last executing test programs: 24.447948216s ago: executing program 4 (id=1008): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 23.344246686s ago: executing program 4 (id=1014): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) 22.712625902s ago: executing program 4 (id=1015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000006c0)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x8, r3}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x30) 21.557751823s ago: executing program 4 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 21.350107215s ago: executing program 4 (id=1023): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x1) setrlimit(0x7, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079106900000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = dup(r1) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0xa, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfb}, 0x10}}, 0x4000004) 20.433457791s ago: executing program 4 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x222a06, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[], 0x20) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc0405519, &(0x7f0000000540)={{0x402, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x0, 0x70bd27, 0x25dfdbfe, {0x2, 0x60, 0x80, 0x40, 0xfd, 0x2, 0x0, 0x9, 0x2800}, [@RTA_NH_ID={0x8, 0x1e, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c800) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x56) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x44) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000280)={0x0, 0x2, "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"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80045510, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 16.549837342s ago: executing program 1 (id=1042): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) 16.396284486s ago: executing program 1 (id=1043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.513098817s ago: executing program 1 (id=1045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003"], 0xa0}}, 0x0) 15.391093881s ago: executing program 1 (id=1046): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_create(&(0x7f0000000140)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca\xc9\xf2/\x13{\x1a\x7f\x00\xea\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd\x00'/407, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c2000"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800006b1132000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/60}, 0x20) 11.877765692s ago: executing program 1 (id=1052): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0006000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000"]}, 0x110) 11.818086549s ago: executing program 2 (id=1054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}]}]}]}, 0x38}}, 0x0) 11.615752922s ago: executing program 1 (id=1055): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='timer_start\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) 11.288969857s ago: executing program 3 (id=1057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) syz_emit_ethernet(0x15e, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1b4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 11.148360374s ago: executing program 2 (id=1058): getsockopt$rose(0xffffffffffffffff, 0x104, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008000f000500000008000e"], 0x44}}, 0x0) 11.033287498s ago: executing program 3 (id=1059): pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0xa) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, r2, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c4038"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x4d, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) close(r6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r4}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="3b000200010001", 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000140)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) 10.793513612s ago: executing program 3 (id=1060): syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x10, 0x1, 0x8, 0x4, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x66, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100, {[@generic={0x88, 0x2}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 10.571823401s ago: executing program 2 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000780)=r7, 0x4) sendmsg$inet(r6, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x128}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.505738646s ago: executing program 3 (id=1062): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_create(&(0x7f0000000140)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca\xc9\xf2/\x13{\x1a\x7f\x00\xea\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd\x00'/407, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c2000"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800006b1132000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/60}, 0x20) 7.237349028s ago: executing program 3 (id=1067): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a0000020000000000000000000000764d2a8944cc4dbbc622556820c241e88e713fe1319651450862713e92e94ca6dc3b3d6d31fbe34fb734f2caf2ad09120400f6472db5984f3e00060f5720183e2aa955e02f7a2e92c892a3bc3489d8c3dc6000"/113], 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendfile(0xffffffffffffffff, r4, 0x0, 0x578410eb) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r7, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xe0, 0x12, 0x49, 0x20, 0xa5c, 0xbd17, 0x62ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xad, 0x7c, 0x1d}}]}}]}}, 0x0) 6.8343667s ago: executing program 2 (id=1068): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xd0}}, 0x0) 6.364456462s ago: executing program 0 (id=1070): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xd3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, {0x15, 0x3, 0x0, @rand_addr=0x64010100}}}}}, 0x0) 6.250247457s ago: executing program 2 (id=1071): r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x1, 0x0, 0x20000071) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00\x00\x00', @ANYRES32, @ANYBLOB="6827d8", @ANYRES64=0x0], 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r3, 0x0) accept$ax25(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_pts(0xffffffffffffffff, 0x440000) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0xa0044d03, &(0x7f0000000080)) accept$alg(r0, 0x0, 0x0) ioctl$VT_RELDISP(r4, 0x5605) 6.090505538s ago: executing program 0 (id=1072): getsockopt$rose(0xffffffffffffffff, 0x104, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008000f000500000008000e"], 0x44}}, 0x0) 5.829827053s ago: executing program 0 (id=1073): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) 5.501815574s ago: executing program 0 (id=1074): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) brk(0x20001002) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 5.313616894s ago: executing program 0 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) close(0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x6ac}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 4.973672766s ago: executing program 2 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000105000500008000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600004700000a0000000000000000000000000000000000ffffac1414aa0000000000000000eb433152d15769fdf45e99afd064d9f661d485a40a2a7afe97d87ec7eacb026eea4846aa3c0520a5a3e6f49484e9fd3446349c95d8eb5e983f0ec034f26481a16e67f748186ed4f1cdea00f061767f017873684d04fbd52601decb898e3650601c26e9dc918684bc0b5529b5d8909366678cb5423bac0e20a0c60889b852d45a7bd98e6eb2ab76694d6dd9fac347720dbec98a0090198bdd34baa479ab57c9a05d3a7cc63fcdf60d"], 0xa0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r6, @ANYBLOB="92"], 0x20}}, 0x0) 4.925635561s ago: executing program 0 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000780)=r7, 0x4) sendmsg$inet(r6, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x128}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 3 (id=1079): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="80008f000a0002"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): error: local softirq work is pending, handler #140!!! [ 151.511880][ T29] audit: type=1400 audit(1729143048.609:387): avc: denied { listen } for pid=6140 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.545330][ T29] audit: type=1400 audit(1729143048.609:388): avc: denied { accept } for pid=6140 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.612138][ T5270] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.783938][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.801110][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.821481][ T5270] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 151.843522][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.883110][ T5270] usb 3-1: config 0 descriptor?? [ 151.937969][ T29] audit: type=1400 audit(1729143049.029:389): avc: denied { create } for pid=6144 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.958696][ T6145] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54865 - 0 [ 151.981260][ T6145] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54865 - 0 [ 152.002706][ T29] audit: type=1400 audit(1729143049.029:390): avc: denied { setopt } for pid=6144 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.015020][ T6145] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54865 - 0 [ 152.052776][ T6145] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54865 - 0 [ 152.078770][ T6145] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 59017 - 0 [ 152.078836][ T29] audit: type=1400 audit(1729143049.029:391): avc: denied { getopt } for pid=6144 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.102330][ T6145] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 59017 - 0 [ 152.141183][ T6145] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 59017 - 0 [ 152.174712][ T6145] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 59017 - 0 [ 152.200727][ T6145] geneve2: entered promiscuous mode [ 152.221173][ T6145] geneve2: entered allmulticast mode [ 152.293860][ T5274] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.334874][ T5270] wacom 0003:056A:00F8.000A: unknown main item tag 0x0 [ 152.371290][ T5270] wacom 0003:056A:00F8.000A: unknown main item tag 0x0 [ 152.406331][ T5270] wacom 0003:056A:00F8.000A: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.2-1/input0 [ 152.429131][ T6149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 152.472541][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 152.486515][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 152.503487][ T5274] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 152.544092][ T5301] usb 3-1: USB disconnect, device number 8 [ 152.544299][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.598750][ T5274] usb 2-1: config 0 descriptor?? [ 152.703029][ T29] audit: type=1326 audit(1729143049.809:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3237dff9 code=0x7ffc0000 [ 152.817297][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.819201][ T29] audit: type=1326 audit(1729143049.839:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3237dff9 code=0x7ffc0000 [ 152.857274][ T29] audit: type=1326 audit(1729143049.859:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b3237dff9 code=0x7ffc0000 [ 152.880993][ T29] audit: type=1326 audit(1729143049.889:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3237dff9 code=0x7ffc0000 [ 152.904809][ T29] audit: type=1326 audit(1729143049.889:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3237dff9 code=0x7ffc0000 [ 152.958340][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.234864][ T5274] usbhid 2-1:0.0: can't add hid device: -71 [ 153.244880][ T5274] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 153.292115][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.300302][ T5274] usb 2-1: USB disconnect, device number 10 [ 153.544978][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.561960][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.581960][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.601490][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 153.611694][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.630150][ T9] usb 4-1: config 0 descriptor?? [ 154.053995][ T9] prodikeys 0003:041E:2801.000B: unknown main item tag 0x2 [ 154.082546][ T9] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 154.100162][ T9] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 154.121130][ T9] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 154.141351][ T9] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 154.198725][ T9] prodikeys 0003:041E:2801.000B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 154.879185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 154.887758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 154.900183][ T9] usb 4-1: USB disconnect, device number 10 [ 155.206616][ T6180] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 156.749672][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.410282][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 157.410301][ T29] audit: type=1400 audit(1729143054.509:400): avc: denied { open } for pid=6193 comm="syz.0.275" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 157.462063][ T29] audit: type=1400 audit(1729143054.509:401): avc: denied { ioctl } for pid=6193 comm="syz.0.275" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.077689][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.332268][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 158.368456][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 158.381364][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.397101][ T9] usb 5-1: Product: syz [ 158.401689][ T9] usb 5-1: Manufacturer: syz [ 158.429991][ T9] usb 5-1: SerialNumber: syz [ 158.467128][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 158.486084][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 159.289689][ T29] audit: type=1400 audit(1729143056.389:402): avc: denied { append } for pid=6208 comm="syz.1.280" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 159.379803][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 159.386341][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 159.409293][ T5273] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 161.524414][ T6226] binder: 6219:6226 ioctl c0306201 0 returned -14 [ 161.707135][ T6229] syzkaller0: entered allmulticast mode [ 161.760479][ T29] audit: type=1400 audit(1729143058.639:403): avc: denied { map } for pid=6219 comm="syz.1.283" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.752125][ T938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 162.915702][ T938] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 162.938306][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 162.951964][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 162.964137][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.978800][ T938] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.992259][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.034646][ T938] usb 4-1: config 0 descriptor?? [ 163.092405][ T6238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.131878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 163.162416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 163.590022][ T938] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 163.604214][ T938] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 163.677237][ T938] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 163.928271][ T938] usb 4-1: USB disconnect, device number 11 [ 166.555393][ T6262] SELinux: policydb string length 16 does not match expected length 8 [ 166.564105][ T6262] SELinux: failed to load policy [ 166.660114][ T29] audit: type=1400 