last executing test programs: 2m48.764636083s ago: executing program 4 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 2m1.074685603s ago: executing program 4 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 1m35.510977812s ago: executing program 4 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 1m9.330044431s ago: executing program 4 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 40.957952309s ago: executing program 4 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 11.302208467s ago: executing program 0 (id=1291): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2}, 0x20) readv(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x72, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@empty}, {@loopback}]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0xb, "34abeec8d03ff1a8b8"}, {0x0, 0xe, "4ef661e96b4014469f350a42"}]}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000696c6c25000000000020203d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000184a0000060000000000dd0000000000184600000100"/96], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x82, &(0x7f00000001c0)=""/130, 0x40e00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[{0x4, 0x1, 0x0, 0xa}], 0x10, 0x3ff}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x24, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff948}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x9d, &(0x7f0000000000)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000000c0)='kmem_cache_free\x00', r4}, 0x16) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693677e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dd118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xd6}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x6, &(0x7f0000000f00)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="92e58f85c9cb98dbfd140e13c0b2121f1c039f13af64a68d0751135db097479c0d4a925be660c2230e5b49126ed89a8bd98bdab7547eb3048646839bace09a6c97a6167d130a650db45897adce5ea0d4d4776e7c76939526133a873b41544e86d824fe094f0990a528813d68120355d478cb419fc8e96fd023c503000039363f2b9a600a5e844de28fe013976ea65fbcff75cb00"/157, @ANYRES32, @ANYRES32=0xee00, @ANYRES64=r5, @ANYRESDEC, @ANYRES32, @ANYRES8=r6, @ANYRES32, @ANYBLOB="000000001cf8fe961a00000000000000000000003b23ae645bf1c385a2556f8637d97aef6e4ba95ab8ee31488b4f9bd2e737e5abda190300894ed9dc6dfaaa0ae8564310db9033e45b10ddf8d23b9cdbe6fd26e5fa80322543fd6ac43b818728b6fa8a8bdb79c631e55ae52f26a4c8705b0337bb06a6b806dfcf5ad1a5bf4fc33ea56ef4750ad9c04fc6d06c21a4de8b227c25779633752320db8394189b0d9d3cc610b2920cd7751d13933baafc7bfd581bec18de092fd9237d9857accfdc12f56f8bea6c4764765bcee38d38325dd2b5efa23424f5d7547733e099c3a2ef4e53f83ed022b78a02e4d089c70985514d17b60bd0", @ANYRES32=0x0, @ANYRES8=r7, @ANYBLOB="0cca06376dc333d1d91aa1d1a666c9f10f40f7bb5c5fa1ffad2c0b0320330f7b53b3ca60f4419bc711d385323e8d4198f4462a117c8476755078272a3d25adaab57d1b6027261b539874f19e731c73f90e8fbecb00162fec705c6c223b1869885e15ba261f12659f1cefaa41c90dcb2818049b35cf2623c414e2acef385f8ef18859126f281c69987d46419c33d8317f4072406158a6ce6647e102d3716961e64ef0864c152f5408553e090433bc9a6bed7ce50946d71313bcbb897d3e34b36078401c358d3c7bf3e473225f3a", @ANYRESOCT=r8], 0xa0}, 0x20000041) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x4, 0xc, &(0x7f0000001e40)=ANY=[@ANYBLOB="180000000300000000000000260b000085100000300000020000000000000000000000183d0000030000000000", @ANYBLOB="00000000000000001866a8e090fbbd8805019d3f7a8644580000066e6d891800ae7700950000000004006dedcb053c667aa28316d3faf2ec60a1d627ba764bf92b2665bd9767079123aa687eed8adb3e3e796c3bc6b5b640cf0c4bc56042db702c714364594c8ebaa8523058e6c6a28d2616270e7ffbae9b4652513786e9c82eb290ec161e27909978e70eaf9418bbda4ca4f53ff9eb2d4825bacc5e0ad5b2d1e180ec5fac2242f9a3eaf26d58d5b637baedecc8c154e19fa04c0a953cc3ac3e2def5fbf55a464540a28480f7140a68f4e72c7ea0a82ed237d74b7d4b180ce89", @ANYRES16, @ANYRES16], &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0x30, &(0x7f0000000200)=""/48, 0x41100, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x3, 0xf, 0x1}, 0x10}, 0x90) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) 10.859684815s ago: executing program 1 (id=1292): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x2, r0) 8.971719332s ago: executing program 1 (id=1294): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x6002, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$alg(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 8.616429915s ago: executing program 0 (id=1296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x40}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0xfffffffc}, 0x10) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x1401, 0x1}, 0x10}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, 0x0) 5.892454114s ago: executing program 3 (id=1298): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000000)="fa794bfa", 0x4) 5.884906765s ago: executing program 1 (id=1299): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 5.831844233s ago: executing program 2 (id=1300): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 5.200629427s ago: executing program 0 (id=1301): pipe(&(0x7f00000001c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYBLOB], 0x3}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r2) syz_open_dev$I2C(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$afs(&(0x7f0000000000)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) creat(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ftruncate(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default'], 0x2a, 0x0) 5.199890755s ago: executing program 1 (id=1302): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000180)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 5.199623389s ago: executing program 2 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001d00)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) r4 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000001580)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f0000002080)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)="ca0fd6d3801886dac6aa3bce47ff0c30aefc6c84be0404c6207f7f6be9d3806971126f3bd85ecb1e294a7f220906d5da65aa5d50e2b8ec89fa23011f873ce5f46b89122ba30a42d4e09ba61435b8a7c3e47276fa0998590f37a8c9280a0df60dae3b9e77e8e184b80491c9c6a9f6afeabc696d052d683a0c272c89e3daa0517ec339366d79543979fd98a2efa66e7f40ca8a6343eb343fcdf5d59bc23cbf916aab4f05aea1", 0xa5}, {&(0x7f00000001c0)="cdb6a40a11584a15d4b3e1f9c1d956b1b1bd40fe9238a8622f69427a708f83e1b0fe3e3208bb13f558acdc65ad34ac7c6613743d97384bfb04cd509816840e2c82b4da1067341ffaece26a40c6f823bcbae8cf04fb7d1dda3423a3485403e846329147c3991a6e966005755b50d906cc43a4ac30081f55062d72e54b925c6f49f9a9d9f0ae726f8587a247d2ef61e8b7becd6b99d7f4539ab09401b28e459d1efa48d3302a597ed2dfa82dec765c5cb17a2fcb08129547c875cd1fd8e81056eeba2f0087d88e82f6894e", 0xca}, {&(0x7f0000002ec0)="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", 0x431}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c9e03e000000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRESDEC], 0x40}}], 0x1, 0x8040) sendmmsg$inet(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001200)="11819ebe", 0x4}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYBLOB="5ee91390f8788ddaa2a6e0ffe23089ae096ee17b8cb5f239eef7e6a62c93a3c775b39376ad78893bd6b23a6d153e1d324ca2c5ff8cb6a4ced892b2bd22cf20d916ddec22cf78e443423554d5683fdaff7d72a4164c"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.199471474s ago: executing program 3 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "18"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 4.042570718s ago: executing program 2 (id=1305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.970114684s ago: executing program 3 (id=1306): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4100, 0x1004}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(&(0x7f0000000040)='./file0\x00', 0x0) 3.27083732s ago: executing program 2 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x4) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) 2.784651578s ago: executing program 2 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.116409273s ago: executing program 3 (id=1309): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x460f, 0x0) 2.021441862s ago: executing program 0 (id=1310): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x6002, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$alg(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.948846415s ago: executing program 3 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_emit_vhci(0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1000f0000) 1.723464562s ago: executing program 0 (id=1312): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 1.46741459s ago: executing program 1 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = dup2(r1, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1.398487677s ago: executing program 4 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 16.926114ms ago: executing program 0 (id=1314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f00000023c0)=@ethtool_coalesce={0x4c, 0x0, 0x0, 0x4000000}}) 15.003023ms ago: executing program 1 (id=1315): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-1'], 0x9) 2.009325ms ago: executing program 2 (id=1316): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x40840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) fcntl$setown(r0, 0x8, r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000000)={{0x4000000000000000}, {0x2}, 0x0, 0x6}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) truncate(&(0x7f0000000040)='./file0\x00', 0x0) epoll_create(0x0) fcntl$setlease(r0, 0x400, 0x2) sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1317): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioperm(0x0, 0x6, 0x10000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf3", 0x40, 0x0) ioctl$VT_OPENQRY(r0, 0x4b4c, &(0x7f0000000140)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000008000000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='contention_end\x00', r2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x149041, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000c7da658b020000060000000000000000080061"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) write$rfkill(r3, &(0x7f00000039c0)={0x0, 0x2, 0x2}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1}, 0x40) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000180)=0x101) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x9fef, 0x0, 0x3ff}) kernel console output (not intermixed with test programs): ] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.557203][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.564394][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.603193][ T8698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.624914][ T8702] hsr_slave_0: entered promiscuous mode [ 495.631531][ T8702] hsr_slave_1: entered promiscuous mode [ 495.638334][ T8702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.652455][ T8702] Cannot create hsr debugfs directory [ 495.692576][ T6699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.816844][ T6699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.852087][ T8698] hsr_slave_0: entered promiscuous mode [ 495.858986][ T8698] hsr_slave_1: entered promiscuous mode [ 495.871211][ T8698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.879251][ T8698] Cannot create hsr debugfs directory [ 495.997207][ T6699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.875331][ T29] audit: type=1400 audit(1722858963.151:692): avc: denied { write } for pid=8810 comm="syz.1.947" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 496.964897][ T8811] binder_alloc: binder_alloc_mmap_handler: 8810 20ffc000-20ffd000 already mapped failed -16 [ 497.052543][ T6699] bridge_slave_1: left allmulticast mode [ 497.058840][ T6699] bridge_slave_1: left promiscuous mode [ 497.065030][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.077014][ T6699] bridge_slave_0: left allmulticast mode [ 497.082686][ T6699] bridge_slave_0: left promiscuous mode [ 497.090198][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.121210][ T6699] bridge_slave_1: left allmulticast mode [ 497.128168][ T6699] bridge_slave_1: left promiscuous mode [ 497.133955][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.158034][ T6699] bridge_slave_0: left allmulticast mode [ 497.163716][ T6699] bridge_slave_0: left promiscuous mode [ 497.180934][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.248846][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.261584][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.284115][ T6699] bond0 (unregistering): Released all slaves [ 501.504678][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.534987][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.557393][ T6699] bond0 (unregistering): Released all slaves [ 501.639947][ T8836] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 501.795615][ T8616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.828556][ T8616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.982345][ T8616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.992424][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.000223][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.012151][ T8616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 502.302220][ T29] audit: type=1400 audit(1722858968.571:693): avc: denied { create } for pid=8842 comm="syz.1.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 502.361222][ T29] audit: type=1400 audit(1722858968.611:694): avc: denied { connect } for pid=8842 comm="syz.1.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 502.712892][ T6699] hsr_slave_0: left promiscuous mode [ 502.736190][ T6699] hsr_slave_1: left promiscuous mode [ 502.760551][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.773826][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.819155][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.837572][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.963028][ T6699] hsr_slave_0: left promiscuous mode [ 503.019841][ T6699] hsr_slave_1: left promiscuous mode [ 503.054462][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.061976][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.097851][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.114619][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.233760][ T6699] veth1_macvtap: left promiscuous mode [ 503.259886][ T6699] veth0_macvtap: left promiscuous mode [ 503.271921][ T6699] veth1_vlan: left promiscuous mode [ 503.282654][ T6699] veth0_vlan: left promiscuous mode [ 503.325882][ T6699] veth1_macvtap: left promiscuous mode [ 503.331421][ T6699] veth0_macvtap: left promiscuous mode [ 503.352898][ T6699] veth1_vlan: left promiscuous mode [ 503.360207][ T6699] veth0_vlan: left promiscuous mode [ 503.433658][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 505.857360][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 505.911574][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 507.439383][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 507.493670][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 508.362190][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.563584][ T8616] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.716104][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.723352][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.780419][ T8702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.826520][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.833719][ T5217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.842207][ T8702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.759831][ T8901] Bluetooth: hci5: Frame reassembly failed (-84) [ 509.769876][ T8901] Bluetooth: hci5: Frame reassembly failed (-84) [ 509.782944][ T8901] Bluetooth: hci5: Frame reassembly failed (-84) [ 509.924235][ T8901] Bluetooth: hci5: Frame reassembly failed (-84) [ 509.947393][ T7493] Bluetooth: hci5: Frame reassembly failed (-84) [ 509.955199][ T8702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 511.906352][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 512.095841][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.973'. [ 512.106297][ T8702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 512.178783][ T29] audit: type=1400 audit(1722858978.451:695): avc: denied { accept } for pid=8904 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 512.474586][ T5278] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 512.686619][ T8698] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 512.694158][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.708353][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.719570][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.742190][ T8698] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 512.746789][ T5278] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 512.778048][ T8698] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.792161][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.819312][ T8702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.832564][ T5278] usb 2-1: config 0 descriptor?? [ 512.850545][ T8698] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 512.953948][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.967798][ T8702] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.000598][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.007849][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.042257][ T8919] netlink: 'syz.0.976': attribute type 5 has an invalid length. [ 513.064874][ T8919] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 513.093301][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.100535][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.291827][ T5278] holtek_mouse 0003:04D9:A070.0009: item fetching failed at offset 2/5 [ 513.308814][ T5278] holtek_mouse 0003:04D9:A070.0009: hid parse failed: -22 [ 513.316435][ T5278] holtek_mouse 0003:04D9:A070.0009: probe with driver holtek_mouse failed with error -22 [ 513.383475][ T8698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.455406][ T8698] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.500385][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.507623][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.528297][ T7544] usb 2-1: USB disconnect, device number 13 [ 513.551805][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.559021][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.730097][ T8616] veth0_vlan: entered promiscuous mode [ 513.772005][ T8702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.799903][ T8616] veth1_vlan: entered promiscuous mode [ 513.906259][ T8919] 9pnet_fd: p9_fd_create_tcp (8919): problem connecting socket to 127.0.0.1 [ 513.920950][ T8616] veth0_macvtap: entered promiscuous mode [ 513.954243][ T8616] veth1_macvtap: entered promiscuous mode [ 514.003182][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.014935][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.025576][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.044067][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.056259][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.109689][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.131552][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.142533][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.160569][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.185824][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.202038][ T8698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.214886][ T8702] veth0_vlan: entered promiscuous mode [ 514.234262][ T8616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.243014][ T8616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.265279][ T8616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.280224][ T8616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.339416][ T8702] veth1_vlan: entered promiscuous mode [ 514.581214][ T8698] veth0_vlan: entered promiscuous mode [ 514.653558][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.673270][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.694995][ T8702] veth0_macvtap: entered promiscuous mode [ 514.831272][ T8698] veth1_vlan: entered promiscuous mode [ 514.886735][ T2492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.905333][ T8702] veth1_macvtap: entered promiscuous mode [ 514.911773][ T2492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.977453][ T8698] veth0_macvtap: entered promiscuous mode [ 515.049609][ T8698] veth1_macvtap: entered promiscuous mode [ 515.256244][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.290428][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.298298][ T8949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.323201][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.390239][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.412585][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.426999][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.452434][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.472130][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.524932][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.565820][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.590558][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.620905][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.633330][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.645127][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.664252][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.690453][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.882067][ T2492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.987641][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.013199][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.025932][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.055376][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.067854][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.079774][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.102042][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.125716][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.139522][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.150558][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.164609][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.177566][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.188304][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.198732][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.210266][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.224638][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.262342][ T2492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.285951][ T8702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.295835][ T8702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.304848][ T8702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.313551][ T8702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.335587][ T8698] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.348930][ T8698] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.357758][ T8698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.366843][ T8698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.399514][ T2492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.509148][ T2492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.644919][ T6700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.661771][ T8953] input: syz1 as /devices/virtual/input/input20 [ 516.668459][ T6700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.849420][ T7493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.864068][ T7493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.092948][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.144446][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.101811][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.126286][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.135591][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.163120][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.173807][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.183192][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.192556][ T5219] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 522.200432][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.546003][ T2492] bridge_slave_1: left allmulticast mode [ 522.551758][ T2492] bridge_slave_1: left promiscuous mode [ 522.591042][ T2492] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.612421][ T2492] bridge_slave_0: left allmulticast mode [ 522.643385][ T2492] bridge_slave_0: left promiscuous mode [ 522.654430][ T2492] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.863052][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 523.527426][ T2492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.557150][ T2492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.577681][ T2492] bond0 (unregistering): Released all slaves [ 524.034358][ T8992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.170844][ T8994] tmpfs: Unknown parameter 'nr_inodŠóçl[˜o•7Ø5Y³ûîùÿ‡QKwåÕ>å™Ûu]œ 0oøNy [ 524.170844][ T8994] NáìcäZÔ¶±Î' [ 524.236837][ T8992] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 524.304491][ T55] Bluetooth: hci0: command tx timeout [ 524.447305][ T8997] block device autoloading is deprecated and will be removed. [ 524.487076][ T8997] bio_check_eod: 2 callbacks suppressed [ 524.487097][ T8997] syz.0.995: attempt to access beyond end of device [ 524.487097][ T8997] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 524.535548][ T5217] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 524.587595][ T2492] hsr_slave_0: left promiscuous mode [ 524.593513][ T2492] hsr_slave_1: left promiscuous mode [ 524.608862][ T2492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.617753][ T2492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.641058][ T2492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.662765][ T2492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.741074][ T29] audit: type=1400 audit(1722858991.011:696): avc: denied { mount } for pid=8993 comm="syz.1.994" name="/" dev="pstore" ino=2921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 524.773037][ T2492] veth1_macvtap: left promiscuous mode [ 524.793602][ T2492] veth0_macvtap: left promiscuous mode [ 524.814526][ T2492] veth1_vlan: left promiscuous mode [ 524.828680][ T5217] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 524.834213][ T2492] veth0_vlan: left promiscuous mode [ 524.862967][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.913843][ T29] audit: type=1400 audit(1722858991.181:697): avc: denied { mounton } for pid=8993 comm="syz.1.994" path="/58/file0" dev="pstore" ino=2921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 525.781174][ T5217] usb 3-1: config 0 descriptor?? [ 526.384871][ T55] Bluetooth: hci0: command tx timeout [ 526.470172][ T5217] [drm] vendor descriptor length:b9 data:9c 09 15 a4 24 7e fc ec 8a 5b b6 [ 526.478970][ T5217] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 526.487506][ T5217] [drm:udl_init] *ERROR* Selecting channel failed [ 526.529333][ T5217] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 526.537585][ T5217] [drm] Initialized udl on minor 2 [ 526.551248][ T5217] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 526.603784][ T5217] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 526.661160][ T5217] usb 3-1: USB disconnect, device number 11 [ 526.669394][ T5289] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 526.825770][ T9015] Bluetooth: hci5: Frame reassembly failed (-84) [ 526.836555][ T9015] Bluetooth: hci5: Frame reassembly failed (-84) [ 526.845812][ T9015] Bluetooth: hci5: Frame reassembly failed (-84) [ 526.855012][ T9015] Bluetooth: hci5: Frame reassembly failed (-84) [ 526.998401][ T5289] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 527.100554][ T29] audit: type=1400 audit(1722858993.371:698): avc: denied { connect } for pid=9009 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 527.127452][ T7469] Bluetooth: hci5: Frame reassembly failed (-84) [ 527.152663][ T29] audit: type=1400 audit(1722858993.401:699): avc: denied { unmount } for pid=8016 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 528.464083][ T5226] Bluetooth: hci0: command tx timeout [ 529.104515][ T5226] Bluetooth: hci5: command 0x1003 tx timeout [ 529.113575][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 529.824136][ T5219] Bluetooth: hci1: command 0x0406 tx timeout [ 529.833093][ T9030] overlayfs: missing 'lowerdir' [ 530.174075][ T5217] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 530.229061][ T9022] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 530.381531][ T5217] usb 3-1: Using ep0 maxpacket: 8 [ 530.398509][ T5217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.420881][ T5217] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 530.430961][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.442526][ T5217] usb 3-1: config 0 descriptor?? [ 530.451564][ T9022] usb 2-1: config 0 has an invalid interface number: 100 but max is 0 [ 530.461438][ T9022] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 530.477402][ T2492] team0 (unregistering): Port device team_slave_1 removed [ 530.486607][ T9022] usb 2-1: config 0 has no interface number 1 [ 530.492961][ T9022] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.507532][ T9022] usb 2-1: too many endpoints for config 0 interface 100 altsetting 7: 237, using maximum allowed: 30 [ 530.521783][ T9022] usb 2-1: config 0 interface 100 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 237 [ 530.536154][ T9022] usb 2-1: config 0 interface 100 has no altsetting 0 [ 530.544209][ T5219] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 530.547864][ T9022] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 530.553047][ T5219] Bluetooth: hci3: Injecting HCI hardware error event [ 530.565345][ T9022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.574454][ T5219] Bluetooth: hci3: hardware error 0x00 [ 530.588199][ T9022] usb 2-1: Product: syz [ 530.603053][ T9022] usb 2-1: Manufacturer: syz [ 530.611437][ T9022] usb 2-1: SerialNumber: syz [ 530.646857][ T9022] usb 2-1: config 0 descriptor?? [ 530.695469][ T2492] team0 (unregistering): Port device team_slave_0 removed [ 530.787068][ T55] Bluetooth: hci0: command tx timeout [ 530.806201][ T5217] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 530.891276][ T9022] kaweth 2-1:0.0: Firmware present in device. [ 531.088742][ T9022] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 531.103654][ T9022] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 531.158103][ T9022] kaweth 2-1:0.100: Firmware present in device. [ 531.168279][ T9022] kaweth 2-1:0.100: Error reading configuration (-71), no net device created [ 531.179640][ T9022] kaweth 2-1:0.100: probe with driver kaweth failed with error -5 [ 531.215273][ T9022] usb 2-1: USB disconnect, device number 14 [ 531.837798][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 532.263463][ T8963] chnl_net:caif_netlink_parms(): no params data found [ 532.572749][ T9052] fuse: Bad value for 'fd' [ 532.660859][ T940] usb 3-1: USB disconnect, device number 12 [ 532.709573][ T5219] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 532.777721][ T940] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 533.616683][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.692145][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.881396][ T8963] bridge_slave_0: entered allmulticast mode [ 533.907349][ T8963] bridge_slave_0: entered promiscuous mode [ 533.930095][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.029940][ T9067] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 534.037824][ T9067] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1012'. [ 534.048925][ T9067] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 534.611515][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.621506][ T8963] bridge_slave_1: entered allmulticast mode [ 534.945939][ T8963] bridge_slave_1: entered promiscuous mode [ 535.312853][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.339140][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.475770][ T8963] team0: Port device team_slave_0 added [ 535.512076][ T8963] team0: Port device team_slave_1 added [ 535.544191][ T5262] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 535.647832][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.663309][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.731442][ T8963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.889140][ T5262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 535.899215][ T5262] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 535.916459][ T5262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 535.932398][ T5262] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 535.943644][ T5262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.953660][ T5262] usb 1-1: config 0 descriptor?? [ 536.119896][ T5262] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 536.126894][ T5262] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 536.240882][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.248625][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.274661][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.606730][ T8963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.756710][ T9022] usb 1-1: USB disconnect, device number 14 [ 536.868529][ T8963] hsr_slave_0: entered promiscuous mode [ 536.891817][ T8963] hsr_slave_1: entered promiscuous mode [ 536.909264][ T8963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.924096][ T8963] Cannot create hsr debugfs directory [ 541.099896][ T9112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.258195][ T9112] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 541.820487][ T8963] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 541.909713][ T9130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1027'. [ 542.786672][ T8963] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 542.892740][ T8963] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 542.959157][ T8963] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 543.040875][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 543.360229][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.369003][ T9138] netlink: 'syz.2.1030': attribute type 3 has an invalid length. [ 543.394505][ T9138] netlink: 'syz.2.1030': attribute type 3 has an invalid