last executing test programs: 1m6.029913624s ago: executing program 3 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 1m5.52630677s ago: executing program 3 (id=258): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000240)="1f00000300000000000000000000068500023b050900010001", 0x19}, {&(0x7f0000000580)="d863122ed059d7a3873f36f1be6a90e87a2868aa9c330a9ade04b738f249afe25a0af532b1a9dc7c243ef33c095bad1f6fd067ac193d8d235990d1ed4c5af6d53ee3ca83290650b0e108d28ae0e8f3ca355ba75c57c15f42fd465b73391a537d6c7c8fe2e859b31c097bf996859eeb054c10a0c4f3a07bdd9c6bdebd225291d67fa23b924584bae31466ca757ea9770f0781f1263825dd7fd70f684dd7cf7216f506dca941a17ebf166aff91dac3ff8615", 0xb1}, {&(0x7f0000000400)='gH', 0x2}], 0x3) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x903d01) bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x7, @none}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x32}, 0x6}, 0xe) 1m3.207627815s ago: executing program 3 (id=262): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000001c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x48}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2cb81c5a3389dff7}}]}) 48.354498744s ago: executing program 2 (id=294): socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x0) socket$tipc(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x18}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@exit]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x18, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, @snprintf]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r9}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 46.930605164s ago: executing program 2 (id=296): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x90) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='t']) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}, 0x0) unshare(0x62040200) unshare(0x62040200) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 46.713427826s ago: executing program 1 (id=297): openat$kvm(0xffffffffffffff9c, 0x0, 0x60cb40, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100)=0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(r3, &(0x7f00000000c0)=""/34, 0x22) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) syz_open_dev$usbfs(0x0, 0x73, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) epoll_create(0x1) 38.43154615s ago: executing program 1 (id=301): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32]) mount$fuse(0x0, 0x0, 0x0, 0x3039c00, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) setregid(0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 38.307621814s ago: executing program 4 (id=302): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000001100)={&(0x7f0000000400)=[{0x0, 0x1, 0x0, &(0x7f0000000080)}, {0x3, 0xa001, 0x0, 0x0}, {0x7ff, 0x0, 0x3c, &(0x7f0000000180)="703a14ff06c199cdd9085ea560e8dfa24949f874e0b21dd5b347f77f214ec50c6d528b12a35692d50ed0f1cbd7d312048cc39487d71c81a1ef37fca3"}, {0x8, 0x3, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x5}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) 38.087963025s ago: executing program 1 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x0, 0x8000, {0x0}, {0xffffffffffffffff}, 0x0, 0x200}) prlimit64(r0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000103f010700000000004000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) socket(0x0, 0x0, 0x20000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000380), &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000003c0)={0xff, 0x7f, 0x9, {0x4d7, 0x2}, 0x2a05, 0x8}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) r5 = add_key$keyring(&(0x7f0000000600), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305839, &(0x7f0000000240)) 37.550003948s ago: executing program 2 (id=305): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x24}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 36.809640454s ago: executing program 1 (id=307): socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 36.225605042s ago: executing program 2 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 35.913374486s ago: executing program 4 (id=310): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0xc, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1c, r6, 0x1, 0x9, 0x6, @local}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfa}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r9}, 0x10) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x90) r10 = socket$packet(0x11, 0x2165a27d0cc85db4, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r10, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 35.62094685s ago: executing program 2 (id=311): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x8, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex_waitv(&(0x7f0000002480)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) getpid() ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000b40)) r5 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r5, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x52e, 0x0, 0x0, 0x0, 0x0) 35.17342477s ago: executing program 4 (id=312): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x4}, &(0x7f0000000540)=[{}, {}, {}, {}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet(r2, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @multicast1, "a9598e73e3fb5f1f5ec74ce2d59477c9ecc1c22b"}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000303010400000000000000000a0000060800034000000002080003400000037c0c000200fffffffd0000000508000340000000ee"], 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x4880) 34.991840104s ago: executing program 2 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0), 0x4) 34.217287121s ago: executing program 1 (id=316): socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=r3, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c"], 0x64}}, 0x0) 34.148067006s ago: executing program 4 (id=317): syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) timer_create(0x2, &(0x7f0000000340)={0x0, 0x39, 0x1, @thr={0x0, &(0x7f00000000c0)="edb13dff7039bb1ceeb124f32f0f41912522db1f1f176400fcc7a32751c9171a"}}, &(0x7f0000000380)) sched_setscheduler(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0xffffffffffffffda}, 0x50) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000002c0)={"90125830", 0x0, 0x5, 0x9, 0x0, 0x6, "471d855406050000c6a185480039d5", 'W\x00', "214619ed", "41f336e7", ["c81de44b0091fb7ce7442d42", "ed5eb3eecf000c00bd00", "34334e67c300e1a4c49d3300", "e996c9c4d23135876ea2fff7"]}) 32.898926639s ago: executing program 1 (id=319): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000001100)={&(0x7f0000000400)=[{0x0, 0x1, 0x0, &(0x7f0000000080)}, {0x3, 0xa001, 0x0, 0x0}, {0x7ff, 0x0, 0x3c, &(0x7f0000000180)="703a14ff06c199cdd9085ea560e8dfa24949f874e0b21dd5b347f77f214ec50c6d528b12a35692d50ed0f1cbd7d312048cc39487d71c81a1ef37fca3"}, {0x8, 0x3, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x5}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) 32.191999563s ago: executing program 4 (id=320): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 31.867192979s ago: executing program 4 (id=322): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x8, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex_waitv(&(0x7f0000002480)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) getpid() ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000b40)) r5 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r5, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x52e, 0x0, 0x0, 0x0, 0x0) 27.925191735s ago: executing program 3 (id=263): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 27.863704672s ago: executing program 0 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0), 0x4) 27.462613047s ago: executing program 3 (id=324): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, 0x140e, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 27.371602116s ago: executing program 0 (id=325): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x4}, &(0x7f0000000540)=[{}, {}, {}, {}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet(r2, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @multicast1, "a9598e73e3fb5f1f5ec74ce2d59477c9ecc1c22b"}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000303010400000000000000000a0000060800034000000002080003400000037c0c000200fffffffd0000000508000340000000ee"], 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x4880) 22.986268771s ago: executing program 3 (id=326): inotify_init1(0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0x11) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)) ioprio_set$pid(0x1, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) recvmmsg$unix(r2, &(0x7f0000001200)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/142, 0x8e}], 0x2, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/232, 0xe8}, {&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000c00)=""/203, 0xcb}], 0x5, &(0x7f0000000d80)}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/115, 0x73}], 0x1, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/186, 0xba}, {&(0x7f0000001100)=""/192, 0xc0}], 0x2}}], 0x5, 0x2, &(0x7f0000001340)={0x0, 0x989680}) 19.933043277s ago: executing program 0 (id=328): socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=r3, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c"], 0x64}}, 0x0) 12.739756349s ago: executing program 0 (id=330): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x8, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex_waitv(&(0x7f0000002480)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) getpid() setresuid(0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000b40)) r4 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r4, 0x0, 0x400000, 0x1, 0x0, 0x0) 8.003168478s ago: executing program 0 (id=332): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0xc, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1c, r6, 0x1, 0x9, 0x6, @local}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000", 0x53}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfa}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r9}, 0x10) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x90) r10 = socket$packet(0x11, 0x2165a27d0cc85db4, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r10, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): slave_1) entered blocking state [ 76.967740][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.975003][ T5221] bridge_slave_1: entered allmulticast mode [ 76.982838][ T5221] bridge_slave_1: entered promiscuous mode [ 77.024793][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 77.107587][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.179370][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.207574][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.214930][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.225463][ T5222] bridge_slave_0: entered allmulticast mode [ 77.232706][ T5222] bridge_slave_0: entered promiscuous mode [ 77.291008][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.298203][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.305592][ T5222] bridge_slave_1: entered allmulticast mode [ 77.314484][ T5222] bridge_slave_1: entered promiscuous mode [ 77.321640][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.332329][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.340070][ T5232] bridge_slave_0: entered allmulticast mode [ 77.347028][ T5232] bridge_slave_0: entered promiscuous mode [ 77.355569][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.363509][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.370804][ T5231] bridge_slave_0: entered allmulticast mode [ 77.377846][ T5231] bridge_slave_0: entered promiscuous mode [ 77.407019][ T5221] team0: Port device team_slave_0 added [ 77.464224][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.471875][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.479698][ T5232] bridge_slave_1: entered allmulticast mode [ 77.486687][ T5232] bridge_slave_1: entered promiscuous mode [ 77.494762][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.502358][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.509813][ T5231] bridge_slave_1: entered allmulticast mode [ 77.516998][ T5231] bridge_slave_1: entered promiscuous mode [ 77.527841][ T5221] team0: Port device team_slave_1 added [ 77.542174][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.549569][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.556945][ T5224] bridge_slave_0: entered allmulticast mode [ 77.564879][ T5224] bridge_slave_0: entered promiscuous mode [ 77.573472][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.580817][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.588153][ T5224] bridge_slave_1: entered allmulticast mode [ 77.595382][ T5224] bridge_slave_1: entered promiscuous mode [ 77.693492][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.733183][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.740298][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.767714][ T5229] Bluetooth: hci1: command tx timeout [ 77.773896][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.803326][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.834848][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.840144][ T5229] Bluetooth: hci0: command tx timeout [ 77.848023][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.862099][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.872130][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.882900][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.909518][ T5229] Bluetooth: hci3: command tx timeout [ 77.915348][ T5229] Bluetooth: hci4: command tx timeout [ 77.915503][ T5226] Bluetooth: hci2: command tx timeout [ 77.921153][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.941140][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.955313][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.007120][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.063184][ T5222] team0: Port device team_slave_0 added [ 78.075424][ T5222] team0: Port device team_slave_1 added [ 78.086359][ T5232] team0: Port device team_slave_0 added [ 78.128439][ T5231] team0: Port device team_slave_0 added [ 78.163172][ T5232] team0: Port device team_slave_1 added [ 78.187378][ T5231] team0: Port device team_slave_1 added [ 78.213784][ T5224] team0: Port device team_slave_0 added [ 78.257692][ T5221] hsr_slave_0: entered promiscuous mode [ 78.264474][ T5221] hsr_slave_1: entered promiscuous mode [ 78.294183][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.301233][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.328243][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.341944][ T5224] team0: Port device team_slave_1 added [ 