][ T9976] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 997.469476][ T9976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 997.470729][ T9979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 997.487218][ T9976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 997.494631][ T9976] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 997.503855][ T9976] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 997.514408][ T9976] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 997.525389][ T9976] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 997.534086][ T9976] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 997.542904][ T9976] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 997.553158][ T9976] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 997.561559][ T9976] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 997.569278][ T9976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 997.577877][ T9976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 997.594010][ T9980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 997.601538][ T9980] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 997.608968][ T9980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 997.636792][ T9980] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 997.654119][ T9980] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 997.694943][ T9980] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 997.723849][ T9980] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 997.732709][ T9980] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 997.945759][ T9980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.956593][ T9980] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.969081][ T9980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 998.001978][ T9980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 998.014454][ T9980] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 998.024197][ T9980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 998.509301][ T9971] lo speed is unknown, defaulting to 1000 [ 998.689188][ T7221] bridge_slave_1: left allmulticast mode [ 998.704715][ T7221] bridge_slave_1: left promiscuous mode [ 998.713208][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.741398][ T7221] bridge_slave_0: left allmulticast mode [ 998.753705][ T7221] bridge_slave_0: left promiscuous mode [ 998.760343][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.803945][ T30] INFO: task udevd:6814 blocked for more than 147 seconds. [ 998.811182][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 998.819538][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 998.851318][ T30] task:udevd state:D stack:22752 pid:6814 tgid:6814 ppid:4675 flags:0x00004006 [ 998.880367][ T30] Call Trace: [ 998.933900][ T30] [ 998.938716][ T30] __schedule+0xef5/0x5750 [ 998.943262][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 998.955317][ T30] ? __pfx___schedule+0x10/0x10 [ 998.960894][ T30] ? schedule+0x298/0x350 [ 998.971039][ T30] ? __pfx_lock_release+0x10/0x10 [ 998.977731][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 998.989430][ T30] ? lock_acquire+0x2f/0xb0 [ 998.996315][ T30] ? schedule+0x1fd/0x350 [ 999.001479][ T30] schedule+0xe7/0x350 [ 999.012897][ T30] io_schedule+0xbf/0x130 [ 999.018617][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 999.026332][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 999.032119][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 999.039876][ T30] ? filemap_read_folio+0xe2/0x2a0 [ 999.045525][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 999.051221][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 999.056976][ T30] ? __filemap_get_folio+0x2a5/0xaf0 [ 999.062425][ T30] do_read_cache_folio+0x342/0x5c0 [ 999.068376][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 999.074061][ T30] read_part_sector+0xd3/0x410 [ 999.078945][ T30] adfspart_check_POWERTEC+0x8f/0x710 [ 999.084661][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 999.091822][ T30] ? bdev_disk_changed+0x48c/0x1520 [ 999.097394][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 999.103663][ T30] bdev_disk_changed+0x71f/0x1520 [ 999.108849][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 999.114494][ T30] ? __pfx_ilookup+0x10/0x10 [ 999.119222][ T30] blkdev_get_whole+0x187/0x290 [ 999.124279][ T30] bdev_open+0x2c7/0xe20 [ 999.128729][ T30] blkdev_open+0x36c/0x450 [ 999.133245][ T30] do_dentry_open+0x6ca/0x1530 [ 999.141818][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 999.148125][ T30] vfs_open+0x82/0x3f0 [ 999.152326][ T30] ? may_open+0x1f2/0x400 [ 999.157139][ T30] path_openat+0x1e6a/0x2d60 [ 999.161898][ T30] ? __pfx_path_openat+0x10/0x10 [ 999.167081][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 999.172426][ T30] do_filp_open+0x1dc/0x430 [ 999.177239][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 999.182387][ T30] ? find_held_lock+0x2d/0x110 [ 999.187449][ T30] ? _raw_spin_unlock+0x28/0x50 [ 999.192426][ T30] ? alloc_fd+0x2d7/0x6c0 [ 999.198038][ T30] do_sys_openat2+0x17a/0x1e0 [ 999.203365][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 999.216103][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 999.221273][ T30] __x64_sys_openat+0x175/0x210 [ 999.226733][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 999.232271][ T30] do_syscall_64+0xcd/0x250 [ 999.237385][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.243365][ T30] RIP: 0033:0x7f91003169a4 [ 999.248464][ T30] RSP: 002b:00007fff82d94bc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 999.257966][ T30] RAX: ffffffffffffffda RBX: 000055eab82e1fb0 RCX: 00007f91003169a4 [ 999.266611][ T30] RDX: 00000000000a0800 RSI: 000055eab822dd70 RDI: 00000000ffffff9c [ 999.275043][ T30] RBP: 000055eab822dd70 R08: 0000000000000001 R09: 00007f91007cd080 [ 999.283088][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 999.293241][ T30] R13: 000055eab821f450 R14: 0000000000000001 R15: 000055eab82122c0 [ 999.306761][ T30] [ 999.309983][ T30] [ 999.309983][ T30] Showing all locks held in the system: [ 999.318795][ T30] 1 lock held by khungtaskd/30: [ 999.324446][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 999.339843][ T30] 3 locks held by kworker/u8:3/52: [ 999.345434][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 999.360417][ T30] #1: ffffc90000bd7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 999.380877][ T30] #2: ffffffff8fee1268 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 999.399701][ T30] 2 locks held by dhcpcd/4889: [ 999.405834][ T30] #0: ffff88805b0626c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x970 [ 999.417180][ T30] #1: ffffffff8fee1268 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x18f/0x1f0 [ 999.441356][ T30] 2 locks held by getty/4972: [ 999.449763][ T30] #0: ffff88814bd610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 999.465793][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 999.481483][ T30] 3 locks held by kworker/1:7/5300: [ 999.487256][ T30] #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 999.508053][ T30] #1: ffffc90004427d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 999.522244][ T30] #2: ffffffff8fee1268 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 999.534627][ T30] 1 lock held by udevd/6814: [ 999.539347][ T30] #0: ffff888025a9a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe20 [ 999.549328][ T30] 5 locks held by kworker/u8:20/7221: [ 999.554894][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 999.565729][ T30] #1: ffffc90004f2fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 999.576159][ T30] #2: ffffffff8fecb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 999.585951][ T30] #3: ffffffff8fee1268 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xb40 [ 999.595393][ T30] #4: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 999.607800][ T30] 3 locks held by kworker/u8:1/9964: [ 999.613200][ T30] #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 999.623700][ T30] #1: ffffc90000bc7d80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 999.636973][ T30] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 999.647583][ T30] 6 locks held by syz-executor/9970: [ 999.652976][ T30] #0: ffffffff8fecb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 999.663000][ T30] #1: ffffffff8fb1be50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 999.673495][ T30] #2: ffffffff8fb1bbd0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 999.684110][ T9979] Bluetooth: hci2: command tx timeout [ 999.691376][ T30] #3: ffff888065850f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 999.702790][ T30] #4: ffff888065851230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x5d/0x200 [ 999.714622][ T30] #5: ffffffff8fee1268 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x118/0xb50 [ 999.724516][ T30] 2 locks held by syz-executor/9971: [ 999.729949][ T30] #0: ffffffff8fecb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 999.739987][ T30] #1: ffffffff8fee1268 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x790 [ 999.750036][ T30] 4 locks held by syz-executor/9972: [ 999.758063][ T30] #0: ffffffff8fecb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 999.768184][ T9979] Bluetooth: hci8: command tx timeout [ 999.768986][ T9979] Bluetooth: hci7: command tx timeout [ 999.774003][ T9980] Bluetooth: hci9: command tx timeout [ 999.786220][ T30] #1: ffffffff8fb1be50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 999.796195][ T30] #2: ffffffff8fb1bbd0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 999.811741][ T30] #3: ffff888065850f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 999.831493][ T30] 4 locks held by syz-executor/9973: [ 999.838634][ T30] #0: ffffffff8fecb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 999.854836][ T30] #1: ffffffff8fb1be50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 999.869612][ T30] #2: ffffffff8fb1bbd0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 999.881303][ T30] #3: ffff888065850f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 999.892984][ T30] 4 locks held by syz-executor/9982: [ 999.898535][ T30] #0: ffffffff8fecb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 999.908180][ T30] #1: ffffffff8fb1be50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 999.919804][ T30] #2: ffffffff8fb1bbd0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 999.930349][ T30] #3: ffff888065850f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 999.941890][ T30] [ 999.949683][ T30] ============================================= [ 999.949683][ T30] [ 999.962484][ T30] NMI backtrace for cpu 0 [ 999.966866][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 999.977393][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 999.987520][ T30] Call Trace: [ 999.990817][ T30] [ 999.993748][ T30] dump_stack_lvl+0x116/0x1f0 [ 999.998432][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1000.003366][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1000.009384][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1000.015405][ T30] watchdog+0xf0c/0x1240 [ 1000.019688][ T30] ? __pfx_watchdog+0x10/0x10 [ 1000.024400][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1000.029601][ T30] ? __kthread_parkme+0x148/0x220 [ 