length. [ 543.467219][ T8963] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.548650][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.555886][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.603401][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.610556][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.155568][ T9146] input: syz0 as /devices/virtual/input/input21 [ 545.018175][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.127542][ T29] audit: type=1400 audit(1722859011.401:700): avc: denied { ioctl } for pid=9153 comm="syz.0.1034" path="socket:[32132]" dev="sockfs" ino=32132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 549.517733][ T9171] Bluetooth: MGMT ver 1.23 [ 552.882811][ T29] audit: type=1400 audit(1722859019.151:701): avc: denied { append } for pid=9185 comm="syz.1.1042" name="renderD128" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 556.261926][ T8963] veth0_vlan: entered promiscuous mode [ 556.337879][ T8963] veth1_vlan: entered promiscuous mode [ 556.561138][ T8963] veth0_macvtap: entered promiscuous mode [ 556.596003][ T8963] veth1_macvtap: entered promiscuous mode [ 557.437411][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.554021][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.563877][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.614120][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.644310][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.710898][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.725793][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.737205][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.763388][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.774322][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.806254][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.827298][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.843409][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.853125][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 557.863233][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.927763][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.994195][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.049479][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.075132][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.104596][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.123993][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.128281][ T29] audit: type=1400 audit(1722859024.401:702): avc: denied { write } for pid=9214 comm="syz.1.1048" name="fd" dev="proc" ino=32249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 558.133813][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.209801][ T29] audit: type=1400 audit(1722859024.441:703): avc: denied { add_name } for pid=9214 comm="syz.1.1048" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 558.213493][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.250705][ T29] audit: type=1400 audit(1722859024.441:704): avc: denied { create } for pid=9214 comm="syz.1.1048" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 558.265498][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.273675][ T29] audit: type=1400 audit(1722859024.441:705): avc: denied { associate } for pid=9214 comm="syz.1.1048" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 559.787253][ T8963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.806019][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.837761][ T8963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.880383][ T8963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.901854][ T8963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.034279][ T55] Bluetooth: hci5: command tx timeout [ 560.439020][ T9230] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 560.944576][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.192707][ T2492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.210450][ T6699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.415588][ T6699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.539534][ T6699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.660760][ T6699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.718063][ T9244] netlink: 'syz.2.1056': attribute type 10 has an invalid length. [ 561.727350][ T9244] bond0: (slave bond_slave_0): Releasing backup interface [ 561.754162][ T7469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.762011][ T7469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.850124][ T2492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.892639][ T2492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.962262][ T9208] chnl_net:caif_netlink_parms(): no params data found [ 562.072647][ T55] Bluetooth: hci5: command tx timeout [ 562.195739][ T9255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.224215][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.870297][ T2476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.106277][ T6699] bridge_slave_1: left allmulticast mode [ 563.111972][ T6699] bridge_slave_1: left promiscuous mode [ 563.124207][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.136059][ T6699] bridge_slave_0: left allmulticast mode [ 563.141821][ T6699] bridge_slave_0: left promiscuous mode [ 563.148472][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.310633][ T9268] x_tables: duplicate underflow at hook 3 [ 563.446107][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.452434][ T29] audit: type=1400 audit(1722859029.721:706): avc: denied { write } for pid=9263 comm="syz.2.1062" path="socket:[32581]" dev="sockfs" ino=32581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 563.452470][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.476621][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.546549][ T29] audit: type=1400 audit(1722859029.721:707): avc: denied { nlmsg_write } for pid=9263 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 563.907235][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.926235][ T2476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.990899][ T2476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.115807][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.134843][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.156582][ T6699] bond0 (unregistering): Released all slaves [ 564.188543][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.195948][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.203117][ T9208] bridge_slave_0: entered allmulticast mode [ 564.210502][ T9208] bridge_slave_0: entered promiscuous mode [ 564.224600][ T55] Bluetooth: hci5: command tx timeout [ 564.311553][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.333459][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.374672][ T9208] bridge_slave_1: entered allmulticast mode [ 564.382840][ T9208] bridge_slave_1: entered promiscuous mode [ 564.537452][ T9208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.580766][ T9208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.724060][ T5217] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 564.812369][ T29] audit: type=1400 audit(1722859031.081:708): avc: denied { accept } for pid=9279 comm="syz.1.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 564.839499][ T6699] hsr_slave_0: left promiscuous mode [ 564.854338][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.871429][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.881009][ T6699] hsr_slave_1: left promiscuous mode [ 564.887195][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.897561][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.909500][ T5219] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 564.918864][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 564.923223][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.939838][ T5217] usb 3-1: Using ep0 maxpacket: 16 [ 564.944087][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.959204][ T5217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.985760][ T5217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.993720][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.004791][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.021339][ T5217] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 565.030579][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.058083][ T2492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.103030][ T6699] veth1_macvtap: left promiscuous mode [ 565.112728][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.123900][ T6699] veth0_macvtap: left promiscuous mode [ 565.133221][ T6699] veth1_vlan: left promiscuous mode [ 565.140352][ T5217] usb 3-1: config 0 descriptor?? [ 565.149610][ T6699] veth0_vlan: left promiscuous mode [ 565.601752][ T5217] bigben 0003:146B:0902.000A: unexpected rdesc, please submit for review [ 565.623110][ T5217] bigben 0003:146B:0902.000A: item fetching failed at offset 1/5 [ 565.661093][ T5217] bigben 0003:146B:0902.000A: parse failed [ 565.685713][ T5217] bigben 0003:146B:0902.000A: probe with driver bigben failed with error -22 [ 565.923586][ T940] usb 3-1: USB disconnect, device number 13 [ 566.154714][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.170951][ T2492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.204631][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 566.266871][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 566.314116][ T5219] Bluetooth: hci5: command tx timeout [ 566.936922][ T9208] team0: Port device team_slave_0 added [ 567.007859][ T9208] team0: Port device team_slave_1 added [ 567.027454][ T5219] Bluetooth: hci0: command tx timeout [ 567.163891][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.181705][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.244007][ T9208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.264233][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.281185][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.294683][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.301743][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.370860][ T9208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.443624][ T9309] overlayfs: invalid redirect ((null)) [ 567.444646][ T9310] Process accounting resumed [ 567.663374][ T9208] hsr_slave_0: entered promiscuous mode [ 567.679410][ T9208] hsr_slave_1: entered promiscuous mode [ 567.699040][ T9208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.718772][ T9208] Cannot create hsr debugfs directory [ 568.384282][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.671372][ T7477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.067717][ T6699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.105043][ T5219] Bluetooth: hci0: command tx timeout [ 569.254537][ T6699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.352586][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.364500][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.384641][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.398571][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.408816][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 569.424220][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.467802][ T9282] chnl_net:caif_netlink_parms(): no params data found [ 569.599053][ T6699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.754205][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.815053][ T6699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.047085][ T29] audit: type=1400 audit(1722859036.321:709): avc: denied { getopt } for pid=9326 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 571.102709][ T29] audit: type=1326 audit(1722859037.271:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.1.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c23779f9 code=0x0 [ 571.253253][ T55] Bluetooth: hci0: command tx timeout [ 571.566707][ T55] Bluetooth: hci2: command tx timeout [ 571.631591][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.648049][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.669602][ T9282] bridge_slave_0: entered allmulticast mode [ 571.688459][ T9282] bridge_slave_0: entered promiscuous mode [ 571.704706][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.711884][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.720566][ T9282] bridge_slave_1: entered allmulticast mode [ 571.751329][ T9282] bridge_slave_1: entered promiscuous mode [ 571.908864][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.987359][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.264259][ T55] Bluetooth: hci0: command tx timeout [ 573.282337][ T9282] team0: Port device team_slave_0 added [ 573.318343][ T9282] team0: Port device team_slave_1 added [ 573.348896][ T6699] bridge_slave_1: left allmulticast mode [ 573.354986][ T6699] bridge_slave_1: left promiscuous mode [ 573.362217][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.380890][ T6699] bridge_slave_0: left allmulticast mode [ 573.386990][ T6699] bridge_slave_0: left promiscuous mode [ 573.393228][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.589752][ T55] Bluetooth: hci2: command tx timeout [ 574.189627][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.205919][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.220154][ T6699] bond0 (unregistering): Released all slaves [ 574.420717][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.446414][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.483305][ T9282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.532732][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.558066][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.585450][ T9282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.618634][ T9363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.033414][ T9208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 575.097204][ T9208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 575.181073][ T9208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 575.209721][ T9208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 575.262443][ T9282] hsr_slave_0: entered promiscuous mode [ 575.316878][ T9282] hsr_slave_1: entered promiscuous mode [ 575.327048][ T9282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.371334][ T9282] Cannot create hsr debugfs directory [ 576.156995][ T55] Bluetooth: hci2: command tx timeout [ 576.293047][ T6699] hsr_slave_0: left promiscuous mode [ 576.302936][ T6699] hsr_slave_1: left promiscuous mode [ 576.324445][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.336197][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.344954][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.352529][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.385786][ T6699] veth1_macvtap: left promiscuous mode [ 576.392332][ T6699] veth0_macvtap: left promiscuous mode [ 576.398350][ T6699] veth1_vlan: left promiscuous mode [ 576.403638][ T6699] veth0_vlan: left promiscuous mode [ 576.473514][ T29] audit: type=1326 audit(1722859042.741:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.1.1086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c23779f9 code=0x0 [ 577.098545][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 577.161420][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 578.034296][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 578.224993][ T55] Bluetooth: hci2: command tx timeout [ 578.344904][ T9388] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1090'. [ 578.407038][ T9388] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 578.517784][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.534402][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.541718][ T9330] bridge_slave_0: entered allmulticast mode [ 578.560135][ T9330] bridge_slave_0: entered promiscuous mode [ 578.599735][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.634687][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.842437][ T9330] bridge_slave_1: entered allmulticast mode [ 579.065935][ T9330] bridge_slave_1: entered promiscuous mode [ 579.740896][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.940179][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.167838][ T9330] team0: Port device team_slave_0 added [ 580.264985][ T9330] team0: Port device team_slave_1 added [ 580.270907][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 580.279402][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.501179][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.512975][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.560936][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.646193][ T9208] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.659681][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.675143][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.722492][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.881636][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.888800][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.072552][ T9330] hsr_slave_0: entered promiscuous mode [ 581.089501][ T9330] hsr_slave_1: entered promiscuous mode [ 581.101446][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.111061][ T9330] Cannot create hsr debugfs directory [ 581.130717][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.137906][ T5262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.530682][ T9282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 581.551607][ T9282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 581.598373][ T9412] qnx6: unable to read the first superblock [ 581.629683][ T9282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 581.650033][ T9282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 582.176414][ T9330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.427010][ T9330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.452573][ T9421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9421 comm=syz.2.1096 [ 582.543580][ T9208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.564691][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.663859][ T9330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.687681][ T29] audit: type=1400 audit(1722859048.961:712): avc: denied { write } for pid=9418 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 582.921662][ T9330] team0: Port device netdevsim0 removed [ 582.975255][ T9330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.097937][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.112434][ T9421] input: syz1 as /devices/virtual/input/input22 [ 583.145489][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.152601][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.214655][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.221855][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.484243][ T9208] veth0_vlan: entered promiscuous mode [ 583.560014][ T9208] veth1_vlan: entered promiscuous mode [ 583.590428][ T29] audit: type=1400 audit(1722859049.851:713): avc: denied { read } for pid=9429 comm="syz.1.1098" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 583.665185][ T29] audit: type=1400 audit(1722859049.851:714): avc: denied { open } for pid=9429 comm="syz.1.1098" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 583.696584][ T9330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.727572][ T9330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.743180][ T29] audit: type=1400 audit(1722859049.891:715): avc: denied { ioctl } for pid=9429 comm="syz.1.1098" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 583.810766][ T9330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.849560][ T9330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.941796][ T9208] veth0_macvtap: entered promiscuous mode [ 584.045641][ T9208] veth1_macvtap: entered promiscuous mode [ 584.155459][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.204167][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.225284][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.251291][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.305434][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.334755][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.349487][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.379279][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.398741][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.414120][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.461687][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.476827][ T9208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.496312][ T9208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.534003][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.569066][ T9208] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.581523][ T9208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.621252][ T9208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.635155][ T9208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.865989][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.876833][ T29] audit: type=1400 audit(1722859051.091:716): avc: denied { setattr } for pid=9441 comm="syz.2.1101" name="" dev="pipefs" ino=26900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 585.072930][ T7487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.098037][ T7487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.252702][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.290798][ T7487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.325683][ T7487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.347436][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.401480][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.408710][ T5217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.425633][ T5289] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 585.474312][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.481567][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.637231][ T5289] usb 2-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 585.660225][ T5289] usb 2-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 585.682260][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 585.696030][ T9282] veth0_vlan: entered promiscuous mode [ 585.723135][ T5289] usb 2-1: Product: syz [ 585.731482][ T5289] usb 2-1: Manufacturer: syz [ 585.736670][ T5289] usb 2-1: SerialNumber: syz [ 585.780203][ T9282] veth1_vlan: entered promiscuous mode [ 585.930461][ T29] audit: type=1400 audit(1722859052.201:717): avc: denied { read } for pid=9459 comm="syz.3.1104" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 585.970995][ T5289] hub 2-1:189.0: bad descriptor, ignoring hub [ 586.004966][ T5289] hub 2-1:189.0: probe with driver hub failed with error -5 [ 586.028216][ T5289] keyspan 2-1:189.0: Keyspan - (without firmware) converter detected [ 586.066190][ T29] audit: type=1400 audit(1722859052.201:718): avc: denied { open } for pid=9459 comm="syz.3.1104" path="/sys/kernel/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 586.107762][ T9282] veth0_macvtap: entered promiscuous mode [ 586.114088][ T5289] usb 2-1: USB disconnect, device number 15 [ 586.137785][ T5289] keyspan 2-1:189.0: device disconnected [ 586.157613][ T9282] veth1_macvtap: entered promiscuous mode [ 586.234525][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.294043][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.347038][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.380100][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.411038][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.444311][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.463092][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.521586][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.596843][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.836705][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.836730][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.836744][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.836760][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.836773][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.836789][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.836801][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.836818][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.926102][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.086650][ T9282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.086773][ T9282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.086860][ T9282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.086946][ T9282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.999654][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.023176][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.023200][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.166998][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.167024][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.202270][ T9330] veth0_vlan: entered promiscuous mode [ 588.267012][ T9330] veth1_vlan: entered promiscuous mode [ 588.345368][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 588.364624][ T9484] netlink: 'syz.2.1111': attribute type 10 has an invalid length. [ 588.423045][ T9484] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 588.461615][ T9484] bridge0: port 3(wlan1) entered blocking state [ 588.478471][ T9484] bridge0: port 3(wlan1) entered disabled state [ 588.485841][ T9484] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 588.502991][ T9484] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 588.526503][ T9330] veth0_macvtap: entered promiscuous mode [ 588.545217][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 588.575095][ T8] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 588.592129][ T8] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 588.632178][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 588.651347][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.660020][ T9330] veth1_macvtap: entered promiscuous mode [ 588.666362][ T8] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 588.694869][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.724465][ T5272] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 588.748842][ T8] usb 4-1: Product: syz [ 588.761924][ T8] usb 4-1: Manufacturer: syz [ 588.773546][ T8] usb 4-1: SerialNumber: syz [ 588.791306][ T8] usb 4-1: config 0 descriptor?? [ 588.810208][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 588.826003][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 588.890294][ T2476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.954179][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 588.966385][ T5272] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 588.992597][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.999084][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.053505][ T5272] usb 3-1: config 0 descriptor?? [ 589.055403][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.105320][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.143193][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.173662][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.195517][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.205626][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.217526][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.227526][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.239934][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.252106][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.300441][ T5272] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 589.326156][ T5272] asix 3-1:0.0: probe with driver asix failed with error -71 [ 589.346753][ T5217] usb 4-1: USB disconnect, device number 6 [ 589.355318][ T2476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.376251][ T5272] usb 3-1: USB disconnect, device number 14 [ 589.449596][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.474046][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.494298][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.506255][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.530970][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.544407][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.575257][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.589713][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.600429][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.614059][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.627585][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.664608][ T2476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.703853][ T9330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.712900][ T9330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.722140][ T9330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.731005][ T9330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.794215][ T2476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.166633][ T6699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.193582][ T6699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.369333][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.402295][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.471721][ T2476] bridge_slave_1: left allmulticast mode [ 590.493514][ T2476] bridge_slave_1: left promiscuous mode [ 590.505108][ T2476] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.576037][ T2476] bridge_slave_0: left allmulticast mode [ 590.581747][ T2476] bridge_slave_0: left promiscuous mode [ 590.636545][ T2476] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.730660][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.747377][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.759482][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.775280][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.786144][ T5219] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.794435][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 591.909515][ T9518] xt_bpf: check failed: parse error [ 592.144924][ T9533] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 592.151443][ T9533] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 592.164615][ T9533] vhci_hcd vhci_hcd.0: Device attached [ 592.175228][ T9534] vhci_hcd: connection closed [ 592.180873][ T11] vhci_hcd: stop threads [ 592.251945][ T11] vhci_hcd: release socket [ 592.267935][ T7469] Bluetooth: hci4: Frame reassembly failed (-84) [ 592.276230][ T11] vhci_hcd: disconnect device [ 593.037289][ T5219] Bluetooth: hci0: command tx timeout [ 593.771652][ T2476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.794319][ T2476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.831716][ T2476] bond0 (unregistering): Released all slaves [ 594.016535][ T5217] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 594.332947][ T55] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 594.375982][ T5217] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.385268][ T5217] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.395515][ T5217] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 595.075502][ T5217] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.204773][ T5219] Bluetooth: hci0: command tx timeout [ 595.548912][ T5217] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.594157][ T5217] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.613305][ T5217] usb 4-1: Product: syz [ 595.624089][ T5217] usb 4-1: Manufacturer: syz [ 595.874222][ T5217] cdc_wdm 4-1:1.0: skipping garbage [ 595.879474][ T5217] cdc_wdm 4-1:1.0: skipping garbage [ 595.915553][ T5217] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 595.921892][ T5217] cdc_wdm 4-1:1.0: Unknown control protocol [ 596.500418][ T29] audit: type=1400 audit(1722859062.771:719): avc: denied { sqpoll } for pid=9574 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 596.593750][ T9505] chnl_net:caif_netlink_parms(): no params data found [ 596.712499][ T29] audit: type=1400 audit(1722859062.911:720): avc: denied { setopt } for pid=9573 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 596.832879][ T9580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.264287][ T5219] Bluetooth: hci0: command tx timeout [ 597.451578][ T25] usb 4-1: USB disconnect, device number 7 [ 597.465319][ T29] audit: type=1400 audit(1722859062.921:721): avc: denied { connect } for pid=9573 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 597.600910][ T2476] hsr_slave_0: left promiscuous mode [ 598.147904][ T2476] hsr_slave_1: left promiscuous mode [ 598.203088][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.356473][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.426558][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.451029][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.674108][ T2476] veth1_macvtap: left promiscuous mode [ 598.689896][ T2476] veth0_macvtap: left promiscuous mode [ 598.705865][ T2476] veth1_vlan: left promiscuous mode [ 598.711297][ T2476] veth0_vlan: left promiscuous mode [ 598.758528][ T9594] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 598.765094][ T9594] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 598.774163][ T9594] vhci_hcd vhci_hcd.0: Device attached [ 599.070504][ T5217] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 599.346891][ T55] Bluetooth: hci0: command tx timeout [ 600.183370][ T9597] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 1 [ 600.216199][ T11] vhci_hcd: stop threads [ 600.220496][ T11] vhci_hcd: release socket [ 600.231919][ T11] vhci_hcd: disconnect device [ 600.569309][ T2476] team0 (unregistering): Port device team_slave_1 removed [ 600.628647][ T2476] team0 (unregistering): Port device team_slave_0 removed [ 600.857163][ T9606] program syz.2.1155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.945583][ T55] Bluetooth: hci2: command tx timeout [ 601.005184][ T9610] x_tables: duplicate underflow at hook 3 [ 601.849953][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 601.862276][ T9601] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1144'. [ 601.883058][ T9601] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 603.497361][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.523571][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.535777][ T9505] bridge_slave_0: entered allmulticast mode [ 603.550144][ T9505] bridge_slave_0: entered promiscuous mode [ 603.565052][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.587821][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.165110][ T9505] bridge_slave_1: entered allmulticast mode [ 604.191250][ T9505] bridge_slave_1: entered promiscuous mode [ 604.365000][ T5217] vhci_hcd: vhci_device speed not set [ 604.420744][ T5278] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 604.637669][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 604.662072][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 604.690910][ T29] audit: type=1400 audit(1722859070.961:722): avc: denied { getopt } for pid=9635 comm="syz.1.