78.348250][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.355353][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.381362][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.394826][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.402012][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.427988][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.456444][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.463701][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.489776][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.503576][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.510614][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.536700][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.596008][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.604069][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.630832][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.757881][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.766856][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.796928][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.839302][ T5232] hsr_slave_0: entered promiscuous mode [ 78.845935][ T5232] hsr_slave_1: entered promiscuous mode [ 78.852640][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.860644][ T5232] Cannot create hsr debugfs directory [ 78.890480][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.897460][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.924114][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.989415][ T5231] hsr_slave_0: entered promiscuous mode [ 79.002113][ T5231] hsr_slave_1: entered promiscuous mode [ 79.008590][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.016897][ T5231] Cannot create hsr debugfs directory [ 79.031491][ T5222] hsr_slave_0: entered promiscuous mode [ 79.037945][ T5222] hsr_slave_1: entered promiscuous mode [ 79.045037][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.052724][ T5222] Cannot create hsr debugfs directory [ 79.265674][ T5224] hsr_slave_0: entered promiscuous mode [ 79.273301][ T5224] hsr_slave_1: entered promiscuous mode [ 79.279590][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.287223][ T5224] Cannot create hsr debugfs directory [ 79.533269][ T5221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.580847][ T5221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.595062][ T5221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.657341][ T5221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.829917][ T5226] Bluetooth: hci1: command tx timeout [ 79.908976][ T5226] Bluetooth: hci0: command tx timeout [ 79.941861][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.972139][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.990728][ T5226] Bluetooth: hci4: command tx timeout [ 79.990749][ T5229] Bluetooth: hci2: command tx timeout [ 79.996131][ T4608] Bluetooth: hci3: command tx timeout [ 80.035322][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.046414][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.117818][ T5222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.140767][ T5222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.161815][ T5222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.182568][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.193646][ T5222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.317571][ T5231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.362507][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.376280][ T5231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.390591][ T5231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.402208][ T5231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.438872][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.446296][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.493536][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.500782][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.583913][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.596413][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.607868][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.639938][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.784785][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.862593][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.913080][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.920322][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.973869][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.982744][ T29] audit: type=1400 audit(1722719115.898:113): avc: denied { sys_module } for pid=5221 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.045708][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.066007][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.073270][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.115980][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.123244][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.227794][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.235043][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.343274][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.413214][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.428059][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.472324][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.530796][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.538014][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.602276][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.609563][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.687403][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.774055][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.781316][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.811065][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.818281][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.918839][ T4608] Bluetooth: hci1: command tx timeout [ 81.939567][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.989554][ T4608] Bluetooth: hci0: command tx timeout [ 82.070024][ T4608] Bluetooth: hci3: command tx timeout [ 82.070071][ T5226] Bluetooth: hci4: command tx timeout [ 82.075462][ T4608] Bluetooth: hci2: command tx timeout [ 82.125629][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.183707][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.308437][ T5232] veth0_vlan: entered promiscuous mode [ 82.414661][ T5232] veth1_vlan: entered promiscuous mode [ 82.436304][ T5221] veth0_vlan: entered promiscuous mode [ 82.536052][ T5221] veth1_vlan: entered promiscuous mode [ 82.612276][ T5222] veth0_vlan: entered promiscuous mode [ 82.721964][ T5222] veth1_vlan: entered promiscuous mode [ 82.737125][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.754155][ T5232] veth0_macvtap: entered promiscuous mode [ 82.803344][ T5232] veth1_macvtap: entered promiscuous mode [ 82.815235][ T5221] veth0_macvtap: entered promiscuous mode [ 82.866371][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.908312][ T5221] veth1_macvtap: entered promiscuous mode [ 82.950707][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.023874][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.040534][ T5222] veth0_macvtap: entered promiscuous mode [ 83.088286][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.104825][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.118477][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.131781][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.153973][ T5222] veth1_macvtap: entered promiscuous mode [ 83.166999][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.179692][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.196873][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.216906][ T5231] veth0_vlan: entered promiscuous mode [ 83.227081][ T5224] veth0_vlan: entered promiscuous mode [ 83.298496][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.315796][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.328048][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.344772][ T5231] veth1_vlan: entered promiscuous mode [ 83.384900][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.402729][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.413232][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.423768][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.435804][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.447877][ T5221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.457400][ T5221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.468255][ T5221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.477054][ T5221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.492684][ T5224] veth1_vlan: entered promiscuous mode [ 83.573078][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.584235][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.595257][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.607290][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.619830][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.639669][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.649339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.653974][ T5222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.666475][ T5222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.683076][ T5222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.693863][ T5222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865401][ T5224] veth0_macvtap: entered promiscuous mode [ 83.871584][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.883024][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.893582][ T5231] veth0_macvtap: entered promiscuous mode [ 83.920918][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.922429][ T5224] veth1_macvtap: entered promiscuous mode [ 83.944609][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.960232][ T29] audit: type=1400 audit(1722719118.868:114): avc: denied { mounton } for pid=5232 comm="syz-executor" path="/root/syzkaller.AMUPeC/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 83.991203][ T4608] Bluetooth: hci1: command tx timeout [ 83.997444][ T29] audit: type=1400 audit(1722719118.878:115): avc: denied { mount } for pid=5232 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.028935][ T29] audit: type=1400 audit(1722719118.878:116): avc: denied { mounton } for pid=5232 comm="syz-executor" path="/root/syzkaller.AMUPeC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.055533][ T29] audit: type=1400 audit(1722719118.878:117): avc: denied { mount } for pid=5232 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.078044][ T4608] Bluetooth: hci0: command tx timeout [ 84.078892][ T29] audit: type=1400 audit(1722719118.878:118): avc: denied { unmount } for pid=5232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.103770][ T29] audit: type=1400 audit(1722719118.908:119): avc: denied { mounton } for pid=5232 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.134187][ T29] audit: type=1400 audit(1722719118.908:120): avc: denied { mount } for pid=5232 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.159593][ T4608] Bluetooth: hci2: command tx timeout [ 84.161193][ T5226] Bluetooth: hci4: command tx timeout [ 84.165105][ T4608] Bluetooth: hci3: command tx timeout [ 84.215496][ T5231] veth1_macvtap: entered promiscuous mode [ 84.238501][ T29] audit: type=1400 audit(1722719119.148:121): avc: denied { read write } for pid=5232 comm="syz-executor" name="loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.251598][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.276261][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.329442][ T29] audit: type=1400 audit(1722719119.178:122): avc: denied { open } for pid=5232 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.373960][ T5311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.382861][ T29] audit: type=1400 audit(1722719119.178:123): avc: denied { ioctl } for pid=5232 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.432404][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.458671][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.460920][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.485374][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.496999][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.507789][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.518377][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.528390][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.539570][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.553105][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.589571][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.608009][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.619819][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.631989][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.642256][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.653701][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.663949][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.674763][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.698363][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.758208][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.760607][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.792970][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.808639][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.859658][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.878872][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.898113][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.909211][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.928535][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.955493][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.989514][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.019143][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.046875][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.046894][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.046913][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.046925][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.046943][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.053994][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.070395][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070443][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070478][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070514][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.102787][ T5231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.660046][ T5231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.703102][ T5231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.748680][ T5231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170783][ T5328] kexec: Could not allocate control_code_buffer [ 87.231850][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.419889][ T46] cfg80211: failed to load regulatory.db [ 87.500697][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.180101][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.226378][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.422120][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.443729][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.530208][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.570297][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.639504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 