audit(1729143063.659:404): avc: denied { load_policy } for pid=6259 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.358494][ T6236] netlink: 'syz.2.286': attribute type 3 has an invalid length. [ 167.370520][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.294'. [ 167.555688][ T6266] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 33960 - 0 [ 167.567075][ T6266] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 33960 - 0 [ 167.584615][ T6266] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 33960 - 0 [ 167.730124][ T6266] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 33960 - 0 [ 167.741974][ T938] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.823503][ T6266] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 55208 - 0 [ 167.895466][ T6266] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 55208 - 0 [ 168.042051][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 168.052065][ T6266] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 55208 - 0 [ 168.061228][ T6266] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 55208 - 0 [ 168.072585][ T6266] geneve2: entered promiscuous mode [ 168.078883][ T6266] geneve2: entered allmulticast mode [ 168.097348][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 168.312395][ T5301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.784747][ T5301] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 168.808418][ T938] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 168.817774][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.828168][ T938] usb 1-1: config 0 descriptor?? [ 168.845969][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.873016][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 168.890104][ T5301] usb 5-1: config 0 descriptor?? [ 169.106656][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.152908][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.180238][ T29] audit: type=1326 audit(1729143066.279:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.215455][ T29] audit: type=1326 audit(1729143066.279:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.238861][ T29] audit: type=1326 audit(1729143066.279:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.262472][ T29] audit: type=1326 audit(1729143066.319:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.291925][ T29] audit: type=1400 audit(1729143066.319:409): avc: denied { watch } for pid=6290 comm="syz.1.303" path="/63" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.318876][ T29] audit: type=1326 audit(1729143066.319:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.345684][ T29] audit: type=1326 audit(1729143066.319:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.370070][ T5301] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 169.388167][ T29] audit: type=1326 audit(1729143066.319:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.389993][ T938] usbhid 1-1:0.0: can't add hid device: -71 [ 169.412819][ T29] audit: type=1326 audit(1729143066.319:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1761d7dff9 code=0x7ffc0000 [ 169.442348][ T938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 169.458441][ T938] usb 1-1: USB disconnect, device number 7 [ 169.764881][ T5301] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 32: -71 [ 169.774666][ T5301] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense firmware info: -71 [ 169.840387][ T5301] playstation 0003:054C:0DF2.000D: Failed to get firmware info from DualSense [ 169.852307][ T5301] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 169.868774][ T5301] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -71 [ 169.897868][ T5301] usb 5-1: USB disconnect, device number 10 [ 171.236554][ T6309] syzkaller0: entered allmulticast mode [ 171.344867][ T6307] netlink: 52 bytes leftover after parsing attributes in process `syz.2.308'. [ 172.516781][ T6319] netlink: 100 bytes leftover after parsing attributes in process `syz.4.312'. [ 172.551998][ T5230] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.712027][ T5230] usb 3-1: Using ep0 maxpacket: 32 [ 172.732727][ T5230] usb 3-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 172.747628][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.777087][ T5230] usb 3-1: Product: syz [ 172.789342][ T5230] usb 3-1: Manufacturer: syz [ 172.802338][ T5230] usb 3-1: SerialNumber: syz [ 172.830902][ T5230] usb 3-1: config 0 descriptor?? [ 173.056836][ T938] usb 3-1: USB disconnect, device number 9 [ 174.602904][ T5274] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.778081][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.796800][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.818863][ T5274] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.842141][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.953916][ T6335] binder: 6332:6335 ioctl c0306201 20000580 returned -14 [ 175.497191][ T5274] usb 5-1: config 0 descriptor?? [ 175.882101][ T6339] ptrace attach of "./syz-executor exec"[6341] was attempted by "./syz-executor exec"[6339] [ 176.438585][ T5274] usbhid 5-1:0.0: can't add hid device: -71 [ 176.447351][ T5274] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.459672][ T5274] usb 5-1: USB disconnect, device number 11 [ 178.029967][ T6320] netlink: 'syz.3.309': attribute type 3 has an invalid length. [ 178.418886][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 178.418907][ T29] audit: type=1400 audit(1729143075.509:420): avc: denied { setcheckreqprot } for pid=6356 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 178.854287][ T5230] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.033525][ T6370] netlink: 52 bytes leftover after parsing attributes in process `syz.1.326'. [ 180.377480][ T5230] usb 3-1: Using ep0 maxpacket: 16 [ 181.143616][ T5230] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 181.158441][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.169020][ T5230] usb 3-1: Product: syz [ 181.319837][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 181.327188][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 181.343438][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 181.353127][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 181.359872][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 181.767454][ T5274] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.782856][ T5230] usb 3-1: Manufacturer: syz [ 181.787590][ T5230] usb 3-1: SerialNumber: syz [ 181.838541][ T5230] usb 3-1: config 0 descriptor?? [ 181.848051][ T5230] usb 3-1: can't set config #0, error -71 [ 181.857122][ T5230] usb 3-1: USB disconnect, device number 10 [ 181.870861][ T6381] netlink: 100 bytes leftover after parsing attributes in process `syz.2.330'. [ 181.981972][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 181.994083][ T5274] usb 2-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 182.004976][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.014066][ T5274] usb 2-1: Product: syz [ 182.018396][ T5274] usb 2-1: Manufacturer: syz [ 182.023415][ T5274] usb 2-1: SerialNumber: syz [ 182.030687][ T5274] usb 2-1: config 0 descriptor?? [ 182.078253][ T6386] syzkaller0: entered allmulticast mode [ 182.489999][ T29] audit: type=1400 audit(1729143079.579:421): avc: denied { execute } for pid=6390 comm="syz.0.333" name="file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.560448][ T29] audit: type=1400 audit(1729143079.579:422): avc: denied { execute_no_trans } for pid=6390 comm="syz.0.333" path="/77/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.743765][ T6382] syz.4.329 (6382) used greatest stack depth: 20688 bytes left [ 183.932388][ T5270] usb 2-1: USB disconnect, device number 11 [ 185.541963][ T5270] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.557757][ T6411] netlink: 'syz.0.338': attribute type 3 has an invalid length. [ 186.373619][ T5270] usb 4-1: Using ep0 maxpacket: 8 [ 186.388824][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.400182][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.411302][ T5270] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 186.420991][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.431487][ T5270] usb 4-1: config 0 descriptor?? [ 186.552116][ T5274] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 187.599092][ T5270] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 187.606823][ T5270] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 187.615213][ T5270] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 187.622895][ T5270] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 187.631907][ T5270] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 187.641658][ T5270] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 187.651907][ T5270] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 187.668506][ T5270] playstation 0003:054C:0CE6.000E: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 187.689052][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 187.702694][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.713877][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.726913][ T5274] usb 3-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 187.736587][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.747263][ T5270] playstation 0003:054C:0CE6.000E: Invalid reportID received, expected 9 got 0 [ 187.758936][ T5270] playstation 0003:054C:0CE6.000E: Failed to retrieve DualSense pairing info: -22 [ 187.772548][ T5270] playstation 0003:054C:0CE6.000E: Failed to get MAC address from DualSense [ 187.782181][ T5270] playstation 0003:054C:0CE6.000E: Failed to create dualsense. [ 187.795915][ T5274] usb 3-1: config 0 descriptor?? [ 187.803214][ T5270] playstation 0003:054C:0CE6.000E: probe with driver playstation failed with error -22 [ 187.977081][ T5270] usb 4-1: USB disconnect, device number 12 [ 189.003021][ T5274] usbhid 3-1:0.0: can't add hid device: -71 [ 189.009012][ T5274] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.156965][ T5274] usb 3-1: USB disconnect, device number 11 [ 189.459000][ T5301] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.495854][ T29] audit: type=1400 audit(1729143086.529:423): avc: denied { create } for pid=6432 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.832315][ T5301] usb 4-1: Using ep0 maxpacket: 32 [ 190.144097][ T5301] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.155939][ T5301] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.178465][ T6441] tipc: Started in network mode [ 190.199361][ T6441] tipc: Node identity f7, cluster identity 4711 [ 190.216012][ T5301] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 190.225354][ T5301] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 190.233834][ T5301] usb 4-1: Product: syz [ 190.238033][ T5301] usb 4-1: Manufacturer: syz [ 190.243514][ T6441] tipc: Node number set to 247 [ 190.254622][ T5301] hub 4-1:4.0: USB hub found [ 190.516630][ T5301] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 190.750964][ T6447] syzkaller0: entered allmulticast mode [ 191.703589][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.714033][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.832283][ T5301] usb 4-1: USB disconnect, device number 13 [ 194.573910][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.580457][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.414830][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.433239][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.448239][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.462427][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.486490][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 195.497724][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.518511][ T29] audit: type=1400 audit(1729143092.619:424): avc: denied { mounton } for pid=6479 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 196.176136][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 196.228193][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 196.239074][ T6464] tipc: Started in network mode [ 196.244437][ T6464] tipc: Node identity @emory.en, cluster identity 8 [ 196.460665][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 196.850581][ T6494] usb usb8: usbfs: process 6494 (syz.3.365) did not claim interface 0 before use [ 197.522421][ T5232] Bluetooth: hci5: command tx timeout [ 197.912036][ T6479] chnl_net:caif_netlink_parms(): no params data found [ 199.702423][ T5232] Bluetooth: hci5: command tx timeout [ 200.708237][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.736157][ T29] audit: type=1400 audit(1729143097.829:425): avc: denied { name_bind } for pid=6521 comm="syz.0.372" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 201.448300][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.027313][ T5232] Bluetooth: hci5: command tx timeout [ 202.161658][ T6479] bridge_slave_0: entered allmulticast mode [ 202.182118][ T6479] bridge_slave_0: entered promiscuous mode [ 202.203443][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.210569][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.218015][ T6479] bridge_slave_1: entered allmulticast mode [ 202.226290][ T6479] bridge_slave_1: entered promiscuous mode [ 202.263417][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.372'. [ 202.321636][ T3031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.339765][ T3031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54865 - 0 [ 202.351198][ T3031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 59017 - 0 [ 202.643430][ T6538] ip6t_rpfilter: unknown options [ 203.267066][ T6479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.576611][ T5232] Bluetooth: hci5: command tx timeout [ 204.814873][ T3031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.836299][ T3031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54865 - 0 [ 205.812858][ T3031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 59017 - 0 [ 206.054341][ T6479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.136377][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 207.584801][ T3031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.292117][ T3031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54865 - 0 [ 208.614981][ T3031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 59017 - 0 [ 209.307213][ T6479] team0: Port device team_slave_0 added [ 209.327966][ T6479] team0: Port device team_slave_1 added [ 210.097725][ T6580] netlink: 52 bytes leftover after parsing attributes in process `syz.3.387'. [ 210.260321][ T3031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.285852][ T3031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54865 - 0 [ 210.339359][ T3031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 59017 - 0 [ 210.412060][ T5272] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.436437][ T29] audit: type=1400 audit(1729143107.539:426): avc: denied { write } for pid=6588 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.472396][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.479549][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.622078][ T6479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.662345][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.669332][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.695307][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.741916][ T6479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.802228][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 210.852568][ T5272] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 210.879813][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.213654][ T5272] usb 4-1: Product: syz [ 211.217873][ T5272] usb 4-1: Manufacturer: syz [ 211.451700][ T5272] usb 4-1: SerialNumber: syz [ 211.460317][ T5272] usb 4-1: config 0 descriptor?? [ 211.804706][ T6479] hsr_slave_0: entered promiscuous mode [ 211.910699][ T6479] hsr_slave_1: entered promiscuous mode [ 211.944440][ T6479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.978769][ T6479] Cannot create hsr debugfs directory [ 212.181766][ T29] audit: type=1400 audit(1729143109.279:427): avc: denied { search } for pid=4890 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.203337][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.307213][ T29] audit: type=1400 audit(1729143109.329:428): avc: denied { read } for pid=4890 comm="dhcpcd" name="n68" dev="tmpfs" ino=3246 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.340225][ T29] audit: type=1400 audit(1729143109.329:429): avc: denied { open } for pid=4890 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=3246 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.441472][ T29] audit: type=1400 audit(1729143109.329:430): avc: denied { getattr } for pid=4890 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=3246 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.518311][ T3031] bridge_slave_1: left allmulticast mode [ 213.146548][ T3031] bridge_slave_1: left promiscuous mode [ 213.153213][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.392008][ T29] audit: type=1400 audit(1729143110.479:431): avc: denied { read } for pid=6616 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.429106][ T3031] bridge_slave_0: left allmulticast mode [ 213.431387][ T5301] usb 4-1: USB disconnect, device number 14 [ 213.480490][ T3031] bridge_slave_0: left promiscuous mode [ 213.488443][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.498946][ T29] audit: type=1400 audit(1729143110.479:432): avc: denied { open } for pid=6616 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.728268][ T29] audit: type=1400 audit(1729143110.479:433): avc: denied { getattr } for pid=6616 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.753571][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.026069][ T29] audit: type=1400 audit(1729143112.129:434): avc: denied { write } for pid=6612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.091956][ T29] audit: type=1400 audit(1729143112.149:435): avc: denied { add_name } for pid=6612 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.531380][ T6647] 9pnet_fd: Insufficient options for proto=fd [ 215.649382][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 215.649428][ T29] audit: type=1400 audit(1729143112.629:443): avc: denied { write } for pid=6640 comm="syz.0.401" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 219.499821][ T3031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.512463][ T3031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.526133][ T3031] bond0 (unregistering): Released all slaves [ 219.866802][ T29] audit: type=1400 audit(1729143116.969:444): avc: denied { read write } for pid=6660 comm="syz.0.405" name="vhost-vsock" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.896039][ T29] audit: type=1400 audit(1729143116.969:445): avc: denied { open } for pid=6660 comm="syz.0.405" path="/dev/vhost-vsock" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.949661][ T29] audit: type=1400 audit(1729143116.969:446): avc: denied { ioctl } for pid=6660 comm="syz.0.405" path="/dev/vhost-vsock" dev="devtmpfs" ino=1083 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.888042][ T6679] fuseblk: Bad value for 'fd' [ 223.271995][ T29] audit: type=1400 audit(1729143120.369:447): avc: denied { create } for pid=6660 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.299884][ T29] audit: type=1400 audit(1729143120.369:448): avc: denied { bind } for pid=6660 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.336486][ T29] audit: type=1400 audit(1729143120.369:449): avc: denied { write } for pid=6660 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.680077][ T5238] Bluetooth: hci0: command 0x1003 tx timeout [ 225.688337][ T5232] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.722452][ T29] audit: type=1400 audit(1729143122.629:450): avc: denied { ioctl } for pid=6697 comm="syz.2.414" path="socket:[12433]" dev="sockfs" ino=12433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.671022][ T3031] hsr_slave_0: left promiscuous mode [ 226.686143][ T6712] Driver unsupported XDP return value 0 on prog (id 246) dev N/A, expect packet loss! [ 226.745810][ T3031] hsr_slave_1: left promiscuous mode [ 226.782509][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.790041][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.891056][ T29] audit: type=1400 audit(1729143123.989:451): avc: denied { create } for pid=6716 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.915728][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.928789][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.938285][ T29] audit: type=1400 audit(1729143124.019:452): avc: denied { bind } for pid=6716 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.008244][ T3031] veth1_macvtap: left promiscuous mode [ 227.039180][ T3031] veth0_macvtap: left promiscuous mode [ 227.065774][ T3031] veth1_vlan: left promiscuous mode [ 227.091589][ T3031] veth0_vlan: left promiscuous mode [ 227.640286][ T29] audit: type=1400 audit(1729143124.379:453): avc: denied { sys_module } for pid=6716 comm="syz.0.418" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.171231][ T938] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 231.392279][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 231.399128][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.410382][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.423669][ T938] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.433246][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.444014][ T938] usb 4-1: config 0 descriptor?? [ 231.714772][ T3031] team0 (unregistering): Port device team_slave_1 removed [ 231.785821][ T3031] team0 (unregistering): Port device team_slave_0 removed [ 231.863167][ T938] microsoft 0003:045E:07DA.000F: No inputs registered, leaving [ 231.879330][ T938] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 231.898493][ T938] microsoft 0003:045E:07DA.000F: no inputs found [ 231.913374][ T938] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 232.120355][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.138580][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.503082][ T5230] usb 4-1: USB disconnect, device number 15 [ 232.992764][ T6479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.340868][ T6479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.468124][ T5271] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.503088][ T6479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.454298][ T5271] usb 1-1: Using ep0 maxpacket: 32 [ 236.483056][ T5271] usb 1-1: device descriptor read/all, error -71 [ 236.586055][ T29] audit: type=1400 audit(1729143133.689:454): avc: denied { execheap } for pid=6779 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.745366][ T6479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.506367][ T29] audit: type=1400 audit(1729143134.609:455): avc: denied { read } for pid=6788 comm="syz.4.430" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 237.543763][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.624695][ T6479] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.818025][ T6479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.828693][ T6479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.023763][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.030911][ T5419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.060633][ T6795] sd 0:0:1:0: PR command failed: 1026 [ 238.109920][ T6795] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 238.136329][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.143795][ T5419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.181918][ T29] audit: type=1400 audit(1729143134.609:456): avc: denied { open } for pid=6788 comm="syz.4.430" path="/95/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 238.226217][ T6795] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 238.282064][ T29] audit: type=1400 audit(1729143135.159:457): avc: denied { ioctl } for pid=6788 comm="syz.4.430" path="/95/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 238.410444][ T29] audit: type=1400 audit(1729143135.419:458): avc: denied { append } for pid=6803 comm="syz.2.434" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.278105][ T6479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.540963][ T6479] veth0_vlan: entered promiscuous mode [ 239.550041][ T29] audit: type=1400 audit(1729143136.649:459): avc: denied { shutdown } for pid=6820 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.650769][ T6479] veth1_vlan: entered promiscuous mode [ 240.088208][ T29] audit: type=1326 audit(1729143136.709:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1115b7dff9 code=0x0 [ 240.123611][ T6479] veth0_macvtap: entered promiscuous mode [ 240.408908][ T6479] veth1_macvtap: entered promiscuous mode [ 240.461487][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.497398][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.530085][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.558905][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.578028][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.588600][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.602513][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.613447][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.625060][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.634988][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.645579][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.655558][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.666136][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.672018][ T29] audit: type=1400 audit(1729143137.749:461): avc: denied { mount } for pid=6837 comm="syz.2.440" name="/" dev="ramfs" ino=12871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 240.676195][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.720096][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.731794][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.742235][ T6479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.750982][ T6479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.759819][ T6479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.768616][ T6479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.607063][ T29] audit: type=1400 audit(1729143138.699:462): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 241.627358][ T29] audit: type=1400 audit(1729143138.709:463): avc: denied { read } for pid=6842 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.693284][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.701149][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.702128][ T29] audit: type=1400 audit(1729143138.799:464): avc: denied { setopt } for pid=6842 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 242.595409][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.612190][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.700333][ T29] audit: type=1400 audit(1729143139.799:465): avc: denied { mounton } for pid=6479 comm="syz-executor" path="/root/syzkaller.7Rx29C/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 244.867667][ T5274] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 248.402953][ T6903] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.410355][ T6903] vhci_hcd: invalid port number 9 [ 248.415594][ T6903] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 249.066420][ T29] audit: type=1400 audit(1729143146.169:466): avc: denied { lock } for pid=6902 comm="syz.1.451" path="socket:[13067]" dev="sockfs" ino=13067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 250.522158][ T5274] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 250.682072][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 250.707259][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.864899][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.080130][ T5274] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.263568][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.338017][ T6941] capability: warning: `syz.4.457' uses deprecated v2 capabilities in a way that may be insecure [ 251.584811][ T5274] usb 4-1: config 0 descriptor?? [ 252.264402][ T5274] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 252.342781][ T5274] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 252.387244][ T5274] microsoft 0003:045E:07DA.0010: no inputs found [ 252.415537][ T5274] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 252.600145][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.655336][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.827406][ T5301] usb 4-1: USB disconnect, device number 16 [ 253.834983][ T29] audit: type=1400 audit(1729143150.929:467): avc: denied { call } for pid=6958 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 254.101154][ T6946] netlink: 'syz.1.459': attribute type 3 has an invalid length. [ 254.102594][ T5274] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.263777][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.308092][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.349346][ T5274] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 254.369551][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.381600][ T5274] usb 5-1: config 0 descriptor?? [ 256.158424][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.165127][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.053602][ T5274] usbhid 5-1:0.0: can't add hid device: -71 [ 257.059660][ T5274] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.124030][ T5274] usb 5-1: USB disconnect, device number 12 [ 258.520728][ T29] audit: type=1400 audit(1729143155.489:468): avc: denied { create } for pid=7008 comm="syz.2.477" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.592195][ T29] audit: type=1400 audit(1729143155.509:469): avc: denied { unlink } for pid=5223 comm="syz-executor" name="file0" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.589553][ T7005] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 36374 - 0 [ 259.611978][ T29] audit: type=1400 audit(1729143156.689:470): avc: denied { search } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.978439][ T7005] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 36374 - 0 [ 260.041749][ T7005] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 36374 - 0 [ 260.061956][ T5230] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 260.092734][ T7005] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 36374 - 0 [ 260.480358][ T7005] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 48156 - 0 [ 260.495810][ T7005] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 48156 - 0 [ 260.506195][ T7005] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 48156 - 0 [ 260.519915][ T7005] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 48156 - 0 [ 260.530459][ T7005] geneve2: entered promiscuous mode [ 260.535888][ T7005] geneve2: entered allmulticast mode [ 260.618150][ T5301] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 260.723227][ T7027] kvm: pic: non byte read [ 260.728971][ T7027] kvm: pic: non byte read [ 260.739054][ T7027] kvm: pic: non byte read [ 260.745771][ T7027] kvm: pic: single mode not supported [ 260.745909][ T7027] kvm: pic: level sensitive irq not supported [ 260.759161][ T7027] kvm: pic: non byte read [ 260.777235][ T7027] kvm: pic: non byte read [ 260.879115][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.889029][ T5230] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 260.898190][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.916590][ T5230] usb 4-1: config 0 descriptor?? [ 261.961346][ T5301] usb 5-1: Using ep0 maxpacket: 16 [ 261.967711][ T5230] usbhid 4-1:0.0: can't add hid device: -71 [ 261.973946][ T5230] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 261.989663][ T5301] usb 5-1: device descriptor