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 604.692314][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.713229][ T9505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.773460][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 604.830736][ T9505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.837036][ T9636] Cannot find add_set index 0 as target [ 604.904690][ T5278] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 604.915497][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.924966][ T5278] usb 4-1: Product: syz [ 604.929268][ T5278] usb 4-1: Manufacturer: syz [ 604.933890][ T5278] usb 4-1: SerialNumber: syz [ 604.952921][ T5278] usb 4-1: config 0 descriptor?? [ 605.323296][ T9505] team0: Port device team_slave_0 added [ 605.396892][ T9505] team0: Port device team_slave_1 added [ 605.669535][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.703709][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.130396][ T9505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.949554][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.224306][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.283228][ T25] usb 4-1: USB disconnect, device number 8 [ 607.367778][ T9505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.572877][ T9505] hsr_slave_0: entered promiscuous mode [ 607.582512][ T9505] hsr_slave_1: entered promiscuous mode [ 607.670361][ T9505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.684675][ T9505] Cannot create hsr debugfs directory [ 607.693381][ T9673] x_tables: duplicate underflow at hook 3 [ 607.820281][ T9672] kvm: emulating exchange as write [ 608.151840][ T9679] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 608.385400][ T29] audit: type=1400 audit(1722859074.641:723): avc: denied { nlmsg_read } for pid=9678 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 608.538249][ T9683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.806159][ T9505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 609.832415][ T9505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 609.849639][ T9505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 609.870581][ T9505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 610.166802][ T9505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.223817][ T9505] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.273542][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.280791][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.330537][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.337708][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.422189][ T9703] Bluetooth: MGMT ver 1.23 [ 610.508224][ T9505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.541999][ T9505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.785813][ T9701] can0: slcan on ptm0. [ 611.122599][ T9505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.436334][ T9699] can0 (unregistered): slcan off ptm0. [ 611.682570][ T9728] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1175'. [ 611.733514][ T9728] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1175'. [ 611.978201][ T29] audit: type=1400 audit(1722859078.251:724): avc: denied { accept } for pid=9735 comm="syz.2.1178" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 612.112015][ T9735] dccp_close: ABORT with 32 bytes unread [ 612.156995][ T29] audit: type=1400 audit(1722859078.261:725): avc: denied { write } for pid=9735 comm="syz.2.1178" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=55360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 612.210066][ T9505] veth0_vlan: entered promiscuous mode [ 612.278947][ T9741] No such timeout policy "syz0" [ 612.338443][ T9505] veth1_vlan: entered promiscuous mode [ 612.352111][ T29] audit: type=1400 audit(1722859078.261:726): avc: denied { read } for pid=9735 comm="syz.2.1178" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=55360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 612.504918][ T9505] veth0_macvtap: entered promiscuous mode [ 612.548813][ T29] audit: type=1400 audit(1722859078.821:727): avc: denied { append } for pid=9744 comm="syz.3.1180" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 612.587335][ T9505] veth1_macvtap: entered promiscuous mode [ 612.670741][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.684398][ T5217] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 612.696893][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.737414][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.779949][ T9748] syz.3.1180: attempt to access beyond end of device [ 612.779949][ T9748] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 612.794619][ T9748] MINIX-fs: unable to read superblock [ 612.807354][ T29] audit: type=1400 audit(1722859079.051:728): avc: denied { mounton } for pid=9744 comm="syz.3.1180" path="/20/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 612.832747][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.869176][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.900592][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.926837][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.943708][ T5217] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 612.952271][ T5217] usb 2-1: config 0 has no interfaces? [ 612.963737][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.974428][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.995160][ T5217] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 613.007638][ T5217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.032300][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.054127][ T5217] usb 2-1: Product: syz [ 613.061937][ T5217] usb 2-1: Manufacturer: syz [ 613.085434][ T5217] usb 2-1: SerialNumber: syz [ 613.101685][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.116981][ T5217] usb 2-1: config 0 descriptor?? [ 613.164897][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.190981][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.272858][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.314066][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.354183][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.396740][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.444056][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.483988][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.493826][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.526235][ T5217] usb 2-1: USB disconnect, device number 16 [ 613.537723][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.555536][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.568104][ T9505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.577324][ T9505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.587784][ T9505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.627793][ T9505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.707835][ T9761] nbd: must specify a device to reconfigure [ 613.881124][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.902615][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.974077][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.995962][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.553728][ T29] audit: type=1326 audit(1722859080.822:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9775 comm="syz.2.1190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab6db779f9 code=0x0 [ 614.686888][ T9777] 9pnet: Found fid 0 not clunked [ 615.053307][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.421558][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.538829][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.640316][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.808031][ T11] bridge_slave_1: left allmulticast mode [ 615.813687][ T11] bridge_slave_1: left promiscuous mode [ 615.820758][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.843181][ T11] bridge_slave_0: left allmulticast mode [ 615.849317][ T11] bridge_slave_0: left promiscuous mode [ 615.863240][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.720384][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.770746][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.824529][ T11] bond0 (unregistering): Released all slaves [ 616.857783][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.870179][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.879702][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 616.892521][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 616.901890][ T5219] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 616.909397][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 617.756207][ T11] hsr_slave_0: left promiscuous mode [ 617.778352][ T11] hsr_slave_1: left promiscuous mode [ 617.795214][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.822022][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.864828][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.896288][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.945664][ T11] veth1_macvtap: left promiscuous mode [ 617.962964][ T11] veth0_macvtap: left promiscuous mode [ 617.977028][ T11] veth1_vlan: left promiscuous mode [ 617.988811][ T11] veth0_vlan: left promiscuous mode [ 619.034440][ T55] Bluetooth: hci0: command tx timeout [ 619.118269][ T11] team0 (unregistering): Port device team_slave_1 removed [ 619.181190][ T11] team0 (unregistering): Port device team_slave_0 removed [ 620.126449][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 620.236104][ T7544] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 621.104436][ T55] Bluetooth: hci0: command tx timeout [ 621.201584][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.218779][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.225958][ T7544] usb 3-1: Using ep0 maxpacket: 16 [ 621.231447][ T9800] bridge_slave_0: entered allmulticast mode [ 621.240564][ T9800] bridge_slave_0: entered promiscuous mode [ 621.248473][ T7544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 621.261726][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.273978][ T7544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 621.285950][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.293226][ T9800] bridge_slave_1: entered allmulticast mode [ 621.310601][ T7544] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 621.322202][ T9800] bridge_slave_1: entered promiscuous mode [ 621.333995][ T7544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.356403][ T7544] usb 3-1: config 0 descriptor?? [ 621.410158][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.439241][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.570809][ T9800] team0: Port device team_slave_0 added [ 621.602206][ T9800] team0: Port device team_slave_1 added [ 621.687320][ T9818] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1200'. [ 621.719738][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.741539][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.767483][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.790520][ T9839] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1200'. [ 621.806898][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.811963][ T29] audit: type=1400 audit(1722859088.072:730): avc: denied { read } for pid=9816 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 621.817911][ T9839] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 621.850206][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.859163][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.885193][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.943792][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.224289][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.254308][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.277396][ T9800] hsr_slave_0: entered promiscuous mode [ 622.303454][ T7544] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 622.315203][ T9800] hsr_slave_1: entered promiscuous mode [ 622.332571][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.344163][ T7544] hid-generic 0003:0158:0100.000B: unexpected long global item [ 622.368415][ T9800] Cannot create hsr debugfs directory [ 622.374977][ T7544] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 622.665694][ T5289] usb 3-1: USB disconnect, device number 15 [ 623.185158][ T55] Bluetooth: hci0: command tx timeout [ 624.842922][ T9800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 624.870895][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.877239][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.908318][ T9800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 625.103166][ T9800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 627.789428][ T55] Bluetooth: hci0: command tx timeout [ 627.850477][ T9800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 628.269424][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.379371][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.443780][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.450995][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.547623][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.554900][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.625032][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 628.643844][ T5219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 628.667640][ T5219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 628.687046][ T5219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 628.698935][ T5219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 628.707278][ T5219] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 628.714806][ T5219] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 628.889451][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.939031][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.979093][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.997474][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.037444][ T25] usb 3-1: config 0 descriptor?? [ 629.503043][ T25] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x2 [ 629.560901][ T25] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 629.593658][ T25] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 629.657389][ T25] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 629.708575][ T9878] chnl_net:caif_netlink_parms(): no params data found [ 629.735994][ T25] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 629.879787][ T25] usb 3-1: USB disconnect, device number 16 [ 630.376526][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.420535][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.454396][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.499283][ T9878] bridge_slave_0: entered allmulticast mode [ 630.540079][ T9878] bridge_slave_0: entered promiscuous mode [ 630.580510][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.606283][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.636987][ T9878] bridge_slave_1: entered allmulticast mode [ 630.674049][ T9878] bridge_slave_1: entered promiscuous mode [ 630.854248][ T55] Bluetooth: hci4: command tx timeout [ 631.031150][ T29] audit: type=1400 audit(1722859097.302:731): avc: denied { ioctl } for pid=9906 comm="syz.2.1219" path="socket:[37549]" dev="sockfs" ino=37549 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 631.882943][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.907583][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.201308][ T9918] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 633.004600][ T55] Bluetooth: hci4: command tx timeout [ 633.156511][ T9878] team0: Port device team_slave_0 added [ 633.209346][ T9878] team0: Port device team_slave_1 added [ 633.511879][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.841630][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.164097][ T9878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.226591][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.238171][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.318621][ T9878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.328970][ T9918] zonefs (nbd3) ERROR: Not a zoned block device [ 634.550343][ T9878] hsr_slave_0: entered promiscuous mode [ 634.571406][ T9878] hsr_slave_1: entered promiscuous mode [ 634.601249][ T9878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.630108][ T9878] Cannot create hsr debugfs directory [ 634.650613][ T9935] tun0: tun_chr_ioctl cmd 1074025675 [ 634.657011][ T9935] tun0: persist disabled [ 634.671992][ T29] audit: type=1400 audit(1722859100.942:732): avc: denied { bind } for pid=9933 comm="syz.1.