89.351783][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 89.351802][ T29] audit: type=1400 audit(1722719124.268:149): avc: denied { read write } for pid=5339 comm="syz.1.2" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.441710][ T29] audit: type=1400 audit(1722719124.268:150): avc: denied { open } for pid=5339 comm="syz.1.2" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.559407][ T29] audit: type=1400 audit(1722719124.448:151): avc: denied { ioctl } for pid=5339 comm="syz.1.2" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.685635][ T29] audit: type=1400 audit(1722719124.448:152): avc: denied { read write } for pid=5339 comm="syz.1.2" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.787295][ T29] audit: type=1400 audit(1722719124.448:153): avc: denied { open } for pid=5339 comm="syz.1.2" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.884225][ T29] audit: type=1400 audit(1722719124.518:154): avc: denied { ioctl } for pid=5339 comm="syz.1.2" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.935143][ T5279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.324964][ T5351] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 90.325379][ T5351] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 90.325506][ T5351] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 90.723224][ T29] audit: type=1400 audit(1722719125.228:155): avc: denied { mounton } for pid=5345 comm="syz.0.11" path="/proc/13/task" dev="proc" ino=6787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 91.121146][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 91.154491][ T5279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.154645][ T5279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.154699][ T5279] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.154733][ T5279] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 91.154769][ T5279] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.154801][ T5279] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 91.159254][ T5279] usb 2-1: language id specifier not provided by device, defaulting to English [ 91.170749][ T5279] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.170792][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.170824][ T5279] usb 2-1: Product: syz [ 91.170847][ T5279] usb 2-1: SerialNumber: syz [ 91.415011][ T29] audit: type=1400 audit(1722719126.328:156): avc: denied { create } for pid=5354 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.468483][ T5279] cdc_ncm 2-1:1.0: bind() failure [ 91.476192][ T5279] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 91.476264][ T5279] cdc_ncm 2-1:1.1: bind() failure [ 91.493414][ T5355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 91.493977][ T5348] tty tty24: ldisc open failed (-12), clearing slot 23 [ 91.957824][ T5279] usb 2-1: USB disconnect, device number 2 [ 93.301500][ T29] audit: type=1400 audit(1722719128.098:157): avc: denied { write } for pid=5356 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.550629][ T5360] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 93.595753][ T29] audit: type=1400 audit(1722719128.098:158): avc: denied { nlmsg_write } for pid=5356 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.854926][ T5369] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.865934][ T5376] kexec: Could not allocate control_code_buffer [ 96.263669][ T29] audit: type=1400 audit(1722719131.168:159): avc: denied { create } for pid=5379 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.319151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.379306][ T29] audit: type=1400 audit(1722719131.178:160): avc: denied { create } for pid=5382 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.465587][ T29] audit: type=1400 audit(1722719131.208:161): avc: denied { create } for pid=5379 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.591469][ T29] audit: type=1400 audit(1722719131.218:162): avc: denied { connect } for pid=5379 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.702256][ T29] audit: type=1400 audit(1722719131.348:163): avc: denied { ioctl } for pid=5379 comm="syz.1.20" path="socket:[6834]" dev="sockfs" ino=6834 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.702326][ T29] audit: type=1400 audit(1722719131.358:164): avc: denied { read } for pid=5379 comm="syz.1.20" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.702385][ T29] audit: type=1400 audit(1722719131.358:165): avc: denied { open } for pid=5379 comm="syz.1.20" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.702446][ T29] audit: type=1400 audit(1722719131.358:166): avc: denied { bind } for pid=5384 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.702501][ T29] audit: type=1400 audit(1722719131.368:167): avc: denied { ioctl } for pid=5379 comm="syz.1.20" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.702551][ T29] audit: type=1400 audit(1722719131.418:168): avc: denied { create } for pid=5382 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.861586][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.891356][ T5400] tty tty20: ldisc open failed (-12), clearing slot 19 [ 99.129038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.259305][ T5414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 99.714748][ T5261] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.578053][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.612630][ T5261] usb 5-1: Using ep0 maxpacket: 32 [ 100.638571][ T5261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.693577][ T5261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.753591][ T5261] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.809470][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 100.820397][ T5261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.759667][ T5433] kexec: Could not allocate control_code_buffer [ 101.797671][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.872663][ T5261] usb 5-1: config 0 descriptor?? [ 101.884286][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.040308][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.052283][ T46] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.080176][ T5261] hub 5-1:0.0: USB hub found [ 102.086713][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.119426][ T46] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 102.159884][ T46] usb 4-1: language id specifier not provided by device, defaulting to English [ 102.187250][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.205091][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.216493][ T46] usb 4-1: Product: syz [ 102.222547][ T5261] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 102.232150][ T46] usb 4-1: Manufacturer: syz [ 102.236841][ T46] usb 4-1: SerialNumber: syz [ 102.316528][ T5261] usbhid 5-1:0.0: can't add hid device: -71 [ 102.322877][ T46] usb 4-1: can't set config #1, error -71 [ 102.335329][ T5261] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.375243][ T46] usb 4-1: USB disconnect, device number 2 [ 102.389886][ T4608] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 102.640055][ T5261] usb 5-1: USB disconnect, device number 2 [ 102.854408][ T5447] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00116019, b_size=4096, device sda1 blocksize: 4096 [ 102.870059][ T5447] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 102.881178][ T5447] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 104.609220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.620094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.633723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 104.824846][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 104.849188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.877787][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 104.877806][ T29] audit: type=1400 audit(1722719139.788:178): avc: denied { read } for pid=5452 comm="syz.4.38" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.907659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.842100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.941064][ T29] audit: type=1400 audit(1722719139.998:179): avc: denied { open } for pid=5452 comm="syz.4.38" path="/dev/sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.999670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.046213][ T29] audit: type=1400 audit(1722719140.028:180): avc: denied { setopt } for pid=5452 comm="syz.4.38" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.803424][ T5474] kexec: Could not allocate control_code_buffer [ 117.966700][ T5521] netlink: 'syz.3.53': attribute type 3 has an invalid length. [ 117.974370][ T5521] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.53'. [ 118.001566][ T29] audit: type=1400 audit(1722719152.868:181): avc: denied { create } for pid=5512 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.299714][ T29] audit: type=1400 audit(1722719152.868:182): avc: denied { write } for pid=5512 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.715419][ T5525] kexec: Could not allocate control_code_buffer [ 119.921143][ T29] audit: type=1400 audit(1722719152.878:183): avc: denied { ioctl } for pid=5512 comm="syz.3.53" path="socket:[7141]" dev="sockfs" ino=7141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.947807][ T29] audit: type=1400 audit(1722719152.878:184): avc: denied { setopt } for pid=5512 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.013551][ T29] audit: type=1400 audit(1722719154.808:185): avc: denied { ioctl } for pid=5505 comm="syz.0.51" path="/dev/sg0" dev="devtmpfs" ino=703 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.158412][ T4608] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 123.755015][ T5546] sched: RT throttling activated [ 131.027429][ T5573] kexec: Could not allocate control_code_buffer [ 131.508530][ T5581] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 131.522689][ T5581] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 131.531802][ T5581] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 133.799530][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.805824][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.552594][ T5226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.567199][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.576350][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.586240][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.595119][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.606112][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.672876][ T29] audit: type=1400 audit(1722719169.558:186): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 135.147992][ T29] audit: type=1400 audit(1722719170.058:187): avc: denied { bind } for pid=5597 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.758866][ T5226] Bluetooth: hci5: command tx timeout [ 138.687149][ T1052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.791220][ T5226] Bluetooth: hci5: command tx timeout [ 139.455206][ T1052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.757514][ T5226] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 139.957064][ T1052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.736260][ T1052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.879171][ T5226] Bluetooth: hci5: command tx timeout [ 141.063711][ T4608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.074190][ T4608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.082334][ T4608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.092908][ T4608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.103401][ T4608] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.113688][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.422126][ T5226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.433695][ T5226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.441903][ T5226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.450436][ T5226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.458260][ T5226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 141.465636][ T5226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.620028][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 142.143259][ T1052] bridge_slave_1: left allmulticast mode [ 142.156945][ T1052] bridge_slave_1: left promiscuous mode [ 142.183268][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.208340][ T1052] bridge_slave_0: left allmulticast mode [ 142.214411][ T1052] bridge_slave_0: left promiscuous mode [ 142.226599][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.602335][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.615449][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.626639][ T1052] bond0 (unregistering): Released all slaves [ 142.680210][ T29] audit: type=1400 audit(1722719177.598:188): avc: denied { search } for pid=4884 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.771088][ T5593] chnl_net:caif_netlink_parms(): no params data found [ 142.959390][ T5226] Bluetooth: hci5: command tx timeout [ 143.157560][ T29] audit: type=1400 audit(1722719178.068:189): avc: denied { read } for pid=5646 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.200352][ T5226] Bluetooth: hci4: command tx timeout [ 143.284753][ T29] audit: type=1400 audit(1722719178.098:190): avc: denied { open } for pid=5646 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.329442][ T29] audit: type=1400 audit(1722719178.098:191): avc: denied { getattr } for pid=5646 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.360549][ T29] audit: type=1400 audit(1722719178.108:192): avc: denied { getattr } for pid=5646 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.480678][ T29] audit: type=1400 audit(1722719178.388:193): avc: denied { read } for pid=5650 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.509411][ T5226] Bluetooth: hci6: command tx timeout [ 143.550871][ T29] audit: type=1400 audit(1722719178.388:194): avc: denied { open } for pid=5650 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.585670][ T5309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.778858][ T29] audit: type=1400 audit(1722719178.678:195): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.802185][ T5309] usb 2-1: Using ep0 maxpacket: 8 [ 143.828993][ T5309] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.857845][ T5309] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.900377][ T29] audit: type=1400 audit(1722719178.678:196): avc: denied { add_name } for pid=5645 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.923490][ T5309] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.951839][ T5309] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 143.971076][ T5309] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.992833][ T29] audit: type=1400 audit(1722719178.678:197): avc: denied { create } for pid=5645 