last executing test programs: 15.288956903s ago: executing program 1 (id=2553): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00002) 13.754122785s ago: executing program 1 (id=2560): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x5c) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0xfffffffd, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x33, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000600000000000000f608000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b70800000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000004b70800000000000007020000f8ffffffb703000008000000b704000002000000858100000000000000100000fdffffffdf719704010000005abbc201f0ffffff8520000003000000bf91000000000000b7020000000007008500000084000000b700000000000000950000000000000000000000000000000000080080190000cca9b754a5f45725a043642ffca9"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000080)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x200001c5, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0x10000000}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 10.575318741s ago: executing program 0 (id=2573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="abd53fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @iv={0x28, 0x117, 0x2, 0x10, "18f269e277a1cc87e2e623bdd7df9956"}], 0x40}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r4 = io_uring_setup(0x6d76, &(0x7f0000000100)={0x0, 0xeff, 0x40, 0x1, 0x294}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) 8.608912716s ago: executing program 4 (id=2579): r0 = syz_io_uring_setup(0xce, &(0x7f00000000c0), &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1, 0x10a5, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) 8.402234637s ago: executing program 0 (id=2581): r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.202551242s ago: executing program 4 (id=2583): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x10d, 0x1, 0x0, 0x0) 7.913498571s ago: executing program 4 (id=2584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x5d62}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)) eventfd(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000000180)={r9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r10, 0x3, r8, 0x5}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000440)={{0x3b, @local, 0x4e23, 0x2, 'ovf\x00', 0x7, 0x4c7, 0xba}, {@broadcast, 0x4e20, 0x2000, 0x3, 0x8, 0x5}}, 0x44) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000240)={0x43a1}, 0x10, 0x0) landlock_restrict_self(r11, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x103b43, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) 7.908416108s ago: executing program 3 (id=2585): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000280)=""/195, 0x41100, 0x18, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) r0 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1}, 0x6e) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) fcntl$notify(r1, 0x402, 0x80000008) r3 = openat$audio(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000000c0)) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000003c0)={0x3, r1}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000200)=ANY=[]) read$rfkill(r4, &(0x7f0000000240), 0x8) 7.190568669s ago: executing program 3 (id=2588): ioperm(0x0, 0x3fc, 0x6) msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) sysfs$3(0x3) 7.141429273s ago: executing program 0 (id=2589): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0xfd, 0x0, @tick=0x3, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x212, @tick=0x51}) getdents(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0xf, &(0x7f00000001c0)='g', 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0xffffffffffffff1c) open(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xff, 0x1}, 0x20) 6.984402977s ago: executing program 3 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS}}, 0x7) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4}, 0x1c) listen(r3, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r4, 0x10d, 0x8c, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303, 0x39}, "5e31ace241a730cb", "27a06f8e96f45af1f5dd00000046380f", "5d6937cd", "7cf66a4d5a20ed4d"}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/148, 0xfffffffffffffc01}) 6.80940893s ago: executing program 1 (id=2591): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6, 0x1, 0xb, 0x1, 0x9, 0x3}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.674308565s ago: executing program 2 (id=2592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) epoll_wait(r5, &(0x7f0000000380)=[{}], 0x2, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 1.926492289s ago: executing program 1 (id=2593): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045503, &(0x7f0000000040)) 1.923098941s ago: executing program 4 (id=2594): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x10d, 0x1, 0x0, 0x0) 1.679921598s ago: executing program 2 (id=2595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 1.656704431s ago: executing program 0 (id=2596): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) 1.542305663s ago: executing program 3 (id=2597): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r0) unshare(0x60600) 1.524635751s ago: executing program 4 (id=2598): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xc, 0x0, &(0x7f0000000540)=0xcc75605367a4caa3) 1.519227614s ago: executing program 0 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000280)=""/195, 0x41100, 0x18, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) r0 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1}, 0x6e) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) fcntl$notify(r1, 0x402, 0x80000008) r3 = openat$audio(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000000c0)) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000003c0)={0x3, r1}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000200)=ANY=[]) read$rfkill(r4, &(0x7f0000000240), 0x8) 1.366141064s ago: executing program 3 (id=2600): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000), 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000340)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 1.365040661s ago: executing program 2 (id=2601): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, r0, 0x801, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 1.332144182s ago: executing program 1 (id=2602): ioperm(0x0, 0x7, 0x7) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.stat\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 