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 635.024096][ T55] Bluetooth: hci4: command tx timeout [ 635.183344][ T9800] veth0_vlan: entered promiscuous mode [ 635.308614][ T9800] veth1_vlan: entered promiscuous mode [ 635.539142][ T9878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.752268][ T9800] veth0_macvtap: entered promiscuous mode [ 636.097377][ T9878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.577250][ T9800] veth1_macvtap: entered promiscuous mode [ 636.875744][ T9878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.901231][ T9954] Process accounting resumed [ 636.966123][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.014013][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.023873][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.073022][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.097765][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.112883][ T5219] Bluetooth: hci4: command tx timeout [ 637.244271][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.292192][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.332818][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.373659][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.394024][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.442680][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.835306][ T9964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9964 comm=syz.3.1231 [ 639.512710][ T5219] Bluetooth: hci4: command 0x0405 tx timeout [ 640.312284][ T9878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.410011][ T29] audit: type=1400 audit(1722859106.662:733): avc: denied { ioctl } for pid=9971 comm="syz.1.1236" path="socket:[38523]" dev="sockfs" ino=38523 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 640.597231][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.406106][ T9974] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1235'. [ 641.423492][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.438489][ T9974] netlink: get zone limit has 8 unknown bytes [ 641.485053][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.524288][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.560900][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.587623][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.614198][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.634838][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.674274][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.724176][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.801401][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.893641][ T9800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.912841][ T9800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.969609][ T9800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.980493][ T9978] input: syz1 as /devices/virtual/input/input23 [ 642.003969][ T9800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.447968][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.488459][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.800447][ T9878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.850898][ T9878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.854104][ T6699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.881930][ T6699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.905024][ T9878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.936089][ T9878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 643.606383][ T6699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.680019][ T9878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.844688][ T6699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.893054][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.925915][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.933102][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.968416][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.975688][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.040192][ T6699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.146635][ T6699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.251538][ T9878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 644.269206][ T9878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.370223][ T6699] bridge_slave_1: left allmulticast mode [ 644.379232][ T6699] bridge_slave_1: left promiscuous mode [ 644.389621][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.399503][ T6699] bridge_slave_0: left allmulticast mode [ 644.406797][ T6699] bridge_slave_0: left promiscuous mode [ 644.412619][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.885697][T10013] dccp_invalid_packet: P.Data Offset(243) too large [ 645.156331][ T5272] psmouse serio4: Failed to reset mouse on : -5 [ 646.246979][T10023] usb usb8: check_ctrlrecip: process 10023 (syz.3.1248) requesting ep 01 but needs 81 [ 646.257241][T10023] usb usb8: usbfs: process 10023 (syz.3.1248) did not claim interface 0 before use [ 646.606719][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.022207][ T29] audit: type=1326 audit(1722859113.262:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c23779f9 code=0x7fc00000 [ 647.353342][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.402573][ T6699] bond0 (unregistering): Released all slaves [ 647.443462][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.456281][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.469937][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.479362][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.487516][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 647.495983][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 647.544866][ T29] audit: type=1326 audit(1722859113.272:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11c23779f9 code=0x7fc00000 [ 647.571701][ T29] audit: type=1326 audit(1722859113.602:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c23779f9 code=0x7fc00000 [ 648.209753][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.027918][ T6699] hsr_slave_0: left promiscuous mode [ 649.053099][ T6699] hsr_slave_1: left promiscuous mode [ 649.070463][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.086782][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.106695][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.114605][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.163457][ T6699] veth1_macvtap: left promiscuous mode [ 649.175683][ T6699] veth0_macvtap: left promiscuous mode [ 649.181518][ T6699] veth1_vlan: left promiscuous mode [ 649.194247][ T6699] veth0_vlan: left promiscuous mode [ 649.598712][ T55] Bluetooth: hci0: command tx timeout [ 649.899539][ T29] audit: type=1400 audit(1722859116.172:737): avc: denied { getopt } for pid=10047 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 650.289720][ T940] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 650.424042][ T5272] misc userio: Buffer overflowed, userio client isn't keeping up [ 650.735833][ T940] usb 2-1: Using ep0 maxpacket: 8 [ 650.743325][ T940] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 650.754009][ T940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.764542][ T940] usb 2-1: config 0 has no interface number 0 [ 650.770714][ T940] usb 2-1: config 0 interface 232 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 650.782891][ T940] usb 2-1: config 0 interface 232 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 650.793109][ T940] usb 2-1: config 0 interface 232 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.806413][ T940] usb 2-1: config 0 interface 232 has no altsetting 0 [ 650.826061][ T940] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 650.844183][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.014021][ T940] usb 2-1: Product: syz [ 651.015945][ T940] usb 2-1: Manufacturer: syz [ 651.016896][ T940] usb 2-1: SerialNumber: syz [ 651.675108][ T55] Bluetooth: hci0: command tx timeout [ 651.920359][ T940] usb 2-1: config 0 descriptor?? [ 652.484369][ T940] s2255 2-1:0.232: Could not find bulk-in endpoint [ 652.491063][ T940] Sensoray 2255 driver load failed: 0xfffffff4 [ 652.502180][ T940] s2255 2-1:0.232: probe with driver s2255 failed with error -12 [ 653.354771][ T5272] input: PS/2 Generic Mouse as /devices/serio4/input/input24 [ 653.470164][ T5217] usb 2-1: USB disconnect, device number 17 [ 653.684258][ T5272] psmouse serio4: Failed to enable mouse on [ 653.749665][ T55] Bluetooth: hci0: command tx timeout [ 654.185796][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 654.341247][ T29] audit: type=1400 audit(1722859120.612:738): avc: denied { listen } for pid=10060 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 654.484076][ T29] audit: type=1400 audit(1722859120.742:739): avc: denied { mount } for pid=10060 comm="syz.1.1261" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 654.547831][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 654.630834][ T29] audit: type=1326 audit(1722859120.902:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c23779f9 code=0x0 [ 655.825159][ T55] Bluetooth: hci0: command tx timeout [ 657.355154][T10096] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1271'. [ 657.364640][T10096] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1271'. [ 657.454295][ T9022] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 658.274011][ T9022] usb 4-1: Using ep0 maxpacket: 16 [ 658.350261][ T9022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.374060][ T9022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.394613][ T9022] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 659.093627][ T9022] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 659.102867][ T9022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.139658][ T9022] usb 4-1: config 0 descriptor?? [ 659.628512][ T9022] shield 0003:0955:7214.000D: item fetching failed at offset 1/5 [ 659.703587][ T9022] shield 0003:0955:7214.000D: Parse failed [ 659.732692][ T9022] shield 0003:0955:7214.000D: probe with driver shield failed with error -22 [ 659.883321][ T9878] veth0_vlan: entered promiscuous mode [ 660.003802][ T9878] veth1_vlan: entered promiscuous mode [ 660.144507][T10026] chnl_net:caif_netlink_parms(): no params data found [ 660.176693][ T5272] usb 4-1: USB disconnect, device number 9 [ 660.258994][ T9878] veth0_macvtap: entered promiscuous mode [ 660.292432][ T9878] veth1_macvtap: entered promiscuous mode [ 660.492634][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.504947][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.535896][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.574622][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.601436][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.647491][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.727125][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.750675][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.766637][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.781933][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.809565][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.865232][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.890883][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.920667][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.934454][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.971993][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.000471][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.074771][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.155546][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.298706][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.310149][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.332418][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.346975][ T9878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.359053][ T9878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.369912][ T9878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.379399][ T9878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.406051][T10120] syz.3.1276: attempt to access beyond end of device [ 661.406051][T10120] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 661.419857][T10120] FAT-fs (loop7): unable to read boot sector [ 661.485133][ T29] audit: type=1400 audit(1722859127.672:741): avc: denied { mounton } for pid=10117 comm="syz.3.1276" path="/50/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 662.181374][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 662.194433][T10115] team_slave_0: entered promiscuous mode [ 662.200872][T10115] team_slave_1: entered promiscuous mode [ 662.357253][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.377237][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.395469][T10026] bridge_slave_0: entered allmulticast mode [ 662.434331][T10026] bridge_slave_0: entered promiscuous mode [ 662.546101][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.570502][T10126] IPVS: length: 248 != 2946647000 [ 662.578965][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.625218][T10026] bridge_slave_1: entered allmulticast mode [ 662.878926][T10130] kAFS: unable to lookup cell '’yz0' [ 663.279001][T10026] bridge_slave_1: entered promiscuous mode [ 663.493948][ T29] audit: type=1400 audit(1722859129.762:742): avc: denied { accept } for pid=10125 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 663.521611][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.605025][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.870350][T10026] team0: Port device team_slave_0 added [ 663.880440][T10026] team0: Port device team_slave_1 added [ 664.010168][ T6699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.033023][ T6699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.309005][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.330334][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.360293][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.754873][ T29] audit: type=1400 audit(1722859130.992:743): avc: denied { bind } for pid=10141 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 664.775084][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 671.183527][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.202307][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.231060][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.353140][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.363041][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.659520][T10026] hsr_slave_0: entered promiscuous mode [ 671.696190][T10026] hsr_slave_1: entered promiscuous mode [ 671.719467][T10026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.747703][T10026] Cannot create hsr debugfs directory [ 672.479635][T10168] evm: overlay not supported [ 672.537479][T10168] Invalid ELF header magic: != ELF [ 672.609043][ T5262] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 672.844084][ T29] audit: type=1804 audit(1722859138.652:744): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1211" name="/newroot/0/bus/bus" dev="overlay" ino=25 res=1 errno=0 [ 672.934155][ T5262] usb 4-1: Using ep0 maxpacket: 16 [ 672.950505][ T29] audit: type=1400 audit(1722859138.802:745): avc: denied { module_load } for pid=10162 comm="syz.0.1211" path="/0/bus/bus" dev="overlay" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 672.956574][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.999509][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.026887][ T5262] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 673.038076][ T5262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.066457][ T5262] usb 4-1: config 0 descriptor?? [ 674.091362][ T5262] elecom 0003:056E:00FF.000E: item fetching failed at offset 2/5 [ 674.147442][ T5262] elecom 0003:056E:00FF.000E: probe with driver elecom failed with error -22 [ 674.355554][ T5262] usb 4-1: USB disconnect, device number 10 [ 674.795469][ T29] audit: type=1400 audit(1722859140.742:746): avc: denied { write } for pid=10180 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 675.765666][T10191] vxfs: WRONG superblock magic 00000000 at 1 [ 675.773789][T10191] vxfs: WRONG superblock magic 00000000 at 8 [ 675.780129][T10191] vxfs: can't find superblock. [ 676.017177][ T5226] Bluetooth: hci0: command 0x0405 tx timeout [ 678.787028][T10026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 678.818215][T10026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 678.841021][T10026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 678.857168][T10026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.177617][T10026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.786713][ T940] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 679.870962][T10026] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.233545][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.240787][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.327574][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.334720][ T9022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.396482][ T940] usb 2-1: Using ep0 maxpacket: 8 [ 680.426316][ T940] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 680.452004][ T940] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.473121][ T940] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.532659][ T940] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 680.582586][ T940] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.646763][ T940] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 680.691714][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.987008][ T940] usb 2-1: usb_control_msg returned -32 [ 681.004838][ T940] usbtmc 2-1:16.0: can't read capabilities [ 681.039387][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.124146][ T29] audit: type=1404 audit(1722859147.392:747): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 681.207863][ T29] audit: type=1400 audit(1722859147.482:748): avc: denied { map_read map_write } for pid=10232 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 681.305804][ T29] audit: type=1400 audit(1722859147.512:749): avc: denied { sys_module } for pid=10026 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 681.354043][ T29] audit: type=1400 audit(1722859147.622:750): avc: denied { ioctl } for pid=10215 comm="syz.1.1302" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 681.465408][ T29] audit: type=1400 audit(1722859147.712:751): avc: denied { read write } for pid=8702 comm="syz-executor" name="loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 681.631298][ T29] audit: type=1400 audit(1722859147.892:752): avc: denied { ioctl } for pid=10215 comm="syz.1.1302" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 681.835097][ T29] audit: type=1400 audit(1722859148.112:753): avc: denied { read } for pid=10237 comm="syz.2.1308" dev="nsfs" ino=4026533431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 Aug 5 11:59:08 syzkaller kern.n[ 681.909065][ T29] audit: type=1400 audit(1722859148.182:754): avc: denied { read } for pid=4650 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 otice kernel: [ 681.835097][ T29] audit: type=1400 audit(1722859148.112:753): avc: denied { read } for pid=10237 comm="syz.2.1308" dev="nsfs" ino=4026533431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file p [ 681.964319][ T29] audit: type=1400 audit(1722859148.192:755): avc: denied { map_create } for pid=10237 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Aug 5 11:59:08 syzkaller kern.notice kernel: [ 681.909065][ T29] audit: type=1400 audit(1722859148.182:754): avc: denied { read } for pid=4650 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l Aug 5 11:59:08 syzkaller kern.notice kernel: [ 681.964319][ T29] audit: type=1400 audit([ 682.016214][ T29] audit: type=1400 audit(1722859148.202:756): avc: denied { create } for pid=10237 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 1722859148.192:755): avc: denied { map_create } for pid=10237 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Aug 5 11:59:08 syzkaller kern.notice kernel: [ 682.016214][ T29] audit: type=1400 audit(1722859148.202:756): avc: denied { create } for pid=10237 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 682.764982][ T9022] usb 2-1: USB disconnect, device number 19 Aug 5 11:59:09 syzkaller kern.info kernel: [ 682.764982][ T9022] usb 2-1: USB disconnect, device number 19 [ 683.264055][ T5226] Bluetooth: hci5: command 0x0406 tx timeout Aug 5 11:59:09 syzkaller kern.err kernel: [ 683.264055][ T5226] Bluetooth: hci5: command 0x0406 tx timeout [ 683.727824][ T11] bridge_slave_1: left allmulticast mode [ 683.733503][ T11] bridge_slave_1: left promiscuous mode [ 683.739355][ T11] bridge0: port 2(bridge_slave_1) entered disabled state Aug 5 11:59:10 syzkaller kern.info kernel: [ 683.727824][ T11] bridge_slave_1: left allmulticast mode Aug 5 11:59:10 syzkaller kern.info kernel: [ 683.73[ 683.760797][ T11] bridge_slave_0: left allmulticast mode 3503][ T11] br[ 683.767511][ T11] bridge_slave_0: left promiscuous mode idge_slave_1: le[ 683.773619][ T11] bridge0: port 1(bridge_slave_0) entered disabled state ft promiscuous mode Aug 5 11:59:10 syzkaller kern.info kernel: [ 683.739355][ T11] bridge0: port 2(bridge_slave_1) entered disabled state Aug 5 11:59:10 syzkaller kern.info kernel: [ 683.760797][ T11] bridge_slave_0: left allmulticast mode Aug 5 11:59:10 syzkaller kern.info kernel: [ 683.767511][ T11] bridge_slave_0: left promiscuous mode Aug 5 11:59:10 syzkaller kern.info kernel: [ 683.773619][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.226708][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface Aug 5 11:59:10 syzkaller kern.info kernel: [ 684.226708][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.312041][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.317688][T10260] [ 684.322919][T10260] ===================================================== [ 684.329850][T10260] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 684.337307][T10260] 6.11.0-rc2-syzkaller #0 Not tainted [ 684.337321][T10260] ----------------------------------------------------- [ 684.349602][T10260] syz.2.1316/10260 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: Aug 5 11:59:10 [ 684.357328][T10260] ffffffff8da0a098 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xb4/0x3c0 [ 684.367253][T10260] [ 684.367253][T10260] and this task is already holding: syzkaller kern.i[ 684.374627][T10260] ffff88805dc6d518 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x28/0x3c0 [ 684.384803][T10260] which would create a new lock dependency: nfo kernel: [ 6[ 684.390703][T10260] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 684.390754][T10260] [ 684.390754][T10260] but this new dependency connects a HARDIRQ-irq-safe lock: [ 684.390764][T10260] (&dev->event_lock#2){-.-.}-{2:2} [ 684.390796][T10260] [ 684.390796][T10260] ... which became HARDIRQ-irq-safe at: 84.312041][ T1[ 684.390807][T10260] lock_acquire+0x1b1/0x560 1] bond0 (unregi[ 684.428060][T10260] _raw_spin_lock_irqsave+0x3a/0x60 stering): (slave[ 684.434688][T10260] input_event+0x70/0xa0 bond_slave_1): [ 684.440370][T10260] psmouse_report_standard_buttons+0x30/0x80 Releasing backup[ 684.447791][T10260] psmouse_process_byte+0x39c/0x8a0 interface [ 684.454434][T10260] psmouse_handle_byte+0x44/0x570 [ 684.460550][T10260] psmouse_receive_byte+0x243/0xe20 [ 684.465836][T10260] ps2_interrupt+0x20b/0x5b0 [ 684.470516][T10260] serio_interrupt+0x8f/0x150 [ 684.475280][T10260] i8042_interrupt+0x3f5/0x8a0 [ 684.480131][T10260] __handle_irq_event_percpu+0x229/0x7c0 [ 684.485867][T10260] handle_irq_event+0xab/0x1e0 [ 684.490736][T10260] handle_edge_irq+0x263/0xd10 [ 684.495596][T10260] __common_interrupt+0xdf/0x250 [ 684.500633][T10260] common_interrupt+0xab/0xd0 [ 684.505406][T10260] asm_common_interrupt+0x26/0x40 [ 684.510524][T10260] _raw_spin_unlock_irqrestore+0x31/0x80 [ 684.516247][T10260] i8042_aux_write+0x11a/0x180 [ 684.521101][T10260] ps2_do_sendbyte+0x264/0x6f0 [ 684.525992][T10260] ps2_sendbyte+0x59/0x150 [ 684.530497][T10260] cypress_ps2_sendbyte+0x2c/0xf0 [ 684.535608][T10260] cypress_send_ext_cmd+0x1dc/0xa30 [ 684.540893][T10260] cypress_detect+0x8c/0x1a0 [ 684.545572][T10260] psmouse_try_protocol+0x21b/0x380 [ 684.550853][T10260] psmouse_extensions+0x61a/0x960 [ 684.555962][T10260] psmouse_switch_protocol+0x538/0x750 [ 684.561504][T10260] psmouse_connect+0x5cc/0xf80 [ 684.566444][T10260] serio_driver_probe+0x74/0xa0 [ 684.571383][T10260] really_probe+0x23e/0xa90 [ 684.575975][T10260] __driver_probe_device+0x1de/0x440 [ 684.581349][T10260] driver_probe_device+0x4c/0x1b0 [ 684.586456][T10260] __driver_attach+0x283/0x580 [ 684.591303][T10260] bus_for_each_dev+0x13c/0x1d0 [ 684.596244][T10260] serio_handle_event+0x2bb/0xa90 [ 684.601359][T10260] process_one_work+0x9c5/0x1b40 [ 684.606387][T10260] worker_thread+0x6c8/0xf20 [ 684.611068][T10260] kthread+0x2c1/0x3a0 [ 684.615216][T10260] ret_from_fork+0x45/0x80 [ 684.619721][T10260] ret_from_fork_asm+0x1a/0x30 [ 684.624580][T10260] [ 684.624580][T10260] to a HARDIRQ-irq-unsafe lock: [ 684.631587][T10260] (tasklist_lock){.+.+}-{2:2} [ 684.631615][T10260] [ 684.631615][T10260] ... which became HARDIRQ-irq-unsafe at: [ 684.644229][T10260] ... [ 684.644236][T10260] lock_acquire+0x1b1/0x560 [ 684.651395][T10260] _raw_read_lock+0x5f/0x70 [ 684.656070][T10260] __do_wait+0x105/0x890 [ 684.660399][T10260] do_wait+0x219/0x570 [ 684.664561][T10260] kernel_wait+0xa0/0x160 [ 684.668976][T10260] call_usermodehelper_exec_work+0xf1/0x170 [ 684.674963][T10260] process_one_work+0x9c5/0x1b40 [ 684.679993][T10260] worker_thread+0x6c8/0xf20 [ 684.684680][T10260] kthread+0x2c1/0x3a0 [ 684.688831][T10260] ret_from_fork+0x45/0x80 [ 684.693336][T10260] ret_from_fork_asm+0x1a/0x30 [ 684.698192][T10260] [ 684.698192][T10260] other info that might help us debug this: [ 684.698192][T10260] [ 684.708411][T10260] Chain exists of: [ 684.708411][T10260] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 684.708411][T10260] [ 684.721717][T10260] Possible interrupt unsafe locking scenario: [ 684.721717][T10260] [ 684.730025][T10260] CPU0 CPU1 [ 684.735379][T10260] ---- ---- [ 684.740736][T10260] lock(tasklist_lock); [ 684.744979][T10260] local_irq_disable(); [ 684.751735][T10260] lock(&dev->event_lock#2); [ 684.758932][T10260] lock(&f->f_owner.lock); [ 684.765951][T10260] [ 684.769395][T10260] lock(&dev->event_lock#2); [ 684.774254][T10260] [ 684.774254][T10260] *** DEADLOCK *** [ 684.774254][T10260] [ 684.782395][T10260] 6 locks held by syz.2.1316/10260: [ 684.787589][T10260] #0: ffff88807ac80420 (sb_writers#6){.+.+}-{0:0}, at: vfs_truncate+0xea/0x4e0 [ 684.796660][T10260] #1: ffffffff8dfcf7b0 (file_rwsem){++++}-{0:0}, at: vfs_truncate+0x32e/0x4e0 [ 684.805628][T10260] #2: ffff88807c2cd018 (&ctx->flc_lock){+.+.}-{2:2}, at: __break_lease+0x49b/0x17d0 [ 684.815119][T10260] #3: ffffffff8ddb5ca0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x6d/0x4f0 [ 684.824181][T10260] #4: ffff888023e29210 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x138/0x4f0 [ 684.833329][T10260] #5: ffff88805dc6d518 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x28/0x3c0 [ 684.842564][T10260] [ 684.842564][T10260] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 684.853005][T10260] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 684.858774][T10260] IN-HARDIRQ-W at: [ 684.862934][T10260] lock_acquire+0x1b1/0x560 [ 684.869448][T10260] _raw_spin_lock_irqsave+0x3a/0x60 [ 684.876648][T10260] input_event+0x70/0xa0 [ 684.882898][T10260] psmouse_report_standard_buttons+0x30/0x80 [ 684.890884][T10260] psmouse_process_byte+0x39c/0x8a0 [ 684.898084][T10260] psmouse_handle_byte+0x44/0x570 [ 684.905105][T10260] psmouse_receive_byte+0x243/0xe20 [ 684.912298][T10260] ps2_interrupt+0x20b/0x5b0 [ 684.918883][T10260] serio_interrupt+0x8f/0x150 [ 684.925561][T10260] i8042_interrupt+0x3f5/0x8a0 [ 684.932323][T10260] __handle_irq_event_percpu+0x229/0x7c0 [ 684.939954][T10260] handle_irq_event+0xab/0x1e0 [ 684.946715][T10260] handle_edge_irq+0x263/0xd10 [ 684.953476][T10260] __common_interrupt+0xdf/0x250 [ 684.960415][T10260] common_interrupt+0xab/0xd0 [ 684.967093][T10260] asm_common_interrupt+0x26/0x40 [ 684.974121][T10260] _raw_spin_unlock_irqrestore+0x31/0x80 [ 684.981752][T10260] i8042_aux_write+0x11a/0x180 [ 684.988524][T10260] ps2_do_sendbyte+0x264/0x6f0 [ 684.995291][T10260] ps2_sendbyte+0x59/0x150 [ 685.001708][T10260] cypress_ps2_sendbyte+0x2c/0xf0 [ 685.008750][T10260] cypress_send_ext_cmd+0x1dc/0xa30 [ 685.015955][T10260] cypress_detect+0x8c/0x1a0 [ 685.022545][T10260] psmouse_try_protocol+0x21b/0x380 [ 685.029739][T10260] psmouse_extensions+0x61a/0x960 [ 685.036764][T10260] psmouse_switch_protocol+0x538/0x750 [ 685.044225][T10260] psmouse_connect+0x5cc/0xf80 [ 685.051005][T10260] serio_driver_probe+0x74/0xa0 [ 685.057867][T10260] really_probe+0x23e/0xa90 [ 685.064368][T10260] __driver_probe_device+0x1de/0x440 [ 685.071649][T10260] driver_probe_device+0x4c/0x1b0 [ 685.078670][T10260] __driver_attach+0x283/0x580 [ 685.085435][T10260] bus_for_each_dev+0x13c/0x1d0 [ 685.092286][T10260] serio_handle_event+0x2bb/0xa90 [ 685.099306][T10260] process_one_work+0x9c5/0x1b40 [ 685.106244][T10260] worker_thread+0x6c8/0xf20 [ 685.112838][T10260] kthread+0x2c1/0x3a0 [ 685.118908][T10260] ret_from_fork+0x45/0x80 [ 685.125330][T10260] ret_from_fork_asm+0x1a/0x30 [ 685.132096][T10260] IN-SOFTIRQ-W at: [ 685.136243][T10260] lock_acquire+0x1b1/0x560 [ 685.142749][T10260] _raw_spin_lock_irqsave+0x3a/0x60 [ 685.149945][T10260] input_inject_event+0xa4/0x370 [ 685.156889][T10260] led_set_brightness+0x211/0x290 [ 685.163915][T10260] led_trigger_event+0xda/0x270 [ 685.170850][T10260] kbd_bh+0x21b/0x300 [ 685.176824][T10260] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 685.185162][T10260] handle_softirqs+0x216/0x8f0 [ 685.191929][T10260] irq_exit_rcu+0xbb/0x120 [ 685.198351][T10260] sysvec_apic_timer_interrupt+0x95/0xb0 [ 685.205982][T10260] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.213972][T10260] lock_acquire+0xef/0x560 [ 685.220388][T10260] __page_table_check_pte_clear+0x1c0/0x580 [ 685.228282][T10260] unmap_page_range+0x21ac/0x3c10 [ 685.235304][T10260] unmap_single_vma+0x194/0x2b0 [ 685.242152][T10260] unmap_vmas+0x22f/0x490 [ 685.248478][T10260] exit_mmap+0x1b8/0xb20 [ 685.254721][T10260] __mmput+0x12a/0x480 [ 685.260800][T10260] mmput+0x62/0x70 [ 685.266521][T10260] do_exit+0x9bf/0x2bb0 [ 685.272674][T10260] do_group_exit+0xd3/0x2a0 [ 685.279173][T10260] get_signal+0x25fd/0x2770 [ 685.285682][T10260] arch_do_signal_or_restart+0x90/0x7e0 [ 685.293232][T10260] syscall_exit_to_user_mode+0x150/0x2a0 [ 685.300877][T10260] do_syscall_64+0xda/0x250 [ 685.307386][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.315285][T10260] INITIAL USE at: [ 685.319344][T10260] lock_acquire+0x1b1/0x560 [ 685.325759][T10260] _raw_spin_lock_irqsave+0x3a/0x60 [ 685.332866][T10260] input_inject_event+0xa4/0x370 [ 685.339718][T10260] led_set_brightness+0x211/0x290 [ 685.346672][T10260] kbd_led_trigger_activate+0xcb/0x110 [ 685.354040][T10260] led_trigger_set+0x59a/0xc60 [ 685.360712][T10260] led_trigger_set_default+0x1bd/0x2a0 [ 685.368083][T10260] led_classdev_register_ext+0x78c/0x9e0 [ 685.375621][T10260] input_leds_connect+0x54a/0x8e0 [ 685.382557][T10260] input_attach_handler.isra.0+0x181/0x260 [ 685.390280][T10260] input_register_device+0xa8e/0x1140 [ 685.397568][T10260] atkbd_connect+0x5e2/0xa20 [ 685.404164][T10260] serio_driver_probe+0x74/0xa0 [ 685.410925][T10260] really_probe+0x23e/0xa90 [ 685.417336][T10260] __driver_probe_device+0x1de/0x440 [ 685.424530][T10260] driver_probe_device+0x4c/0x1b0 [ 685.431464][T10260] __driver_attach+0x283/0x580 [ 685.438137][T10260] bus_for_each_dev+0x13c/0x1d0 [ 685.444907][T10260] serio_handle_event+0x2bb/0xa90 [ 685.451844][T10260] process_one_work+0x9c5/0x1b40 [ 685.458696][T10260] worker_thread+0x6c8/0xf20 [ 685.465203][T10260] kthread+0x2c1/0x3a0 [ 685.471177][T10260] ret_from_fork+0x45/0x80 [ 685.477509][T10260] ret_from_fork_asm+0x1a/0x30 [ 685.484191][T10260] } [ 685.486852][T10260] ... key at: [] __key.7+0x0/0x40 [ 685.494145][T10260] -> (&new->fa_lock){....}-{2:2} { [ 685.499370][T10260] INITIAL USE at: [ 685.503341][T10260] lock_acquire+0x1b1/0x560 [ 685.509582][T10260] _raw_write_lock_irq+0x36/0x50 [ 685.516257][T10260] fasync_remove_entry+0xb9/0x1f0 [ 685.523023][T10260] fasync_helper+0xaf/0xd0 [ 685.529178][T10260] sock_fasync+0x98/0x140 [ 685.535248][T10260] __fput+0x94a/0xbb0 [ 685.540967][T10260] task_work_run+0x14e/0x250 [ 685.547294][T10260] syscall_exit_to_user_mode+0x27b/0x2a0 [ 685.554665][T10260] do_syscall_64+0xda/0x250 [ 685.560909][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.568547][T10260] INITIAL READ USE at: [ 685.572953][T10260] lock_acquire+0x1b1/0x560 [ 685.579628][T10260] _raw_read_lock_irqsave+0x74/0x90 [ 685.586999][T10260] kill_fasync+0x138/0x4f0 [ 685.593591][T10260] sock_wake_async+0x132/0x160 [ 685.600535][T10260] unix_release_sock+0xb1d/0x1280 [ 685.607735][T10260] unix_release+0x91/0xf0 [ 685.614241][T10260] __sock_release+0xb0/0x270 [ 685.621004][T10260] sock_close+0x1c/0x30 [ 685.627326][T10260] __fput+0x408/0xbb0 [ 685.633478][T10260] task_work_run+0x14e/0x250 [ 685.640240][T10260] get_signal+0x1ca/0x2770 [ 685.646832][T10260] arch_do_signal_or_restart+0x90/0x7e0 [ 685.654548][T10260] syscall_exit_to_user_mode+0x150/0x2a0 [ 685.662353][T10260] do_syscall_64+0xda/0x250 [ 685.669028][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.677099][T10260] } [ 685.679673][T10260] ... key at: [] __key.0+0x0/0x40 [ 685.686881][T10260] ... acquired at: [ 685.690760][T10260] _raw_read_lock_irqsave+0x74/0x90 [ 685.696130][T10260] kill_fasync+0x138/0x4f0 [ 685.700726][T10260] mousedev_notify_readers+0x6d9/0xa30 [ 685.706357][T10260] mousedev_event+0x84e/0x1490 [ 685.711294][T10260] input_handler_events_default+0x116/0x1b0 [ 685.717356][T10260] input_pass_values+0x777/0x8e0 [ 685.722465][T10260] input_handle_event+0xf0b/0x14d0 [ 685.727750][T10260] input_inject_event+0x1bb/0x370 [ 685.732948][T10260] evdev_write+0x450/0x750 [ 685.737539][T10260] vfs_write+0x29a/0x1140 [ 685.742034][T10260] ksys_write+0x1f8/0x260 [ 685.746527][T10260] do_syscall_64+0xcd/0x250 [ 685.751202][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.757270][T10260] [ 685.759588][T10260] -> (&f->f_owner.lock){....