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.015516][ T5309] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.034287][ T5309] usb 2-1: language id specifier not provided by device, defaulting to English [ 144.093130][ T5309] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.122920][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.154154][ T5309] usb 2-1: Product: syz [ 144.158396][ T5309] usb 2-1: SerialNumber: syz [ 144.181964][ T1052] hsr_slave_0: left promiscuous mode [ 144.188398][ T1052] hsr_slave_1: left promiscuous mode [ 144.205683][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.216120][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.230847][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.238429][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.275365][ T1052] veth1_macvtap: left promiscuous mode [ 144.281845][ T1052] veth0_macvtap: left promiscuous mode [ 144.287673][ T1052] veth1_vlan: left promiscuous mode [ 144.294059][ T1052] veth0_vlan: left promiscuous mode [ 144.398975][ T5309] cdc_ncm 2-1:1.0: bind() failure [ 144.417367][ T5309] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 144.443211][ T5309] cdc_ncm 2-1:1.1: bind() failure [ 144.466330][ T5309] usb 2-1: USB disconnect, device number 3 [ 145.026642][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 145.105628][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 145.268922][ T5226] Bluetooth: hci4: command tx timeout [ 145.608948][ T5226] Bluetooth: hci6: command tx timeout [ 146.399189][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.406398][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.439040][ T5593] bridge_slave_0: entered allmulticast mode [ 146.447116][ T5593] bridge_slave_0: entered promiscuous mode [ 146.555441][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.562880][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.570643][ T5593] bridge_slave_1: entered allmulticast mode [ 146.615833][ T5593] bridge_slave_1: entered promiscuous mode [ 147.232304][ T5630] chnl_net:caif_netlink_parms(): no params data found [ 147.348885][ T5226] Bluetooth: hci4: command tx timeout [ 147.565759][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.603648][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.627299][ T5226] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 147.669097][ T5226] Bluetooth: hci6: command tx timeout [ 147.836881][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.868240][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.899329][ T5630] bridge_slave_0: entered allmulticast mode [ 147.925181][ T5630] bridge_slave_0: entered promiscuous mode [ 147.968443][ T5593] team0: Port device team_slave_0 added [ 148.069700][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.077808][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.092077][ T5630] bridge_slave_1: entered allmulticast mode [ 148.105217][ T5630] bridge_slave_1: entered promiscuous mode [ 148.129883][ T5593] team0: Port device team_slave_1 added [ 148.400772][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.407729][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.450982][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.529440][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.582362][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.596939][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.631751][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.725069][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.763368][ T5636] chnl_net:caif_netlink_parms(): no params data found [ 149.430049][ T5226] Bluetooth: hci4: command tx timeout [ 149.749010][ T5226] Bluetooth: hci6: command tx timeout [ 149.779112][ T5630] team0: Port device team_slave_0 added [ 149.816084][ T5630] team0: Port device team_slave_1 added [ 149.995309][ T5593] hsr_slave_0: entered promiscuous mode [ 150.023589][ T5593] hsr_slave_1: entered promiscuous mode [ 150.055158][ T5593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.066463][ T5593] Cannot create hsr debugfs directory [ 150.424451][ T1052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.534393][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.550534][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.605424][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.620543][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.627613][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.655759][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.703191][ T1052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.735309][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.743461][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.751682][ T5636] bridge_slave_0: entered allmulticast mode [ 150.761854][ T5636] bridge_slave_0: entered promiscuous mode [ 150.822539][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.831341][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.838613][ T5636] bridge_slave_1: entered allmulticast mode [ 150.846298][ T5636] bridge_slave_1: entered promiscuous mode [ 150.869300][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.870051][ T1052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.119499][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 151.140167][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.158220][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.170070][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.194864][ T25] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.216488][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.237765][ T25] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 151.268303][ T25] usb 2-1: language id specifier not provided by device, defaulting to English [ 151.304744][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.335495][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.365562][ T25] usb 2-1: Product: syz [ 151.386613][ T25] usb 2-1: SerialNumber: syz [ 151.413954][ T1052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.447922][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.497002][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.005739][ T5630] hsr_slave_0: entered promiscuous mode [ 152.020534][ T5630] hsr_slave_1: entered promiscuous mode [ 152.037250][ T5630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.046895][ T5630] Cannot create hsr debugfs directory [ 152.184048][ T5636] team0: Port device team_slave_0 added [ 152.237363][ T25] cdc_ncm 2-1:1.0: bind() failure [ 152.255534][ T25] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 152.266290][ T25] cdc_ncm 2-1:1.1: bind() failure [ 152.276927][ T5636] team0: Port device team_slave_1 added [ 152.291869][ T25] usb 2-1: USB disconnect, device number 4 [ 154.013012][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.038912][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.136780][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.179179][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.209709][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.245860][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.387443][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 155.649216][ T5636] hsr_slave_0: entered promiscuous mode [ 155.680647][ T5636] hsr_slave_1: entered promiscuous mode [ 155.701857][ T5636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.711378][ T5636] Cannot create hsr debugfs directory [ 156.012011][ T1052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.169743][ T1052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.279918][ T1052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.601151][ T1052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.343535][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.381796][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.441112][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.487144][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.739070][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 157.739089][ T29] audit: type=1400 audit(1722719192.648:202): avc: denied { getopt } for pid=5781 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.816246][ T1052] bridge_slave_1: left allmulticast mode [ 157.829065][ T1052] bridge_slave_1: left promiscuous mode [ 157.836871][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.872977][ T1052] bridge_slave_0: left allmulticast mode [ 157.896255][ T1052] bridge_slave_0: left promiscuous mode [ 157.903250][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.924578][ T1052] bridge_slave_1: left allmulticast mode [ 157.937922][ T1052] bridge_slave_1: left promiscuous mode [ 157.944898][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.969210][ T1052] bridge_slave_0: left allmulticast mode [ 157.979070][ T1052] bridge_slave_0: left promiscuous mode [ 157.984899][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.091483][ T5308] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.314612][ T5308] usb 2-1: Using ep0 maxpacket: 8 [ 158.331067][ T5308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.360788][ T5308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.415720][ T5308] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.436691][ T5308] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.469406][ T5308] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.500646][ T5308] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 158.611858][ T5308] usb 2-1: language id specifier not provided by device, defaulting to English [ 158.632757][ T5308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.678820][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.720177][ T5308] usb 2-1: Product: syz [ 158.724402][ T5308] usb 2-1: SerialNumber: syz [ 159.131464][ T5308] cdc_ncm 2-1:1.0: bind() failure [ 159.329764][ T5308] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 159.378625][ T5308] cdc_ncm 2-1:1.1: bind() failure [ 159.454856][ T5308] usb 2-1: USB disconnect, device number 5 [ 160.577072][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.606111][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.670666][ T1052] bond0 (unregistering): Released all slaves [ 161.058281][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.095777][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.139286][ T1052] bond0 (unregistering): Released all slaves [ 161.147699][ T29] audit: type=1400 audit(1722719196.058:203): avc: denied { read } for pid=5820 comm="syz.1.112" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.185970][ T29] audit: type=1400 audit(1722719196.058:204): avc: denied { open } for pid=5820 comm="syz.1.112" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.209064][ T29] audit: type=1400 audit(1722719196.108:205): avc: denied { mount } for pid=5820 comm="syz.1.112" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.233010][ T29] audit: type=1400 audit(1722719196.128:206): avc: denied { mounton } for pid=5820 comm="syz.1.112" path="/30/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.024093][ T29] audit: type=1400 audit(1722719196.938:207): avc: denied { unmount } for pid=5231 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.329689][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.183313][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.278148][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.285413][ T5309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.304163][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.311500][ T5309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.377275][ T5593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.387856][ T5593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.611596][ T29] audit: type=1400 audit(1722719198.518:208): avc: denied { sys_module } for pid=5593 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.817845][ T5841] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 163.831858][ T5841] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 163.841102][ T5841] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 165.419629][ T1052] hsr_slave_0: left promiscuous mode [ 165.457485][ T1052] hsr_slave_1: left promiscuous mode [ 165.495193][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.502891][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.539929][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.562974][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.638025][ T1052] hsr_slave_0: left promiscuous mode [ 165.646194][ T1052] hsr_slave_1: left promiscuous mode [ 165.655293][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.663222][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.675698][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.683779][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.832189][ T1052] veth1_macvtap: left promiscuous mode [ 165.837972][ T1052] veth0_macvtap: left promiscuous mode [ 165.846603][ T1052] veth1_vlan: left promiscuous mode [ 165.852452][ T1052] veth0_vlan: left promiscuous mode [ 165.864282][ T1052] veth1_macvtap: left promiscuous mode [ 165.870031][ T1052] veth0_macvtap: left promiscuous mode [ 165.875882][ T1052] veth1_vlan: left promiscuous mode [ 165.882255][ T1052] veth0_vlan: left promiscuous mode [ 168.631929][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 168.706708][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 170.668628][ T5887] kexec: Could not allocate control_code_buffer [ 171.665014][ T5895] syz.1.131: attempt to access beyond end of device [ 171.665014][ T5895] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 171.679703][ T29] audit: type=1400 audit(1722719206.578:209): avc: denied { mounton } for pid=5893 comm="syz.1.131" path="/38/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 171.723831][ T29] audit: type=1400 audit(1722719206.618:210): avc: denied { read append } for pid=5893 comm="syz.1.131" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.724669][ T5895] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 171.757554][ T29] audit: type=1400 audit(1722719206.618:211): avc: denied { open } for pid=5893 comm="syz.1.131" path="/38/bus" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.839075][ T29] audit: type=1400 audit(1722719206.668:212): avc: denied { name_bind } for pid=5893 comm="syz.1.131" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 171.910675][ T29] audit: type=1400 audit(1722719206.668:213): avc: denied { node_bind } for pid=5893 comm="syz.1.131" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 172.083879][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 172.139898][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 172.492798][ T29] audit: type=1400 audit(1722719207.398:214): avc: denied { unmount } for pid=5231 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.157716][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.232165][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.310052][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.332306][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.377209][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.499068][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 