read/all, error -71 [ 261.999935][ T5230] usb 4-1: USB disconnect, device number 17 [ 262.902104][ T5301] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 263.073930][ T5301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.091975][ T5301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.117514][ T5301] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 263.149601][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.196648][ T5301] usb 5-1: config 0 descriptor?? [ 265.980588][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.3.490'. [ 266.555574][ T5301] usbhid 5-1:0.0: can't add hid device: -71 [ 266.561637][ T5301] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.571735][ T5301] usb 5-1: USB disconnect, device number 14 [ 266.792002][ T5272] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 266.834925][ T5232] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 267.102168][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 267.119686][ T5272] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 267.129040][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.137657][ T5272] usb 4-1: Product: syz [ 267.162631][ T5272] usb 4-1: Manufacturer: syz [ 267.167419][ T5272] usb 4-1: SerialNumber: syz [ 267.180275][ T5272] usb 4-1: config 0 descriptor?? [ 268.621337][ T5301] usb 4-1: USB disconnect, device number 18 [ 269.366198][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.385530][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.394622][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.403250][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.412433][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.420161][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.526594][ T7095] veth0_vlan: left promiscuous mode [ 269.532943][ T7095] veth0_vlan: entered promiscuous mode [ 270.798594][ T29] audit: type=1400 audit(1729143167.909:471): avc: denied { create } for pid=7113 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 271.491388][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 271.523241][ T5238] Bluetooth: hci0: command tx timeout [ 272.832124][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.840527][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.902688][ T29] audit: type=1400 audit(1729143169.999:472): avc: denied { create } for pid=7141 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.926405][ T7099] bridge_slave_0: entered allmulticast mode [ 272.980534][ T7099] bridge_slave_0: entered promiscuous mode [ 272.993272][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.000637][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.008449][ T7099] bridge_slave_1: entered allmulticast mode [ 273.023582][ T7099] bridge_slave_1: entered promiscuous mode [ 273.131511][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.151520][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.245093][ T7099] team0: Port device team_slave_0 added [ 273.279524][ T7099] team0: Port device team_slave_1 added [ 273.377972][ T29] audit: type=1400 audit(1729143170.479:473): avc: denied { bind } for pid=7153 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.420788][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.454766][ T29] audit: type=1400 audit(1729143170.479:474): avc: denied { name_bind } for pid=7153 comm="syz.3.518" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 273.476613][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.531989][ T29] audit: type=1400 audit(1729143170.479:475): avc: denied { node_bind } for pid=7153 comm="syz.3.518" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 273.553371][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.566778][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.574177][ T29] audit: type=1400 audit(1729143170.479:476): avc: denied { connect } for pid=7153 comm="syz.3.518" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.596762][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.602115][ T5238] Bluetooth: hci0: command tx timeout [ 273.623226][ T29] audit: type=1400 audit(1729143170.479:477): avc: denied { name_connect } for pid=7153 comm="syz.3.518" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 273.650573][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.679109][ T29] audit: type=1400 audit(1729143170.629:478): avc: denied { write } for pid=7153 comm="syz.3.518" laddr=::ffff:172.20.20.170 lport=20000 faddr=::ffff:172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.774606][ T7099] hsr_slave_0: entered promiscuous mode [ 273.889173][ T7099] hsr_slave_1: entered promiscuous mode [ 273.950073][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.978241][ T7099] Cannot create hsr debugfs directory [ 275.688164][ T5238] Bluetooth: hci0: command tx timeout [ 279.831089][ T5238] Bluetooth: hci0: command tx timeout [ 280.150030][ T7099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.192048][ T938] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 280.798615][ T7099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.143810][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 281.153966][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.181565][ T938] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.812714][ T938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.822316][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.830596][ T938] usb 4-1: Product: syz [ 281.835049][ T938] usb 4-1: Manufacturer: syz [ 281.842614][ T938] usb 4-1: SerialNumber: syz [ 281.964280][ T7099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.210102][ T7099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.341976][ T5274] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 282.547448][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 282.623231][ T7099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.628655][ T5274] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 282.662031][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.670186][ T5274] usb 2-1: Product: syz [ 282.691926][ T5274] usb 2-1: Manufacturer: syz [ 282.701939][ T5274] usb 2-1: SerialNumber: syz [ 282.948257][ T5274] usb 2-1: config 0 descriptor?? [ 282.972653][ T5274] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 283.000005][ T5274] usb 2-1: Detected FT232H [ 283.020336][ T7099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.033326][ T938] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 283.060859][ T7099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.063752][ T938] cdc_ncm 4-1:1.0: bind() failure [ 283.089777][ T7099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.098102][ T938] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 283.114272][ T938] cdc_ncm 4-1:1.1: bind() failure [ 283.146994][ T938] usb 4-1: USB disconnect, device number 19 [ 283.313643][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.330942][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.364823][ T7099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.375290][ T7099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.378489][ T5274] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 283.397612][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.404836][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.419926][ T5274] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 283.442546][ T5274] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 283.518147][ T5274] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 283.528308][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.535539][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.624785][ T5274] usb 2-1: USB disconnect, device number 12 [ 283.679002][ T5274] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 283.741374][ T5274] ftdi_sio 2-1:0.0: device disconnected [ 283.924613][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.125061][ T7099] veth0_vlan: entered promiscuous mode [ 284.154074][ T7099] veth1_vlan: entered promiscuous mode [ 284.258942][ T7099] veth0_macvtap: entered promiscuous mode [ 284.306580][ T7099] veth1_macvtap: entered promiscuous mode [ 284.353013][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.392162][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.425664][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.439843][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.592119][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.627497][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.760518][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.849061][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.594674][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.721624][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.771907][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.791941][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.822063][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.849298][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.874133][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.892210][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.929123][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.072508][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.114801][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.147670][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.256518][ T7099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.311332][ T7099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.390627][ T7099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.437435][ T7099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.605325][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.630608][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.747549][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.783281][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.178091][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.547'. [ 289.082158][ T5230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 289.663522][ T29] audit: type=1400 audit(1729143186.749:479): avc: denied { create } for pid=7264 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 289.915985][ T5230] usb 1-1: Using ep0 maxpacket: 16 [ 290.365316][ T5230] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 290.432458][ T5230] usb 1-1: can't read configurations, error -71 [ 290.595647][ T29] audit: type=1400 audit(1729143187.699:480): avc: denied { create } for pid=7290 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.630251][ T29] audit: type=1400 audit(1729143187.719:481): avc: denied { setopt } for pid=7290 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.720178][ T7293] warning: `syz.0.556' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 292.680309][ T7317] netlink: 'syz.2.563': attribute type 9 has an invalid length. [ 292.804117][ T7317] bond_slave_0: entered promiscuous mode [ 292.810202][ T7317] bond_slave_1: entered promiscuous mode [ 292.878224][ T7317] macvlan2: entered promiscuous mode [ 292.910061][ T7317] bond0: entered promiscuous mode [ 292.950445][ T7317] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.506947][ T29] audit: type=1400 audit(1729143190.609:482): avc: denied { create } for pid=7321 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 293.950667][ T7325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.566'. [ 294.270145][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 294.528562][ T29] audit: type=1400 audit(1729143191.629:483): avc: denied { create } for pid=7328 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.576084][ T29] audit: type=1400 audit(1729143191.669:484): avc: denied { ioctl } for pid=7328 comm="syz.2.568" path="socket:[14949]" dev="sockfs" ino=14949 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.610986][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'. [ 294.677920][ T29] audit: type=1400 audit(1729143191.729:485): avc: denied { create } for pid=7328 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 295.002625][ T29] audit: type=1400 audit(1729143192.089:486): avc: denied { ioctl } for pid=7334 comm="syz.0.571" path="socket:[15501]" dev="sockfs" ino=15501 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 295.073867][ T7340] netlink: 'syz.1.573': attribute type 4 has an invalid length. [ 296.034204][ T29] audit: type=1400 audit(1729143193.139:487): avc: denied { create } for pid=7365 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 296.850641][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 296.868977][ T29] audit: type=1400 audit(1729143193.949:488): avc: denied { connect } for pid=7365 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 296.924533][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 296.952707][ T29] audit: type=1400 audit(1729143193.949:489): avc: denied { write } for pid=7365 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 296.986802][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 297.049413][ T29] audit: type=1400 audit(1729143194.059:490): avc: denied { bind } for pid=7380 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 297.115762][ T29] audit: type=1400 audit(1729143194.059:491): avc: denied { name_bind } for pid=7380 comm="syz.4.583" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 297.193943][ T29] audit: type=1400 audit(1729143194.059:492): avc: denied { node_bind } for pid=7380 comm="syz.4.583" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 297.283579][ T29] audit: type=1400 audit(1729143194.079:493): avc: denied { listen } for pid=7380 comm="syz.4.583" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 297.311925][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 297.340693][ T29] audit: type=1400 audit(1729143194.109:494): avc: denied { connect } for pid=7380 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 297.415699][ T7367] infiniband syz1: set active [ 297.422936][ T938] vcan0 speed is unknown, defaulting to 1000 [ 297.461124][ T7367] infiniband syz1: added vcan0 [ 297.477670][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.491137][ T7367] syz1: rxe_create_cq: returned err = -12 [ 297.498240][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.520992][ T7367] infiniband syz1: Couldn't create ib_mad CQ [ 297.536264][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 297.552237][ T7367] infiniband syz1: Couldn't open port 1 [ 297.571213][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.623298][ T9] usb 2-1: config 0 descriptor?? [ 297.681547][ T7367] RDS/IB: syz1: added [ 297.733729][ T7367] smc: adding ib device syz1 with port count 1 [ 297.769179][ T7367] smc: ib device syz1 port 1 has pnetid [ 297.791804][ T5274] vcan0 speed is unknown, defaulting to 1000 [ 297.806144][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 299.245168][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 299.922898][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 299.967980][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.049454][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 300.072054][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 300.272599][ T9] usb 2-1: USB disconnect, device number 13 [ 301.496969][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 301.719313][ T7418] netlink: 52 bytes leftover after parsing attributes in process `syz.2.594'. [ 302.162552][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 302.645774][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 302.772109][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 302.810458][ T25] usb 3-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 302.813843][ T7428] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.834176][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.913727][ T25] usb 3-1: Product: syz [ 303.007327][ T25] usb 3-1: Manufacturer: syz [ 303.046332][ T25] usb 3-1: SerialNumber: syz [ 303.265866][ T25] usb 3-1: config 0 descriptor?? [ 