last executing test programs: 20.536849263s ago: executing program 1 (id=9082): capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 20.287312785s ago: executing program 1 (id=9084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d80)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 20.157762243s ago: executing program 1 (id=9085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000006e00)={0x0, 0xeff9, &(0x7f0000006e40)={&(0x7f0000006e80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 20.114939646s ago: executing program 1 (id=9086): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010d804df00000000000001090224"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) preadv(r2, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) pread64(r1, &(0x7f0000000240)=""/4, 0x4, 0x4) 17.0724451s ago: executing program 1 (id=9124): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x56, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000280)=0x7b1) 17.028245459s ago: executing program 1 (id=9125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 15.254435557s ago: executing program 4 (id=9155): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) open(&(0x7f00000003c0)='./file1\x00', 0x0, 0x181) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x20) 15.251190704s ago: executing program 4 (id=9157): timer_create(0x0, &(0x7f0000000580)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000480)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 14.956494206s ago: executing program 4 (id=9159): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'multiq3\x00', [0x140, 0x1f, 0x7, 0x2, 0x10000004, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x3, 0x3, 0xa, 0x29, 0x72ef, 0xffffffff, 0x70, 0x6, 0x2, 0xfffffff9, 0x6, 0x4, 0x9, 0x1000, 0x8, 0x471, 0xffffff7f, 0x5, 0x8001, 0x6]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000380)) 14.955190265s ago: executing program 4 (id=9160): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) 14.882377424s ago: executing program 4 (id=9162): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000000c0)="b0", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000340)="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", 0x3b6, 0xbcff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000700)="cd", 0x1, 0x8010, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) accept(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./debug/tracing/options/context-info\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x704b3000) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 14.880789038s ago: executing program 0 (id=9163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000700)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005"], 0x4a) 14.679477869s ago: executing program 0 (id=9165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$kcm(0x11, 0x2, 0x0) close(r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000100)=r2, 0x8) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000180)=r1, 0x8) 14.596427307s ago: executing program 0 (id=9167): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000440)={0x0, r1, 0x6, 0x400, 0x10001, 0x5}) 14.596088893s ago: executing program 4 (id=9168): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(0xffffffffffffffff, 0x89f0, 0x0) 14.51554032s ago: executing program 0 (id=9170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f000011c000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40) 14.373642225s ago: executing program 32 (id=9168): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(0xffffffffffffffff, 0x89f0, 0x0) 14.369856418s ago: executing program 0 (id=9172): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000002ac0)='INVITE sip:x SIP/2.0\r\nC', 0x17, 0x0, &(0x7f0000002b00)={0x2, 0x4e20, @loopback}, 0x10) 14.23258398s ago: executing program 0 (id=9174): socket(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='3', 0x1) 6.703118193s ago: executing program 2 (id=9231): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0x24, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001540)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.656543354s ago: executing program 2 (id=9233): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) openat$ptp0(0xffffffffffffff9c, 0x0, 0x242, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000400)={0x63, 0x6, 0x7, 0x9, 0x7, 0x9, 0x651, 0x8, 0x9657, 0x800000000003, 0x7fffffff, 0x1, 0x1, 0x7fffffff, 0x80000000000000, 0x8, 0x48, 0x3, 0x94d6, 0xd, 0x0, 0x100000000100008, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x8, 0x2000000000000}) 6.44426423s ago: executing program 2 (id=9235): socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040010) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x80580, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000002c0)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000003c0)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000400)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) close_range(r0, r2, 0x0) ppoll(&(0x7f0000000440)=[{r5, 0x90}], 0x1, 0x0, 0x0, 0x0) 6.336561646s ago: executing program 5 (id=9237): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xed, 0x3a, ')', 0x3a, '', 0x3a, './sys/block/md0/md/new_dev'}, 0x3b) 6.239950965s ago: executing program 5 (id=9238): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000340)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg(r0, 0x0, 0x2000) 6.239231264s ago: executing program 5 (id=9239): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="1b000200080011", 0x7) 6.194900266s ago: executing program 5 (id=9240): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800210d, 0x0, 0x20010, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) 6.080190692s ago: executing program 5 (id=9241): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x40000, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.724279643s ago: executing program 5 (id=9242): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0x24, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001540)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.546827354s ago: executing program 33 (id=9242): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0x24, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001540)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.537276014s ago: executing program 2 (id=9244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x4001}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080040"], 0x4a) 5.338401272s ago: executing program 2 (id=9245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000002070101"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20024000) 5.23343354s ago: executing program 2 (id=9246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2', 0x5) 2.245487959s ago: executing program 3 (id=9257): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 1.784542564s ago: executing program 34 (id=9125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 1.287996111s ago: executing program 3 (id=9259): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40102, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x2c10, 0x0, 0x0, @by_dev, [@raid={0x0, 0x1840, 0x0, 0x80, 'raid\x00', {'raid1', 0x20, '3 64 rebuild 0', 0x20, 0x1, [{0x20, @dev=@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}}]}}]}) 1.150601679s ago: executing program 3 (id=9260): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) pread64(r1, &(0x7f0000000240)=""/4, 0x4, 0x4) 1.071723205s ago: executing program 3 (id=9261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xf0, 0x0, 0x0}, 0x4fc}]}) 955.700598ms ago: executing program 3 (id=9262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) bind(0xffffffffffffffff, &(0x7f00000003c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(0xffffffffffffffff, 0x5) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080082"], 0x4a) 837.646312ms ago: executing program 3 (id=9263): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x429}}, {0x0, 0x0}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 70.823657ms ago: executing program 6 (id=9243): mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000001c0)='./mnt\x00') lgetxattr(&(0x7f0000000200)='./dev\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00', 0x0, 0x0) 0s ago: executing program 6 (id=9264): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 2956.905173][ T2486] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2956.905201][ T2486] usb 5-1: can't read configurations, error -71 [ 2957.046784][ T7045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2957.082589][ T7047] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2957.098750][ T7045] md: array md1 already has disks! [ 2957.155132][ T7047] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2957.249055][ T7047] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2957.337269][ T7047] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2957.557941][ T1491] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2957.558003][ T1491] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2957.558021][ T1491] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2957.567758][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.082628][ T7052] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8863'. [ 2958.103870][ T5545] Bluetooth: hci3: connection err: -111 [ 2960.026293][ T7064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2960.052341][ T7067] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2960.069205][ T7068] fuse: Bad value for 'fd' [ 2960.071139][ T7068] fuse: Bad value for 'fd' [ 2960.237943][ T7070] 9p: Could not find request transport: fd01777777777777777777777 [ 2961.021269][ T7081] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 2963.764872][ T7092] pim6reg: entered allmulticast mode [ 2963.903931][ T7093] pim6reg: left allmulticast mode [ 2967.856899][ T6817] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2968.016932][ T6817] usb 5-1: Using ep0 maxpacket: 8 [ 2968.022010][ T6817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2968.022050][ T6817] usb 5-1: New USB device found: idVendor=1164, idProduct=0871, bcdDevice=2f.5a [ 2968.023232][ T6817] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2968.023271][ T6817] usb 5-1: can't read configurations, error -71 [ 2969.967416][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8877'. [ 2971.601580][ T7137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2971.958626][ T7137] md: array md2 already initialised! [ 2972.022243][ T7141] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8881'. [ 2973.176294][ T7143] pim6reg: entered allmulticast mode [ 2974.389306][ T7150] pim6reg: left allmulticast mode [ 2974.837917][ T7153] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2974.877154][ T7157] netlink: 'syz.0.8889': attribute type 25 has an invalid length. [ 2974.877175][ T7157] netlink: 'syz.0.8889': attribute type 3 has an invalid length. [ 2974.877204][ T7157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8889'. [ 2974.985551][ T7153] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2975.126622][ T7153] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2975.176377][ T1252] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2975.272797][ T7153] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2975.440614][ T1252] usb 2-1: Using ep0 maxpacket: 8 [ 2975.489103][ T1252] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2975.489128][ T1252] usb 2-1: New USB device found: idVendor=1164, idProduct=0871, bcdDevice=2f.5a [ 2975.493263][ T1252] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2975.493296][ T1252] usb 2-1: can't read configurations, error -71 [ 2975.560432][ T42] nvmet: connect request for invalid subsystem testsubsys! [ 2975.561189][ T7157] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 2975.728147][ T6064] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.728186][ T6064] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.747000][T27966] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.747046][T27966] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.211163][ T7189] pim6reg: entered allmulticast mode [ 2980.315993][ T7190] pim6reg: left allmulticast mode [ 2982.775652][ T7202] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2982.839071][ T7202] md: array md4 already has disks! [ 2983.116204][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8893'. [ 2984.989532][ T1252] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2985.152139][ T1252] usb 2-1: Using ep0 maxpacket: 8 [ 2985.166319][ T1252] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2985.166363][ T1252] usb 2-1: New USB device found: idVendor=1164, idProduct=0871, bcdDevice=2f.5a [ 2985.185776][ T1252] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2985.185810][ T1252] usb 2-1: can't read configurations, error -71 [ 2985.344352][ T7218] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2985.377178][ T7218] md: array md3 already initialised! [ 2986.678579][ T2486] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2986.813393][ T7227] pim6reg: entered allmulticast mode [ 2986.837586][ T2486] usb 3-1: Using ep0 maxpacket: 16 [ 2986.876778][ T2486] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2986.889736][ T7228] pim6reg: left allmulticast mode [ 2986.915020][ T2486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2986.998978][ T2486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.999028][ T2486] usb 3-1: Product: syz [ 2986.999088][ T2486] usb 3-1: Manufacturer: syz [ 2986.999161][ T2486] usb 3-1: SerialNumber: syz [ 2987.174052][ T2486] usb 3-1: config 0 descriptor?? [ 2987.310706][ T2486] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2987.310782][ T2486] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2989.378395][ T2486] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2989.445391][ T2486] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2989.445420][ T2486] em28xx 3-1:0.0: board has no eeprom [ 2989.479975][ T7239] netlink: 'syz.4.8903': attribute type 25 has an invalid length. [ 2989.479994][ T7239] netlink: 'syz.4.8903': attribute type 3 has an invalid length. [ 2989.480006][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8903'. [ 2989.527130][ T2486] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2989.527157][ T2486] em28xx 3-1:0.0: dvb set to bulk mode. [ 2989.533716][ T2486] usb 3-1: USB disconnect, device number 124 [ 2989.536740][ T2486] em28xx 3-1:0.0: Disconnecting em28xx [ 2989.536847][ T1252] em28xx 3-1:0.0: Binding DVB extension [ 2990.765049][T11901] nvmet: connect request for invalid subsystem testsubsys! [ 2990.767697][ T7239] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 2990.793920][ T1252] em28xx 3-1:0.0: Registering input extension [ 2990.794144][ T2486] em28xx 3-1:0.0: Closing input extension [ 2990.815751][ T6817] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2990.835175][ T2486] em28xx: Freeing device [ 2990.976032][ T6817] usb 2-1: Using ep0 maxpacket: 8 [ 2991.005899][ T6817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2991.005943][ T6817] usb 2-1: New USB device found: idVendor=1164, idProduct=0871, bcdDevice=2f.5a [ 2991.014660][ T6817] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2991.014693][ T6817] usb 2-1: can't read configurations, error -71 [ 2991.070645][ T7255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2994.058145][ T2486] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2994.228533][ T2486] usb 1-1: Using ep0 maxpacket: 16 [ 2994.229198][ T2486] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2994.230132][ T2486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2994.259918][ T2486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2994.259944][ T2486] usb 1-1: Product: syz [ 2994.259957][ T2486] usb 1-1: Manufacturer: syz [ 2994.259971][ T2486] usb 1-1: SerialNumber: syz [ 2994.286401][ T2486] usb 1-1: config 0 descriptor?? [ 2994.297616][ T2486] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2994.297648][ T2486] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 2995.471482][ T2486] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2996.501665][ T2486] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2996.502346][ T2486] em28xx 1-1:0.0: board has no eeprom [ 2996.844160][ T2486] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2996.844266][ T2486] em28xx 1-1:0.0: dvb set to bulk mode. [ 2996.893698][T27739] em28xx 1-1:0.0: Binding DVB extension [ 2996.956500][ T2486] usb 1-1: USB disconnect, device number 115 [ 2996.975319][T27739] em28xx 1-1:0.0: Registering input extension [ 2996.996961][ T2486] em28xx 1-1:0.0: Disconnecting em28xx [ 2996.996986][ T2486] em28xx 1-1:0.0: Closing input extension [ 2997.042485][ T2486] em28xx: Freeing device [ 2997.141319][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8918'. [ 2997.451445][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8919'. [ 2998.443368][ T7299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2998.517509][ T7287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.471138][ T2486] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2999.659255][ T7287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.696873][ T2486] usb 4-1: Using ep0 maxpacket: 8 [ 2999.701629][ T2486] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2999.701668][ T2486] usb 4-1: New USB device found: idVendor=1164, idProduct=0871, bcdDevice=2f.5a [ 2999.702463][ T2486] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2999.702491][ T2486] usb 4-1: can't read configurations, error -71 [ 2999.832975][ T7287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.980496][ T7287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3000.074218][ T7311] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8917'. [ 3000.987090][ T1491] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3000.987130][ T1491] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3000.987158][ T1491] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3000.987187][ T1491] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.316948][ T1252] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 3002.467693][ T1252] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 3002.479731][ T1252] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3002.479771][ T1252] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3002.479792][ T1252] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3002.479805][ T1252] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3002.479827][ T1252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3004.030197][ T1252] gud 1-1:1.0: Failed to add properties (error=-71) [ 3004.030230][ T1252] gud 1-1:1.0: probe with driver gud failed with error -71 [ 3004.075206][ T1252] usb 1-1: USB disconnect, device number 116 [ 3004.542819][ T7341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3005.317442][ T7352] netlink: 'syz.4.8926': attribute type 25 has an invalid length. [ 3005.317457][ T7352] netlink: 'syz.4.8926': attribute type 3 has an invalid length. [ 3005.317465][ T7352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8926'. [ 3005.408340][ T7354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8931'. [ 3005.799410][ T13] nvmet: connect request for invalid subsystem testsubsys! [ 3005.799541][ T7352] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 3006.597985][ T7365] fuse: Bad value for 'fd' [ 3008.501258][ T7369] 9p: Could not find request transport: fd01777777777777777777777 [ 3009.747000][ T1252] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3010.987535][ T1252] usb 1-1: Using ep0 maxpacket: 8 [ 3010.991125][ T1252] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3010.991165][ T1252] usb 1-1: New USB device found: idVendor=1164, idProduct=0871, bcdDevice=2f.5a [ 3010.992945][ T1252] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3010.992977][ T1252] usb 1-1: can't read configurations, error -71 [ 3011.287171][ T2486] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 3011.371772][ T7387] netlink: 'syz.2.8938': attribute type 25 has an invalid length. [ 3011.371793][ T7387] netlink: 'syz.2.8938': attribute type 3 has an invalid length. [ 3011.371804][ T7387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8938'. [ 3011.433395][ T6064] nvmet: connect request for invalid subsystem testsubsys! [ 3011.433524][ T7387] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 3011.447943][ T2486] usb 4-1: Using ep0 maxpacket: 32 [ 3011.448510][ T2486] usb 4-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 3011.449366][ T2486] usb 4-1: config 51 has an invalid interface number: 208 but max is 0 [ 3011.449397][ T2486] usb 4-1: config 51 has no interface number 0 [ 3011.449422][ T2486] usb 4-1: config 51 interface 208 has no altsetting 0 [ 3011.453477][ T2486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.453497][ T2486] usb 4-1: Product: syz [ 3011.453509][ T2486] usb 4-1: Manufacturer: syz [ 3011.453521][ T2486] usb 4-1: SerialNumber: syz [ 3012.768418][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3012.768842][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3012.791475][ T2486] f81534a_ctrl 4-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 3012.800907][ T2486] usb 4-1: USB disconnect, device number 125 [ 3012.822768][ T7237] udevd[7237]: setting mode of /dev/bus/usb/004/125 to 020664 failed: No such file or directory [ 3012.822862][ T7237] udevd[7237]: setting owner of /dev/bus/usb/004/125 to uid=0, gid=0 failed: No such file or directory [ 3013.244553][ T7400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3013.267521][ T7402] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3013.277455][ T7400] md: array md4 already has disks! [ 3013.297358][ T7402] md: array md0 already initialised! [ 3013.436996][ T1252] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3013.549741][ T7411] netlink: 'syz.0.8947': attribute type 25 has an invalid length. [ 3013.549763][ T7411] netlink: 'syz.0.8947': attribute type 3 has an invalid length. [ 3013.549774][ T7411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8947'. [ 3013.587217][ T1252] usb 3-1: Using ep0 maxpacket: 16 [ 3013.587955][ T1252] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3013.589782][ T1252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3013.592497][ T1252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3013.592520][ T1252] usb 3-1: Product: syz [ 3013.592534][ T1252] usb 3-1: Manufacturer: syz [ 3013.592548][ T1252] usb 3-1: SerialNumber: syz [ 3013.612416][ T1252] usb 3-1: config 0 descriptor?? [ 3014.288259][ T7415] fuse: Bad value for 'fd' [ 3014.831808][ T1252] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3014.831834][ T1252] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 3014.932809][T26143] nvmet: connect request for invalid subsystem testsubsys! [ 3014.937461][ T7411] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 3014.967946][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 3015.458621][ T7429] 9p: Could not find request transport: fd01777777777777777777777 [ 3015.487315][ T1252] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3015.899879][ T29] audit: type=1400 audit(1792970230.256:1017): avc: denied { read } for pid=7452 comm="syz.4.8960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3016.073355][ T7458] netlink: 2054 bytes leftover after parsing attributes in process `syz.3.8962'. [ 3016.087052][T30809] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3016.237368][T30809] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 3016.238666][T30809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3016.238703][T30809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3016.238725][T30809] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3016.238759][T30809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3016.511634][ T1252] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 3016.511663][ T1252] em28xx 3-1:0.0: board has no eeprom [ 3016.576985][ T1252] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 3016.577003][ T1252] em28xx 3-1:0.0: dvb set to bulk mode. [ 3016.581063][ T2486] em28xx 3-1:0.0: Binding DVB extension [ 3016.590522][ T1252] usb 3-1: USB disconnect, device number 125 [ 3016.591951][ T1252] em28xx 3-1:0.0: Disconnecting em28xx [ 3016.655309][ T2486] em28xx 3-1:0.0: Registering input extension [ 3016.656084][ T1252] em28xx 3-1:0.0: Closing input extension [ 3016.673469][ T1252] em28xx: Freeing device [ 3016.899566][ T7472] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8968'. [ 3017.090771][ T7484] netlink: 'syz.1.8974': attribute type 33 has an invalid length. [ 3017.090800][ T7484] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8974'. [ 3017.206589][ T7493] IPv6: Can't replace route, no match found [ 3017.357687][ T7502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8982'. [ 3017.530011][ T29] audit: type=1400 audit(1792970231.886:1018): avc: denied { create } for pid=7513 comm="syz.1.8988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3017.703528][ T29] audit: type=1400 audit(1792970232.056:1019): avc: denied { write } for pid=7521 comm="syz.1.8993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3017.966038][T21760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3017.981327][T21760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3017.989182][T21760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3017.999038][T21760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3017.999544][T21760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3018.053242][ T7542] netlink: 'syz.3.9000': attribute type 29 has an invalid length. [ 3018.102538][ T29] audit: type=1400 audit(1792970232.456:1020): avc: denied { name_bind } for pid=7543 comm="syz.3.9001" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 3018.294005][ T29] audit: type=1400 audit(1792970232.646:1021): avc: denied { name_bind } for pid=7550 comm="syz.3.9004" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 3018.295685][ T29] audit: type=1400 audit(1792970232.646:1022): avc: denied { name_connect } for pid=7550 comm="syz.3.9004" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 3018.318794][ T29] audit: type=1400 audit(1792970232.676:1023): avc: denied { read } for pid=7550 comm="syz.3.9004" laddr=172.20.20.170 lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3018.679695][ T7536] rxe_eth0 speed is unknown, defaulting to 1000 [ 3018.866404][ T7536] lo speed is unknown, defaulting to 1000 [ 3018.909644][ T1252] usb 1-1: USB disconnect, device number 119 [ 3019.411788][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 3019.411872][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 3019.411980][ T7536] bridge_slave_0: entered allmulticast mode [ 3019.414527][ T7536] bridge_slave_0: entered promiscuous mode [ 3019.418616][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 3019.418684][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 3019.418935][ T7536] bridge_slave_1: entered allmulticast mode [ 3019.420025][ T7536] bridge_slave_1: entered promiscuous mode [ 3019.458192][ T7536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3019.461619][ T7536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3019.501969][ T7536] team0: Port device team_slave_0 added [ 3019.509583][ T7536] team0: Port device team_slave_1 added [ 3019.556853][ T1252] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3019.563422][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3019.563437][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3019.563460][ T7536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3019.568053][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3019.568064][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3019.568084][ T7536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3019.582282][T22247] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 3019.648803][ T7536] hsr_slave_0: entered promiscuous mode [ 3019.649467][ T7536] hsr_slave_1: entered promiscuous mode [ 3019.649943][ T7536] debugfs: 'hsr0' already exists in 'hsr' [ 3019.649957][ T7536] Cannot create hsr debugfs directory [ 3019.707855][ T1252] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 3019.709040][ T1252] usb 2-1: config index 0 descriptor too short (expected 55488, got 32) [ 3019.709063][ T1252] usb 2-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 3019.709082][ T1252] usb 2-1: config 0 has no interfaces? [ 3019.709107][ T1252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.715216][ T1252] usb 2-1: config 0 descriptor?? [ 3019.836871][T22247] usb 4-1: Using ep0 maxpacket: 32 [ 3019.837832][T22247] usb 4-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 3019.838766][T22247] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 3019.841570][T22247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3019.841593][T22247] usb 4-1: Product: syz [ 3019.841607][T22247] usb 4-1: Manufacturer: syz [ 3019.841621][T22247] usb 4-1: SerialNumber: syz [ 3019.845646][T22247] usb 4-1: config 0 descriptor?? [ 3019.912620][T22247] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 3019.914080][T22247] dvb-usb: bulk message failed: -22 (2/0) [ 3019.937254][T22247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3019.938644][T22247] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 3019.938688][T22247] usb 4-1: media controller created [ 3019.953207][ T7536] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3019.990087][T22247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3020.029383][T30809] usb 2-1: USB disconnect, device number 11 [ 3020.066919][T22247] usb 4-1: selecting invalid altsetting 7 [ 3020.066938][T22247] cxusb: set interface failed [ 3020.066948][T22247] dvb-usb: bulk message failed: -22 (1/0) [ 3020.088123][ T5545] Bluetooth: hci0: command tx timeout [ 3020.126679][ T7605] dvb-usb: bulk message failed: -22 (3/0) [ 3020.142003][T22247] DVB: Unable to find symbol lgdt330x_attach() [ 3020.142017][T22247] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 3020.143694][ T7536] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3020.227852][T22247] rc_core: IR keymap rc-dvico-portable not found [ 3020.227870][T22247] Registered IR keymap rc-empty [ 3020.232592][T22247] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 3020.236427][ T7536] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3020.259365][T22247] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input99 [ 3020.285184][T22247] dvb-usb: schedule remote query interval to 100 msecs. [ 3020.285202][T22247] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 3020.304605][T22247] usb 4-1: USB disconnect, device number 126 [ 3020.319525][ T7536] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3020.408879][T22247] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 3020.490910][ T7536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3020.492667][ T7536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3020.493280][ T7536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3020.494793][ T7536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3020.495372][ T7536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3020.497260][ T7536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3020.497823][ T7536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3020.522374][ T7536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3020.556905][T30809] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3020.587448][ T7536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3020.595567][ T7536] 8021q: adding VLAN 0 to HW filter on device team0 [ 3020.614175][T27966] bridge0: port 1(bridge_slave_0) entered blocking state [ 3020.614248][T27966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3020.634196][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 3020.634278][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3020.711907][T30809] usb 5-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 3020.713216][T30809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3020.713258][T30809] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3020.713294][T30809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.074471][ T7655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9036'. [ 3021.314173][ T7536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3021.402616][ T7536] veth0_vlan: entered promiscuous mode [ 3021.418389][ T7536] veth1_vlan: entered promiscuous mode [ 3021.456054][ T29] audit: type=1400 audit(1792970235.806:1024): avc: denied { mount } for pid=7661 comm="syz.0.9039" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 3021.456718][ T7536] veth0_macvtap: entered promiscuous mode [ 3021.466923][ T29] audit: type=1400 audit(1792970235.816:1025): avc: denied { search } for pid=7661 comm="syz.0.9039" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 3021.466966][ T29] audit: type=1400 audit(1792970235.816:1026): avc: denied { write } for pid=7661 comm="syz.0.9039" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 3021.466998][ T29] audit: type=1400 audit(1792970235.816:1027): avc: denied { open } for pid=7661 comm="syz.0.9039" path="/606/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 3021.560345][ T7536] veth1_macvtap: entered promiscuous mode [ 3021.576144][ T7664] svc: failed to register nfsdv3 RPC service (errno 111). [ 3021.585549][ T7664] svc: failed to register nfsaclv3 RPC service (errno 111). [ 3021.602352][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3021.621522][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3021.648232][T22247] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 3021.686283][ T29] audit: type=1400 audit(1792970236.036:1028): avc: denied { unmount } for pid=26983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 3021.721783][T30530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3021.721865][T30530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3021.721909][T30530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3021.721939][T30530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3021.763715][ T29] audit: type=1400 audit(1792970236.116:1029): avc: denied { create } for pid=7665 comm="syz.1.9040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 3021.802630][T22247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3021.802673][T22247] usb 4-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 3021.803508][T22247] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 3021.803531][T22247] usb 4-1: config 142 has no interface number 0 [ 3021.803561][T22247] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 3021.803584][T22247] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 3021.803598][T22247] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 3021.803610][T22247] usb 4-1: config 142 interface 251 has no altsetting 0 [ 3021.825646][T22247] usb 4-1: string descriptor 0 read error: -22 [ 3021.825744][T22247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3021.836248][T27966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3021.836265][T27966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3021.839302][ T7663] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3021.839417][ T7663] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3021.849415][T22247] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 3021.869348][ T29] audit: type=1400 audit(1792970236.226:1030): avc: denied { nlmsg_read } for pid=7667 comm="syz.0.9041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3021.907452][T22247] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 3021.969688][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3021.969708][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3022.019329][ T7673] netlink: 'syz.0.9042': attribute type 10 has an invalid length. [ 3022.020400][ T7673] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 3022.069021][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 3022.073060][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 3022.073090][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 3022.167519][ T5545] Bluetooth: hci0: command tx timeout [ 3022.189243][ T7681] sctp: [Deprecated]: syz.2.8996 (pid 7681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3022.189243][ T7681] Use struct sctp_sack_info instead [ 3022.284744][ T29] audit: type=1400 audit(1792970236.636:1031): avc: denied { ioctl } for pid=7685 comm="syz.2.9047" path="socket:[181442]" dev="sockfs" ino=181442 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3022.293903][ T29] audit: type=1400 audit(1792970236.636:1032): avc: denied { write } for pid=7685 comm="syz.2.9047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3022.442626][T21760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3022.443974][T21760] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3022.462554][T21760] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3022.464239][T21760] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3022.464779][T21760] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3022.917520][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3022.918752][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3022.921445][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3022.922196][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3022.922553][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3022.922940][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3022.923331][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3022.925030][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3022.925395][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3022.925749][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3022.926108][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3022.926500][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3022.927733][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3022.928813][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3022.929149][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3022.929481][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3022.929805][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3022.931174][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3022.931605][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3022.931935][T30809] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3022.996188][T30809] ax88179_178a 5-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 4e:48:44:12:74:3f [ 3023.002799][T30809] usb 5-1: USB disconnect, device number 22 [ 3023.007947][T30809] ax88179_178a 5-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 3023.078413][ T7693] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 3023.078436][ T7693] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 3023.078643][ C1] usb 4-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 3023.108847][ T7711] comedi comedi1: Minor 3 could not be opened [ 3023.140986][ T7689] rxe_eth0 speed is unknown, defaulting to 1000 [ 3023.335450][ T7689] lo speed is unknown, defaulting to 1000 [ 3023.360028][ T1252] usb 4-1: USB disconnect, device number 127 [ 3023.379578][ T1252] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 3023.380082][ T1252] cypress_m8 4-1:142.251: device disconnected [ 3023.761014][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 3023.762637][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 3023.762744][ T7689] bridge_slave_0: entered allmulticast mode [ 3023.765341][ T7689] bridge_slave_0: entered promiscuous mode [ 3023.795667][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 3023.800402][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 3023.800595][ T7689] bridge_slave_1: entered allmulticast mode [ 3023.804303][ T7689] bridge_slave_1: entered promiscuous mode [ 3023.857743][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3023.863010][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3023.911980][ T7689] team0: Port device team_slave_0 added [ 3023.917015][ T7689] team0: Port device team_slave_1 added [ 3023.953401][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3023.953418][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3023.953438][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3023.954799][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3023.954810][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3023.954831][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3024.080606][ T7689] hsr_slave_0: entered promiscuous mode [ 3024.083961][ T7689] hsr_slave_1: entered promiscuous mode [ 3024.084698][ T7689] debugfs: 'hsr0' already exists in 'hsr' [ 3024.084715][ T7689] Cannot create hsr debugfs directory [ 3024.240551][ T7748] Bluetooth: MGMT ver 1.23 [ 3024.251295][ T7696] Bluetooth: hci0: command tx timeout [ 3024.332689][ T29] audit: type=1400 audit(1792970238.686:1033): avc: denied { getopt } for pid=7754 comm="syz.4.9069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3024.416183][ T7689] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.491172][ T7759] FAULT_INJECTION: forcing a failure. [ 3024.491172][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3024.491208][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.4.9070 Tainted: G L syzkaller #0 PREEMPT(full) [ 3024.491235][ T7759] Tainted: [L]=SOFTLOCKUP [ 3024.491242][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3024.491254][ T7759] Call Trace: [ 3024.491262][ T7759] [ 3024.491269][ T7759] dump_stack_lvl+0x100/0x190 [ 3024.491304][ T7759] should_fail_ex.cold+0x5/0xa [ 3024.491333][ T7759] _copy_from_user+0x2e/0xd0 [ 3024.491355][ T7759] copy_msghdr_from_user+0x9f/0x4c0 [ 3024.491380][ T7759] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3024.491410][ T7759] ? futex_unqueue+0x133/0x2c0 [ 3024.491435][ T7759] ___sys_sendmsg+0x106/0x1e0 [ 3024.491458][ T7759] ? __pfx____sys_sendmsg+0x10/0x10 [ 3024.491480][ T7759] ? __pfx___futex_wait+0x10/0x10 [ 3024.491501][ T7759] ? __pfx_try_to_wake_up+0x10/0x10 [ 3024.491525][ T7759] ? futex_hash+0x311/0x400 [ 3024.491561][ T7759] ? __fget_files+0x34/0x3d0 [ 3024.491607][ T7759] __sys_sendmmsg+0x20c/0x440 [ 3024.491638][ T7759] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3024.491664][ T7759] ? file_init_path+0x48e/0x670 [ 3024.491701][ T7759] ? __pfx_do_futex+0x10/0x10 [ 3024.491732][ T7759] ? __sys_socket+0xac/0x260 [ 3024.491755][ T7759] ? xfd_validate_state+0x129/0x190 [ 3024.491791][ T7759] __x64_sys_sendmmsg+0x9c/0x100 [ 3024.491819][ T7759] ? lockdep_hardirqs_on+0x7d/0x110 [ 3024.491845][ T7759] do_syscall_64+0x123/0x790 [ 3024.491873][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3024.491895][ T7759] RIP: 0033:0x7f380959f559 [ 3024.491912][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3024.491930][ T7759] RSP: 002b:00007f38077f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3024.491949][ T7759] RAX: ffffffffffffffda RBX: 00007f3809825fa0 RCX: 00007f380959f559 [ 3024.491962][ T7759] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 3024.491976][ T7759] RBP: 00007f3809636b20 R08: 0000000000000000 R09: 0000000000000000 [ 3024.491988][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3024.491999][ T7759] R13: 00007f3809826038 R14: 00007f3809825fa0 R15: 00007ffed9caabf8 [ 3024.492025][ T7759] [ 3024.570163][ T7696] Bluetooth: hci6: command tx timeout [ 3024.570549][ T7696] Bluetooth: hci4: command 0x1003 tx timeout [ 3024.571088][T21760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3024.688281][ T7689] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.823203][ T7772] Bluetooth: MGMT ver 1.23 [ 3024.823234][ T7772] Bluetooth: hci0: unsupported parameter 5135 [ 3024.823246][ T7772] Bluetooth: hci0: unsupported parameter 65 [ 3024.823257][ T7772] Bluetooth: hci0: unsupported parameter 5135 [ 3024.823288][ T7772] Bluetooth: hci0: unsupported parameter 65 [ 3024.864808][ T7772] device-mapper: table: 248:12: integrity: Bitmap mode can be only used with internal hash (-EINVAL) [ 3024.864833][ T7772] device-mapper: ioctl: error adding target to table [ 3024.889940][ T7689] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.930049][ T7777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3025.000630][ T7689] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3025.047222][ T4265] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 3025.095954][ T7786] FAULT_INJECTION: forcing a failure. [ 3025.095954][ T7786] name failslab, interval 1, probability 0, space 0, times 0 [ 3025.095986][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.1.9082 Tainted: G L syzkaller #0 PREEMPT(full) [ 3025.096013][ T7786] Tainted: [L]=SOFTLOCKUP [ 3025.096019][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3025.096031][ T7786] Call Trace: [ 3025.096037][ T7786] [ 3025.096045][ T7786] dump_stack_lvl+0x100/0x190 [ 3025.096079][ T7786] should_fail_ex.cold+0x5/0xa [ 3025.096108][ T7786] should_failslab+0xc2/0x120 [ 3025.096135][ T7786] kmem_cache_alloc_noprof+0x92/0x6a0 [ 3025.096157][ T7786] ? make_vfsuid+0xec/0x140 [ 3025.096180][ T7786] ? alloc_empty_file+0x5b/0x1c0 [ 3025.096204][ T7786] alloc_empty_file+0x5b/0x1c0 [ 3025.096223][ T7786] dentry_open+0x46/0xd0 [ 3025.096255][ T7786] ovl_path_open+0x181/0x1d0 [ 3025.096280][ T7786] ovl_dir_open+0x178/0x390 [ 3025.096301][ T7786] ? __pfx_ovl_dir_open+0x10/0x10 [ 3025.096323][ T7786] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 3025.096349][ T7786] do_dentry_open+0x674/0x1470 [ 3025.096373][ T7786] ? __pfx_ovl_dir_open+0x10/0x10 [ 3025.096394][ T7786] vfs_open_consume+0xcc/0x460 [ 3025.096424][ T7786] path_openat+0x1547/0x23f0 [ 3025.096455][ T7786] ? __pfx_path_openat+0x10/0x10 [ 3025.096488][ T7786] do_file_open+0x20e/0x430 [ 3025.096515][ T7786] ? __pfx_do_file_open+0x10/0x10 [ 3025.096558][ T7786] ? _raw_spin_unlock+0x28/0x50 [ 3025.096581][ T7786] ? alloc_fd+0x471/0x7a0 [ 3025.096614][ T7786] do_sys_openat2+0x163/0x1d0 [ 3025.096632][ T7786] ? __pfx_do_sys_openat2+0x10/0x10 [ 3025.096660][ T7786] __x64_sys_openat+0x12d/0x210 [ 3025.096680][ T7786] ? __pfx___x64_sys_openat+0x10/0x10 [ 3025.096708][ T7786] do_syscall_64+0x123/0x790 [ 3025.096736][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3025.096755][ T7786] RIP: 0033:0x7fbf94d9f559 [ 3025.096771][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3025.096793][ T7786] RSP: 002b:00007fbf95cf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3025.096812][ T7786] RAX: ffffffffffffffda RBX: 00007fbf95025fa0 RCX: 00007fbf94d9f559 [ 3025.096825][ T7786] RDX: 0000000000000004 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 3025.096835][ T7786] RBP: 00007fbf94e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 3025.096846][ T7786] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 3025.096857][ T7786] R13: 00007fbf95026038 R14: 00007fbf95025fa0 R15: 00007ffc8576eab8 [ 3025.096880][ T7786] [ 3025.211944][ T4265] usb 3-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 3025.214308][ T4265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3025.214338][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3025.216668][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3025.216687][ T4265] usb 3-1: SerialNumber: syz [ 3025.219026][ T4265] usb 3-1: config 0 descriptor?? [ 3025.548195][ T7689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3025.555897][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3025.574189][ T7689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3025.586696][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3025.596234][ T7689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3025.607762][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3025.613624][ T7689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3025.633950][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3025.697291][ T5747] usb 3-1: USB disconnect, device number 126 [ 3025.747009][ T2486] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3025.811999][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3025.844065][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 3025.861669][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 3025.861754][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3025.884504][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 3025.884573][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3025.901644][ T2486] usb 2-1: Using ep0 maxpacket: 16 [ 3025.907333][ T2486] usb 2-1: New USB device found: idVendor=04d8, idProduct=00df, bcdDevice=0.00 [ 3025.908249][ T2486] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3025.908268][ T2486] usb 2-1: config 0 has no interfaces? [ 3025.908291][ T2486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3025.913917][ T2486] usb 2-1: config 0 descriptor?? [ 3026.000814][ T7815] FAULT_INJECTION: forcing a failure. [ 3026.000814][ T7815] name failslab, interval 1, probability 0, space 0, times 0 [ 3026.000849][ T7815] CPU: 1 UID: 0 PID: 7815 Comm: syz.3.9091 Tainted: G L syzkaller #0 PREEMPT(full) [ 3026.000877][ T7815] Tainted: [L]=SOFTLOCKUP [ 3026.000885][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3026.000896][ T7815] Call Trace: [ 3026.000904][ T7815] [ 3026.000912][ T7815] dump_stack_lvl+0x100/0x190 [ 3026.000946][ T7815] should_fail_ex.cold+0x5/0xa [ 3026.000973][ T7815] ? lock_acquire+0x1d1/0x380 [ 3026.001000][ T7815] should_failslab+0xc2/0x120 [ 3026.001026][ T7815] __kmalloc_cache_noprof+0x91/0x6d0 [ 3026.001046][ T7815] ? tipc_service_create+0xb1/0x340 [ 3026.001082][ T7815] tipc_service_create+0xb1/0x340 [ 3026.001110][ T7815] ? tipc_service_find+0x161/0x1c0 [ 3026.001142][ T7815] tipc_nametbl_subscribe+0x892/0xa80 [ 3026.001179][ T7815] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 3026.001208][ T7815] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 3026.001228][ T7815] ? lockdep_init_map_type+0x5c/0x250 [ 3026.001256][ T7815] tipc_sub_subscribe+0x4ba/0x730 [ 3026.001286][ T7815] tipc_conn_rcv_sub+0x21e/0x3d0 [ 3026.001313][ T7815] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 3026.001338][ T7815] ? iommu_sva_bind_device+0x23a/0xcf0 [ 3026.001362][ T7815] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 3026.001388][ T7815] ? net_generic+0xea/0x2a0 [ 3026.001416][ T7815] tipc_group_create+0x4ab/0x660 [ 3026.001443][ T7815] tipc_setsockopt+0x611/0xe30 [ 3026.001465][ T7815] ? __pfx_tipc_setsockopt+0x10/0x10 [ 3026.001490][ T7815] ? __fget_files+0x215/0x3d0 [ 3026.001522][ T7815] ? selinux_socket_setsockopt+0x6a/0x80 [ 3026.001545][ T7815] ? __pfx_tipc_setsockopt+0x10/0x10 [ 3026.001565][ T7815] do_sock_setsockopt+0xf3/0x1d0 [ 3026.001589][ T7815] __sys_setsockopt+0x195/0x220 [ 3026.001620][ T7815] __x64_sys_setsockopt+0xbd/0x160 [ 3026.001646][ T7815] ? do_syscall_64+0xae/0x790 [ 3026.001678][ T7815] ? lockdep_hardirqs_on+0x7d/0x110 [ 3026.001704][ T7815] do_syscall_64+0x123/0x790 [ 3026.001733][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3026.001753][ T7815] RIP: 0033:0x7f64b1f9f559 [ 3026.001771][ T7815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3026.001789][ T7815] RSP: 002b:00007f64b2edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3026.001809][ T7815] RAX: ffffffffffffffda RBX: 00007f64b2225fa0 RCX: 00007f64b1f9f559 [ 3026.001822][ T7815] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 3026.001833][ T7815] RBP: 00007f64b2036b20 R08: 000000000000002e R09: 0000000000000000 [ 3026.001845][ T7815] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 3026.001857][ T7815] R13: 00007f64b2226038 R14: 00007f64b2225fa0 R15: 00007ffe7a58ce28 [ 3026.001885][ T7815] [ 3026.001924][ T7815] tipc: Service creation failed, no memory [ 3026.001933][ T7815] tipc: Failed to subscribe for {66,0,4294967295} [ 3026.329672][T21760] Bluetooth: hci0: command tx timeout [ 3026.506952][ T5747] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 3026.599029][ T7847] usb usb2: usbfs: process 7847 (syz.2.9102) did not claim interface 0 before use [ 3026.599350][ T7847] usb usb2: usbfs: process 7847 (syz.2.9102) did not claim interface 0 before use [ 3026.651833][T21760] Bluetooth: hci6: command tx timeout [ 3026.658671][ T5747] usb 4-1: not running at top speed; connect to a high speed hub [ 3026.658696][ T5747] usb 4-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 3026.660024][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 3026.662473][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3026.662501][ T5747] usb 4-1: Product: syz [ 3026.662514][ T5747] usb 4-1: Manufacturer: syz [ 3026.662527][ T5747] usb 4-1: SerialNumber: syz [ 3026.678694][ T5747] oti6858 4-1:1.0: oti6858 converter detected [ 3026.685002][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3026.695284][ T5747] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 3026.819620][ T7689] veth0_vlan: entered promiscuous mode [ 3026.837986][ T7689] veth1_vlan: entered promiscuous mode [ 3026.918662][ T7689] veth0_macvtap: entered promiscuous mode [ 3026.926435][ T7689] veth1_macvtap: entered promiscuous mode [ 3026.945449][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3026.953917][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3026.999561][T30530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.999604][T30530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.999634][T30530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.999665][T30530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3027.087667][ T4265] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 3027.099776][T26143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3027.099795][T26143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3027.156048][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3027.156069][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3027.237768][ T4265] usb 3-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 3027.240041][ T4265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3027.240095][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3027.241935][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3027.241957][ T4265] usb 3-1: SerialNumber: syz [ 3027.247387][ T4265] usb 3-1: config 0 descriptor?? [ 3027.306754][ T5739] usb 4-1: USB disconnect, device number 2 [ 3027.333557][ T5739] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 3027.334285][ T5739] oti6858 4-1:1.0: device disconnected [ 3027.434717][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 3027.434735][ T29] audit: type=1400 audit(1792970241.786:1035): avc: denied { mounton } for pid=7858 comm="syz.0.9046" path="/0/mnt/file0" dev="sda1" ino=8194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 3027.434983][ T7859] overlayfs: failed to resolve './bus': -2 [ 3027.459594][ T4265] usb 3-1: Can not set alternate setting to 1, error: -71 [ 3027.459623][ T4265] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71 [ 3027.465997][ T4265] usb 3-1: USB disconnect, device number 127 [ 3027.640853][ T7867] device-mapper: table: 248:9: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 3027.640883][ T7867] device-mapper: ioctl: error adding target to table [ 3028.125136][ T7896] rxe_eth0 speed is unknown, defaulting to 1000 [ 3028.230810][ T29] audit: type=1400 audit(1792970242.586:1036): avc: denied { execute } for pid=7902 comm="syz.3.9122" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3028.424448][ T7896] lo speed is unknown, defaulting to 1000 [ 3028.504599][ T5739] usb 2-1: USB disconnect, device number 12 [ 3028.708328][ T7917] FAULT_INJECTION: forcing a failure. [ 3028.708328][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 3028.708362][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.0.9127 Tainted: G L syzkaller #0 PREEMPT(full) [ 3028.708390][ T7917] Tainted: [L]=SOFTLOCKUP [ 3028.708398][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3028.708409][ T7917] Call Trace: [ 3028.708417][ T7917] [ 3028.708424][ T7917] dump_stack_lvl+0x100/0x190 [ 3028.708455][ T7917] should_fail_ex.cold+0x5/0xa [ 3028.708485][ T7917] should_failslab+0xc2/0x120 [ 3028.708512][ T7917] kmem_cache_alloc_noprof+0x92/0x6a0 [ 3028.708535][ T7917] ? __pfx_map_id_range_down+0x10/0x10 [ 3028.708561][ T7917] ? kasan_save_track+0x14/0x30 [ 3028.708581][ T7917] ? security_inode_alloc+0x3b/0x2c0 [ 3028.708612][ T7917] security_inode_alloc+0x3b/0x2c0 [ 3028.708639][ T7917] inode_init_always_gfp+0xc6f/0xfb0 [ 3028.708672][ T7917] ? __pfx_fuse_inode_eq+0x10/0x10 [ 3028.708698][ T7917] ? __pfx_fuse_inode_set+0x10/0x10 [ 3028.708723][ T7917] alloc_inode+0x8e/0x250 [ 3028.708744][ T7917] iget5_locked+0x5f/0xa0 [ 3028.708766][ T7917] fuse_iget+0x165/0x910 [ 3028.708790][ T7917] ? __pfx_fuse_iget+0x10/0x10 [ 3028.708807][ T7917] ? __local_bh_enable_ip+0xa5/0x120 [ 3028.708828][ T7917] ? lockdep_hardirqs_on+0x7d/0x110 [ 3028.708852][ T7917] ? bdi_set_max_ratio+0x106/0x150 [ 3028.708879][ T7917] ? __local_bh_enable_ip+0xa5/0x120 [ 3028.708902][ T7917] fuse_fill_super_common+0x9a7/0xfe0 [ 3028.708925][ T7917] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 3028.708954][ T7917] ? lockdep_init_map_type+0x5c/0x250 [ 3028.708980][ T7917] ? __raw_spin_lock_init+0x3a/0x110 [ 3028.709008][ T7917] ? __pfx_fuse_fill_super+0x10/0x10 [ 3028.709028][ T7917] fuse_fill_super+0x100/0x1a0 [ 3028.709049][ T7917] get_tree_nodev+0xdd/0x190 [ 3028.709074][ T7917] fuse_get_tree+0x30e/0x490 [ 3028.709093][ T7917] vfs_get_tree+0x92/0x320 [ 3028.709123][ T7917] path_mount+0x7d0/0x2850 [ 3028.709148][ T7917] ? __pfx_path_mount+0x10/0x10 [ 3028.709166][ T7917] ? lockdep_hardirqs_on+0x7d/0x110 [ 3028.709192][ T7917] ? putname+0xb1/0x110 [ 3028.709208][ T7917] ? kmem_cache_free+0x127/0x6c0 [ 3028.709234][ T7917] ? __x64_sys_mount+0x293/0x310 [ 3028.709252][ T7917] __x64_sys_mount+0x293/0x310 [ 3028.709271][ T7917] ? __pfx___x64_sys_mount+0x10/0x10 [ 3028.709288][ T7917] do_syscall_64+0x123/0x790 [ 3028.709304][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3028.709317][ T7917] RIP: 0033:0x7f5b0119f559 [ 3028.709327][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3028.709338][ T7917] RSP: 002b:00007f5b0209c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3028.709349][ T7917] RAX: ffffffffffffffda RBX: 00007f5b01425fa0 RCX: 00007f5b0119f559 [ 3028.709356][ T7917] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 3028.709363][ T7917] RBP: 00007f5b01236b20 R08: 00002000000003c0 R09: 0000000000000000 [ 3028.709370][ T7917] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 3028.709377][ T7917] R13: 00007f5b01426038 R14: 00007f5b01425fa0 R15: 00007ffe3a4c4d08 [ 3028.709397][ T7917] [ 3028.728833][T21760] Bluetooth: hci6: command tx timeout [ 3028.983100][ T7925] rxe_eth0 speed is unknown, defaulting to 1000 [ 3029.093029][ T7925] lo speed is unknown, defaulting to 1000 [ 3029.702567][ T7960] sock: sock_timestamping_bind_phc: sock not bind to device [ 3029.879878][ T7967] syzkaller1: entered promiscuous mode [ 3029.879901][ T7967] syzkaller1: entered allmulticast mode [ 3030.204863][ T29] audit: type=1400 audit(1792970244.556:1037): avc: denied { shutdown } for pid=7975 comm="syz.4.9153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3030.226147][ T29] audit: type=1400 audit(1792970244.586:1038): avc: denied { read } for pid=7975 comm="syz.4.9153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3030.626891][T27739] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3030.709827][ T6653] overlayfs: failed lookup in lower (newroot/94, name='bus', err=-40): overlapping layers [ 3030.712106][ T6653] overlayfs: failed lookup in lower (newroot/94, name='bus', err=-40): overlapping layers [ 3030.789279][T27739] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3030.790177][T27739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3030.792645][T27739] usb 3-1: config 0 descriptor?? [ 3030.814634][T31901] Bluetooth: hci6: command tx timeout [ 3031.028369][T27739] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3031.073373][ T1009] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.231735][ T1009] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.321027][T27739] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 3031.321055][T27739] [drm] Initialized udl on minor 1 [ 3031.350102][ T1009] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.406047][T21760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3031.409859][T21760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3031.412891][T21760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3031.413851][T21760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3031.414339][T21760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3031.458092][ T1009] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.762326][ T1009] bridge_slave_1: left allmulticast mode [ 3031.762351][ T1009] bridge_slave_1: left promiscuous mode [ 3031.762540][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 3031.790254][ T1009] bridge_slave_0: left allmulticast mode [ 3031.790278][ T1009] bridge_slave_0: left promiscuous mode [ 3031.790444][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 3032.005983][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3032.030805][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3032.033322][ T1009] bond0 (unregistering): Released all slaves [ 3032.105112][ T29] audit: type=1400 audit(1792970246.456:1039): avc: denied { write } for pid=8029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3032.204301][ T8015] rxe_eth0 speed is unknown, defaulting to 1000 [ 3032.239585][ T29] audit: type=1400 audit(1792970246.596:1040): avc: denied { write } for pid=8047 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3032.347090][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3032.468597][ T8015] lo speed is unknown, defaulting to 1000 [ 3032.661507][ T29] audit: type=1400 audit(1792970247.016:1041): avc: denied { write } for pid=8050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3032.766002][ T29] audit: type=1400 audit(1792970247.116:1042): avc: denied { write } for pid=8062 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3032.840340][ T1009] hsr_slave_0: left promiscuous mode [ 3032.840967][ T1009] hsr_slave_1: left promiscuous mode [ 3032.841809][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3032.841846][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3032.869935][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3032.869953][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3032.892082][ T1009] veth1_macvtap: left promiscuous mode [ 3032.892119][ T1009] veth0_macvtap: left promiscuous mode [ 3032.892237][ T1009] veth1_vlan: left promiscuous mode [ 3032.892294][ T1009] veth0_vlan: left promiscuous mode [ 3033.133301][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 3033.166679][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 3033.273837][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3033.449218][T31901] Bluetooth: hci1: command tx timeout [ 3033.497694][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 3033.497850][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 3033.498045][ T8015] bridge_slave_0: entered allmulticast mode [ 3033.499636][ T8015] bridge_slave_0: entered promiscuous mode [ 3033.501983][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 3033.502110][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 3033.502223][ T8015] bridge_slave_1: entered allmulticast mode [ 3033.503439][ T8015] bridge_slave_1: entered promiscuous mode [ 3033.527445][ T8015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3033.530436][ T8015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3033.568544][ T8015] team0: Port device team_slave_0 added [ 3033.574131][ T8015] team0: Port device team_slave_1 added [ 3033.671669][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3033.671684][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3033.671705][ T8015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3033.676740][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3033.676754][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3033.676863][ T8015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3033.728283][ T8015] hsr_slave_0: entered promiscuous mode [ 3033.729105][ T8015] hsr_slave_1: entered promiscuous mode [ 3033.732083][ T8015] debugfs: 'hsr0' already exists in 'hsr' [ 3033.732101][ T8015] Cannot create hsr debugfs directory [ 3033.895152][ T29] audit: type=1400 audit(1792970248.246:1043): avc: denied { write } for pid=8082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3034.001113][ T29] audit: type=1400 audit(1792970248.356:1044): avc: denied { write } for pid=8102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3034.077698][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3034.133875][ T8015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3034.151021][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3034.151717][ T8015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3034.154883][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3034.155970][ T8015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3034.182205][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3034.185557][ T8015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3034.191561][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3034.224099][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 3034.224186][ T8015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3034.224381][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 3034.224464][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3034.301923][ T8015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3034.324050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 3034.324642][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 3034.351973][ T8015] 8021q: adding VLAN 0 to HW filter on device team0 [ 3034.364471][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 3034.364562][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3034.370856][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 3034.370938][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3034.468072][ T29] audit: type=1400 audit(1792970248.826:1045): avc: denied { write } for pid=8108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3034.600789][ T29] audit: type=1400 audit(1792970248.956:1046): avc: denied { write } for pid=8129 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3034.682410][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3034.818197][ T8015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3035.070136][ T8015] veth0_vlan: entered promiscuous mode [ 3035.080770][ T8152] Need at least one configuration in g1. [ 3035.084640][ T8152] udc usbip-vudc.0: failed to start g1: -22 [ 3035.084681][ T8152] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 3035.094056][ T8152] UDC core: g1: couldn't find an available UDC or it's busy [ 3035.114300][ T8015] veth1_vlan: entered promiscuous mode [ 3035.146345][ T8015] veth0_macvtap: entered promiscuous mode [ 3035.152509][ T8015] veth1_macvtap: entered promiscuous mode [ 3035.168876][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3035.178431][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3035.186049][T27966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3035.217110][T30530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3035.217356][T30530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3035.287900][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3035.287919][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3035.298880][T27966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3035.321356][T27966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3035.321388][T27966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3035.537209][T31901] Bluetooth: hci1: command tx timeout [ 3035.863911][ T29] audit: type=1400 audit(1792970250.216:1047): avc: denied { read write } for pid=8181 comm="syz.5.9202" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3035.864133][ T29] audit: type=1400 audit(1792970250.216:1048): avc: denied { open } for pid=8181 comm="syz.5.9202" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3035.885093][ T8182] bq24190-charger 0-0006: No support for SMBUS_BYTE_DATA [ 3035.885378][ T8182] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 3036.011248][ T8188] FAULT_INJECTION: forcing a failure. [ 3036.011248][ T8188] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3036.011279][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.5.9204 Tainted: G L syzkaller #0 PREEMPT(full) [ 3036.011306][ T8188] Tainted: [L]=SOFTLOCKUP [ 3036.011314][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3036.011326][ T8188] Call Trace: [ 3036.011333][ T8188] [ 3036.011341][ T8188] dump_stack_lvl+0x100/0x190 [ 3036.011372][ T8188] should_fail_ex.cold+0x5/0xa [ 3036.011400][ T8188] get_futex_key+0x1c9/0x13e0 [ 3036.011432][ T8188] ? __pfx_get_futex_key+0x10/0x10 [ 3036.011460][ T8188] ? wakeup_preempt_fair+0x4a0/0xf60 [ 3036.011488][ T8188] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 3036.011521][ T8188] futex_wait_setup+0x91/0x540 [ 3036.011550][ T8188] __futex_wait+0x19f/0x360 [ 3036.011575][ T8188] ? __pfx___futex_wait+0x10/0x10 [ 3036.011597][ T8188] ? __pfx_try_to_wake_up+0x10/0x10 [ 3036.011618][ T8188] ? futex_hash+0x311/0x400 [ 3036.011647][ T8188] ? __pfx_futex_wake_mark+0x10/0x10 [ 3036.011674][ T8188] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 3036.011705][ T8188] futex_wait+0xe6/0x370 [ 3036.011728][ T8188] ? __pfx_futex_wait+0x10/0x10 [ 3036.011755][ T8188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3036.011782][ T8188] ? do_vfs_ioctl+0x226/0x13e0 [ 3036.011806][ T8188] do_futex+0x265/0x440 [ 3036.011826][ T8188] ? __pfx_do_futex+0x10/0x10 [ 3036.011844][ T8188] ? __fget_files+0x34/0x3d0 [ 3036.011876][ T8188] __x64_sys_futex+0x34f/0x4d0 [ 3036.011899][ T8188] ? __pfx___x64_sys_futex+0x10/0x10 [ 3036.011927][ T8188] do_syscall_64+0x123/0x790 [ 3036.011955][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3036.011974][ T8188] RIP: 0033:0x7f108cb9f559 [ 3036.011990][ T8188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3036.012007][ T8188] RSP: 002b:00007f108db2a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3036.012034][ T8188] RAX: ffffffffffffffda RBX: 00007f108ce25fa8 RCX: 00007f108cb9f559 [ 3036.012047][ T8188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f108ce25fa8 [ 3036.012058][ T8188] RBP: 00007f108ce25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.012071][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3036.012083][ T8188] R13: 00007f108ce26038 R14: 00007ffc3568d090 R15: 00007ffc3568d178 [ 3036.012110][ T8188] [ 3036.418625][T27739] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 3036.429481][T27739] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 3036.438163][T21760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3036.454182][T21760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3036.456452][T21760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3036.466416][T27739] usb 3-1: USB disconnect, device number 2 [ 3036.478733][T21760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3036.479206][T21760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3036.675421][ T6064] bridge0: port 3(batadv0) entered disabled state [ 3036.689737][ T6064] bridge_slave_1: left allmulticast mode [ 3036.689761][ T6064] bridge_slave_1: left promiscuous mode [ 3036.691194][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 3036.696244][ T6064] bridge_slave_0: left allmulticast mode [ 3036.696264][ T6064] bridge_slave_0: left promiscuous mode [ 3036.696404][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 3036.932165][ T8212] FAULT_INJECTION: forcing a failure. [ 3036.932165][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.932198][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz.2.9212 Tainted: G L syzkaller #0 PREEMPT(full) [ 3036.932225][ T8212] Tainted: [L]=SOFTLOCKUP [ 3036.932233][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3036.932245][ T8212] Call Trace: [ 3036.932252][ T8212] [ 3036.932260][ T8212] dump_stack_lvl+0x100/0x190 [ 3036.932296][ T8212] should_fail_ex.cold+0x5/0xa [ 3036.932331][ T8212] should_failslab+0xc2/0x120 [ 3036.932357][ T8212] kmem_cache_alloc_noprof+0x92/0x6a0 [ 3036.932383][ T8212] ? rpc_malloc+0x1ec/0x2c0 [ 3036.932420][ T8212] rpc_malloc+0x1ec/0x2c0 [ 3036.932452][ T8212] call_allocate+0x2f2/0x760 [ 3036.932486][ T8212] ? __pfx_call_allocate+0x10/0x10 [ 3036.932510][ T8212] __rpc_execute+0x36d/0x11d0 [ 3036.932545][ T8212] ? __pfx___rpc_execute+0x10/0x10 [ 3036.932574][ T8212] ? rpc_task_get_xprt.part.0+0xdd/0x2a0 [ 3036.932610][ T8212] rpc_execute+0x303/0x3f0 [ 3036.932640][ T8212] rpc_run_task+0x4a4/0x660 [ 3036.932671][ T8212] rpc_ping_noreply+0xeb/0x1b0 [ 3036.932687][ T8212] ? __pfx_rpc_ping_noreply+0x10/0x10 [ 3036.932715][ T8212] ? rpc_new_client+0xb07/0x1300 [ 3036.932746][ T8212] rpc_create_xprt+0x3be/0x440 [ 3036.932764][ T8212] rpc_create+0x46e/0x7f0 [ 3036.932783][ T8212] ? __pfx_rpc_create+0x10/0x10 [ 3036.932830][ T8212] ? rcu_is_watching+0x13/0xc0 [ 3036.932846][ T8212] ? trace_contention_end+0x126/0x160 [ 3036.932869][ T8212] ? __mutex_lock+0x267/0x1c10 [ 3036.932895][ T8212] gssp_rpc_create+0xe1/0x180 [ 3036.932917][ T8212] ? __pfx_gssp_rpc_create+0x10/0x10 [ 3036.932952][ T8212] ? net_generic+0xea/0x2a0 [ 3036.932979][ T8212] set_gssp_clnt+0xc3/0x1b0 [ 3036.933000][ T8212] ? __pfx_set_gssp_clnt+0x10/0x10 [ 3036.933029][ T8212] write_gssp+0x1f7/0x380 [ 3036.933049][ T8212] ? __pfx_write_gssp+0x10/0x10 [ 3036.933075][ T8212] ? lock_acquire+0x1d1/0x380 [ 3036.933098][ T8212] ? ksys_write+0x12a/0x250 [ 3036.933123][ T8212] ? __pfx_write_gssp+0x10/0x10 [ 3036.933144][ T8212] proc_reg_write+0x240/0x330 [ 3036.933171][ T8212] vfs_write+0x2aa/0x1050 [ 3036.933194][ T8212] ? __pfx_proc_reg_write+0x10/0x10 [ 3036.933215][ T8212] ? lock_acquire+0x1d1/0x380 [ 3036.933235][ T8212] ? __fget_files+0x34/0x3d0 [ 3036.933258][ T8212] ? __pfx_vfs_write+0x10/0x10 [ 3036.933275][ T8212] ? find_held_lock+0x2b/0x80 [ 3036.933292][ T8212] ? __fget_files+0x215/0x3d0 [ 3036.933323][ T8212] ? __fget_files+0x21f/0x3d0 [ 3036.933358][ T8212] ksys_write+0x12a/0x250 [ 3036.933379][ T8212] ? __pfx_ksys_write+0x10/0x10 [ 3036.933409][ T8212] do_syscall_64+0x123/0x790 [ 3036.933437][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3036.933456][ T8212] RIP: 0033:0x7f1fedf9f559 [ 3036.933481][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3036.933498][ T8212] RSP: 002b:00007f1feee2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3036.933517][ T8212] RAX: ffffffffffffffda RBX: 00007f1fee225fa0 RCX: 00007f1fedf9f559 [ 3036.933528][ T8212] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 3036.933540][ T8212] RBP: 00007f1fee036b20 R08: 0000000000000000 R09: 0000000000000000 [ 3036.933551][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3036.933560][ T8212] R13: 00007f1fee226038 R14: 00007f1fee225fa0 R15: 00007ffd1effb148 [ 3036.933585][ T8212] [ 3037.086095][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3037.118890][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3037.133234][ T6064] bond0 (unregistering): Released all slaves [ 3037.169142][ T8214] FAULT_INJECTION: forcing a failure. [ 3037.169142][ T8214] name (null), interval 1, probability 0, space 0, times 1 [ 3037.169170][ T8214] CPU: 0 UID: 0 PID: 8214 Comm: syz.5.9213 Tainted: G L syzkaller #0 PREEMPT(full) [ 3037.169195][ T8214] Tainted: [L]=SOFTLOCKUP [ 3037.169202][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3037.169212][ T8214] Call Trace: [ 3037.169219][ T8214] [ 3037.169226][ T8214] dump_stack_lvl+0x100/0x190 [ 3037.169256][ T8214] should_fail_ex.cold+0x5/0xa [ 3037.169280][ T8214] null_queue_rq+0x2ed/0xfb0 [ 3037.169307][ T8214] null_queue_rqs+0xe9/0x2f0 [ 3037.169326][ T8214] ? __pfx_null_queue_rqs+0x10/0x10 [ 3037.169344][ T8214] ? blk_mq_dispatch_queue_requests+0x148/0x7b0 [ 3037.169371][ T8214] __blk_mq_flush_list+0x9a/0xc0 [ 3037.169397][ T8214] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 3037.169420][ T8214] blk_mq_flush_plug_list+0x1f2/0x600 [ 3037.169439][ T8214] ? blk_account_io_start+0x854/0xa90 [ 3037.169467][ T8214] ? update_io_ticks+0x137/0x2a0 [ 3037.169484][ T8214] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 3037.169502][ T8214] ? __pfx_update_io_ticks+0x10/0x10 [ 3037.169518][ T8214] ? ktime_get+0x22c/0x320 [ 3037.169540][ T8214] ? lockdep_hardirqs_on+0x7d/0x110 [ 3037.169566][ T8214] blk_add_rq_to_plug+0x276/0x610 [ 3037.169588][ T8214] blk_mq_submit_bio+0x1c98/0x2dd0 [ 3037.169611][ T8214] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 3037.169638][ T8214] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 3037.169661][ T8214] __submit_bio+0x90/0x3d0 [ 3037.169687][ T8214] submit_bio_noacct_nocheck+0x662/0xd00 [ 3037.169708][ T8214] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 3037.169728][ T8214] ? __pfx___might_resched+0x10/0x10 [ 3037.169753][ T8214] submit_bio_noacct+0xc8e/0x2100 [ 3037.169775][ T8214] blkdev_direct_IO+0x12da/0x1d00 [ 3037.169806][ T8214] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 3037.169822][ T8214] ? rcu_is_watching+0x13/0xc0 [ 3037.169851][ T8214] blkdev_write_iter+0xa62/0x11d0 [ 3037.169876][ T8214] vfs_write+0x6af/0x1050 [ 3037.169897][ T8214] ? __pfx_blkdev_write_iter+0x10/0x10 [ 3037.169917][ T8214] ? __pfx_vfs_write+0x10/0x10 [ 3037.169934][ T8214] ? find_held_lock+0x2b/0x80 [ 3037.169984][ T8214] ksys_write+0x12a/0x250 [ 3037.170005][ T8214] ? __pfx_ksys_write+0x10/0x10 [ 3037.170034][ T8214] do_syscall_64+0x123/0x790 [ 3037.170060][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3037.170079][ T8214] RIP: 0033:0x7f108cb9f559 [ 3037.170094][ T8214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3037.170110][ T8214] RSP: 002b:00007f108db2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3037.170127][ T8214] RAX: ffffffffffffffda RBX: 00007f108ce25fa0 RCX: 00007f108cb9f559 [ 3037.170138][ T8214] RDX: 00000000fffffe38 RSI: 0000200000000600 RDI: 0000000000000007 [ 3037.170149][ T8214] RBP: 00007f108cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 3037.170159][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3037.170169][ T8214] R13: 00007f108ce26038 R14: 00007f108ce25fa0 R15: 00007ffc3568d178 [ 3037.170192][ T8214] [ 3037.237432][ T6064] tipc: Left network mode [ 3037.239718][ T29] audit: type=1400 audit(1792970251.576:1049): avc: denied { remount } for pid=8213 comm="syz.5.9213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3037.626102][T21760] Bluetooth: hci1: command tx timeout [ 3037.684697][ T8192] rxe_eth0 speed is unknown, defaulting to 1000 [ 3037.882473][ T6064] hsr_slave_0: left promiscuous mode [ 3037.902714][ T6064] hsr_slave_1: left promiscuous mode [ 3037.903471][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3037.903488][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3037.905330][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3037.905346][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3037.945792][ T6064] veth1_macvtap: left promiscuous mode [ 3037.945842][ T6064] veth0_macvtap: left promiscuous mode [ 3037.945922][ T6064] veth1_vlan: left promiscuous mode [ 3037.945990][ T6064] veth0_vlan: left promiscuous mode [ 3038.074378][ T29] audit: type=1400 audit(1792970252.426:1050): avc: denied { mounton } for pid=8232 comm="syz.5.9219" path="/20/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 3038.080193][ T29] audit: type=1800 audit(1792970252.426:1051): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.9219" name=08 dev="sda1" ino=2079 res=0 errno=-22 [ 3038.189420][ T8237] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 3038.189445][ T8237] device-mapper: raid: Choosing default region size of 4MiB [ 3038.189707][ T8237] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 3038.189718][ T8237] device-mapper: raid: Superblocks created for new raid set [ 3038.190288][ T8237] device-mapper: table: 248:13: raid: Insufficient redundancy to activate array (-EINVAL) [ 3038.190306][ T8237] device-mapper: ioctl: error adding target to table [ 3038.292900][ T8242] fuse: Bad value for 'fd' [ 3038.383469][ T6064] team0 (unregistering): Port device team_slave_1 removed [ 3038.407814][ T6064] team0 (unregistering): Port device team_slave_0 removed [ 3038.476365][ T8192] lo speed is unknown, defaulting to 1000 [ 3038.576965][T21760] Bluetooth: hci4: command tx timeout [ 3038.775469][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 3038.777433][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 3038.777548][ T8192] bridge_slave_0: entered allmulticast mode [ 3038.780752][ T8192] bridge_slave_0: entered promiscuous mode [ 3038.798154][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 3038.798226][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 3038.798314][ T8192] bridge_slave_1: entered allmulticast mode [ 3038.801430][ T8192] bridge_slave_1: entered promiscuous mode [ 3038.862486][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3038.866491][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3038.906516][ T8192] team0: Port device team_slave_0 added [ 3038.912068][ T8192] team0: Port device team_slave_1 added [ 3038.955928][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3038.955945][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3038.955966][ T8192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3038.959963][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3038.959975][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3038.959993][ T8192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3039.018380][ T8192] hsr_slave_0: entered promiscuous mode [ 3039.020591][ T8192] hsr_slave_1: entered promiscuous mode [ 3039.021129][ T8192] debugfs: 'hsr0' already exists in 'hsr' [ 3039.021144][ T8192] Cannot create hsr debugfs directory [ 3039.050316][ T29] audit: type=1400 audit(1792970253.396:1052): avc: denied { connect } for pid=8269 comm="syz.5.9234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3039.101765][ T29] audit: type=1400 audit(1792970253.456:1053): avc: denied { connect } for pid=8269 comm="syz.5.9234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3039.266426][ T8192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3039.276100][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3039.283982][ T8192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3039.286375][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3039.302377][ T8192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3039.305942][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3039.306627][ T8192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3039.333354][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3039.365540][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 3039.365646][ T8192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3039.365853][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 3039.365942][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3039.447593][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3039.460672][ T8291] FAULT_INJECTION: forcing a failure. [ 3039.460672][ T8291] name failslab, interval 1, probability 0, space 0, times 0 [ 3039.460702][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.5.9240 Tainted: G L syzkaller #0 PREEMPT(full) [ 3039.460726][ T8291] Tainted: [L]=SOFTLOCKUP [ 3039.460732][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3039.460742][ T8291] Call Trace: [ 3039.460749][ T8291] [ 3039.460756][ T8291] dump_stack_lvl+0x100/0x190 [ 3039.460786][ T8291] should_fail_ex.cold+0x5/0xa [ 3039.460811][ T8291] should_failslab+0xc2/0x120 [ 3039.460835][ T8291] __kvmalloc_node_noprof+0x113/0x9b0 [ 3039.460856][ T8291] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 3039.460876][ T8291] ? simple_xattr_alloc+0x6c/0xd0 [ 3039.460901][ T8291] simple_xattr_alloc+0x6c/0xd0 [ 3039.460920][ T8291] shmem_initxattrs+0x16a/0x650 [ 3039.460942][ T8291] security_inode_init_security+0x242/0x370 [ 3039.460964][ T8291] ? __pfx_shmem_initxattrs+0x10/0x10 [ 3039.460981][ T8291] ? __pfx_security_inode_init_security+0x10/0x10 [ 3039.461000][ T8291] ? selinux_determine_inode_label+0x1ab/0x400 [ 3039.461032][ T8291] shmem_mknod+0x2ce/0x480 [ 3039.461062][ T8291] ? __pfx_shmem_mknod+0x10/0x10 [ 3039.461082][ T8291] ? inode_permission+0x377/0x630 [ 3039.461106][ T8291] shmem_mkdir+0x31/0x80 [ 3039.461125][ T8291] vfs_mkdir+0x367/0x850 [ 3039.461150][ T8291] ovl_create_real+0x5f9/0xbd0 [ 3039.461174][ T8291] ovl_create_upper+0x22e/0x610 [ 3039.461194][ T8291] ? __pfx_ovl_create_upper+0x10/0x10 [ 3039.461216][ T8291] ? ovl_override_creator_creds+0x236/0x310 [ 3039.461237][ T8291] ovl_create_or_link+0x2e9/0x370 [ 3039.461258][ T8291] ovl_create_object+0x2c3/0x3b0 [ 3039.461276][ T8291] ? __pfx_ovl_create_object+0x10/0x10 [ 3039.461298][ T8291] ? inode_permission+0x377/0x630 [ 3039.461321][ T8291] ovl_mkdir+0x30/0x40 [ 3039.461339][ T8291] vfs_mkdir+0x367/0x850 [ 3039.461362][ T8291] filename_mkdirat+0x48b/0x5e0 [ 3039.461390][ T8291] ? __pfx_filename_mkdirat+0x10/0x10 [ 3039.461414][ T8291] ? strncpy_from_user+0x19d/0x2d0 [ 3039.461439][ T8291] ? do_getname+0x191/0x390 [ 3039.461460][ T8291] __x64_sys_mkdirat+0x89/0xc0 [ 3039.461484][ T8291] do_syscall_64+0x123/0x790 [ 3039.461510][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3039.461527][ T8291] RIP: 0033:0x7f108cb9f559 [ 3039.461541][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3039.461557][ T8291] RSP: 002b:00007f108db2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3039.461573][ T8291] RAX: ffffffffffffffda RBX: 00007f108ce25fa0 RCX: 00007f108cb9f559 [ 3039.461585][ T8291] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 3039.461595][ T8291] RBP: 00007f108cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 3039.461605][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3039.461615][ T8291] R13: 00007f108ce26038 R14: 00007f108ce25fa0 R15: 00007ffc3568d178 [ 3039.461640][ T8291] [ 3039.462268][T22564] bridge0: port 1(bridge_slave_0) entered disabled state [ 3039.467720][T22564] bridge0: port 2(bridge_slave_1) entered disabled state [ 3039.494747][ T8015] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 3039.494884][ T8015] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 3039.522472][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 3039.536761][T27966] bridge0: port 1(bridge_slave_0) entered blocking state [ 3039.536878][T27966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3039.601477][T22564] bridge0: port 2(bridge_slave_1) entered blocking state [ 3039.601551][T22564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3039.905552][T27966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3040.096116][T27966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3040.184644][T31901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3040.193487][T27966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3040.207977][T31901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3040.209084][T31901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3040.209776][T31901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3040.210254][T31901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3040.315891][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9245'. [ 3040.362145][T27966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3040.389695][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3040.438204][ T29] audit: type=1400 audit(1792970254.796:1054): avc: denied { read } for pid=8313 comm="syz.2.9246" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 3040.477629][ T8192] veth0_vlan: entered promiscuous mode [ 3040.503783][ T8192] veth1_vlan: entered promiscuous mode [ 3040.575047][ T8192] veth0_macvtap: entered promiscuous mode [ 3040.614576][ T8192] veth1_macvtap: entered promiscuous mode [ 3040.649568][T27966] bridge_slave_1: left allmulticast mode [ 3040.649590][T27966] bridge_slave_1: left promiscuous mode [ 3040.652045][T27966] bridge0: port 2(bridge_slave_1) entered disabled state [ 3040.655574][T27966] bridge_slave_0: left allmulticast mode [ 3040.655596][T27966] bridge_slave_0: left promiscuous mode [ 3040.655757][T27966] bridge0: port 1(bridge_slave_0) entered disabled state [ 3040.657798][T21760] Bluetooth: hci4: command tx timeout [ 3040.792271][T27966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3040.793894][T27966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3040.794689][T27966] bond0 (unregistering): Released all slaves [ 3040.834443][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3040.849433][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3040.895790][ T8303] rxe_eth0 speed is unknown, defaulting to 1000 [ 3041.061919][T30530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3041.061960][T30530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3041.061990][T30530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3041.067106][ T1009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3041.234531][T26143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3041.234552][T26143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3041.253270][ T29] audit: type=1400 audit(1792970255.596:1055): avc: denied { write } for pid=8321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3041.319485][T26143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3041.319505][T26143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3041.366482][ T29] audit: type=1400 audit(1792970255.716:1056): avc: denied { write } for pid=8333 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3041.436883][ T8303] lo speed is unknown, defaulting to 1000 [ 3041.483756][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3041.702609][T27966] hsr_slave_0: left promiscuous mode [ 3041.703358][T27966] hsr_slave_1: left promiscuous mode [ 3041.704054][T27966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3041.704070][T27966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3041.704758][T27966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3041.704772][T27966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3041.730536][T27966] veth1_macvtap: left promiscuous mode [ 3041.730568][T27966] veth0_macvtap: left promiscuous mode [ 3041.730639][T27966] veth1_vlan: left promiscuous mode [ 3041.730687][T27966] veth0_vlan: left promiscuous mode [ 3042.068617][ T29] audit: type=1400 audit(1792970256.426:1057): avc: denied { write } for pid=8350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3042.072661][T27966] team0 (unregistering): Port device team_slave_1 removed [ 3042.102245][T27966] team0 (unregistering): Port device team_slave_0 removed [ 3042.188867][ T29] audit: type=1400 audit(1792970256.546:1058): avc: denied { write } for pid=8364 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3042.246952][T21760] Bluetooth: hci1: command tx timeout [ 3042.279021][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3042.648546][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 3042.648627][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 3042.648731][ T8303] bridge_slave_0: entered allmulticast mode [ 3042.650177][ T8303] bridge_slave_0: entered promiscuous mode [ 3042.678365][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 3042.678491][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 3042.678595][ T8303] bridge_slave_1: entered allmulticast mode [ 3042.680235][ T8303] bridge_slave_1: entered promiscuous mode [ 3042.717345][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3042.719510][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3042.726881][T21760] Bluetooth: hci4: command tx timeout [ 3042.767630][ T8303] team0: Port device team_slave_0 added [ 3042.769873][ T8303] team0: Port device team_slave_1 added [ 3042.806414][ T29] audit: type=1400 audit(1792970257.156:1059): avc: denied { write } for pid=8375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3042.832129][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3042.832144][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3042.832166][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3042.833625][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3042.833637][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3042.833658][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3042.958693][ T8303] hsr_slave_0: entered promiscuous mode [ 3042.959444][ T8303] hsr_slave_1: entered promiscuous mode [ 3042.961532][ T8303] debugfs: 'hsr0' already exists in 'hsr' [ 3042.961549][ T8303] Cannot create hsr debugfs directory [ 3043.011062][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3043.041285][ T8398] FAULT_INJECTION: forcing a failure. [ 3043.041285][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 3043.041328][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: syz.3.9255 Tainted: G L syzkaller #0 PREEMPT(full) [ 3043.041354][ T8398] Tainted: [L]=SOFTLOCKUP [ 3043.041361][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3043.041371][ T8398] Call Trace: [ 3043.041379][ T8398] [ 3043.041387][ T8398] dump_stack_lvl+0x100/0x190 [ 3043.041419][ T8398] should_fail_ex.cold+0x5/0xa [ 3043.041445][ T8398] should_failslab+0xc2/0x120 [ 3043.041471][ T8398] __kmalloc_noprof+0xfc/0x840 [ 3043.041502][ T8398] ? tomoyo_encode2+0xfb/0x3c0 [ 3043.041527][ T8398] tomoyo_encode2+0xfb/0x3c0 [ 3043.041552][ T8398] tomoyo_encode+0x29/0x50 [ 3043.041570][ T8398] tomoyo_realpath_from_path+0x18c/0x690 [ 3043.041597][ T8398] tomoyo_path2_perm+0x366/0x700 [ 3043.041626][ T8398] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 3043.041651][ T8398] ? try_to_unlazy+0x296/0x910 [ 3043.041711][ T8398] tomoyo_path_rename+0xfc/0x1a0 [ 3043.041731][ T8398] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 3043.041754][ T8398] ? do_raw_spin_unlock+0x53/0x1e0 [ 3043.041780][ T8398] ? do_raw_spin_unlock+0x145/0x1e0 [ 3043.041812][ T8398] security_path_rename+0x18e/0x3c0 [ 3043.041836][ T8398] filename_renameat2+0x731/0xa60 [ 3043.041864][ T8398] ? __pfx_filename_renameat2+0x10/0x10 [ 3043.041886][ T8398] ? lock_acquire+0x1d1/0x380 [ 3043.041907][ T8398] ? __might_fault+0xc5/0x140 [ 3043.041936][ T8398] ? __might_fault+0xc5/0x140 [ 3043.041979][ T8398] ? do_getname+0x191/0x390 [ 3043.042000][ T8398] __x64_sys_rename+0x81/0xb0 [ 3043.042020][ T8398] do_syscall_64+0x123/0x790 [ 3043.042049][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3043.042070][ T8398] RIP: 0033:0x7fe90059f559 [ 3043.042087][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3043.042104][ T8398] RSP: 002b:00007fe9014e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 3043.042123][ T8398] RAX: ffffffffffffffda RBX: 00007fe900825fa0 RCX: 00007fe90059f559 [ 3043.042135][ T8398] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000200000000d00 [ 3043.042146][ T8398] RBP: 00007fe900636b20 R08: 0000000000000000 R09: 0000000000000000 [ 3043.042156][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3043.042167][ T8398] R13: 00007fe900826038 R14: 00007fe900825fa0 R15: 00007ffe17abe5a8 [ 3043.042193][ T8398] [ 3043.042213][ T8398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3043.301285][ T8404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3043.368259][ T8303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3043.375856][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3043.381282][ T8303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3043.402615][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3043.403798][ T8303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3043.414415][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3043.416687][ T8303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3043.437982][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3043.588580][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 3043.588597][ T29] audit: type=1400 audit(1792970257.946:1061): avc: denied { write } for pid=8400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3043.611310][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3043.653107][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 3043.661866][T27966] bridge0: port 1(bridge_slave_0) entered blocking state [ 3043.661946][T27966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3043.671650][T27966] bridge0: port 2(bridge_slave_1) entered blocking state [ 3043.671722][T27966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3043.798509][ T29] audit: type=1400 audit(1792970258.156:1062): avc: denied { write } for pid=8421 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3043.985309][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3044.109120][T31901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3044.113502][T31901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3044.114305][T31901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3044.115542][T31901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3044.116032][T31901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3044.327143][T31901] Bluetooth: hci1: command tx timeout [ 