1.273984284s ago: executing program 4 (id=2603): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000680)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbef7bbbbb86dd603000bb00182b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r3 = fanotify_init(0x10, 0x101000) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0xfdd1df4705532f1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r6, &(0x7f00000011c0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000480)}, {0xfffffffffffffffc}, {&(0x7f0000000380)="b7fcfea946bb15fab6cf4b72e99ae0da8823f6a00b16fb104db311d8b61d27911f9d501d9cbb46bb8b354476ee094577ea48c288a83350674a844e8e19b59fdd092a6d96c316bbc9427ebd3497546d5afd4b82ba23584fe939063dc44c2141470d0f203626779777dda8fb32fd82495e545769e04a921e55280076efa2cf6fa62d652f87f9d4d9f69fffc4e8cd1ff64a1b37b1b6ba14c311eaff7d40ea3c60868f6884a4e2c23f9d6ffbed", 0xab}], 0x3, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f80)="69bfb0957caf1dd0c052c4a9b85b567cb574c59b46ddb2acbc988f0dbdfd9139fb46e5091651592a852b2056e003bb5b17ec14807dd8e7c8e9b44b4fac98a70eb51c66a4a9dff0c0224f9c7c9382a8c999c3", 0x52}, {&(0x7f0000001000)="858f7e56199ce4780305dd62491e57eaea5cfb48f2288ef4e5bd471699072162f33411fa2e924fcb883411118a7bf7f74205dd5bf375a06fb20894f9079bb3760632ad6fafaedb4bfc512eef2ffdce167567133f66704f3b6936b31c4dcd6b419a11fa34dae1893f9c5423c4ecc6109aec7bfc2c227192e25efb80b1ef3b0c3edec86b5ebac38bd852e0ab2fa63fb80ebef8208ade3e70f10f6bacc2b50d7c808c1d8babc2d5f03e69d936aaaddfc71ca27c5d79a67bf4", 0xb7}, {&(0x7f00000010c0)="bc235e6cf5e0102249e3030dd88ce69f01711f91ddd43d69bec23b063430b2c71f7e38f7495e7ca875bf67de9a2391e3fde47139fd666230e0e22d94bcc481", 0x3f}], 0x3, &(0x7f0000001180), 0x0, 0x8010}}], 0x5, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0), &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x131a, 0x0, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x17) 1.107777621s ago: executing program 2 (id=2604): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.020722308s ago: executing program 0 (id=2605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xecf, 0x5c}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3f}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3dd0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x68be}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) unshare(0x42000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb}, 0x24}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}]}]}, 0x94}}, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 642.027903ms ago: executing program 2 (id=2606): ioperm(0x0, 0x3fc, 0x6) msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) sysfs$3(0x3) 627.957153ms ago: executing program 1 (id=2607): openat$mice(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x8, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0) 189.778296ms ago: executing program 3 (id=2608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS}}, 0x7) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4}, 0x1c) listen(r3, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r4, 0x10d, 0x8c, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303, 0x39}, "5e31ace241a730cb", "27a06f8e96f45af1f5dd00000046380f", "5d6937cd", "7cf66a4d5a20ed4d"}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/148, 0xfffffffffffffc01}) 0s ago: executing program 2 (id=2609): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) kernel console output (not intermixed with test programs): lave_0) entered blocking state [ 662.309061][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.327730][T10650] bridge_slave_0: entered allmulticast mode [ 662.338084][T10650] bridge_slave_0: entered promiscuous mode [ 662.350615][T10650] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.358044][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.366266][T10650] bridge_slave_1: entered allmulticast mode [ 662.378743][T10650] bridge_slave_1: entered promiscuous mode [ 662.631154][T10650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.768326][T10650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.816092][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.839310][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.850503][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.862590][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.899562][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.915843][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.926934][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.942686][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.979858][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.201694][T10650] team0: Port device team_slave_0 added [ 663.261185][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.311764][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.369162][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.388826][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.412436][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.428433][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.450365][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.480299][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.531672][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.573027][ T5092] Bluetooth: hci4: command tx timeout [ 663.599427][ T7481] bridge_slave_1: left allmulticast mode [ 663.607635][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 663.631212][ T7481] bridge_slave_1: left promiscuous mode [ 663.637994][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.646645][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 663.658066][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 663.669345][ T7481] bridge_slave_0: left allmulticast mode [ 663.675005][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 663.675822][ T7481] bridge_slave_0: left promiscuous mode [ 663.685895][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 663.689037][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.697964][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 663.741625][ T7481] bridge_slave_1: left allmulticast mode [ 663.755270][ T7481] bridge_slave_1: left promiscuous mode [ 663.761291][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.784516][ T7481] bridge_slave_0: left allmulticast mode [ 663.792189][ T7481] bridge_slave_0: left promiscuous mode [ 663.804827][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.256496][ T7481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.280367][ T7481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.299960][ T7481] bond0 (unregistering): Released all slaves [ 665.574879][ T7481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.591352][ T7481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.616943][ T7481] bond0 (unregistering): Released all slaves [ 665.644673][T10650] team0: Port device team_slave_1 added [ 665.677320][T10393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.711243][T10393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.737250][T10393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.746443][T10393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.823930][ T5095] Bluetooth: hci4: command tx timeout [ 665.996016][ T5095] Bluetooth: hci5: command tx timeout [ 666.193822][T10650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.203109][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.231314][T10650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.318358][T10650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.326103][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.358534][T10650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.542129][T10572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 666.743065][T10572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 666.764572][T10572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 667.064605][T10572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 667.199241][T10650] hsr_slave_0: entered promiscuous mode [ 667.208859][T10650] hsr_slave_1: entered promiscuous mode [ 667.235182][T10650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.262440][T10650] Cannot create hsr debugfs directory [ 667.652620][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.660515][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.867938][ T7481] hsr_slave_0: left promiscuous mode [ 667.874996][ T7481] hsr_slave_1: left promiscuous mode [ 667.883295][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.891639][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.913871][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.926674][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.946117][ T7481] hsr_slave_0: left promiscuous mode [ 667.952605][ T7481] hsr_slave_1: left promiscuous mode [ 667.968293][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.978211][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.988634][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.996115][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.064188][ T7481] veth1_macvtap: left promiscuous mode [ 668.070334][ T7481] veth0_macvtap: left promiscuous mode [ 668.077772][ T7481] veth1_vlan: left promiscuous mode [ 668.083756][ T7481] veth0_vlan: left promiscuous mode [ 668.092148][ T7481] veth1_macvtap: left promiscuous mode [ 668.098455][ T7481] veth0_macvtap: left promiscuous mode [ 668.104376][ T7481] veth1_vlan: left promiscuous mode [ 668.113786][ T7481] veth0_vlan: left promiscuous mode [ 668.249456][ T4478] Bluetooth: hci5: command tx timeout [ 669.531328][ T7481] team0 (unregistering): Port device team_slave_1 removed [ 669.624719][ T7481] team0 (unregistering): Port device team_slave_0 removed [ 670.509151][ T5095] Bluetooth: hci5: command tx timeout [ 671.408285][ T7481] team0 (unregistering): Port device team_slave_1 removed [ 671.488456][ T7481] team0 (unregistering): Port device team_slave_0 removed [ 672.731728][ T7483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.749856][ T7483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.765837][ T5095] Bluetooth: hci5: command tx timeout [ 672.995957][T10696] chnl_net:caif_netlink_parms(): no params data found [ 673.198479][T10586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.499869][T10586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.547929][T10586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.773994][T10586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 674.198062][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.212507][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.230039][T10696] bridge_slave_0: entered allmulticast mode [ 674.250975][T10696] bridge_slave_0: entered promiscuous mode [ 674.284192][T10572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.339182][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.356097][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.368762][T10696] bridge_slave_1: entered allmulticast mode [ 674.389965][T10696] bridge_slave_1: entered promiscuous mode [ 674.692918][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.797659][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.830364][T10572] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.090247][T10696] team0: Port device team_slave_0 added [ 675.113999][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.121397][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.139654][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.146933][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.276553][T10696] team0: Port device team_slave_1 added [ 675.368684][T10650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 675.757519][T10650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 675.935832][T10650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 676.205025][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.257652][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.308410][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.480485][ T7481] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.508281][T10650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 676.587534][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.612228][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.639171][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.721164][T10731] Bluetooth: MGMT ver 1.22 [ 676.736906][ T7481] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.939773][ T7481] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.080556][T10696] hsr_slave_0: entered promiscuous mode [ 677.111140][T10696] hsr_slave_1: entered promiscuous mode [ 677.122469][T10696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.131297][T10696] Cannot create hsr debugfs directory [ 677.302972][ T7481] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 677.333690][ T7481] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.809417][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.256622][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.376224][T10572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.760431][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.767829][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.857120][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.864339][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.007975][ T7481] bridge_slave_1: left allmulticast mode [ 679.020858][ T7481] bridge_slave_1: left promiscuous mode [ 679.029556][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.053639][ T7481] bridge_slave_0: left allmulticast mode [ 679.059385][ T7481] bridge_slave_0: left promiscuous mode [ 679.081156][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.336358][ T7481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.385783][ T7481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.423682][ T7481] bond0 (unregistering): Released all slaves [ 680.498208][ T7481] bond1 (unregistering): Released all slaves [ 681.611226][ T7481] hsr_slave_0: left promiscuous mode [ 681.635688][ T7481] hsr_slave_1: left promiscuous mode [ 681.651571][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.659208][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.681746][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.692200][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.763803][ T7481] veth1_macvtap: left promiscuous mode [ 681.772308][ T7481] veth0_macvtap: left promiscuous mode [ 681.778799][ T7481] veth1_vlan: left promiscuous mode [ 681.784880][ T7481] veth0_vlan: left promiscuous mode [ 683.238557][ T7481] team0 (unregistering): Port device team_slave_1 removed [ 683.323271][ T7481] team0 (unregistering): Port device team_slave_0 removed [ 684.323249][ T29] audit: type=1326 audit(1720369940.353:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f925ff75bd9 code=0x0 [ 684.460360][T10572] veth0_vlan: entered promiscuous mode [ 684.501641][T10768] sp0: Synchronizing with TNC [ 684.637978][T10650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.805413][T10650] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.874544][T10572] veth1_vlan: entered promiscuous mode [ 684.919232][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.926489][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.967157][T10696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 685.062041][T10696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 685.085830][T10696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 685.216804][T10696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 685.293755][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.301075][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.556440][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.731052][T10572] veth0_macvtap: entered promiscuous mode [ 685.796721][T10572] veth1_macvtap: entered promiscuous mode [ 685.967721][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.987930][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.000062][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.012737][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.030185][T10572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.073744][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.105596][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.141733][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.173651][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.188361][T10572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.272253][T10572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.288462][T10572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.300802][T10572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.310347][T10572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.378978][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.403580][T10586] veth0_vlan: entered promiscuous mode [ 686.497665][T10586] veth1_vlan: entered promiscuous mode [ 686.542750][T10696] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.606077][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.613426][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.702137][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.709529][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.731277][ T5164] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 686.805049][T10650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.842865][T10586] veth0_macvtap: entered promiscuous mode [ 686.915829][T10586] veth1_macvtap: entered promiscuous mode [ 686.949113][ T5164] usb 4-1: Using ep0 maxpacket: 32 [ 686.957946][ T5164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.979113][ T5164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.990178][ T5164] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 687.012383][ T5164] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 687.022622][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.037370][ T5164] usb 4-1: config 0 descriptor?? [ 687.128479][ T7477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.140166][ T7477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.277530][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.306821][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.329486][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.345922][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.357530][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.369747][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.414567][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.540441][ T5164] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 687.601033][ T7486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.618589][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.643386][ T7486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.653800][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.692377][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.705201][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.715133][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.726761][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.740168][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.758020][T10586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.767579][T10586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.777311][T10586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.789419][T10586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.869231][T10650] veth0_vlan: entered promiscuous mode [ 688.023215][T10650] veth1_vlan: entered promiscuous mode [ 688.312410][T10650] veth0_macvtap: entered promiscuous mode [ 688.351389][T10650] veth1_macvtap: entered promiscuous mode [ 688.499953][ T7477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.525943][ T7477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.566315][T10793] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1617'. [ 688.794173][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.813932][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.826367][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.837540][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.849067][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.860336][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.875595][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.891129][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.908029][T10650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.004980][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.015621][ T7481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.048936][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.052689][ T7481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.081026][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.092321][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.119714][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.131157][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.144516][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.156884][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.172018][T10650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.234360][T10650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.243330][T10650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.252882][T10650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.264417][T10650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.292431][T10696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.796425][ T7481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.844369][ T7481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.914103][ T25] usb 4-1: USB disconnect, device number 11 [ 690.030655][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.091770][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.808693][T10696] veth0_vlan: entered promiscuous mode [ 690.907071][T10696] veth1_vlan: entered promiscuous mode [ 690.940262][T10825] pim6reg: entered allmulticast mode [ 691.040214][T10825] pim6reg: left allmulticast mode [ 691.167982][ T29] audit: type=1400 audit(1720369946.666:755): avc: denied { connect } for pid=10828 comm="syz.2.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 691.474283][T10696] veth0_macvtap: entered promiscuous mode [ 691.536695][T10696] veth1_macvtap: entered promiscuous mode [ 691.655466][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.712609][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.745117][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.786864][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.797055][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.807741][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.818380][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.836149][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.846297][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.862750][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.882163][T10696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.023234][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.035137][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.048816][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.059939][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.070223][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.082503][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.094812][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.125854][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.138336][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.152875][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.166724][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.211953][T10696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.240354][T10696] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.259577][T10696] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.285763][T10696] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.802569][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.835143][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.060875][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 693.555938][ T7481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.602089][ T7481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.073229][ T29] audit: type=1400 audit(1720369951.096:756): avc: denied { create } for pid=10863 comm="syz.1.1886" name="#1a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 696.166758][ T29] audit: type=1400 audit(1720369951.198:757): avc: denied { link } for pid=10863 comm="syz.1.1886" name="#1a" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 696.277685][ T29] audit: type=1400 audit(1720369951.198:758): avc: denied { rename } for pid=10863 comm="syz.1.1886" name="#1b" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 698.042098][ T5069] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 698.087224][ T7472] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 698.269314][ T5069] usb 2-1: Using ep0 maxpacket: 16 [ 698.295164][ T5069] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.315409][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.366207][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 698.388542][ T5069] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 698.399192][ T5069] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.423635][ T5069] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 698.436794][ T5069] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 698.446466][ T5069] usb 2-1: Manufacturer: syz [ 698.463407][ T5069] usb 2-1: config 0 descriptor?? [ 698.652697][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1902'. [ 698.711401][T10911] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1902'. [ 698.728565][T10911] vlan0: entered allmulticast mode [ 698.733908][T10911] veth0_vlan: entered allmulticast mode [ 698.925177][ T5069] rc_core: IR keymap rc-hauppauge not found [ 698.939049][ T5069] Registered IR keymap rc-empty [ 698.966181][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 