1000.034644][ T30] ? __pfx_watchdog+0x10/0x10 [ 1000.039344][ T30] kthread+0x2c1/0x3a0 [ 1000.043514][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1000.048731][ T30] ? __pfx_kthread+0x10/0x10 [ 1000.053333][ T30] ret_from_fork+0x45/0x80 [ 1000.057781][ T30] ? __pfx_kthread+0x10/0x10 [ 1000.062370][ T30] ret_from_fork_asm+0x1a/0x30 [ 1000.067164][ T30] [ 1000.071589][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1000.077716][ C1] NMI backtrace for cpu 1 [ 1000.077730][ C1] CPU: 1 UID: 0 PID: 7203 Comm: kworker/u8:2 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 1000.077757][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1000.077770][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1000.077803][ C1] RIP: 0010:__lock_acquire+0x7/0x3ce0 [ 1000.077828][ C1] Code: 00 e9 0e ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 89 cb 41 56 <41> 89 f6 41 55 41 54 49 89 fc 55 44 89 c5 53 89 d3 48 81 ec f0 00 [ 1000.077849][ C1] RSP: 0018:ffffc90004d478c0 EFLAGS: 00000006 [ 1000.077865][ C1] RAX: 0000000000000001 RBX: 1ffff920009a8f21 RCX: 0000000000000002 [ 1000.077880][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e1b8340 [ 1000.077894][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 1000.077907][ C1] R10: ffffffff905f37cf R11: 0000000000000002 R12: 0000000000000000 [ 1000.077921][ C1] R13: ffffffff8e1b8340 R14: 0000000000000000 R15: 0000000000000000 [ 1000.077935][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1000.077964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1000.077979][ C1] CR2: 000000002035c000 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 1000.077993][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1000.078006][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1000.078019][ C1] Call Trace: [ 1000.078026][ C1] [ 1000.078035][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1000.078059][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1000.078088][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1000.078111][ C1] ? __lock_acquire+0x7/0x3ce0 [ 1000.078130][ C1] ? default_do_nmi+0x6a/0x160 [ 1000.078151][ C1] ? exc_nmi+0x170/0x1e0 [ 1000.078169][ C1] ? end_repeat_nmi+0xf/0x53 [ 1000.078199][ C1] ? __lock_acquire+0x7/0x3ce0 [ 1000.078219][ C1] ? __lock_acquire+0x7/0x3ce0 [ 1000.078239][ C1] ? __lock_acquire+0x7/0x3ce0 [ 1000.078258][ C1] [ 1000.078265][ C1] [ 1000.078272][ C1] lock_acquire.part.0+0x11b/0x380 [ 1000.078293][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfa6/0x2f40 [ 1000.078341][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1000.078362][ C1] ? rcu_is_watching+0x12/0xc0 [ 1000.078386][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 1000.078412][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfa6/0x2f40 [ 1000.078441][ C1] ? lock_acquire+0x2f/0xb0 [ 1000.078459][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfa6/0x2f40 [ 1000.078488][ C1] ieee80211_ibss_rx_queued_mgmt+0xfac/0x2f40 [ 1000.078516][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfa6/0x2f40 [ 1000.078544][ C1] ? hlock_class+0x4e/0x130 [ 1000.078567][ C1] ? mark_lock+0xb5/0xc60 [ 1000.078588][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1000.078616][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 1000.078637][ C1] ? find_held_lock+0x2d/0x110 [ 1000.078660][ C1] ? find_held_lock+0x2d/0x110 [ 1000.078686][ C1] ? kcov_remote_start+0x370/0x6e0 [ 1000.078708][ C1] ? mark_held_locks+0x9f/0xe0 [ 1000.078728][ C1] ? kcov_remote_start+0x3cf/0x6e0 [ 1000.078751][ C1] ieee80211_iface_work+0xc0b/0xf00 [ 1000.078781][ C1] cfg80211_wiphy_work+0x3d9/0x550 [ 1000.078809][ C1] process_one_work+0x9c5/0x1ba0 [ 1000.078834][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1000.078861][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1000.078885][ C1] ? assign_work+0x1a0/0x250 [ 1000.078914][ C1] worker_thread+0x6c8/0xf00 [ 1000.078940][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1000.078965][ C1] kthread+0x2c1/0x3a0 [ 1000.078987][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1000.079010][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.079034][ C1] ret_from_fork+0x45/0x80 [ 1000.079054][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.079077][ C1] ret_from_fork_asm+0x1a/0x30 [ 1000.079111][ C1] [ 1000.137525][ T9980] Bluetooth: hci4: command tx timeout [ 1000.203461][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1000.203481][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 1000.203510][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1000.203524][ T30] Call Trace: [ 1000.203532][ T30] [ 1000.203542][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1000.203579][ T30] panic+0x71d/0x800 [ 1000.203612][ T30] ? __pfx_panic+0x10/0x10 [ 1000.203642][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1000.203670][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1000.203703][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1000.203729][ T30] ? watchdog+0xd76/0x1240 [ 1000.203756][ T30] ? watchdog+0xd69/0x1240 [ 1000.203781][ T30] watchdog+0xd87/0x1240 [ 1000.203808][ T30] ? __pfx_watchdog+0x10/0x10 [ 1000.203828][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1000.203859][ T30] ? __kthread_parkme+0x148/0x220 [ 1000.203889][ T30] ? __pfx_watchdog+0x10/0x10 [ 1000.203911][ T30] kthread+0x2c1/0x3a0 [ 1000.203936][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1000.203961][ T30] ? __pfx_kthread+0x10/0x10 [ 1000.203989][ T30] ret_from_fork+0x45/0x80 [ 1000.204010][ T30] ? __pfx_kthread+0x10/0x10 [ 1000.204038][ T30] ret_from_fork_asm+0x1a/0x30 [ 1000.204081][ T30] [ 1000.210618][ T30] Kernel Offset: disabled