3044.546157][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3044.684003][ T8429] rxe_eth0 speed is unknown, defaulting to 1000 [ 3044.807126][T31901] Bluetooth: hci4: command tx timeout [ 3044.859070][ T8303] veth0_vlan: entered promiscuous mode [ 3044.865483][ T8303] veth1_vlan: entered promiscuous mode [ 3044.900194][ T8429] lo speed is unknown, defaulting to 1000 [ 3044.901190][ T8303] veth0_macvtap: entered promiscuous mode [ 3044.928562][ T8303] veth1_macvtap: entered promiscuous mode [ 3044.954037][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3044.967085][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3044.973182][T22564] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.049367][ T6064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.049423][ T6064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.049462][ T6064] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.088798][ T5746] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 3045.157415][T22564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3045.157435][T22564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3045.238186][ T5746] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3045.238446][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3045.238462][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3045.239061][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3045.239101][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3045.240960][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 3045.241002][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3045.241062][ T8429] bridge_slave_0: entered allmulticast mode [ 3045.241825][ T8429] bridge_slave_0: entered promiscuous mode [ 3045.242866][ T5746] usb 4-1: config 0 descriptor?? [ 3045.273167][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 3045.273236][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3045.273353][ T8429] bridge_slave_1: entered allmulticast mode [ 3045.276933][ T8429] bridge_slave_1: entered promiscuous mode [ 3045.315233][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3045.321058][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3045.366299][ T8429] team0: Port device team_slave_0 added [ 3045.371749][ T8429] team0: Port device team_slave_1 added [ 3045.378571][ T5746] pwc: Askey VC010 type 2 USB webcam detected. [ 3045.420062][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3045.420078][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3045.420098][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3045.421660][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3045.421672][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3045.421694][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3045.525019][ T8429] hsr_slave_0: entered promiscuous mode [ 3045.525842][ T8429] hsr_slave_1: entered promiscuous mode [ 3045.526378][ T8429] debugfs: 'hsr0' already exists in 'hsr' [ 3045.526395][ T8429] Cannot create hsr debugfs directory [ 3045.650760][ T5746] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3045.651699][ T5746] pwc: recv_control_msg error -32 req 02 val 2700 [ 3045.652292][ T5746] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3045.652840][ T5746] pwc: recv_control_msg error -32 req 04 val 1000 [ 3045.653385][ T5746] pwc: recv_control_msg error -32 req 04 val 1300 [ 3045.653940][ T5746] pwc: recv_control_msg error -32 req 04 val 1400 [ 3045.654479][ T5746] pwc: recv_control_msg error -32 req 02 val 2000 [ 3045.655028][ T5746] pwc: recv_control_msg error -32 req 02 val 2100 [ 3045.655565][ T5746] pwc: recv_control_msg error -32 req 04 val 1500 [ 3045.656157][ T5746] pwc: recv_control_msg error -32 req 02 val 2500 [ 3045.656677][ T5746] pwc: recv_control_msg error -32 req 02 val 2400 [ 3045.658173][ T5746] pwc: recv_control_msg error -32 req 02 val 2600 [ 3045.659457][ T5746] pwc: recv_control_msg error -32 req 02 val 2900 [ 3045.659828][ T5746] pwc: recv_control_msg error -71 req 02 val 2800 [ 3045.660750][ T5746] pwc: recv_control_msg error -71 req 04 val 1100 [ 3045.661071][ T5746] pwc: recv_control_msg error -71 req 04 val 1200 [ 3045.693672][ T5746] pwc: Registered as video103. [ 3045.713852][ T5746] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input100 [ 3045.756077][ T5746] usb 4-1: USB disconnect, device number 3 [ 3045.876875][T27739] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 3045.903927][ T8429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3045.905850][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3045.906452][ T8429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3045.912468][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3045.913113][ T8429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3045.933722][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3045.935140][ T8429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3045.940673][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3045.991916][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3046.001896][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 3046.038829][T27739] usb 7-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 3046.040232][T27739] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3046.040274][T27739] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3046.040311][T27739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3046.045147][T26143] bridge0: port 1(bridge_slave_0) entered blocking state [ 3046.045226][T26143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3046.048100][T26143] bridge0: port 2(bridge_slave_1) entered blocking state [ 3046.048181][T26143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3046.068433][ T8429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3046.068472][ T8429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3046.249913][T31901] Bluetooth: hci2: command tx timeout [ 3046.371757][ T8503] capability: warning: `syz.3.9265' uses 32-bit capabilities (legacy support in use) [ 3046.381023][ T8503] overlayfs: upper fs does not support file handles, falling back to index=off. [ 3046.381188][ T8503] overlayfs: failed to set uuid (17/file2, err=-1); falling back to uuid=null. [ 3046.409524][T31901] Bluetooth: hci1: command tx timeout [ 3046.449708][ T29] audit: type=1400 audit(1792970260.796:1063): avc: denied { write } for pid=8488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3046.559771][ T29] audit: type=1400 audit(1792970260.916:1064): avc: denied { write } for pid=8509 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3046.753354][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3046.779646][T21760] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3046.784646][T21760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3046.785453][T21760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3046.786180][T21760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3046.786631][T21760] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3046.801960][ T29] audit: type=1400 audit(1792970261.166:1065): avc: denied { bind } for pid=8523 comm="syz.3.9268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3046.836156][ T29] audit: type=1400 audit(1792970261.186:1066): avc: denied { accept } for pid=8523 comm="syz.3.9268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3046.845311][ T29] audit: type=1326 audit(1792970261.186:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.3.9268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe90059f559 code=0x0 [ 3047.178617][ T8429] veth0_vlan: entered promiscuous mode [ 3047.184945][ T8429] veth1_vlan: entered promiscuous mode [ 3047.221997][ T8429] veth0_macvtap: entered promiscuous mode [ 3047.225665][ T8429] veth1_macvtap: entered promiscuous mode [ 3047.253725][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3047.264746][ T29] audit: type=1400 audit(1792970261.616:1068): avc: denied { write } for pid=8518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3047.291089][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3047.329820][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.358922][T30530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.359474][T26143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.359809][T26143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.428860][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 3047.429414][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 3047.429442][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 3047.435890][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 3047.436108][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3047.436124][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3047.437334][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 3047.440660][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3047.443893][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3047.444439][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3047.445666][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3047.448552][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3047.451842][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3047.453381][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3047.453858][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3047.454256][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3047.455758][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3047.462487][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3047.464565][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3047.465340][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3047.466708][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3047.467237][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3047.468598][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3047.470476][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3047.472012][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3047.474518][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3047.476352][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3047.478639][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3047.479126][T27739] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3047.557927][ T29] audit: type=1400 audit(1792970261.906:1069): avc: denied { write } for pid=8549 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3047.563532][T27739] ax88179_178a 7-1:1.0 eth9: register 'ax88179_178a' at usb-dummy_hcd.6-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 92:89:de:15:92:8b [ 3047.571933][T27739] usb 7-1: USB disconnect, device number 2 [ 3047.579804][T27739] ax88179_178a 7-1:1.0 eth9: unregister 'ax88179_178a' usb-dummy_hcd.6-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 3047.841483][T27966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3047.841502][T27966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3047.843428][ T8520] rxe_eth0 speed is unknown, defaulting to 1000 [ 3048.078787][ T4265] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 3048.127421][ T29] audit: type=1400 audit(1792970262.476:1070): avc: denied { write } for pid=8556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3048.208833][ T8520] lo speed is unknown, defaulting to 1000 [ 3048.236872][ T4265] usb 4-1: Using ep0 maxpacket: 16 [ 3048.237616][ T4265] usb 4-1: New USB device found: idVendor=04d8, idProduct=00df, bcdDevice=0.00 [ 3048.238599][ T4265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3048.238621][ T4265] usb 4-1: config 0 has no interfaces? [ 3048.238646][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3048.242703][ T4265] usb 4-1: config 0 descriptor?? [ 3048.327043][T31901] Bluetooth: hci2: command tx timeout [ 3048.487787][T31901] Bluetooth: hci1: command tx timeout [ 3048.565390][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 3048.565523][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 3048.565636][ T8520] bridge_slave_0: entered allmulticast mode [ 3048.570304][ T8520] bridge_slave_0: entered promiscuous mode [ 3048.572325][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 3048.572427][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 3048.572721][ T8520] bridge_slave_1: entered allmulticast mode [ 3048.573748][ T8520] bridge_slave_1: entered promiscuous mode [ 3048.596428][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3048.609993][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3048.635935][ T8520] team0: Port device team_slave_0 added [ 3048.641018][ T8520] team0: Port device team_slave_1 added [ 3048.665624][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3048.665640][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3048.665661][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3048.667647][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3048.667658][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3048.667677][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3048.698736][ T8520] hsr_slave_0: entered promiscuous mode [ 3048.699469][ T8520] hsr_slave_1: entered promiscuous mode [ 3048.700343][ T8520] debugfs: 'hsr0' already exists in 'hsr' [ 3048.700361][ T8520] Cannot create hsr debugfs directory [ 3048.884308][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 3048.884326][ T29] audit: type=1400 audit(1792970263.236:1072): avc: denied { write } for pid=8585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3048.897440][T31901] Bluetooth: hci5: command tx timeout [ 3048.969586][ T29] audit: type=1400 audit(1792970263.326:1073): avc: denied { write } for pid=8600 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3049.040793][ T8520] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3049.057668][ T8520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3049.058384][ T8520] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3049.066234][ T8520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3049.089151][ T8520] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3049.105051][ T8520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3049.105731][ T8520] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3049.123749][ T8520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3049.182664][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3049.204729][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 3049.224567][T22564] bridge0: port 1(bridge_slave_0) entered blocking state [ 3049.224666][T22564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3049.245547][T22564] bridge0: port 2(bridge_slave_1) entered blocking state [ 3049.245655][T22564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3049.507221][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3049.661719][ T8520] veth0_vlan: entered promiscuous mode [ 3049.665212][ T8520] veth1_vlan: entered promiscuous mode [ 3049.681234][ T8520] veth0_macvtap: entered promiscuous mode [ 3049.686010][ T8520] veth1_macvtap: entered promiscuous mode [ 3049.707192][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3049.714725][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3049.803317][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3049.803362][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3049.826880][ T6064] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3049.828166][T22564] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3049.855759][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3049.855966][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3049.855981][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3049.887376][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3050.207152][ T1252] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 3050.377709][ T1252] usb 9-1: Using ep0 maxpacket: 32 [ 3050.378176][ T1252] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3050.379063][ T1252] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3050.380777][ T1252] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3050.380799][ T1252] usb 9-1: Product: syz [ 3050.380813][ T1252] usb 9-1: Manufacturer: syz [ 3050.380826][ T1252] usb 9-1: SerialNumber: syz [ 3050.382301][ T1252] usb 9-1: config 0 descriptor?? [ 3050.382967][ T8631] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 