173.748799][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 173.793223][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.838925][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.886361][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.952471][ T46] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 173.994015][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.038915][ T46] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 174.069795][ T46] usb 3-1: language id specifier not provided by device, defaulting to English [ 174.110081][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.142627][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.166671][ T46] usb 3-1: Product: syz [ 174.176681][ T46] usb 3-1: SerialNumber: syz [ 175.190559][ T5930] kexec: Could not allocate control_code_buffer [ 175.220707][ T5593] veth0_vlan: entered promiscuous mode [ 175.246009][ T46] cdc_ncm 3-1:1.0: bind() failure [ 175.313294][ T46] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 175.339883][ T46] cdc_ncm 3-1:1.1: bind() failure [ 175.368323][ T5593] veth1_vlan: entered promiscuous mode [ 175.400071][ T46] usb 3-1: USB disconnect, device number 2 [ 175.758389][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.962576][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.314246][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.405541][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.552009][ T5941] syz.2.140: attempt to access beyond end of device [ 176.552009][ T5941] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 176.589558][ T5593] veth0_macvtap: entered promiscuous mode [ 176.603143][ T5941] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 176.616641][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.730611][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.761068][ T5593] veth1_macvtap: entered promiscuous mode [ 176.853715][ T1853] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.860997][ T1853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.937440][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.187788][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.333811][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.494861][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.550811][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.602494][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.677749][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.748944][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.781387][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.797011][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.813687][ T1853] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.820947][ T1853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.920395][ T5593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.953062][ T5593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.982177][ T5593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.011833][ T5593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.979915][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.030221][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.103900][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.508657][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.578196][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.587802][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.686531][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.693709][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.756918][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.764118][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.371981][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.487772][ T29] audit: type=1400 audit(1722719215.398:215): avc: denied { unmount } for pid=6002 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 181.773976][ T6027] kexec: Could not allocate control_code_buffer [ 181.900188][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.120288][ T6034] syz.2.149: attempt to access beyond end of device [ 182.120288][ T6034] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 182.179075][ T5309] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.197074][ T6034] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 182.227225][ T5636] veth0_vlan: entered promiscuous mode [ 182.352998][ T5636] veth1_vlan: entered promiscuous mode [ 182.402161][ T5630] veth0_vlan: entered promiscuous mode [ 182.412096][ T5309] usb 2-1: Using ep0 maxpacket: 8 [ 182.430450][ T5309] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.445940][ T5630] veth1_vlan: entered promiscuous mode [ 182.452644][ T5309] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.474001][ T5309] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.498203][ T5309] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 182.513540][ T5636] veth0_macvtap: entered promiscuous mode [ 182.520056][ T5309] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.538241][ T5636] veth1_macvtap: entered promiscuous mode [ 182.547335][ T5309] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 182.573625][ T5309] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.610384][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.619826][ T5261] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.637367][ T5630] veth0_macvtap: entered promiscuous mode [ 182.647717][ T5309] usb 2-1: Product: syz [ 182.652141][ T5309] usb 2-1: Manufacturer: syz [ 182.661058][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.675653][ T5309] usb 2-1: SerialNumber: syz [ 182.684120][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.699466][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.710400][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.729192][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.747403][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.769320][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.782514][ T5630] veth1_macvtap: entered promiscuous mode [ 182.826798][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.837866][ T5261] usb 4-1: Using ep0 maxpacket: 32 [ 182.848519][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.859474][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.870910][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.881970][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.892933][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 182.924969][ T5309] cdc_ncm 2-1:1.0: bind() failure [ 182.931814][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.941840][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 182.960093][ T5309] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 182.971033][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.988605][ T5309] cdc_ncm 2-1:1.1: bind() failure [ 182.999045][ T5261] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.008131][ T5261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.047748][ T5309] usb 2-1: USB disconnect, device number 6 [ 183.061599][ T5636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.077290][ T5636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.088161][ T5261] usb 4-1: config 0 descriptor?? [ 183.108214][ T5636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.111870][ T6038] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 183.126795][ T5636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.144557][ T5261] hub 4-1:0.0: USB hub found [ 183.165766][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.198912][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.218807][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.239974][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.257613][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.278334][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.298848][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.318482][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.335212][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.427574][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.447991][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.462969][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.483149][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.498917][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.515813][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.535996][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.573420][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.590018][ T5261] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 183.613441][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.691150][ T5630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.712635][ T5630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.723880][ T5630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.740132][ T5630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.834092][ T5261] usbhid 4-1:0.0: can't add hid device: -32 [ 183.850631][ T5261] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 183.962018][ T5261] usb 4-1: USB disconnect, device number 3 [ 184.172732][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.195978][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.283590][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.318157][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.457602][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.473687][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.729506][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.917824][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.495767][ T29] audit: type=1400 audit(1722719221.408:216): avc: denied { bind } for pid=6089 comm="syz.0.157" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.863416][ T29] audit: type=1400 audit(1722719221.438:217): avc: denied { node_bind } for pid=6089 comm="syz.0.157" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 187.663393][ T6103] kexec: Could not allocate control_code_buffer [ 187.982536][ T6108] syz.1.159: attempt to access beyond end of device [ 187.982536][ T6108] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 188.022065][ T6108] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 188.122469][ T6112] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 188.768977][ T1853] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.978811][ T1853] usb 5-1: Using ep0 maxpacket: 8 [ 189.025323][ T1853] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.057676][ T1853] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.086236][ T1853] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.112584][ T1853] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 189.136430][ T1853] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.173460][ T1853] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 189.228069][ T1853] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.257804][ T1853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.286431][ T1853] usb 5-1: Product: syz [ 189.304569][ T1853] usb 5-1: Manufacturer: syz [ 189.315685][ T1853] usb 5-1: SerialNumber: syz [ 189.373988][ T29] audit: type=1400 audit(1722719224.288:218): avc: denied { ioctl } for pid=6140 comm="syz.0.165" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 189.380710][ T6141] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 189.595052][ T1853] cdc_ncm 5-1:1.0: bind() failure [ 189.657163][ T1853] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 189.693086][ T1853] cdc_ncm 5-1:1.1: bind() failure [ 189.742376][ T1853] usb 5-1: USB disconnect, device number 3 [ 192.133424][ T29] audit: type=1400 audit(1722719226.848:219): avc: denied { create } for pid=6165 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.682170][ T29] audit: type=1400 audit(1722719227.008:220): avc: denied { create } for pid=6165 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.850230][ T6179] syz.1.173: attempt to access beyond end of device [ 192.850230][ T6179] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 192.878948][ T29] audit: type=1400 audit(1722719227.038:221): avc: denied { write } for pid=6165 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.020369][ T6179] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 193.096109][ T29] audit: type=1400 audit(1722719228.008:222): avc: denied { mounton } for pid=6169 comm="syz.1.173" path="/50/bus" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.595062][ T6182] kexec: Could not allocate control_code_buffer [ 194.070114][ T5226] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 194.889385][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.905273][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.526890][ T5279] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.851344][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 196.859334][ T5279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.872241][ T5279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.664711][ T5279] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.676181][ T5279] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.686411][ T5279] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.699436][ T5279] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 197.712900][ T5279] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.750063][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.781422][ T5279] usb 2-1: Product: syz [ 197.793922][ T5279] usb 2-1: Manufacturer: syz [ 197.816787][ T5279] usb 2-1: SerialNumber: syz [ 198.070824][ T5279] cdc_ncm 2-1:1.0: bind() failure [ 198.196494][ T5279] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 198.893560][ T6235] kexec: Could not allocate control_code_buffer [ 198.906188][ T5279] cdc_ncm 2-1:1.1: bind() failure [ 198.976742][ T5279] usb 2-1: USB disconnect, device number 7 [ 199.052294][ T6239] syz.2.189: attempt to access beyond end of device [ 199.052294][ T6239] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 199.072354][ T6239] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 202.152794][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 202.159022][ T4608] Bluetooth: hci3: command 0x0406 tx timeout [ 202.353288][ T29] audit: type=1400 audit(1722719237.268:223): avc: denied { create } for pid=6260 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.448900][ T29] audit: type=1400 audit(1722719237.268:224): avc: denied { read } for pid=6260 comm="syz.4.197" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.475752][ T29] audit: type=1400 audit(1722719237.268:225): avc: denied { open } for pid=6260 comm="syz.4.197" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.520732][ T5229] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 202.774593][ T29] audit: type=1400 audit(1722719237.688:226): avc: denied { ioctl } for pid=6260 comm="syz.4.197" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.636357][ T6287] kexec: Could not allocate control_code_buffer [ 203.815547][ T6279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.200'. [ 204.018887][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 204.238836][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 204.257830][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.286536][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.341323][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.352596][ T46] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 204.362951][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.373252][ T46] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 204.404649][ T46] usb 1-1: string descriptor 0 read error: -22 [ 204.411406][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.430819][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.433937][ T5277] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.662546][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 204.670042][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.690748][ T46] cdc_ncm 1-1:1.0: bind() failure [ 204.704015][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.717025][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 204.735994][ T5277] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 204.750654][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.758446][ T46] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 204.795696][ T5277] usb 5-1: config 0 descriptor?? [ 204.799028][ T46] cdc_ncm 1-1:1.1: bind() failure [ 204.889256][ T46] usb 1-1: USB disconnect, device number 2 [ 205.457505][ T5277] itetech 0003:048D:8595.0001: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 206.791299][ T5279] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 209.480099][ T6335] kexec: Could not allocate control_code_buffer [ 210.248929][ T5276] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.248816][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 211.256399][ T5276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.278234][ T5276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.297766][ T5276] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.317838][ T5276] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.348287][ T5276] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.386615][ T5276] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 211.404969][ T5276] usb 2-1: string descriptor 0 read error: -22 [ 211.418987][ T5276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.435348][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.492380][ T5275] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.149673][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 212.318231][ T29] audit: type=1400 audit(1722719246.488:227): avc: denied { block_suspend } for pid=6360 comm="syz.3.223" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.438163][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.438660][ T29] audit: type=1400 audit(1722719246.618:228): avc: denied { append } for pid=6360 comm="syz.3.223" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.462394][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.483197][ T5275] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 212.493891][ T5279] usb 5-1: device descriptor read/64, error -32 [ 212.502400][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.512871][ T29] audit: type=1400 audit(1722719246.638:229): avc: denied { connect } for pid=6360 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.534943][ T5276] cdc_ncm 2-1:1.0: bind() failure [ 212.567460][ T5276] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 212.575990][ T5275] usb 1-1: config 0 descriptor?? [ 212.618986][ T5276] cdc_ncm 2-1:1.1: bind() failure [ 212.646629][ T5275] hub 1-1:0.0: USB hub found [ 212.679427][ T5276] usb 2-1: USB disconnect, device number 8 [ 213.243741][ T5275] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 213.551949][ T5277] usb 5-1: USB disconnect, device number 4 [ 214.074871][ T5275] usbhid 1-1:0.0: can't add hid device: -32 [ 214.199419][ T5275] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 214.291143][ T5275] usb 1-1: USB disconnect, device number 3 [ 215.418809][ T6387] kexec: Could not allocate control_code_buffer [ 218.523765][ T5309] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.008843][ T5309] usb 1-1: Using ep0 maxpacket: 32 [ 219.019741][ T5309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 219.050985][ T5309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 219.081043][ T5309] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 219.106193][ T5309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.174778][ T5309] usb 1-1: config 0 descriptor?? [ 219.185950][ T6410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.198106][ T5309] hub 1-1:0.0: USB hub found [ 219.328923][ T5275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 219.531395][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 219.549004][ T5275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.590288][ T5275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.634604][ T5309] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 219.639589][ T5275] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.727430][ T5275] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.737363][ T5275] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 219.747078][ T5275] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 219.761792][ T5275] usb 5-1: string descriptor 0 read error: -22 [ 219.775596][ T5275] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.794990][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.150564][ T5275] cdc_ncm 5-1:1.0: bind() failure [ 220.165220][ T5275] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 220.175823][ T5275] cdc_ncm 5-1:1.1: bind() failure [ 220.190612][ T5309] usbhid 1-1:0.0: can't add hid device: -32 [ 220.196676][ T5309] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 220.248913][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.258922][ T5309] usb 1-1: USB disconnect, device number 4 [ 221.025644][ T6440] kexec: Could not allocate control_code_buffer [ 221.232877][ T5275] usb 5-1: USB disconnect, device number 5 [ 221.249474][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 223.439068][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.455948][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.474246][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.487522][ T46] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 223.513865][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.552074][ T46] usb 4-1: config 0 descriptor?? [ 223.566918][ T46] usb 4-1: can't set config #0, error -71 [ 223.619292][ T46] usb 4-1: USB disconnect, device number 4 [ 223.685736][ T6459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'. [ 224.374830][ T6477] ======================================================= [ 224.374830][ T6477] WARNING: The mand mount option has been deprecated and [ 224.374830][ T6477] and is ignored by this kernel. Remove the mand [ 224.374830][ T6477] option from the mount to silence this warning. [ 224.374830][ T6477] ======================================================= [ 224.423954][ T29] audit: type=1400 audit(1722719259.338:230): avc: denied { rename } for pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.464403][ T29] audit: type=1400 audit(1722719259.338:231): avc: denied { unlink } for pid=4652 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.544889][ T29] audit: type=1400 audit(1722719259.338:232): avc: denied { create } for pid=4652 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.570400][ T29] audit: type=1400 audit(1722719259.378:233): avc: denied { mount } for pid=6476 comm="syz.3.255" name="/" dev="hugetlbfs" ino=13073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 224.772536][ T29] audit: type=1400 audit(1722719259.688:234): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 225.769187][ T6490] kexec: Could not allocate control_code_buffer [ 226.750279][ T29] audit: type=1400 audit(1722719261.668:235): avc: denied { shutdown } for pid=6484 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.400265][ T6502] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 227.414990][ T6502] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 227.424141][ T6502] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 227.586192][ T1074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.724463][ T1074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.887226][ T1074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.029205][ T5276] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 228.181959][ T1074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.260036][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 228.273237][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 228.309180][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 228.355745][ T5276] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 228.394858][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.404172][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.439010][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.456730][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.466772][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.474945][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.499959][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.552053][ T5276] usb 2-1: config 0 descriptor?? [ 228.562447][ T6506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.572615][ T5276] hub 2-1:0.0: USB hub found [ 228.589352][ T1074] bridge_slave_1: left allmulticast mode [ 228.635255][ T1074] bridge_slave_1: left promiscuous mode [ 228.657010][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.704793][ T1074] bridge_slave_0: left allmulticast mode [ 228.724360][ T1074] bridge_slave_0: left promiscuous mode [ 228.736504][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.987159][ T5276] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 229.071258][ T29] audit: type=1400 audit(1722719263.988:236): avc: denied { create } for pid=6522 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.165551][ T29] audit: type=1400 audit(1722719264.028:237): avc: denied { connect } for pid=6522 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.227000][ T5276] usbhid 2-1:0.0: can't add hid device: -32 [ 229.247252][ T5276] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 229.262768][ T29] audit: type=1400 audit(1722719264.038:238): avc: denied { create } for pid=6522 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 229.299174][ T5276] usb 2-1: USB disconnect, device number 9 [ 229.348231][ T29] audit: type=1400 audit(1722719264.058:239): avc: denied { bind } for pid=6522 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.487976][ T6536] kexec: Could not allocate control_code_buffer [ 231.568056][ T5229] Bluetooth: hci0: command tx timeout [ 232.577161][ T5279] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 232.665844][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.850622][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 232.888029][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.998951][ T5279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.039236][ T1074] bond0 (unregistering): Released all slaves [ 233.048819][ T5279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.086412][ T5279] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.122265][ T5279] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 233.167675][ T5279] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.228621][ T5279] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 233.317987][ T5279] usb 2-1: language id specifier not provided by device, defaulting to English [ 233.538573][ T5279] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.589371][ T5229] Bluetooth: hci0: command tx timeout [ 233.618859][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.652627][ T6557] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 233.667059][ T6557] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 233.670289][ T5279] usb 2-1: Product: syz [ 233.676228][ T6557] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 233.697536][ T5279] usb 2-1: SerialNumber: syz [ 233.928676][ T5279] cdc_ncm 2-1:1.0: bind() failure [ 233.957303][ T5279] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 233.977599][ T5279] cdc_ncm 2-1:1.1: bind() failure [ 234.003242][ T5279] usb 2-1: USB disconnect, device number 10 [ 234.263973][ T6568] 9pnet_fd: p9_fd_create_tcp (6568): problem connecting socket to 127.0.0.1 [ 235.668950][ T5226] Bluetooth: hci0: command tx timeout [ 235.744484][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 235.800302][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 235.863881][ T6587] vlan0: entered promiscuous mode [ 236.128871][ T1074] hsr_slave_0: left promiscuous mode [ 236.183668][ T6596] Zero length message leads to an empty skb [ 236.189834][ T1074] hsr_slave_1: left promiscuous mode [ 236.229085][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.246053][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.257605][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.276704][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.344602][ T1074] veth1_macvtap: left promiscuous mode [ 236.373319][ T1074] veth0_macvtap: left promiscuous mode [ 236.413211][ T1074] veth1_vlan: left promiscuous mode [ 236.480576][ T1074] veth0_vlan: left promiscuous mode [ 237.811639][ T5226] Bluetooth: hci0: command tx timeout [ 238.685884][ T6617] 9pnet_fd: p9_fd_create_tcp (6617): problem connecting socket to 127.0.0.1 [ 239.082892][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 239.134533][ T29] audit: type=1400 audit(1722719274.048:240): avc: denied { setopt } for pid=6619 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.170993][ T29] audit: type=1400 audit(1722719274.078:241): avc: denied { read } for pid=6619 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.219697][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 240.023239][ T6625] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 240.037179][ T6625] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 240.046473][ T6625] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 240.283183][ T6514] chnl_net:caif_netlink_parms(): no params data found [ 240.386832][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.424951][ T6595] team0: Port device bond0 added [ 241.752326][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.779014][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.803282][ T6514] bridge_slave_0: entered allmulticast mode [ 241.839860][ T6514] bridge_slave_0: entered promiscuous mode [ 241.872466][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.292'. [ 241.898854][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'. [ 241.918220][ T6632] vlan0: entered promiscuous mode [ 