303.537265][ T7367] vcan0 speed is unknown, defaulting to 1000 [ 304.880245][ T9] usb 3-1: USB disconnect, device number 13 [ 307.248055][ T7490] netlink: 168 bytes leftover after parsing attributes in process `syz.4.624'. [ 307.365195][ T7493] vcan0 speed is unknown, defaulting to 1000 [ 307.462381][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 307.629907][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 307.691770][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 307.774292][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.834676][ T9] usb 2-1: Product: syz [ 308.541926][ T9] usb 2-1: Manufacturer: syz [ 308.546589][ T9] usb 2-1: SerialNumber: syz [ 308.588892][ T9] usb 2-1: config 0 descriptor?? [ 308.823538][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 308.832084][ T9] usb 2-1: Detected FT232H [ 309.862590][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 309.876882][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 309.888417][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 309.913232][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 310.037175][ T9] usb 2-1: USB disconnect, device number 14 [ 310.093291][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.103663][ T9] ftdi_sio 2-1:0.0: device disconnected [ 310.198047][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 310.198067][ T29] audit: type=1400 audit(1729143207.299:498): avc: denied { accept } for pid=7518 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 311.559811][ T29] audit: type=1400 audit(1729143208.659:499): avc: denied { map } for pid=7533 comm="syz.4.637" path="socket:[15814]" dev="sockfs" ino=15814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 311.583947][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.015786][ T29] audit: type=1400 audit(1729143211.119:500): avc: denied { connect } for pid=7561 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.708018][ T7574] binder: 7570:7574 ioctl c0306201 20000580 returned -14 [ 315.389701][ T29] audit: type=1400 audit(1729143212.489:501): avc: denied { bind } for pid=7576 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.463915][ T29] audit: type=1400 audit(1729143212.559:502): avc: denied { bind } for pid=7578 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.519673][ T29] audit: type=1400 audit(1729143212.589:503): avc: denied { setopt } for pid=7578 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.568368][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.652816][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.660014][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.685728][ T29] audit: type=1400 audit(1729143212.789:504): avc: denied { write } for pid=7578 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.706229][ T7579] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.872028][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 316.034062][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.065946][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.106769][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 316.156010][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.213514][ T9] usb 4-1: config 0 descriptor?? [ 317.276834][ T9] hid (null): bogus close delimiter [ 317.448731][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.457455][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.493390][ T9] usb 4-1: string descriptor 0 read error: -22 [ 317.696383][ T9] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 317.751984][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 317.911308][ T9] usb 4-1: USB disconnect, device number 20 [ 317.939238][ T7625] syz.1.669 uses obsolete (PF_INET,SOCK_PACKET) [ 318.061976][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 318.070078][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 318.094791][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 318.114387][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.172327][ T25] usb 5-1: config 0 descriptor?? [ 318.386893][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.396725][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.640060][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 318.658877][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.819079][ T25] usb 5-1: USB disconnect, device number 15 [ 319.530293][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 328.931948][ T5273] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 329.754829][ T29] audit: type=1400 audit(1729143226.859:505): avc: denied { nlmsg_read } for pid=7711 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.826794][ T29] audit: type=1400 audit(1729143226.859:506): avc: denied { listen } for pid=7711 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.884466][ T7718] vcan0 speed is unknown, defaulting to 1000 [ 330.148234][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 330.238454][ T5274] IPVS: starting estimator thread 0... [ 330.342205][ T7726] IPVS: using max 31 ests per chain, 74400 per kthread [ 330.625351][ T7712] sctp: failed to load transform for md5: -2 [ 332.230472][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.277160][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.291349][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.308544][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.324978][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.337031][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.355548][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.931467][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 334.485062][ T7760] vcan0 speed is unknown, defaulting to 1000 [ 335.300016][ T7782] netlink: 52 bytes leftover after parsing attributes in process `syz.2.718'. [ 335.953009][ T5232] Bluetooth: hci1: command tx timeout [ 336.370274][ T7760] chnl_net:caif_netlink_parms(): no params data found [ 336.461944][ T5230] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 336.609688][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.626310][ T5230] usb 3-1: Using ep0 maxpacket: 32 [ 336.652010][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.659283][ T7760] bridge_slave_0: entered allmulticast mode [ 336.676924][ T5230] usb 3-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 336.693668][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.713258][ T7760] bridge_slave_0: entered promiscuous mode [ 336.729761][ T5230] usb 3-1: Product: syz [ 336.752871][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.760061][ T5230] usb 3-1: Manufacturer: syz [ 336.771358][ T5230] usb 3-1: SerialNumber: syz [ 336.778377][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.795777][ T5230] usb 3-1: config 0 descriptor?? [ 336.803392][ T7760] bridge_slave_1: entered allmulticast mode [ 336.825126][ T7760] bridge_slave_1: entered promiscuous mode [ 336.896703][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.024382][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.108246][ T7760] team0: Port device team_slave_0 added [ 337.119834][ T29] audit: type=1400 audit(1729143234.219:507): avc: denied { create } for pid=7800 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 337.171295][ T7760] team0: Port device team_slave_1 added [ 337.195614][ T29] audit: type=1400 audit(1729143234.259:508): avc: denied { write } for pid=7800 comm="syz.1.725" path="socket:[16661]" dev="sockfs" ino=16661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 337.497976][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.525216][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.591282][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.813709][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.821655][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.022184][ T5232] Bluetooth: hci1: command tx timeout [ 338.236424][ T25] usb 3-1: USB disconnect, device number 15 [ 338.439821][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.656295][ T7760] hsr_slave_0: entered promiscuous mode [ 338.684552][ T7760] hsr_slave_1: entered promiscuous mode [ 338.710519][ T7760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.727361][ T7760] Cannot create hsr debugfs directory [ 339.078804][ T7760] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.271161][ T7760] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.547414][ T7760] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.878909][ T7760] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.895389][ T938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 340.065511][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.088159][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.130103][ T938] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 340.157632][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.199793][ T938] usb 3-1: config 0 descriptor?? [ 340.204500][ T7760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.258128][ T7760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.320279][ T7760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.328307][ T5232] Bluetooth: hci1: command tx timeout [ 340.381736][ T7760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.638756][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 340.662103][ T938] usbhid 3-1:0.0: can't add hid device: -32 [ 340.695072][ T938] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 340.771580][ T938] usb 3-1: USB disconnect, device number 16 [ 340.865168][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.952967][ T7842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.738'. [ 341.342320][ T5230] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 341.522382][ T5230] usb 1-1: Using ep0 maxpacket: 32 [ 341.549072][ T5230] usb 1-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 341.592808][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.610373][ T5230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.632857][ T5230] usb 1-1: Product: syz [ 341.642974][ T5230] usb 1-1: Manufacturer: syz [ 341.656197][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.663408][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.694253][ T5230] usb 1-1: SerialNumber: syz [ 341.731476][ T5230] usb 1-1: config 0 descriptor?? [ 341.734641][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.743639][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.375645][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.402334][ T5232] Bluetooth: hci1: command tx timeout [ 342.578921][ T7760] veth0_vlan: entered promiscuous mode [ 342.663249][ T7760] veth1_vlan: entered promiscuous mode [ 343.304993][ T7760] veth0_macvtap: entered promiscuous mode [ 343.350763][ T7760] veth1_macvtap: entered promiscuous mode [ 343.411066][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.453636][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.569072][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.640792][ T5301] usb 1-1: USB disconnect, device number 12 [ 343.657497][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.700418][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.074415][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.085743][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.096237][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.106820][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.117028][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.128488][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.139131][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.149706][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.159604][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.170126][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.180014][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.190517][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.200441][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.211055][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.223191][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.242122][ T7760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.298495][ T7760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.307327][ T7760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.316106][ T7760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.519212][ T5419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.558746][ T5419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.653795][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.666492][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.862230][ T29] audit: type=1400 audit(1729143243.819:509): avc: denied { watch_reads } for pid=7878 comm="syz.3.706" path="/0" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 349.291561][ T7909] Zero length message leads to an empty skb [ 349.433149][ T5301] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 349.532089][ T5271] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 349.603621][ T5301] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 349.614863][ T5301] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 349.641940][ T5301] usb 5-1: can't read configurations, error -61 [ 349.692115][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 349.710266][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.748695][ T5271] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.783349][ T5271] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.784155][ T5301] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 349.804294][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.844981][ T5271] usb 3-1: config 0 descriptor?? [ 349.992826][ T5301] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 350.043534][ T5301] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 350.051169][ T5301] usb 5-1: can't read configurations, error -61 [ 350.060763][ T5301] usb usb5-port1: attempt power cycle [ 350.291426][ T5271] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 350.351546][ T5271] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 350.403505][ T5271] microsoft 0003:045E:07DA.0012: no inputs found [ 350.422276][ T5271] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 350.569430][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.581978][ T5301] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 350.624541][ T5301] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 350.634265][ T5301] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 350.645555][ T5301] usb 5-1: can't read configurations, error -61 [ 350.662395][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.802801][ T5301] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 350.853476][ T5301] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 350.922306][ T5301] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 350.930033][ T5301] usb 5-1: can't read configurations, error -61 [ 350.938159][ T5301] usb usb5-port1: unable to enumerate USB device [ 351.436293][ T7930] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.764'. [ 352.473518][ T5301] usb 3-1: USB disconnect, device number 17 [ 352.744058][ T29] audit: type=1400 audit(1729143249.839:510): avc: denied { write } for pid=7937 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.151253][ T7951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.769'. [ 360.025739][ T8038] binder: 8029:8038 ioctl c0306201 20000580 returned -14 [ 360.849916][ T8050] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.948226][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 360.964715][ T29] audit: type=1400 audit(1729143258.069:511): avc: denied { accept } for pid=8059 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.302007][ T8079] netlink: 100 bytes leftover after parsing attributes in process `syz.2.817'. [ 362.684850][ T8093] binder: 8087:8093 ioctl c0306201 20000580 returned -14 [ 363.919263][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.982052][ T5301] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 364.206469][ T8115] vcan0 speed is unknown, defaulting to 1000 [ 364.310692][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 364.413572][ T938] IPVS: starting estimator thread 0... [ 365.192019][ T8123] IPVS: using max 20 ests per chain, 48000 per kthread [ 366.338903][ T5301] usb 5-1: device descriptor read/all, error -71 [ 366.643949][ T29] audit: type=1400 audit(1729143263.739:512): avc: denied { setopt } for pid=8145 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 367.762206][ T29] audit: type=1400 audit(1729143264.839:513): avc: denied { create } for pid=8160 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 369.628261][ T8185] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 369.737770][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 369.905599][ T8189] tipc: Started in network mode [ 369.939638][ T8189] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 369.982190][ T8189] tipc: Enabling of bearer rejected, failed to enable media [ 371.086150][ T8200] binder: 8192:8200 ioctl c0306201 20000580 returned -14 [ 372.298780][ T8228] netlink: 'syz.3.864': attribute type 4 has an invalid length. [ 372.620623][ T8233] binder: 8232:8233 ioctl c0306201 20000580 returned -14 [ 373.274683][ T29] audit: type=1400 audit(1729143270.369:514): avc: denied { write } for pid=8254 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.922510][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.868'. [ 374.016892][ T1108] bridge_slave_1: left allmulticast mode [ 374.040307][ T1108] bridge_slave_1: left promiscuous mode [ 374.046399][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.203384][ T1108] bridge_slave_0: left allmulticast mode [ 374.233834][ T1108] bridge_slave_0: left promiscuous mode [ 374.263279][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.787254][ T5230] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 375.932129][ T5230] usb 1-1: device descriptor read/64, error -71 [ 376.184696][ T5230] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 376.242251][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.260446][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.272399][ T1108] bond0 (unregistering): Released all slaves [ 376.300785][ T8268] vcan0 speed is unknown, defaulting to 1000 [ 376.340688][ T1108] tipc: Left network mode [ 376.342145][ T5230] usb 1-1: device descriptor read/64, error -71 [ 376.483690][ T5230] usb usb1-port1: attempt power cycle [ 376.726702][ T8301] geneve2: entered promiscuous mode [ 376.734945][ T8301] geneve2: entered allmulticast mode [ 376.904815][ T5230] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 376.933268][ T5230] usb 1-1: device descriptor read/8, error -71 [ 377.010297][ T1108] hsr_slave_0: left promiscuous mode [ 377.262892][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 377.307370][ T1108] hsr_slave_1: left promiscuous mode [ 377.332449][ T5230] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 377.352615][ T5230] usb 1-1: device descriptor read/8, error -71 [ 377.432234][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.440413][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.465744][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.560334][ T1108] veth1_macvtap: left promiscuous mode [ 377.576584][ T5230] usb usb1-port1: unable to enumerate USB device [ 377.585590][ T1108] veth0_macvtap: left promiscuous mode [ 377.592437][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 377.598126][ T1108] veth1_vlan: left promiscuous mode [ 377.612295][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 377.623797][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 377.651328][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.653473][ T1108] veth0_vlan: left promiscuous mode [ 377.664836][ T25] usb 4-1: config 0 descriptor?? [ 377.906386][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.919672][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.163586][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 378.174978][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.301508][ T25] usb 4-1: USB disconnect, device number 21 [ 378.966288][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.976101][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.489718][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 380.634405][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 381.562804][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.752752][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.803840][ T29] audit: type=1400 audit(1729143278.909:515): avc: denied { write } for pid=8347 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 381.838125][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.845405][ T8346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.071331][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.907'. [ 382.340009][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 382.498642][ T8364] geneve3: entered promiscuous mode [ 382.511989][ T8364] geneve3: entered allmulticast mode [ 382.811971][ T938] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 382.964399][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 382.972793][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 382.992110][ T938] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 383.052032][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.184566][ T938] usb 1-1: config 0 descriptor?? [ 383.438846][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.231063][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.668052][ T938] usbhid 1-1:0.0: can't add hid device: -71 [ 384.674174][ T938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 384.692247][ T938] usb 1-1: USB disconnect, device number 17 [ 386.017840][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 386.405345][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 386.901961][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 387.248888][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.260198][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.280800][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 387.311098][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.349847][ T25] usb 5-1: config 0 descriptor?? [ 387.393387][ T29] audit: type=1400 audit(1729143284.499:516): avc: denied { getopt } for pid=8417 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 387.428382][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 387.429373][ T8418] Bluetooth: MGMT ver 1.23 [ 388.485425][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.592110][ T5271] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 389.722182][ T5271] usb 2-1: device descriptor read/64, error -71 [ 389.906901][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 389.962142][ T5271] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 390.111921][ T5271] usb 2-1: device descriptor read/64, error -71 [ 390.234859][ T5271] usb usb2-port1: attempt power cycle [ 390.547239][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 390.565144][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.593252][ T5271] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 390.649760][ T5271] usb 2-1: device descriptor read/8, error -71 [ 390.805354][ T25] usb 5-1: USB disconnect, device number 22 [ 391.519309][ T8471] vcan0 speed is unknown, defaulting to 1000 [ 391.574473][ T5271] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 391.613216][ T5271] usb 2-1: device descriptor read/8, error -71 [ 391.722416][ T5271] usb usb2-port1: unable to enumerate USB device [ 393.496819][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.559517][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.566809][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.725940][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 394.932053][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 394.941410][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.002008][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 395.022054][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.031151][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.045698][ T29] audit: type=1400 audit(1729143292.149:517): avc: denied { ioctl } for pid=8516 comm="syz.1.966" path="socket:[19720]" dev="sockfs" ino=19720 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 395.071304][ T29] audit: type=1400 audit(1729143292.149:518): avc: denied { write } for pid=8516 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 395.092433][ T25] usb 1-1: config 0 descriptor?? [ 395.318450][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 396.230661][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.975'. [ 396.260388][ T8542] team_slave_0: entered promiscuous mode [ 396.266626][ T8542] team_slave_1: entered promiscuous mode [ 396.295710][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.328619][ T8542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.384368][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.399075][ T8542] team_slave_0: left promiscuous mode [ 396.404648][ T8542] team_slave_1: left promiscuous mode [ 396.725771][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.762948][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.770141][ T8554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.418172][ T5230] usb 1-1: USB disconnect, device number 18 [ 399.872301][ T5326] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 400.062172][ T5326] usb 5-1: Using ep0 maxpacket: 32 [ 400.297804][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 400.360172][ T5326] usb 5-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 400.372968][ T5326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.390903][ T5326] usb 5-1: Product: syz [ 400.395912][ T5326] usb 5-1: Manufacturer: syz [ 400.400554][ T5326] usb 5-1: SerialNumber: syz [ 400.433977][ T5326] usb 5-1: config 0 descriptor?? [ 400.473740][ T8600] vcan0 speed is unknown, defaulting to 1000 [ 400.761652][ T8601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.998'. [ 402.362129][ T5230] IPVS: starting estimator thread 0... [ 402.500268][ T9] usb 5-1: USB disconnect, device number 23 [ 402.653641][ T8617] IPVS: using max 16 ests per chain, 38400 per kthread [ 404.761285][ T29] audit: type=1400 audit(1729143301.859:519): avc: denied { ioctl } for pid=8646 comm="syz.4.1015" path="socket:[20825]" dev="sockfs" ino=20825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.785933][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.049771][ T29] audit: type=1400 audit(1729143302.009:520): avc: denied { bind } for pid=8646 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 406.042001][ T29] audit: type=1400 audit(1729143303.119:521): avc: denied { name_connect } for pid=8664 comm="syz.2.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 409.712372][ T8714] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 409.735288][ T8713] vcan0 speed is unknown, defaulting to 1000 [ 409.864852][ T8717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1036'. [ 410.112051][ T29] audit: type=1400 audit(1729143307.179:522): avc: denied { getopt } for pid=8710 comm="syz.1.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 410.536671][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 410.732253][ T5326] IPVS: starting estimator thread 0... [ 410.822092][ T8723] IPVS: using max 16 ests per chain, 38400 per kthread [ 410.950106][ T8729] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1041'. [ 411.322020][ T5301] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 411.723480][ T5301] usb 4-1: Using ep0 maxpacket: 32 [ 411.824945][ T5301] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=62.ac [ 411.839864][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.848797][ T5301] usb 4-1: Product: syz [ 411.853439][ T5301] usb 4-1: Manufacturer: syz [ 411.858188][ T5301] usb 4-1: SerialNumber: syz [ 411.873919][ T5301] usb 4-1: config 0 descriptor?? [ 412.094159][ T5274] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 412.252915][ T5274] usb 2-1: too many configurations: 149, using maximum allowed: 8 [ 412.263835][ T5274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 412.272221][ T5274] usb 2-1: can't read configurations, error -61 [ 412.412078][ T5274] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 412.574708][ T5274] usb 2-1: too many configurations: 149, using maximum allowed: 8 [ 412.597459][ T5274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 412.605880][ T5274] usb 2-1: can't read configurations, error -61 [ 412.638206][ T5274] usb usb2-port1: attempt power cycle [ 413.262310][ T5274] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 413.353266][ T5274] usb 2-1: too many configurations: 149, using maximum allowed: 8 [ 413.368481][ T5274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 413.383905][ T5274] usb 2-1: can't read configurations, error -61 [ 413.625931][ T5274] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 413.759809][ T5274] usb 2-1: too many configurations: 149, using maximum allowed: 8 [ 414.169764][ T5274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 414.198162][ T5274] usb 2-1: can't read configurations, error -61 [ 415.092290][ T5274] usb usb2-port1: unable to enumerate USB device [ 415.379136][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.569838][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.577095][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.105730][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.116073][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.132160][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.142999][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.154207][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 418.161719][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.308545][ T8783] vcan0 speed is unknown, defaulting to 1000 [ 419.286722][ T8783] chnl_net:caif_netlink_parms(): no params data found [ 419.891152][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.927307][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.966207][ T8783] bridge_slave_0: entered allmulticast mode [ 420.006258][ T8783] bridge_slave_0: entered promiscuous mode [ 420.053022][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.071980][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.079253][ T8783] bridge_slave_1: entered allmulticast mode [ 420.316781][ T5232] Bluetooth: hci3: command tx timeout [ 420.433322][ T8783] bridge_slave_1: entered promiscuous mode [ 420.594064][ T29] audit: type=1400 audit(1729143317.689:523): avc: denied { ioctl } for pid=8802 comm="syz.0.1069" path="socket:[20341]" dev="sockfs" ino=20341 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 420.834727][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.884584][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.097478][ T8783] team0: Port device team_slave_0 added [ 421.157810][ T8783] team0: Port device team_slave_1 added [ 421.352849][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.395128][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.490303][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.574530][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.581607][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.723647][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.015330][ T8783] hsr_slave_0: entered promiscuous mode [ 422.062528][ T8783] hsr_slave_1: entered promiscuous mode [ 422.086908][ T8783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.113300][ T8783] Cannot create hsr debugfs directory [ 422.410182][ T5232] Bluetooth: hci3: command tx timeout [ 424.482289][ T5232] Bluetooth: hci3: command tx timeout [ 426.081849][ C1] sched: DL replenish lagged too much [ 426.448267][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 