}-{2:2} { [ 685.764976][T10260] INITIAL USE at: [ 685.768861][T10260] lock_acquire+0x1b1/0x560 [ 685.774927][T10260] _raw_write_lock_irq+0x36/0x50 [ 685.781511][T10260] f_modown+0x2a/0x380 [ 685.787142][T10260] f_setown+0xd4/0x2a0 [ 685.792770][T10260] do_fcntl+0x11f7/0x1380 [ 685.798662][T10260] __x64_sys_fcntl+0x174/0x200 [ 685.804993][T10260] do_syscall_64+0xcd/0x250 [ 685.811060][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.818522][T10260] INITIAL READ USE at: [ 685.822843][T10260] lock_acquire+0x1b1/0x560 [ 685.829342][T10260] _raw_read_lock_irq+0x67/0x80 [ 685.836185][T10260] do_fcntl+0x787/0x1380 [ 685.842508][T10260] __x64_sys_fcntl+0x174/0x200 [ 685.849267][T10260] do_syscall_64+0xcd/0x250 [ 685.855764][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.863657][T10260] } [ 685.866153][T10260] ... key at: [] __key.2+0x0/0x40 [ 685.873261][T10260] ... acquired at: [ 685.877051][T10260] _raw_read_lock_irqsave+0x74/0x90 [ 685.882447][T10260] send_sigio+0x28/0x3c0 [ 685.886874][T10260] kill_fasync+0x1f6/0x4f0 [ 685.891469][T10260] sock_wake_async+0x132/0x160 [ 685.896407][T10260] unix_release_sock+0xb1d/0x1280 [ 685.901629][T10260] unix_release+0x91/0xf0 [ 685.906146][T10260] __sock_release+0xb0/0x270 [ 685.910921][T10260] sock_close+0x1c/0x30 [ 685.915253][T10260] __fput+0x408/0xbb0 [ 685.919409][T10260] task_work_run+0x14e/0x250 [ 685.924174][T10260] get_signal+0x1ca/0x2770 [ 685.928767][T10260] arch_do_signal_or_restart+0x90/0x7e0 [ 685.934491][T10260] syscall_exit_to_user_mode+0x150/0x2a0 [ 685.940300][T10260] do_syscall_64+0xda/0x250 [ 685.944976][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.951048][T10260] [ 685.953360][T10260] [ 685.953360][T10260] the dependencies between the lock to be acquired [ 685.953369][T10260] and HARDIRQ-irq-unsafe lock: [ 685.966866][T10260] -> (tasklist_lock){.+.+}-{2:2} { [ 685.971994][T10260] HARDIRQ-ON-R at: [ 685.975964][T10260] lock_acquire+0x1b1/0x560 [ 685.982115][T10260] _raw_read_lock+0x5f/0x70 [ 685.988266][T10260] __do_wait+0x105/0x890 [ 685.994155][T10260] do_wait+0x219/0x570 [ 685.999879][T10260] kernel_wait+0xa0/0x160 [ 686.005870][T10260] call_usermodehelper_exec_work+0xf1/0x170 [ 686.013432][T10260] process_one_work+0x9c5/0x1b40 [ 686.020029][T10260] worker_thread+0x6c8/0xf20 [ 686.026273][T10260] kthread+0x2c1/0x3a0 [ 686.031987][T10260] ret_from_fork+0x45/0x80 [ 686.038060][T10260] ret_from_fork_asm+0x1a/0x30 [ 686.044480][T10260] SOFTIRQ-ON-R at: [ 686.048453][T10260] lock_acquire+0x1b1/0x560 [ 686.054611][T10260] _raw_read_lock+0x5f/0x70 [ 686.060763][T10260] __do_wait+0x105/0x890 [ 686.066657][T10260] do_wait+0x219/0x570 [ 686.072391][T10260] kernel_wait+0xa0/0x160 [ 686.078396][T10260] call_usermodehelper_exec_work+0xf1/0x170 [ 686.085956][T10260] process_one_work+0x9c5/0x1b40 [ 686.092544][T10260] worker_thread+0x6c8/0xf20 [ 686.098785][T10260] kthread+0x2c1/0x3a0 [ 686.104503][T10260] ret_from_fork+0x45/0x80 [ 686.110575][T10260] ret_from_fork_asm+0x1a/0x30 [ 686.116992][T10260] INITIAL USE at: [ 686.120880][T10260] lock_acquire+0x1b1/0x560 [ 686.126946][T10260] _raw_write_lock_irq+0x36/0x50 [ 686.133446][T10260] copy_process+0x4420/0x8de0 [ 686.139686][T10260] kernel_clone+0xfd/0x980 [ 686.145662][T10260] user_mode_thread+0xb4/0xf0 [ 686.151900][T10260] rest_init+0x23/0x2b0 [ 686.157622][T10260] start_kernel+0x3df/0x4c0 [ 686.163697][T10260] x86_64_start_reservations+0x18/0x30 [ 686.170727][T10260] x86_64_start_kernel+0xb2/0xc0 [ 686.177235][T10260] common_startup_64+0x13e/0x148 [ 686.183733][T10260] INITIAL READ USE at: [ 686.188142][T10260] lock_acquire+0x1b1/0x560 [ 686.194642][T10260] _raw_read_lock+0x5f/0x70 [ 686.201141][T10260] __do_wait+0x105/0x890 [ 686.207378][T10260] do_wait+0x219/0x570 [ 686.213447][T10260] kernel_wait+0xa0/0x160 [ 686.219780][T10260] call_usermodehelper_exec_work+0xf1/0x170 [ 686.227677][T10260] process_one_work+0x9c5/0x1b40 [ 686.234617][T10260] worker_thread+0x6c8/0xf20 [ 686.241202][T10260] kthread+0x2c1/0x3a0 [ 686.247260][T10260] ret_from_fork+0x45/0x80 [ 686.253674][T10260] ret_from_fork_asm+0x1a/0x30 [ 686.260440][T10260] } [ 686.262931][T10260] ... key at: [] tasklist_lock+0x18/0x40 [ 686.270649][T10260] ... acquired at: [ 686.274439][T10260] lock_acquire+0x1b1/0x560 [ 686.279113][T10260] _raw_read_lock+0x5f/0x70 [ 686.283786][T10260] send_sigio+0xb4/0x3c0 [ 686.288200][T10260] kill_fasync+0x1f6/0x4f0 [ 686.292787][T10260] lease_break_callback+0x23/0x30 [ 686.297993][T10260] __break_lease+0x67c/0x17d0 [ 686.302840][T10260] vfs_truncate+0x32e/0x4e0 [ 686.307514][T10260] __x64_sys_truncate+0x174/0x1e0 [ 686.312714][T10260] do_syscall_64+0xcd/0x250 [ 686.317421][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.323513][T10260] [ 686.325831][T10260] [ 686.325831][T10260] stack backtrace: [ 686.331709][T10260] CPU: 0 UID: 0 PID: 10260 Comm: syz.2.1316 Not tainted 6.11.0-rc2-syzkaller #0 [ 686.340727][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 686.350783][T10260] Call Trace: [ 686.354061][T10260] [ 686.356988][T10260] dump_stack_lvl+0x116/0x1f0 [ 686.361679][T10260] check_irq_usage+0xe3c/0x1490 [ 686.366532][T10260] ? mark_lock+0xb5/0xc60 [ 686.370861][T10260] ? __pfx_check_irq_usage+0x10/0x10 [ 686.376146][T10260] ? hlock_conflict+0x58/0x200 [ 686.380907][T10260] ? __bfs+0x2fa/0x670 [ 686.384973][T10260] ? __pfx_hlock_conflict+0x10/0x10 [ 686.390175][T10260] ? lockdep_lock+0xc6/0x200 [ 686.394758][T10260] ? __pfx_lockdep_lock+0x10/0x10 [ 686.399780][T10260] ? __lock_acquire+0x2503/0x3cb0 [ 686.404813][T10260] __lock_acquire+0x2503/0x3cb0 [ 686.409667][T10260] ? __pfx___lock_acquire+0x10/0x10 [ 686.414870][T10260] lock_acquire+0x1b1/0x560 [ 686.419380][T10260] ? send_sigio+0xb4/0x3c0 [ 686.423796][T10260] ? __pfx_lock_acquire+0x10/0x10 [ 686.428822][T10260] ? __pfx_lock_acquire+0x10/0x10 [ 686.433845][T10260] ? __pfx_lock_acquire+0x10/0x10 [ 686.438873][T10260] _raw_read_lock+0x5f/0x70 [ 686.443382][T10260] ? send_sigio+0xb4/0x3c0 [ 686.447801][T10260] send_sigio+0xb4/0x3c0 [ 686.452047][T10260] kill_fasync+0x1f6/0x4f0 [ 686.456466][T10260] lease_break_callback+0x23/0x30 [ 686.461511][T10260] __break_lease+0x67c/0x17d0 [ 686.466188][T10260] ? __pfx___break_lease+0x10/0x10 [ 686.471297][T10260] ? capable_wrt_inode_uidgid+0xeb/0x190 [ 686.476951][T10260] ? security_inode_permission+0xe6/0x120 [ 686.482674][T10260] ? inode_permission+0xdd/0x5f0 [ 686.487613][T10260] vfs_truncate+0x32e/0x4e0 [ 686.492115][T10260] __x64_sys_truncate+0x174/0x1e0 [ 686.497137][T10260] ? __pfx___x64_sys_truncate+0x10/0x10 [ 686.502683][T10260] do_syscall_64+0xcd/0x250 [ 686.507203][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.513121][T10260] RIP: 0033:0x7fab6db779f9 [ 686.517549][T10260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.537176][T10260] RSP: 002b:00007fab6e94d048 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 686.547692][T10260] RAX: ffffffffffffffda RBX: 00007fab6dd05f80 RCX: 00007fab6db779f9 [ 686.555668][T10260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 686.563639][T10260] RBP: 00007fab6dbe58ee R08: 0000000000000000 R09: 0000000000000000 [ 686.571625][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.579599][T10260] R13: 000000000000000b R14: 00007fab6dd05f80 R15: 00007fff86339048 [ 686.587594][T10260] Aug 5 11:59:10 [ 686.610864][ T29] kauditd_printk_skb: 43 callbacks suppressed syzkaller kern.w[ 686.610881][ T29] audit: type=1400 audit(1722859152.882:800): avc: denied { read } for pid=4650 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 6[ 686.620290][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 84.317688][T1026[ 686.643446][ T11] bond0 (unregistering): Released all slaves [ 686.651078][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 0] Aug 5 11:59:10 syzkaller kern.warn kernel: [ 684.322919][T10260] ===================================================== Aug 5 11:59:10 syzkaller kern.warn kernel: [ 684.329850][T10260] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 686.716105][ T29] audit: type=1400 audit(1722859152.882:801): avc: denied { read } for pid=4650 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Aug 5 11:59:12 syzkaller auth.info sshd[5203]: Received disconnect from 10.128.0.169 port 48946:11: disconnected by user Aug 5 11:59:12 syzkaller auth.info sshd[5203]: Disconnected from user root 10.128.0.169 port 48946 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.337307][T10260] 6.11.0-rc2-syzkaller #0 Not tainted Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.337321][T10260] ----------------------------------------------------- Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.349602][T10260] syz.2.1316/10260 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.357328][T10260] ffffffff8da0a098 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xb4/0x3c0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.367253][T10260] Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.367253][T10260] and this task is already holding: Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.374627][T10260] ffff88805dc6d518 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x28/0x3c0 Aug [ 686.850710][ T29] audit: type=1400 audit(1722859152.932:802): avc: denied { create } for pid=10258 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 5 11:59:13 syzkaller kern.warn kernel: [ 684.384803][T10260] which would create a new lock dependency: Aug 5 11:59:13 syzkall[ 686.881248][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 er kern.warn kernel: [ 684.390703][T10260] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.390754][T10260] Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.390754][T10260] but this new dependency connects a HARDIRQ-irq-safe lock: A[ 686.913968][ T4650] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 ug 5 11:59:13 syzkaller kern.warn kernel: [ 684.390764][T10260] (&dev->event_lock#2){-.-.}-{2:2} Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.390796][T10260] Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.390796][T10260] ... which became HA[ 686.944157][ T29] audit: type=1400 audit(1722859152.942:803): avc: denied { write } for pid=5205 comm="syz-executor" path="pipe:[3423]" dev="pipefs" ino=3423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 RDIRQ-irq-safe a[ 686.969454][ T4650] audit: backlog limit exceeded t: Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.390807][T10260] lock_acquire+0x1b1/0x560 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.428060][T1[ 686.987158][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 0260] _raw_spin_lock_irqsave+0x3a/0x60 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.434688][T10260] input_event+0x70/0xa0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.440370][T10260] psmouse_report_standard_buttons+0x30/0x80 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.447791][T10260] psmouse_process_byte+[ 687.024009][ T4650] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 0x39c/0x8a0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.454434][T10260] psmouse_handle_byte+0x44/0x570 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.460550][T10260] psmouse_receive_byte+0x243/0xe20 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.465836][T10260] ps[ 687.056408][ T29] audit: type=1400 audit(1722859152.942:804): avc: denied { write } for pid=5205 comm="syz-executor" path="pipe:[3423]" dev="pipefs" ino=3423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 2_interrupt+0x20b/0x5b0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.470516][T10260] serio_interrupt+0x8f/0x150 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.475280][T10260] i8042_interrupt+0x3f5/0x8a0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.480131][T10260] __handle_irq_event_percpu+0x229/0x7c0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.485867][T10260] handle_irq_event+0xab/0x1e0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.490736][T10260] handle_edge_irq+0x263/0xd10 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.495596][T10260] __common_interrupt+0xdf/0x250 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.500633][T10260] common_interrupt+0xab/0xd0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.505406][T10260] asm_common_interrupt+0x26/0x40 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.510524][T10260] _raw_spin_unlock_irqrestore+0x31/0x80 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.516247][T10260] i8042_aux_write+0x11a/0x180 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.521101][T10260] ps2_do_sendbyte+0x264/0x6f0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.525992][T10260] ps2_sendbyte+0x59/0x150 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.530497][T10260] cypress_ps2_sendbyte+0x2c/0xf0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.535608][T10260] cypress_send_ext_cmd+0x1dc/0xa30 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.540893][T10260] cypress_detect+0x8c/0x1a0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.545572][T10260] psmouse_try_protocol+0x21b/0x380 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.550853][T10260] psmouse_extensions+0x61a/0x960 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.555962][T10260] psmouse_switch_protocol+0x538/0x750 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.561504][T10260] psmouse_connect+0x5cc/0xf80 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.566444][T10260] serio_driver_probe+0x74/0xa0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.571383][T10260] really_probe+0x23e/0xa90 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.575975][T10260] __driver_probe_device+0x1de/0x440 Aug 5 11:59:13 syzkaller kernAug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.601359][T10260] process_one_work+0x9c5/0x1b40 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.606387][T10260] worker_thread+0x6c8/0xf20 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.611068][T10260] kthread+0x2c1/0x3a0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.615216][T10260] ret_from_fork+0x45/0x80 Aug 5 11:59:13 syzkaller kern.warn Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.w[ 687.344558][ T11] hsr_slave_0: left promiscuous mode arn kernel: [ 684.644229][T10260] ... Aug 5 1[ 687.363238][ T11] hsr_slave_1: left promiscuous mode 1:59:13 syzkaller kern.warn kernel: [ 684.644236][T10260] lock_acquire+0x1b1/0x560 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.651395][T10260] _raw_read_lock+0x5f/0x70 Aug 5 11:59:13 syzkaller kern.warn kernel[ 687.400049][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 : [ 684.656070][T10260] __do_wait+0x105/0x890 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.660399][T10[ 687.417537][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 260] do_wait+0x219/0x570 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.664561][T10260] kernel_wait+0xa0/0x160 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.668976][T10260] call_usermodehelper_exec_work+0xf1/0x170 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.674963][T10260] process_one_work+0x9c5/0x1b40 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.679993][T10260] worker_thread+0x6c8/0xf20 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.684680][T10260] kthread+0x2c1/0x3a0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.688831][T10260] ret_from_fork+0x45/0x80 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.693336][T10260] ret_from_fork_asm+0x1a/0x30 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.698192][T10260] Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.698192][T10260] other info that might help us debug this: Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.698192][T10260] Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.708411][T10260] Chain exists of: Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.708411][T10260] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.708411][T10260] Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.721717][T10260] Possible interrupt unsafe locking scenario: Aug 5 11:59:13 syzkallAug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.758932][T1026Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.953476][T10260] __common_interrupt+0xdf/0x250 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.960415][T10260] common_interrupt+0xab/0xd0 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 684.967093][T10260] asm_common_interrupt+0x26/0x40 Aug 5 11:59:13 syzkaller kern.warn Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 6Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.015955][T10260] cypress_detect+0x8c/0Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.057867][T10260] reallAug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.118908][T10260] ret_from_fork+0x45/0x80 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.125330][TAug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 6Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.191929][T10260] irq_exit_rcu+0xbb/0x120 Aug 5 11:59:13 syzkaller keAug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.325759][T10260] Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 syzkaller kern.warn kernel: [ 685.375621][T10260] input_Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.458696][T10260] worker_thread+0x6c8/0xf20 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.465203][T10260] kthread+0x2c1/0x3[ 687.767963][ T11] team0 (unregistering): Port device team_slave_1 removed a0 Aug 5 11:59:13 syzkaller kern.warn kernel: Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.wAug 5 11:59:13 syzkaller kern.warn kernel: [ 685.516257][T1026Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.547294][T1026Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.586999][T1026Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.593591][T1026[ 687.808749][ T11] team0 (unregistering): Port device team_slave_0 removed 0] sock_wake_async+0x1Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.677099][T10260] } Aug 5 11:59:13 syzkaller kern.warn kernel: [ 685.679673][T10260] ... key at: [