3050.384419][ T1252] hub 9-1:0.0: bad descriptor, ignoring hub [ 3050.384442][ T1252] hub 9-1:0.0: probe with driver hub failed with error -5 [ 3050.417014][T31901] Bluetooth: hci2: command tx timeout [ 3050.699471][T27740] usb 9-1: USB disconnect, device number 2 [ 3050.839677][T30809] usb 4-1: USB disconnect, device number 4 [ 3050.976970][T31901] Bluetooth: hci5: command tx timeout [ 3052.487319][T31901] Bluetooth: hci2: command tx timeout [ 3053.046984][T31901] Bluetooth: hci5: command tx timeout [ 3055.127018][T31901] Bluetooth: hci5: command tx timeout [ 3055.815103][ T29] audit: type=1400 audit(1792970270.166:1074): avc: denied { write } for pid=8638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3055.884455][ T29] audit: type=1400 audit(1792970270.236:1075): avc: denied { write } for pid=8649 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3056.074458][ T29] audit: type=1400 audit(1792970270.426:1076): avc: denied { write } for pid=8652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3056.136169][ T29] audit: type=1400 audit(1792970270.486:1077): avc: denied { write } for pid=8663 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3057.190075][ T29] audit: type=1400 audit(1792970271.546:1078): avc: denied { write } for pid=8667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3057.252262][ T29] audit: type=1400 audit(1792970271.606:1079): avc: denied { write } for pid=8678 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3058.425655][ T29] audit: type=1400 audit(1792970272.776:1080): avc: denied { write } for pid=8681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3058.499418][ T29] audit: type=1400 audit(1792970272.856:1081): avc: denied { write } for pid=8692 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3076.409797][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 3137.850033][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 3145.051704][ T8701] Bluetooth: hci6: command 0x0406 tx timeout [ 3145.051770][ T8701] Bluetooth: hci0: command 0x0406 tx timeout [ 3160.407023][T21760] Bluetooth: hci4: command 0x0406 tx timeout [ 3165.527127][ T5545] Bluetooth: hci1: command 0x0406 tx timeout [ 3170.646942][ T8701] Bluetooth: hci2: command 0x0406 tx timeout [ 3170.646968][T21760] Bluetooth: hci5: command 0x0406 tx timeout [ 3174.967320][ T31] INFO: task syz.0.9174:8018 blocked for more than 143 seconds. [ 3174.967346][ T31] Tainted: G L syzkaller #0 [ 3174.967356][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3174.967365][ T31] task:syz.0.9174 state:D stack:28184 pid:8018 tgid:8017 ppid:7689 task_flags:0x400140 flags:0x00080002 [ 3174.967428][ T31] Call Trace: [ 3174.967434][ T31] [ 3174.967446][ T31] __schedule+0x125e/0x6990 [ 3174.967474][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 3174.967511][ T31] ? __pfx___schedule+0x10/0x10 [ 3174.967529][ T31] ? find_held_lock+0x2b/0x80 [ 3174.967546][ T31] ? schedule+0x225/0x2c0 [ 3174.967568][ T31] schedule+0xdd/0x2c0 [ 3174.967587][ T31] schedule_preempt_disabled+0x13/0x30 [ 3174.967607][ T31] __mutex_lock+0xcca/0x1c10 [ 3174.967632][ T31] ? write_ports+0xa5/0xcc0 [ 3174.967659][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 3174.967683][ T31] ? ksys_write+0x12a/0x250 [ 3174.967704][ T31] ? do_syscall_64+0x123/0x790 [ 3174.967739][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3174.967773][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 3174.967797][ T31] ? write_ports+0xa5/0xcc0 [ 3174.967822][ T31] write_ports+0xa5/0xcc0 [ 3174.967851][ T31] ? __pfx_write_ports+0x10/0x10 [ 3174.967878][ T31] ? lock_acquire+0x1d1/0x380 [ 3174.967899][ T31] ? __might_fault+0xc5/0x140 [ 3174.967927][ T31] ? find_held_lock+0x2b/0x80 [ 3174.967943][ T31] ? __might_fault+0xc5/0x140 [ 3174.967970][ T31] ? __might_fault+0xc5/0x140 [ 3174.968001][ T31] ? __pfx_write_ports+0x10/0x10 [ 3174.968031][ T31] ? _copy_from_user+0x59/0xd0 [ 3174.968056][ T31] ? __pfx_write_ports+0x10/0x10 [ 3174.968083][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 3174.968113][ T31] vfs_write+0x2aa/0x1050 [ 3174.968137][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 3174.968164][ T31] ? lock_acquire+0x1d1/0x380 [ 3174.968186][ T31] ? __fget_files+0x34/0x3d0 [ 3174.968212][ T31] ? __pfx_vfs_write+0x10/0x10 [ 3174.968233][ T31] ? find_held_lock+0x2b/0x80 [ 3174.968257][ T31] ? __fget_files+0x215/0x3d0 [ 3174.968289][ T31] ? __fget_files+0x21f/0x3d0 [ 3174.968324][ T31] ksys_write+0x12a/0x250 [ 3174.968346][ T31] ? __pfx_ksys_write+0x10/0x10 [ 3174.968377][ T31] do_syscall_64+0x123/0x790 [ 3174.968404][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3174.968425][ T31] RIP: 0033:0x7f5b0119f559 [ 3174.968440][ T31] RSP: 002b:00007f5b0209c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3174.968459][ T31] RAX: ffffffffffffffda RBX: 00007f5b01425fa0 RCX: 00007f5b0119f559 [ 3174.968472][ T31] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 3174.968483][ T31] RBP: 00007f5b01236b20 R08: 0000000000000000 R09: 0000000000000000 [ 3174.968494][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3174.968504][ T31] R13: 00007f5b01426038 R14: 00007f5b01425fa0 R15: 00007ffe3a4c4d08 [ 3174.968532][ T31] [ 3174.968565][ T31] [ 3174.968565][ T31] Showing all locks held in the system: [ 3174.968587][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 3174.968602][ T31] #0: ffffffff8ffeb420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 3174.968802][ T31] locks held by getty/5367: 2, on CPU#1: [ 3174.968815][ T31] #0: ffff88802b4510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3174.968865][ T31] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 3174.968923][ T31] locks held by kworker/u8:18/27966: 4, last CPU#1: [ 3174.968935][ T31] #0: ffff88803575c148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 3174.968978][ T31] #1: ffffc9000374fd08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 3174.969022][ T31] #2: ffff888066ff0dd8 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge.part.0+0xf6/0x3c0 [ 3174.969068][ T31] #3: ffffffff8ffeb420 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule_buff+0xdcf/0x15d0 [ 3174.969122][ T31] locks held by syz.1.9125/7913: 2, on CPU#1: [ 3174.969135][ T31] #0: ffffffff91fb9d08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 3174.969177][ T31] #1: ffffffff904975c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 [ 3174.969221][ T31] locks held by syz.0.9174/8018: 3, on CPU#1: [ 3174.969233][ T31] #0: ffff8880663f5cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 3174.969279][ T31] #1: ffff88802c354460 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 3174.969329][ T31] #2: ffffffff904975c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 3174.969380][ T31] locks held by syz.2.9246/8314: 3, on CPU#1: [ 3174.969393][ T31] #0: ffff8880678ee7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 3174.969432][ T31] #1: ffff88807a594460 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 3174.969480][ T31] #2: ffffffff904975c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 3174.969535][ T31] [ 3174.969540][ T31] ============================================= [ 3174.969540][ T31] [ 3174.969548][ T31] NMI backtrace for cpu 0 [ 3174.969561][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3174.969585][ T31] Tainted: [L]=SOFTLOCKUP [ 3174.969592][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3174.969602][ T31] Call Trace: [ 3174.969608][ T31] [ 3174.969615][ T31] dump_stack_lvl+0x100/0x190 [ 3174.969644][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 3174.969674][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3174.969697][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 3174.969721][ T31] sys_info+0x141/0x190 [ 3174.969738][ T31] watchdog+0xcb1/0x1030 [ 3174.969770][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3174.969792][ T31] ? __pfx_watchdog+0x10/0x10 [ 3174.969819][ T31] ? __kthread_parkme+0x18f/0x230 [ 3174.969845][ T31] ? kthread+0x13a/0x450 [ 3174.969870][ T31] ? __pfx_watchdog+0x10/0x10 [ 3174.969893][ T31] kthread+0x373/0x450 [ 3174.969919][ T31] ? __pfx_kthread+0x10/0x10 [ 3174.969946][ T31] ret_from_fork+0x730/0xd60 [ 3174.969969][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3174.969991][ T31] ? __switch_to+0x800/0x10e0 [ 3174.970018][ T31] ? __pfx_kthread+0x10/0x10 [ 3174.970044][ T31] ret_from_fork_asm+0x1a/0x30 [ 3174.970074][ T31] [ 3174.970081][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3174.970102][ C1] NMI backtrace for cpu 1 [ 3174.970117][ C1] CPU: 1 UID: 0 PID: 27966 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 3174.970137][ C1] Tainted: [L]=SOFTLOCKUP [ 3174.970143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3174.970153][ C1] Workqueue: bat_events batadv_bla_periodic_work [ 3174.970169][ C1] RIP: 0010:lock_release+0x17d/0x310 [ 3174.970189][ C1] Code: 74 0e 8b 05 45 3e 80 10 85 c0 0f 84 83 01 00 00 90 48 c7 c7 37 48 5f 8e e8 d0 15 fe 09 b8 ff ff ff ff 65 0f c1 05 9b 63 ce 13 <83> f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 [ 3174.970205][ C1] RSP: 0018:ffffc90000a080d0 EFLAGS: 00000057 [ 3174.970216][ C1] RAX: 0000000000000001 RBX: ffffffff8ffeb420 RCX: ffffc90000a080dc [ 3174.970226][ C1] RDX: 0000000000000101 RSI: ffffffff8e5f4837 RDI: ffffffff8c831680 [ 3174.970237][ C1] RBP: ffffffff81bb1d4e R08: 0000000000000001 R09: 0000000000000007 [ 3174.970246][ C1] R10: 0000000000000200 R11: 000000000009b603 R12: ffff888038c28000 [ 3174.970256][ C1] R13: ffffc90000a08188 R14: 0000000000000202 R15: 0000000000000005 [ 3174.970290][ C1] FS: 0000000000000000(0000) GS:ffff8881225ac000(0000) knlGS:0000000000000000 [ 3174.970306][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3174.970316][ C1] CR2: 0000560f5bd27960 CR3: 000000000fd96000 CR4: 00000000003526f0 [ 3174.970327][ C1] Call Trace: [ 3174.970332][ C1] [ 3174.970340][ C1] unwind_next_frame+0x3c3/0x2090 [ 3174.970363][ C1] ? br_flood_port+0x32a/0x540 [ 3174.970386][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3174.970406][ C1] arch_stack_walk+0x94/0xf0 [ 3174.970426][ C1] ? br_flood+0x59a/0x810 [ 3174.970447][ C1] stack_trace_save+0x8e/0xc0 [ 3174.970463][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 3174.970484][ C1] kasan_save_stack+0x30/0x50 [ 3174.970503][ C1] ? kasan_save_stack+0x30/0x50 [ 3174.970519][ C1] ? kasan_save_track+0x14/0x30 [ 3174.970535][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 3174.970552][ C1] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 3174.970569][ C1] ? skb_clone+0x187/0x3f0 [ 3174.970590][ C1] ? maybe_deliver+0x3cc/0x590 [ 3174.970609][ C1] ? br_flood_port+0x32a/0x540 [ 3174.970647][ C1] kasan_save_track+0x14/0x30 [ 3174.970663][ C1] __kasan_slab_alloc+0x89/0x90 [ 3174.970682][ C1] kmem_cache_alloc_noprof+0x269/0x6a0 [ 3174.970699][ C1] ? skb_clone+0x187/0x3f0 [ 3174.970721][ C1] skb_clone+0x187/0x3f0 [ 3174.970742][ C1] maybe_deliver+0x3cc/0x590 [ 3174.970768][ C1] br_flood_port+0x32a/0x540 [ 3174.970789][ C1] br_flood+0x59a/0x810 [ 3174.970810][ C1] ? br_fdb_update+0x136/0x800 [ 3174.970827][ C1] ? __pfx_br_flood+0x10/0x10 [ 3174.970847][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 3174.970869][ C1] br_handle_frame_finish+0x1218/0x1ff0 [ 3174.970883][ C1] ? __lock_acquire+0x60/0x1f40 [ 3174.970901][ C1] ? find_held_lock+0x2b/0x80 [ 3174.970915][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 3174.970929][ C1] ? net_generic+0xea/0x2a0 [ 3174.970945][ C1] ? net_generic+0xf4/0x2a0 [ 3174.970958][ C1] ? br_nf_pre_routing+0x716/0x1510 [ 3174.970976][ C1] br_handle_frame+0x7db/0x1660 [ 3174.970991][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 3174.971004][ C1] ? kfree_skbmem+0x19a/0x210 [ 3174.971019][ C1] ? kmem_cache_free+0x127/0x6c0 [ 3174.971034][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 3174.971051][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 3174.971065][ C1] __netif_receive_skb_core.constprop.0+0x736/0x35a0 [ 3174.971091][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 3174.971119][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 3174.971138][ C1] ? process_backlog+0x437/0x1600 [ 3174.971156][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 3174.971176][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 3174.971196][ C1] ? lock_acquire+0x1d1/0x380 [ 3174.971213][ C1] ? process_backlog+0x437/0x1600 [ 3174.971232][ C1] ? process_backlog+0x437/0x1600 [ 3174.971250][ C1] __netif_receive_skb+0x1f/0x120 [ 3174.971269][ C1] process_backlog+0x487/0x1600 [ 3174.971290][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 3174.971310][ C1] net_rx_action+0xa40/0xf20 [ 3174.971332][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 3174.971353][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 3174.971387][ C1] ? sched_clock+0x3a/0x60 [ 3174.971400][ C1] ? sched_clock_cpu+0x6c/0x570 [ 3174.971421][ C1] ? mark_held_locks+0x40/0x70 [ 3174.971439][ C1] handle_softirqs+0x216/0xa20 [ 3174.971457][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3174.971471][ C1] ? irqtime_account_delta+0x9a/0x110 [ 3174.971487][ C1] ? netif_rx+0x65/0xb0 [ 3174.971501][ C1] do_softirq+0xaf/0xf0 [ 3174.971514][ C1] [ 3174.971519][ C1] [ 3174.971524][ C1] __local_bh_enable_ip+0xff/0x120 [ 3174.971543][ C1] ? netif_rx+0x65/0xb0 [ 3174.971556][ C1] netif_rx+0x93/0xb0 [ 3174.971569][ C1] batadv_bla_send_claim+0x4dd/0x1160 [ 3174.971594][ C1] ? __pfx_batadv_bla_send_claim+0x10/0x10 [ 3174.971617][ C1] ? __local_bh_enable_ip+0xa5/0x120 [ 3174.971633][ C1] batadv_bla_send_announce+0x130/0x190 [ 3174.971656][ C1] ? __pfx_batadv_bla_send_announce+0x10/0x10 [ 3174.971678][ C1] ? batadv_bla_periodic_work+0x282/0xa10 [ 3174.971693][ C1] ? batadv_bla_periodic_work+0x588/0xa10 [ 3174.971708][ C1] ? batadv_bla_periodic_work+0x588/0xa10 [ 3174.971724][ C1] batadv_bla_periodic_work+0x428/0xa10 [ 3174.971742][ C1] process_one_work+0xac7/0x1b10 [ 3174.971765][ C1] ? __pfx_process_one_work+0x10/0x10 [ 3174.971779][ C1] ? lock_acquire+0x1d1/0x380 [ 3174.971799][ C1] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 3174.971815][ C1] worker_thread+0x5ef/0xe50 [ 3174.971832][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3174.971847][ C1] ? kthread+0x13a/0x450 [ 3174.971866][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3174.971880][ C1] kthread+0x373/0x450 [ 3174.971900][ C1] ? __pfx_kthread+0x10/0x10 [ 3174.971920][ C1] ret_from_fork+0x730/0xd60 [ 3174.971936][ C1] ? save_fpregs_to_fpstate+0x19c/0x270 [ 3174.971956][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 3174.971972][ C1] ? rcu_is_watching+0x13/0xc0 [ 3174.971987][ C1] ? __switch_to+0x800/0x10e0 [ 3174.972008][ C1] ? __pfx_kthread+0x10/0x10 [ 3174.972029][ C1] ret_from_fork_asm+0x1a/0x30 [ 3174.972050][ C1] [ 3174.972105][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3176.185133][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3176.195874][ T31] Tainted: [L]=SOFTLOCKUP [ 3176.200169][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3176.210194][ T31] Call Trace: [ 3176.213445][ T31] [ 3176.216348][ T31] dump_stack_lvl+0x100/0x190 [ 3176.221004][ T31] vpanic+0x553/0x970 [ 3176.224956][ T31] ? __pfx_vpanic+0x10/0x10 [ 3176.229433][ T31] panic+0xd1/0xe0 [ 3176.233124][ T31] ? __pfx_panic+0x10/0x10 [ 3176.237518][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 3176.243644][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 3176.249769][ T31] ? watchdog.cold+0x1ec/0x234 [ 3176.254510][ T31] watchdog.cold+0x1fd/0x234 [ 3176.259072][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3176.264851][ T31] ? __pfx_watchdog+0x10/0x10 [ 3176.269502][ T31] ? __kthread_parkme+0x18f/0x230 [ 3176.274518][ T31] ? kthread+0x13a/0x450 [ 3176.278738][ T31] ? __pfx_watchdog+0x10/0x10 [ 3176.283392][ T31] kthread+0x373/0x450 [ 3176.287439][ T31] ? __pfx_kthread+0x10/0x10 [ 3176.292008][ T31] ret_from_fork+0x730/0xd60 [ 3176.296582][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3176.301665][ T31] ? __switch_to+0x800/0x10e0 [ 3176.306315][ T31] ? __pfx_kthread+0x10/0x10 [ 3176.310880][ T31] ret_from_fork_asm+0x1a/0x30 [ 3176.315622][ T31] [ 3176.318925][ T31] Kernel Offset: disabled [ 3176.323232][ T31] Rebooting in 86400 seconds..