426.458996][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 426.470045][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.478608][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 426.489467][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 426.497796][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.562243][ T5238] Bluetooth: hci3: command tx timeout [ 428.562431][ T5238] Bluetooth: hci6: command tx timeout [ 430.648303][ T5238] Bluetooth: hci6: command tx timeout [ 432.722378][ T5238] Bluetooth: hci6: command tx timeout [ 433.539564][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 433.550132][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 433.559466][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 433.572872][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 433.590562][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 433.599386][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 433.712513][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 433.724115][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 433.733227][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 433.745528][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 433.753318][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 433.763640][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 434.802118][ T5238] Bluetooth: hci6: command tx timeout [ 435.690700][ T5238] Bluetooth: hci7: command tx timeout [ 435.844267][ T5238] Bluetooth: hci8: command tx timeout [ 437.761109][ T5232] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 437.771026][ T5232] Bluetooth: hci7: command tx timeout [ 437.779900][ T5232] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 437.788522][ T5232] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 437.798484][ T5232] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 437.809887][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 437.819108][ T5232] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 437.922773][ T5232] Bluetooth: hci8: command tx timeout [ 439.842426][ T5232] Bluetooth: hci7: command tx timeout [ 439.922436][ T5232] Bluetooth: hci9: command tx timeout [ 440.006030][ T5232] Bluetooth: hci8: command tx timeout [ 440.327326][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.348548][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.924829][ T5232] Bluetooth: hci7: command tx timeout [ 442.009757][ T5232] Bluetooth: hci9: command tx timeout [ 442.082742][ T5232] Bluetooth: hci8: command tx timeout [ 444.089761][ T5232] Bluetooth: hci9: command tx timeout [ 446.169946][ T5232] Bluetooth: hci9: command tx timeout [ 446.854286][ T25] usb 4-1: USB disconnect, device number 22 [ 457.772737][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 480.190661][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 480.209412][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 480.219684][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 480.228215][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 480.237962][ T55] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 480.246220][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 486.637870][ T8868] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 486.650761][ T8868] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 486.660629][ T8868] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 486.671163][ T8868] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 486.679507][ T8868] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 486.687644][ T8868] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 494.157700][ T4614] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 494.168288][ T4614] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 494.177024][ T4614] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 494.186056][ T4614] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 494.193939][ T4614] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 494.201478][ T4614] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 494.274393][ T8879] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 494.284450][ T8879] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 494.297883][ T8879] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 494.306267][ T8879] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 494.316129][ T8879] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 494.329814][ T8879] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 498.287421][ T8876] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 498.299374][ T8876] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 498.308866][ T8876] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 498.318673][ T8876] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 498.327316][ T8876] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 498.337545][ T8876] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 501.768210][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.781913][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.674570][ T8868] Bluetooth: hci11: command tx timeout [ 503.689738][ T55] Bluetooth: hci10: command tx timeout [ 503.846076][ T8783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.882117][ T8783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36374 - 0 [ 503.902353][ T8783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 48156 - 0 [ 504.056775][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.367103][ T35] bridge_slave_1: left allmulticast mode [ 505.417248][ T35] bridge_slave_1: left promiscuous mode [ 505.442683][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.540015][ T35] bridge_slave_0: left allmulticast mode [ 505.548259][ T35] bridge_slave_0: left promiscuous mode [ 505.562416][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.682649][ T5238] Bluetooth: hci11: command tx timeout [ 505.762453][ T55] Bluetooth: hci13: command tx timeout [ 505.768923][ T55] Bluetooth: hci14: command tx timeout [ 505.774904][ T8868] Bluetooth: hci12: command tx timeout [ 505.782158][ T5238] Bluetooth: hci10: command tx timeout [ 507.770487][ T55] Bluetooth: hci11: command tx timeout [ 507.852773][ T55] Bluetooth: hci14: command tx timeout [ 507.858333][ T55] Bluetooth: hci13: command tx timeout [ 507.873928][ T8868] Bluetooth: hci10: command tx timeout [ 507.879477][ T8868] Bluetooth: hci12: command tx timeout [ 509.842395][ T5238] Bluetooth: hci11: command tx timeout [ 509.922225][ T8868] Bluetooth: hci13: command tx timeout [ 509.927819][ T8868] Bluetooth: hci10: command tx timeout [ 509.938284][ T55] Bluetooth: hci14: command tx timeout [ 509.947779][ T5238] Bluetooth: hci12: command tx timeout [ 512.003592][ T8879] Bluetooth: hci13: command tx timeout [ 512.009182][ T8868] Bluetooth: hci14: command tx timeout [ 512.015244][ T5238] Bluetooth: hci12: command tx timeout [ 540.455306][ T8868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.466006][ T8868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.474964][ T8868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 540.483856][ T8868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 540.491616][ T8868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 540.499358][ T8868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.810277][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 546.906251][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.919047][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.934259][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.944284][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.952454][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 546.960739][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.583126][ T4614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.595610][ T4614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.612703][ T4614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.620776][ T4614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.629916][ T4614] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 554.638469][ T4614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.754522][ T8876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 554.768884][ T8876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 554.779333][ T8876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 554.789474][ T8876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 554.799382][ T8876] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 554.807222][ T8876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 558.779363][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 558.797594][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 558.808018][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 558.818505][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 558.832494][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 558.840747][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 563.206145][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.221945][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.697262][ T8919] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 601.707533][ T8919] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 601.720746][ T8919] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 601.729019][ T8919] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 601.737088][ T8919] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 601.745183][ T8919] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 607.756715][ T8923] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 607.781694][ T8923] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 607.794206][ T8923] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 607.816412][ T8923] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 607.824527][ T8923] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 607.833204][ T8923] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 614.902871][ T8935] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 614.932647][ T8935] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 614.942431][ T8935] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 614.956720][ T8935] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 614.965263][ T8935] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 614.973679][ T8935] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 614.981233][ T8935] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 615.045251][ T8939] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 615.055202][ T8939] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 615.073109][ T8939] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 615.084933][ T8939] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 615.093216][ T8939] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 619.084246][ T8886] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 619.099142][ T8886] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 619.107852][ T8886] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 619.117550][ T8886] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 619.125883][ T8886] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 619.133994][ T8886] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 624.236550][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.345289][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.466817][ T35] bond0 (unregistering): Released all slaves [ 624.482820][ T8879] Bluetooth: hci0: command tx timeout [ 624.562367][ T55] Bluetooth: hci6: command tx timeout [ 624.568744][ T55] Bluetooth: hci2: command tx timeout [ 624.574720][ T8876] Bluetooth: hci16: command tx timeout [ 624.581794][ T8876] Bluetooth: hci17: command tx timeout [ 624.587823][ T4614] Bluetooth: hci15: command tx timeout [ 624.593777][ T8879] Bluetooth: hci1: command tx timeout [ 624.600094][ T8879] Bluetooth: hci7: command tx timeout [ 624.609519][ T5238] Bluetooth: hci8: command tx timeout [ 624.615883][ T4614] Bluetooth: hci9: command tx timeout [ 624.662520][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.668880][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.562352][ T8886] Bluetooth: hci0: command tx timeout [ 626.642303][ T8935] Bluetooth: hci9: command tx timeout [ 626.647775][ T8935] Bluetooth: hci7: command tx timeout [ 626.653514][ T8886] Bluetooth: hci8: command tx timeout [ 626.658954][ T8886] Bluetooth: hci2: command tx timeout [ 626.664528][ T5232] Bluetooth: hci17: command tx timeout [ 626.670067][ T5232] Bluetooth: hci15: command tx timeout [ 626.675693][ T8939] Bluetooth: hci1: command tx timeout [ 626.681134][ T8939] Bluetooth: hci16: command tx timeout [ 626.686951][ T8919] Bluetooth: hci6: command tx timeout [ 626.734538][ T8919] Bluetooth: hci10: command 0x0406 tx timeout [ 626.740703][ T8919] Bluetooth: hci11: command 0x0406 tx timeout [ 626.748267][ T8886] Bluetooth: hci12: command 0x0406 tx timeout [ 626.755560][ T8935] Bluetooth: hci14: command 0x0406 tx timeout [ 626.761707][ T8935] Bluetooth: hci13: command 0x0406 tx timeout [ 628.644560][ T5238] Bluetooth: hci0: command tx timeout [ 628.722484][ T55] Bluetooth: hci2: command tx timeout [ 628.727951][ T55] Bluetooth: hci7: command tx timeout [ 628.733462][ T8876] Bluetooth: hci16: command tx timeout [ 628.738988][ T8876] Bluetooth: hci15: command tx timeout [ 628.745139][ T4614] Bluetooth: hci1: command tx timeout [ 628.750679][ T5238] Bluetooth: hci6: command tx timeout [ 628.758834][ T4614] Bluetooth: hci17: command tx timeout [ 628.764614][ T8879] Bluetooth: hci8: command tx timeout [ 628.770044][ T8879] Bluetooth: hci9: command tx timeout [ 630.729099][ T8879] Bluetooth: hci0: command tx timeout [ 630.802432][ T55] Bluetooth: hci7: command tx timeout [ 630.807902][ T55] Bluetooth: hci17: command tx timeout [ 630.813543][ T4614] Bluetooth: hci15: command tx timeout [ 630.819069][ T4614] Bluetooth: hci6: command tx timeout [ 630.825109][ T8876] Bluetooth: hci16: command tx timeout [ 630.830659][ T8876] Bluetooth: hci8: command tx timeout [ 630.836464][ T8879] Bluetooth: hci9: command tx timeout [ 630.842220][ T5238] Bluetooth: hci1: command tx timeout [ 630.847671][ T5238] Bluetooth: hci2: command tx timeout [ 648.322409][ T30] INFO: task syz-executor:8783 blocked for more than 143 seconds. [ 648.330291][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 648.381023][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.428097][ T30] task:syz-executor state:D stack:24688 pid:8783 tgid:8783 ppid:1 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 648.469430][ T30] Call Trace: [ 648.537810][ T30] [ 648.541476][ T30] __schedule+0xef5/0x5750 [ 648.611989][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 648.617283][ T30] ? __pfx___schedule+0x10/0x10 [ 648.682071][ T30] ? schedule+0x298/0x350 [ 648.686503][ T30] ? __pfx_lock_release+0x10/0x10 [ 648.691643][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 648.762208][ T30] ? lock_acquire+0x2f/0xb0 [ 648.766794][ T30] ? schedule+0x1fd/0x350 [ 648.771178][ T30] schedule+0xe7/0x350 [ 648.829045][ T30] schedule_preempt_disabled+0x13/0x30 [ 648.846307][ T30] __mutex_lock+0x5b8/0x9c0 [ 648.850896][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 648.912103][ T30] ? nsim_destroy+0x6f/0x6b0 [ 648.916801][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 648.981989][ T30] ? nsim_destroy+0x6f/0x6b0 [ 648.986661][ T30] nsim_destroy+0x6f/0x6b0 [ 648.991128][ T30] ? kfree+0x14f/0x4b0 [ 649.051383][ T30] __nsim_dev_port_del+0x189/0x240 [ 649.082162][ T30] nsim_dev_reload_destroy+0x108/0x4d0 [ 649.087714][ T30] nsim_drv_remove+0x52/0x1d0 [ 649.122659][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 649.128028][ T30] device_remove+0xc8/0x170 [ 649.159210][ T30] device_release_driver_internal+0x44a/0x610 [ 649.191736][ T30] bus_remove_device+0x22f/0x420 [ 649.210562][ T30] device_del+0x396/0x9f0 [ 649.240207][ T30] ? __pfx_device_del+0x10/0x10 [ 649.252074][ T30] ? rcu_is_watching+0x12/0xc0 [ 649.261227][ T30] device_unregister+0x1d/0xc0 [ 649.310921][ T30] del_device_store+0x346/0x4b0 [ 649.338488][ T30] ? __pfx_del_device_store+0x10/0x10 [ 649.358044][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 649.400626][ T30] ? __pfx_del_device_store+0x10/0x10 [ 649.412340][ T30] bus_attr_store+0x71/0xb0 [ 649.416929][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 649.458291][ T30] sysfs_kf_write+0x117/0x170 [ 649.492052][ T30] kernfs_fop_write_iter+0x33d/0x500 [ 649.497426][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 649.519544][ T30] vfs_write+0x6b5/0x1140 [ 649.531542][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 649.545084][ T30] ? __pfx_vfs_write+0x10/0x10 [ 649.549937][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 649.577095][ T30] ksys_write+0x12f/0x260 [ 649.581504][ T30] ? __pfx_ksys_write+0x10/0x10 [ 649.601907][ T30] do_syscall_64+0xcd/0x250 [ 649.606498][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.639700][ T30] RIP: 0033:0x7fce9817cadf [ 649.651487][ T30] RSP: 002b:00007ffc78565790 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 649.672062][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fce9817cadf [ 649.680108][ T30] RDX: 0000000000000001 RSI: 00007ffc785657e0 RDI: 0000000000000005 [ 649.730183][ T30] RBP: 00007fce981f13ae R08: 0000000000000000 R09: 00007ffc785655e7 [ 649.758085][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 649.778458][ T30] R13: 00007ffc785657e0 R14: 00007fce98e64620 R15: 0000000000000003 [ 649.801366][ T30] [ 649.819888][ T30] INFO: task syz.2.1076:8832 blocked for more than 144 seconds. [ 649.851971][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 649.859668][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.901966][ T30] task:syz.2.1076 state:D stack:24256 pid:8832 tgid:8826 ppid:7099 flags:0x00004002 [ 649.945167][ T30] Call Trace: [ 649.948505][ T30] [ 649.951466][ T30] __schedule+0xef5/0x5750 [ 649.963912][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 649.969183][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 649.982016][ T30] ? __pfx___schedule+0x10/0x10 [ 649.986950][ T30] ? schedule+0x298/0x350 [ 649.991320][ T30] ? __pfx_lock_release+0x10/0x10 [ 650.006960][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 650.021219][ T30] ? lock_acquire+0x2f/0xb0 [ 650.028554][ T30] ? schedule+0x1fd/0x350 [ 650.039183][ T30] schedule+0xe7/0x350 [ 650.047057][ T30] schedule_preempt_disabled+0x13/0x30 [ 650.059060][ T30] __mutex_lock+0x5b8/0x9c0 [ 650.066415][ T30] ? tun_chr_close+0x38/0x230 [ 650.071158][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 650.082361][ T30] ? locks_remove_file+0x393/0x5a0 [ 650.087548][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 650.104926][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 650.110777][ T30] ? tun_chr_close+0x38/0x230 [ 650.124248][ T30] ? rtnl_lock+0x9/0x20 [ 650.128469][ T30] tun_chr_close+0x38/0x230 [ 650.142225][ T30] __fput+0x3f6/0xb60 [ 650.146286][ T30] task_work_run+0x14e/0x250 [ 650.150918][ T30] ? __pfx_task_work_run+0x10/0x10 [ 650.162680][ T30] do_exit+0xadd/0x2d70 [ 650.168191][ T30] ? get_signal+0x8f2/0x2770 [ 650.185657][ T30] ? __pfx_do_exit+0x10/0x10 [ 650.190334][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 650.202107][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 650.207564][ T30] do_group_exit+0xd3/0x2a0 [ 650.224558][ T30] get_signal+0x25fb/0x2770 [ 650.229146][ T30] ? task_work_add+0x1d6/0x370 [ 650.240745][ T30] ? __pfx_get_signal+0x10/0x10 [ 650.251168][ T30] ? fput+0x148/0x390 [ 650.261690][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 650.270889][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.282087][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 650.287802][ T30] do_syscall_64+0xda/0x250 [ 650.300559][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.306934][ T30] RIP: 0033:0x7fc1e917dff9 [ 650.311402][ T30] RSP: 002b:00007fc1e8bde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.330758][ T30] RAX: 0000000000000020 RBX: 00007fc1e9336208 RCX: 00007fc1e917dff9 [ 650.341360][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 650.357088][ T30] RBP: 00007fc1e91f0296 R08: 0000000000000000 R09: 0000000000000000 [ 650.368396][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.382449][ T30] R13: 0000000000000000 R14: 00007fc1e9336208 R15: 00007fff88806048 [ 650.390517][ T30] [ 650.401732][ T30] [ 650.401732][ T30] Showing all locks held in the system: [ 650.541330][ T30] 3 locks held by kworker/u8:1/12: [ 650.549277][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 650.581932][ T30] #1: ffffc90000117d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 650.604067][ T30] #2: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 650.621910][ T30] 3 locks held by kworker/1:0/25: [ 650.627748][ T30] 1 lock held by khungtaskd/30: [ 650.642781][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 650.662234][ T30] 4 locks held by kworker/u8:2/35: [ 650.667409][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 650.689452][ T30] #1: ffffc90000ab7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 650.703546][ T30] #2: ffffffff8fecc810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 650.720130][ T30] #3: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 650.750591][ T30] 3 locks held by kworker/u8:5/790: [ 650.756247][ T30] #0: ffff88802e229948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 650.771886][ T30] #1: ffffc9000368fd80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 650.795337][ T30] #2: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 650.811244][ T30] 2 locks held by getty/4977: [ 650.819888][ T30] #0: ffff8880325e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 650.837773][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 650.858047][ T30] 4 locks held by kworker/1:4/5272: [ 650.866115][ T30] 3 locks held by kworker/1:6/5301: [ 650.871372][ T30] 2 locks held by syz.1.1055/8760: [ 650.882371][ T30] 7 locks held by syz-executor/8783: [ 650.887715][ T30] #0: ffff88802da0c420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 650.913974][ T30] #1: ffff888077570488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 650.930158][ T30] #2: ffff8880282b3968 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 650.943657][ T30] #3: ffffffff8f47bc88 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 650.961053][ T30] #4: ffff88805dd3f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 650.981911][ T30] #5: ffff88805dd68250 (&devlink->lock_key#2){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 651.002057][ T30] #6: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6b0 [ 651.011051][ T30] 1 lock held by syz.0.1077/8830: [ 651.024521][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 651.039754][ T30] 1 lock held by syz.2.1076/8832: [ 651.050689][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 651.068086][ T30] 1 lock held by syz.3.1079/8840: [ 651.077534][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 651.092000][ T30] 6 locks held by syz-executor/8856: [ 651.097344][ T30] #0: ffffffff8fecc810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 651.116108][ T30] #1: ffffffff8fb1cef0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 651.131465][ T30] #2: ffffffff8fb1cc70 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 651.149969][ T30] #3: ffff8880305bcf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 651.162694][ T30] #4: ffff8880305bd230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x5d/0x200 [ 651.180057][ T30] #5: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x118/0xb50 [ 651.191528][ T30] 2 locks held by syz-executor/8865: [ 651.210818][ T30] #0: ffffffff8fecc810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 651.224695][ T30] #1: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 651.242360][ T30] 2 locks held by syz-executor/8873: [ 651.247694][ T30] #0: ffffffff8fecc810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 651.265421][ T30] #1: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 651.280567][ T30] 2 locks held by syz-executor/8874: [ 651.292467][ T30] #0: ffffffff8fecc810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 651.312223][ T30] #1: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 651.329955][ T30] 2 locks held by syz-executor/8883: [ 651.335676][ T30] #0: ffffffff8fecc810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 651.354810][ T30] #1: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 651.372093][ T30] 1 lock held by syz-executor/8893: [ 651.377344][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.395771][ T30] 1 lock held by syz-executor/8898: [ 651.401024][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.416481][ T30] 1 lock held by syz-executor/8904: [ 651.421741][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.441714][ T30] 1 lock held by syz-executor/8908: [ 651.453841][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.469640][ T30] 1 lock held by syz-executor/8911: [ 651.477641][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.491937][ T30] 1 lock held by syz-executor/8916: [ 651.497188][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.517856][ T30] 1 lock held by syz-executor/8922: [ 651.537559][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.558066][ T30] 1 lock held by syz-executor/8932: [ 651.567308][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.581953][ T30] 1 lock held by syz-executor/8933: [ 651.587207][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.606424][ T30] 1 lock held by syz-executor/8945: [ 651.618877][ T30] #0: ffffffff8fee21a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 651.631608][ T30] [ 651.641341][ T30] ============================================= [ 651.641341][ T30] [ 651.654125][ T30] NMI backtrace for cpu 0 [ 651.658509][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 651.669052][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.679141][ T30] Call Trace: [ 651.682445][ T30] [ 651.685410][ T30] dump_stack_lvl+0x116/0x1f0 [ 651.690145][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 651.695128][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 651.701157][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 651.707186][ T30] watchdog+0xf0c/0x1240 [ 651.711468][ T30] ? __pfx_watchdog+0x10/0x10 [ 651.716267][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 651.721512][ T30] ? __kthread_parkme+0x148/0x220 [ 651.726589][ T30] ? __pfx_watchdog+0x10/0x10 [ 651.731309][ T30] kthread+0x2c1/0x3a0 [ 651.735418][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.740654][ T30] ? __pfx_kthread+0x10/0x10 [ 651.745286][ T30] ret_from_fork+0x45/0x80 [ 651.749822][ T30] ? __pfx_kthread+0x10/0x10 [ 651.754455][ T30] ret_from_fork_asm+0x1a/0x30 [ 651.759279][ T30] [ 651.763135][ T30] Sending NMI from CPU 0 to CPUs 1: [ 651.768383][ C1] NMI backtrace for cpu 1 [ 651.768399][ C1] CPU: 1 UID: 0 PID: 5272 Comm: kworker/1:4 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 651.768431][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.768448][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 651.768480][ C1] RIP: 0010:__phys_addr+0xc6/0x150 [ 651.768515][ C1] Code: 0f 87 c1 f3 d7 09 e8 09 9a 4e 00 89 e9 48 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 64 9c 4e 00 48 85 ed 75 11 e8 ea 99 4e 00 <48> 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 d9 99 4e 00 90 0f 0b e8 d1 [ 651.768540][ C1] RSP: 0018:ffffc90000a18d30 EFLAGS: 00000246 [ 651.768560][ C1] RAX: 0000000000000000 RBX: 0000000059e70180 RCX: ffffffff813ee8ac [ 651.768578][ C1] RDX: ffff88802dc8bc00 RSI: ffffffff813ee8b6 RDI: 0000000000000007 [ 651.768595][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 651.768612][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 651.768627][ C1] R13: 0000000000212008 R14: ffff88801b041780 R15: 0000000000000000 [ 651.768645][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 651.768670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.768689][ C1] CR2: 00007fbc759fef98 CR3: 000000003057c000 CR4: 00000000003526f0 [ 651.768706][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.768722][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.768738][ C1] Call Trace: [ 651.768746][ C1] [ 651.768755][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 651.768787][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 651.768833][ C1] ? nmi_handle+0x1a9/0x5c0 [ 651.768862][ C1] ? __phys_addr+0xc6/0x150 [ 651.768894][ C1] ? default_do_nmi+0x6a/0x160 [ 651.768921][ C1] ? exc_nmi+0x170/0x1e0 [ 651.768946][ C1] ? end_repeat_nmi+0xf/0x53 [ 651.768985][ C1] ? __phys_addr+0xbc/0x150 [ 651.769016][ C1] ? __phys_addr+0xc6/0x150 [ 651.769047][ C1] ? __phys_addr+0xc6/0x150 [ 651.769078][ C1] ? __phys_addr+0xc6/0x150 [ 651.769111][ C1] ? __phys_addr+0xc6/0x150 [ 651.769142][ C1] [ 651.769150][ C1] [ 651.769157][ C1] ? slab_free_after_rcu_debug+0x69/0x330 [ 651.769188][ C1] check_slab_allocation+0x15/0x130 [ 651.769217][ C1] kfree+0x11e/0x4b0 [ 651.769240][ C1] ? rcu_is_watching+0x12/0xc0 [ 651.769272][ C1] ? slab_free_after_rcu_debug+0x69/0x330 [ 651.769305][ C1] slab_free_after_rcu_debug+0x69/0x330 [ 651.769334][ C1] ? rcu_core+0x741/0x14d0 [ 651.769364][ C1] ? rcu_core+0x79b/0x14d0 [ 651.769393][ C1] rcu_core+0x79d/0x14d0 [ 651.769425][ C1] ? __pfx_rcu_core+0x10/0x10 [ 651.769461][ C1] handle_softirqs+0x213/0x8f0 [ 651.769492][ C1] ? irq_work_single+0x13a/0x260 [ 651.769533][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 651.769563][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 651.769594][ C1] ? wg_socket_send_skb_to_peer+0x14c/0x220 [ 651.769626][ C1] do_softirq+0xb2/0xf0 [ 651.769653][ C1] [ 651.769661][ C1] [ 651.769669][ C1] __local_bh_enable_ip+0x100/0x120 [ 651.769700][ C1] wg_socket_send_skb_to_peer+0x14c/0x220 [ 651.769734][ C1] wg_packet_tx_worker+0x1aa/0x810 [ 651.769765][ C1] process_one_work+0x9c5/0x1ba0 [ 651.769799][ C1] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 651.769834][ C1] ? __pfx_process_one_work+0x10/0x10 [ 651.769864][ C1] ? assign_work+0x1a0/0x250 [ 651.769905][ C1] worker_thread+0x6c8/0xf00 [ 651.769935][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.769960][ C1] kthread+0x2c1/0x3a0 [ 651.769991][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.770023][ C1] ? __pfx_kthread+0x10/0x10 [ 651.770054][ C1] ret_from_fork+0x45/0x80 [ 651.770078][ C1] ? __pfx_kthread+0x10/0x10 [ 651.770110][ C1] ret_from_fork_asm+0x1a/0x30 [ 651.770155][ C1] [ 652.189728][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 652.196642][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 652.207174][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 652.217257][ T30] Call Trace: [ 652.220556][ T30] [ 652.223511][ T30] dump_stack_lvl+0x3d/0x1f0 [ 652.228145][ T30] panic+0x71d/0x800 [ 652.232080][ T30] ? __pfx_panic+0x10/0x10 [ 652.236530][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 652.241935][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 652.247955][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 652.253357][ T30] ? watchdog+0xd76/0x1240 [ 652.257813][ T30] ? watchdog+0xd69/0x1240 [ 652.262260][ T30] watchdog+0xd87/0x1240 [ 652.266536][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.271237][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 652.276474][ T30] ? __kthread_parkme+0x148/0x220 [ 652.281545][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.286250][ T30] kthread+0x2c1/0x3a0 [ 652.290437][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.295674][ T30] ? __pfx_kthread+0x10/0x10 [ 652.300304][ T30] ret_from_fork+0x45/0x80 [ 652.304766][ T30] ? __pfx_kthread+0x10/0x10 [ 652.309391][ T30] ret_from_fork_asm+0x1a/0x30 [ 652.314207][ T30] [ 652.317384][ T30] Kernel Offset: disabled [ 652.321704][ T30] Rebooting in 86400 seconds..