242.009715][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.016834][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.065009][ T6514] bridge_slave_1: entered allmulticast mode [ 242.096304][ T6514] bridge_slave_1: entered promiscuous mode [ 242.501997][ T6653] netlink: 'syz.2.294': attribute type 3 has an invalid length. [ 242.509828][ T6653] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.294'. [ 243.324117][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.414684][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.710948][ T6514] team0: Port device team_slave_0 added [ 243.750826][ T6514] team0: Port device team_slave_1 added [ 244.005838][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.043919][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.116742][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.149115][ T5309] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 244.165066][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.185305][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.266706][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.368932][ T5309] usb 2-1: Using ep0 maxpacket: 16 [ 244.409000][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.436670][ T5309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.488939][ T5309] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.514392][ T5309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.545890][ T5309] usb 2-1: config 0 descriptor?? [ 244.885650][ T6514] hsr_slave_0: entered promiscuous mode [ 244.900299][ T6514] hsr_slave_1: entered promiscuous mode [ 245.043193][ T5309] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 245.087317][ T5309] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 245.123272][ T5309] microsoft 0003:045E:07DA.0002: no inputs found [ 245.169347][ T5309] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 245.477049][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.516663][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.735827][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.770832][ T6685] team0: Port device bond0 added [ 245.860684][ T5277] usb 2-1: USB disconnect, device number 11 [ 252.320965][ T5226] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 252.639542][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.304'. [ 252.666937][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.304'. [ 253.362335][ T6514] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.415706][ T6514] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.447426][ T6514] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.463058][ T6514] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.937158][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.095153][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.138369][ T1853] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.145673][ T1853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.186407][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.193700][ T5309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.612838][ T29] audit: type=1400 audit(1722719289.528:242): avc: denied { create } for pid=6752 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.689245][ T29] audit: type=1400 audit(1722719289.528:243): avc: denied { ioctl } for pid=6752 comm="syz.4.310" path="socket:[14751]" dev="sockfs" ino=14751 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.785071][ T29] audit: type=1400 audit(1722719289.608:244): avc: denied { name_bind } for pid=6752 comm="syz.4.310" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 254.785296][ T6756] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 254.832120][ T6760] 9pnet_fd: p9_fd_create_tcp (6760): problem connecting socket to 127.0.0.1 [ 254.880686][ T6756] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.310'. [ 254.902979][ T29] audit: type=1400 audit(1722719289.638:245): avc: denied { create } for pid=6752 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 254.929179][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.995275][ T29] audit: type=1400 audit(1722719289.638:246): avc: denied { write } for pid=6752 comm="syz.4.310" path="socket:[14754]" dev="sockfs" ino=14754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 255.094407][ T29] audit: type=1400 audit(1722719289.648:247): avc: denied { nlmsg_write } for pid=6752 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 255.210283][ T29] audit: type=1400 audit(1722719289.668:248): avc: denied { create } for pid=6752 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.352038][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.655612][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.793643][ T6514] veth0_vlan: entered promiscuous mode [ 256.029737][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.198432][ T6514] veth1_vlan: entered promiscuous mode [ 256.320562][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.327024][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.526463][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.765892][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 256.783454][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 256.807073][ T6775] vlan0: entered promiscuous mode [ 257.386461][ T6514] veth0_macvtap: entered promiscuous mode [ 257.624996][ T6514] veth1_macvtap: entered promiscuous mode [ 257.807708][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.852370][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.866374][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.879408][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.880222][ T5229] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 257.890065][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.907633][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.917645][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.928594][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.943338][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.985563][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.000751][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.012511][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.022092][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.036695][ T61] bridge_slave_1: left allmulticast mode [ 258.049254][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.056837][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.084346][ T61] bridge_slave_1: left promiscuous mode [ 258.127214][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.170882][ T61] bridge_slave_0: left allmulticast mode [ 258.196082][ T61] bridge_slave_0: left promiscuous mode [ 258.231666][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.746594][ T6814] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 258.754509][ T6814] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.321'. [ 260.229095][ T5229] Bluetooth: hci1: command tx timeout [ 261.486339][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.513618][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.532474][ T61] bond0 (unregistering): Released all slaves [ 261.596864][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.645412][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.672268][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.688523][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.707769][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.728421][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.745390][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.768831][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.786586][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.847776][ T6514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.873205][ T6514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.888552][ T6514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.897675][ T6514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.109793][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.117659][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.211580][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.229461][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.313560][ T5226] Bluetooth: hci1: command tx timeout [ 263.512722][ T5226] Bluetooth: hci4: command 0x0406 tx timeout [ 264.388903][ T5229] Bluetooth: hci1: command tx timeout [ 266.469389][ T5229] Bluetooth: hci1: command tx timeout [ 269.284042][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 282.291128][ T61] hsr_slave_0: left promiscuous mode [ 286.302370][ T61] hsr_slave_1: left promiscuous mode [ 290.280032][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.298994][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.306133][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.291465][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.304617][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.281258][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.294242][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.303194][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.272224][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.282691][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.285891][ T61] veth1_macvtap: left promiscuous mode [ 308.290753][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.297006][ T61] veth0_macvtap: left promiscuous mode [ 309.282610][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.291063][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.302188][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.291065][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 311.289190][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.299065][ T61] veth1_vlan: left promiscuous mode [ 313.285606][ T5229] Bluetooth: hci2: command tx timeout [ 316.291368][ T5229] Bluetooth: hci2: command tx timeout [ 316.297122][ T61] veth0_vlan: left promiscuous mode [ 317.289723][ T5226] Bluetooth: hci5: command tx timeout [ 318.289667][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.296033][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.278909][ T5229] Bluetooth: hci2: command tx timeout [ 322.276238][ T5226] Bluetooth: hci2: command tx timeout [ 324.280264][ T5226] Bluetooth: hci5: command tx timeout [ 325.300275][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.270946][ T5229] Bluetooth: hci5: command tx timeout [ 327.276826][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.286833][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.297012][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 328.292184][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 328.302867][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 329.349056][ T5229] Bluetooth: hci5: command tx timeout [ 333.270080][ T5229] Bluetooth: hci7: command tx timeout [ 336.279005][ T5229] Bluetooth: hci7: command tx timeout [ 339.278870][ T5226] Bluetooth: hci7: command tx timeout [ 342.281643][ T5226] Bluetooth: hci7: command tx timeout [ 362.272384][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.286123][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.278854][ T5226] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 365.278991][ T5229] Bluetooth: hci0: command 0x1001 tx timeout [ 365.299877][ T6899] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 379.279649][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.286008][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.300609][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.283741][ T5226] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 381.295536][ T5226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.305654][ T5226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.290446][ T5226] Bluetooth: hci1: command 0x0406 tx timeout [ 382.297565][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.307037][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.278979][ T4608] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 383.286213][ T6904] Bluetooth: hci6: Opcode 0x0c23 failed: -4 [ 386.277852][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 386.301217][ T4608] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 388.287221][ T6903] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 390.288493][ T5230] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 391.271471][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 393.296166][ T6909] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 401.269096][ T5229] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 401.277570][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 404.289712][ T6913] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 412.307367][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.292965][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.302345][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.311888][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.321434][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.329905][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.278950][ T5230] Bluetooth: hci0: command tx timeout [ 418.358901][ T5230] Bluetooth: hci0: command tx timeout [ 421.286024][ T5230] Bluetooth: hci0: command tx timeout [ 424.283169][ T5230] Bluetooth: hci0: command tx timeout [ 424.559820][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.578234][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.587113][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.596510][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.609095][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 424.617160][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.459337][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 426.479505][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 426.495800][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.504472][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 426.513114][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 426.521013][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.554592][ T30] INFO: task kworker/u8:7:1065 blocked for more than 146 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 426.610692][ T30] Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 426.694803][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.709728][ T5229] Bluetooth: hci3: command tx timeout [ 426.717510][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 426.728240][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 426.737055][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 426.778865][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 426.787064][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 426.795189][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 426.826566][ T30] task:kworker/u8:7 state:D stack:23184 pid:1065 tgid:1065 ppid:2 flags:0x00004000 [ 426.938841][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 426.944933][ T30] Call Trace: [ 426.948231][ T30] [ 427.038765][ T30] __schedule+0xe37/0x5490 [ 427.043281][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 427.048628][ T30] ? __pfx___schedule+0x10/0x10 [ 427.138841][ T30] ? schedule+0x298/0x350 [ 427.143245][ T30] ? __pfx_lock_release+0x10/0x10 [ 427.148291][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 427.209055][ T30] ? __mutex_trylock_common+0x78/0x250 [ 427.214595][ T30] schedule+0xe7/0x350 [ 427.218700][ T30] schedule_preempt_disabled+0x13/0x30 [ 427.254578][ T30] __mutex_lock+0x5b8/0x9c0 [ 427.281566][ T30] ? addrconf_dad_work+0xcf/0x1500 [ 427.286748][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 427.291925][ T30] ? addrconf_dad_work+0xcf/0x1500 [ 427.297064][ T30] ? rtnl_lock+0x9/0x20 [ 427.301306][ T30] addrconf_dad_work+0xcf/0x1500 [ 427.306271][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 427.401526][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 427.407063][ T30] process_one_work+0x9c5/0x1b40 [ 427.464367][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 427.508770][ T30] ? __pfx_process_one_work+0x10/0x10 [ 427.514217][ T30] ? assign_work+0x1a0/0x250 [ 427.559037][ T30] worker_thread+0x6c8/0xf20 [ 427.563794][ T30] ? __pfx_worker_thread+0x10/0x10 [ 427.609027][ T30] kthread+0x2c1/0x3a0 [ 427.613158][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.618374][ T30] ? __pfx_kthread+0x10/0x10 [ 427.678759][ T30] ret_from_fork+0x45/0x80 [ 427.683254][ T30] ? __pfx_kthread+0x10/0x10 [ 427.726315][ T30] ret_from_fork_asm+0x1a/0x30 [ 427.754934][ T30] [ 427.769499][ T30] INFO: task syz.3.326:6858 blocked for more than 147 seconds. [ 427.777095][ T30] Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 427.868893][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.877622][ T30] task:syz.3.326 state:D stack:27488 pid:6858 tgid:6857 ppid:6514 flags:0x00004006 [ 427.964965][ T30] Call Trace: [ 427.968295][ T30] [ 428.000526][ T30] __schedule+0xe37/0x5490 [ 428.005026][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 428.038823][ T30] ? __lock_acquire+0xbdd/0x3cb0 [ 428.043832][ T30] ? __pfx___schedule+0x10/0x10 [ 428.048704][ T30] ? schedule+0x298/0x350 [ 428.088786][ T30] ? __pfx_lock_release+0x10/0x10 [ 428.093851][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 428.119078][ T30] ? __mutex_trylock_common+0x78/0x250 [ 428.124609][ T30] schedule+0xe7/0x350 [ 428.128707][ T30] schedule_preempt_disabled+0x13/0x30 [ 428.158758][ T30] __mutex_lock+0x5b8/0x9c0 [ 428.163311][ T30] ? tun_chr_close+0x3e/0x250 [ 428.168017][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 428.197226][ T30] ? locks_remove_file+0x399/0x5a0 [ 428.202960][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 428.208461][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 428.238754][ T30] ? tun_chr_close+0x3e/0x250 [ 428.243496][ T30] ? rtnl_lock+0x9/0x20 [ 428.247671][ T30] tun_chr_close+0x3e/0x250 [ 428.264430][ T30] __fput+0x408/0xbb0 [ 428.268488][ T30] task_work_run+0x14e/0x250 [ 428.290545][ T30] ? __pfx_task_work_run+0x10/0x10 [ 428.295946][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 428.303210][ T30] do_exit+0xaa3/0x2bb0 [ 428.390016][ T30] ? get_signal+0x8f2/0x2770 [ 428.394682][ T30] ? __pfx_do_exit+0x10/0x10 [ 428.409004][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 428.414098][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.427886][ T30] do_group_exit+0xd3/0x2a0 [ 428.432763][ T30] get_signal+0x25fd/0x2770 [ 428.437307][ T30] ? __pfx_lock_release+0x10/0x10 [ 428.448761][ T30] ? __pfx_get_signal+0x10/0x10 [ 428.453669][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 428.464887][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 428.477380][ T30] ? __x64_sys_preadv+0x1d3/0x310 [ 428.483026][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 428.488432][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 428.501809][ T30] do_syscall_64+0xda/0x250 [ 428.508047][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.519750][ T30] RIP: 0033:0x7f75339779f9 [ 428.524222][ T30] RSP: 002b:00007f7534756048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 428.544637][ T30] RAX: 0000000000000e00 RBX: 00007f7533b05f80 RCX: 00007f75339779f9 [ 428.554621][ T30] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 [ 428.567844][ T30] RBP: 00007f75339e58ee R08: 0000000000000000 R09: 0000000000000000 [ 428.577573][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.590867][ T30] R13: 000000000000000b R14: 00007f7533b05f80 R15: 00007ffcb108a858 [ 428.602948][ T30] [ 428.629852][ T5229] Bluetooth: hci6: command tx timeout [ 428.636129][ T30] [ 428.636129][ T30] Showing all locks held in the system: [ 428.658673][ T61] team0 (unregistering): Port device team_slave_1 removed [ 428.686169][ T30] 1 lock held by khungtaskd/30: [ 428.697538][ T30] #0: ffffffff8ddb53a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 428.733930][ T30] 5 locks held by kworker/u8:4/61: [ 428.745667][ T30] #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 428.759090][ T30] #1: ffffc900015c7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 428.777259][ T30] #2: ffffffff8fa0a550 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 428.787339][ T30] #3: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8c/0xae0 [ 428.797807][ T5229] Bluetooth: hci3: command tx timeout [ 428.810174][ T30] #4: ffffffff8ddc0b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 428.827150][ T30] 3 locks held by kworker/u8:7/1065: [ 428.834123][ T30] #0: ffff88802a544948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 428.852101][ T30] #1: ffffc90004137d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 428.866366][ T30] #2: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x1500 [ 428.876129][ T5229] Bluetooth: hci8: command tx timeout [ 428.891138][ T30] 3 locks held by kworker/1:2/1853: [ 428.896373][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 428.911236][ T30] #1: ffffc90004e1fd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 428.927966][ T30] #2: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 428.941333][ T30] 1 lock held by dhcpcd/4884: [ 428.946119][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x26e/0x1f10 [ 428.963383][ T30] 2 locks held by getty/4984: [ 428.968094][ T30] #0: ffff88802ad460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 428.980203][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 428.998301][ T30] 3 locks held by kworker/0:4/5275: [ 429.003866][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 429.018777][ T30] #1: ffffc9000325fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 429.038066][ T30] #2: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 429.047631][ T30] 3 locks held by kworker/0:7/5279: [ 429.061432][ T30] #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 429.073932][ T30] #1: ffffc900038afd80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 429.093034][ T30] #2: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x84/0x1140 [ 429.108365][ T30] 1 lock held by syz-executor/6514: [ 429.114072][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 429.131421][ T30] 1 lock held by syz.1.319/6794: [ 429.136407][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 429.151103][ T30] 2 locks held by syz-executor/6797: [ 429.156422][ T30] #0: ffffffff8fa0a550 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 429.174522][ T30] #1: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 429.186905][ T30] 1 lock held by syz.3.326/6858: [ 429.192372][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 429.210860][ T30] 1 lock held by syz.0.333/6879: [ 429.215827][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 429.226026][ T30] 1 lock held by syz-executor/6882: [ 429.240251][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 429.256148][ T30] 1 lock held by syz-executor/6883: [ 429.261768][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 429.277783][ T30] 1 lock held by syz-executor/6892: [ 429.283265][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 429.292876][ T30] 1 lock held by syz-executor/6916: [ 429.298093][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 429.307662][ T30] 1 lock held by syz-executor/6923: [ 429.317588][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 429.338008][ T30] 1 lock held by syz-executor/6928: [ 429.343614][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 429.360313][ T30] 1 lock held by syz-executor/6930: [ 429.365584][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 429.393867][ T30] [ 429.396243][ T30] ============================================= [ 429.396243][ T30] [ 429.422708][ T30] NMI backtrace for cpu 1 [ 429.427083][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 429.437604][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 429.447758][ T30] Call Trace: [ 429.451048][ T30] [ 429.453988][ T30] dump_stack_lvl+0x116/0x1f0 [ 429.458704][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 429.463683][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 429.469708][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 429.475723][ T30] watchdog+0xf4e/0x1280 [ 429.480023][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.484723][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.489942][ T30] ? __kthread_parkme+0x148/0x220 [ 429.495004][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.499705][ T30] kthread+0x2c1/0x3a0 [ 429.503789][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.509006][ T30] ? __pfx_kthread+0x10/0x10 [ 429.513613][ T30] ret_from_fork+0x45/0x80 [ 429.518067][ T30] ? __pfx_kthread+0x10/0x10 [ 429.522684][ T30] ret_from_fork_asm+0x1a/0x30 [ 429.527478][ T30] [ 429.532164][ T30] Sending NMI from CPU 1 to CPUs 0: [ 429.537425][ C0] NMI backtrace for cpu 0 [ 429.537438][ C0] CPU: 0 UID: 0 PID: 6818 Comm: syz.4.322 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 429.537463][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 429.537476][ C0] RIP: 0010:mark_lock+0x0/0xc60 [ 429.537504][ C0] Code: 34 eb 12 90 e8 71 8f 7f 00 e9 cb fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 41 57 41 56 41 89 d6 48 ba 00 00 00 00 00 fc ff df 41 [ 429.537523][ C0] RSP: 0018:ffffc900035bf978 EFLAGS: 00000002 [ 429.537540][ C0] RAX: 000000000000000c RBX: ffff888020970b2a RCX: 0000000000000003 [ 429.537554][ C0] RDX: 0000000000000008 RSI: ffff888020970b08 RDI: ffff888020970000 [ 429.537568][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000006 [ 429.537580][ C0] R10: ffffffff9462b7cf R11: 0000000000000000 R12: dffffc0000000000 [ 429.537594][ C0] R13: ffff888020970b08 R14: 0000000000000003 R15: ffff888020970000 [ 429.537607][ C0] FS: 00007f2777fcc6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 429.537629][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.537644][ C0] CR2: 00007fbf2d1e5df8 CR3: 0000000058370000 CR4: 00000000003506f0 [ 429.537657][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 429.537669][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 429.537682][ C0] Call Trace: [ 429.537690][ C0] [ 429.537696][ C0] ? show_regs+0x8c/0xa0 [ 429.537725][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 429.537749][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 429.537775][ C0] ? nmi_handle+0x1a9/0x5c0 [ 429.537794][ C0] ? __pfx_mark_lock+0x10/0x10 [ 429.537816][ C0] ? default_do_nmi+0x6a/0x160 [ 429.537843][ C0] ? exc_nmi+0x170/0x1e0 [ 429.537869][ C0] ? end_repeat_nmi+0xf/0x53 [ 429.537898][ C0] ? __pfx_mark_lock+0x10/0x10 [ 429.537920][ C0] ? __pfx_mark_lock+0x10/0x10 [ 429.537943][ C0] ? __pfx_mark_lock+0x10/0x10 [ 429.537964][ C0] [ 429.537970][ C0] [ 429.537977][ C0] __lock_acquire+0x906/0x3cb0 [ 429.538003][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 429.538027][ C0] lock_acquire+0x1b1/0x560 [ 429.538050][ C0] ? __wake_up+0x1c/0x60 [ 429.538072][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 429.538096][ C0] ? io_cq_unlock_post+0x9c/0x190 [ 429.538118][ C0] ? __pfx_lock_release+0x10/0x10 [ 429.538140][ C0] ? __mutex_lock+0x1a6/0x9c0 [ 429.538164][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 429.538184][ C0] ? __wake_up+0x1c/0x60 [ 429.538204][ C0] __wake_up+0x1c/0x60 [ 429.538226][ C0] io_cq_unlock_post+0xed/0x190 [ 429.538249][ C0] __io_cqring_overflow_flush+0x457/0x680 [ 429.538273][ C0] ? __pfx_io_run_task_work+0x10/0x10 [ 429.538299][ C0] io_cqring_wait+0x1111/0x1480 [ 429.538326][ C0] ? __pfx_io_cqring_wait+0x10/0x10 [ 429.538350][ C0] ? irqentry_exit+0x3b/0x90 [ 429.538371][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.538391][ C0] ? __pfx_io_wake_function+0x10/0x10 [ 429.538413][ C0] ? __do_sys_io_uring_enter+0x1d7/0x1130 [ 429.538445][ C0] __do_sys_io_uring_enter+0x410/0x1130 [ 429.538473][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 429.538494][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 429.538514][ C0] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 429.538541][ C0] ? xfd_validate_state+0x5d/0x180 [ 429.538572][ C0] do_syscall_64+0xcd/0x250 [ 429.538595][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.538622][ C0] RIP: 0033:0x7f27771779f9 [ 429.538639][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.538657][ C0] RSP: 002b:00007f2777fcc048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 429.538675][ C0] RAX: ffffffffffffffda RBX: 00007f2777306130 RCX: 00007f27771779f9 [ 429.538689][ C0] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000009 [ 429.538701][ C0] RBP: 00007f27771e58ee R08: 0000000000000000 R09: 0000000000000000 [ 429.538716][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 429.538728][ C0] R13: 000000000000006e R14: 00007f2777306130 R15: 00007fff3d549508 [ 429.538744][ C0] [ 430.005399][ T61] team0 (unregistering): Port device team_slave_0 removed [ 430.056344][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 430.063328][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 430.073847][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 430.083912][ T30] Call Trace: [ 430.087202][ T30] [ 430.090148][ T30] dump_stack_lvl+0x3d/0x1f0 [ 430.094772][ T30] panic+0x6f5/0x7a0 [ 430.098685][ T30] ? __pfx_panic+0x10/0x10 [ 430.103115][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 430.108500][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.114855][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 430.120242][ T30] ? watchdog+0xd8a/0x1280 [ 430.124691][ T30] ? watchdog+0xd7d/0x1280 [ 430.129130][ T30] watchdog+0xd9b/0x1280 [ 430.133397][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.138095][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.143314][ T30] ? __kthread_parkme+0x148/0x220 [ 430.148492][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.153198][ T30] kthread+0x2c1/0x3a0 [ 430.157280][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.162498][ T30] ? __pfx_kthread+0x10/0x10 [ 430.167099][ T30] ret_from_fork+0x45/0x80 [ 430.171543][ T30] ? __pfx_kthread+0x10/0x10 [ 430.176144][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.181023][ T30] [ 430.184268][ T30] Kernel Offset: disabled [ 430.188581][ T30] Rebooting in 86400 seconds..