699.029320][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 699.077805][ T5069] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 699.222814][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1904'. [ 699.723637][ T5069] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 700.153792][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.263486][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.360481][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.414701][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.462943][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.525493][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.528058][T10925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1906'. [ 700.600986][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.626251][ T7481] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 700.677307][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.762710][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.804699][ T5069] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 700.878244][ T5069] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 700.919328][ T5069] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 700.937588][T10939] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 700.944189][T10939] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 700.953262][ T5069] usb 2-1: USB disconnect, device number 10 [ 700.969821][ T29] audit: type=1400 audit(1720369955.721:759): avc: denied { mounton } for pid=10940 comm="syz.0.1913" path="/15/file1/file0" dev="autofs" ino=36987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 700.999706][T10939] vhci_hcd vhci_hcd.0: Device attached [ 701.170151][ T29] audit: type=1326 audit(1720369955.896:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.3.1914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f925ff75bd9 code=0x0 [ 701.212792][ T1099] Bluetooth: hci6: Frame reassembly failed (-84) [ 701.313055][ T29] audit: type=1400 audit(1720369956.035:761): avc: denied { execute } for pid=10938 comm="syz.2.1912" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 701.367942][ T5134] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 701.739569][T10945] vhci_hcd: connection reset by peer [ 701.801247][ T1099] vhci_hcd: stop threads [ 701.805564][ T1099] vhci_hcd: release socket [ 701.852689][ T1099] vhci_hcd: disconnect device [ 702.736300][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1924'. [ 702.839140][ T29] audit: type=1400 audit(1720369957.437:762): avc: denied { audit_read } for pid=10970 comm="syz.1.1925" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.350855][ T5095] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 704.196544][T10979] xt_hashlimit: size too large, truncated to 1048576 [ 704.206298][T10979] xt_hashlimit: Unknown mode mask 312, kernel too old? [ 704.780804][T10985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10985 comm=syz.1.1928 [ 706.224750][T10996] syz.4.1932[10996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.224992][T10996] syz.4.1932[10996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.915219][ T5134] vhci_hcd: vhci_device speed not set [ 707.038443][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1937'. [ 707.296150][ T29] audit: type=1400 audit(1720369961.554:763): avc: denied { mount } for pid=11010 comm="syz.1.1939" name="/" dev="pstore" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 707.373609][ T5095] Bluetooth: hci6: sending frame failed (-49) [ 707.374735][T11011] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 707.383575][ T4478] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 707.471900][ T29] audit: type=1326 audit(1720369961.720:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.2.1940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x0 [ 707.681015][ T29] audit: type=1400 audit(1720369961.914:765): avc: denied { unmount } for pid=10572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 708.828215][T11024] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 709.261547][T11028] binder: 11027:11028 ioctl 40046205 0 returned -22 [ 709.522595][T11028] binder: 11027:11028 ioctl c0306201 20001a80 returned -11 [ 709.683119][T11032] Bluetooth: hci6: Frame reassembly failed (-84) [ 710.141669][ T7488] Bluetooth: hci6: Frame reassembly failed (-84) [ 710.182540][ T7488] Bluetooth: hci6: Frame reassembly failed (-84) [ 711.932665][ T4478] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 712.392643][ T29] audit: type=1400 audit(1720369966.261:766): avc: denied { getopt } for pid=11046 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.085553][ T29] audit: type=1326 audit(1720369966.898:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.1.1956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87c4575bd9 code=0x0 [ 713.116411][ T7477] Bluetooth: hci6: Frame reassembly failed (-84) [ 713.442097][T11065] binder: 11064:11065 ioctl 40046205 0 returned -22 [ 713.558149][ T5092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 713.583874][ T5092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 713.611309][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 713.631636][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 713.641761][ T5092] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 713.650081][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 713.864660][ T7477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.198615][ T7477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.452420][ T7477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.767945][ T7477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.776112][ T29] audit: type=1400 audit(1720369968.449:768): avc: denied { setopt } for pid=11088 comm="syz.3.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 715.121001][ T29] audit: type=1400 audit(1720369968.781:769): avc: denied { ioctl } for pid=11091 comm="syz.2.1970" path="socket:[37237]" dev="sockfs" ino=37237 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 715.312224][ T4478] Bluetooth: hci6: command 0x1003 tx timeout [ 715.319564][ T5095] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 716.061874][ T5095] Bluetooth: hci3: command tx timeout [ 716.474132][T11066] chnl_net:caif_netlink_parms(): no params data found [ 716.809230][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.815659][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.895375][ T7477] bridge_slave_1: left allmulticast mode [ 716.901098][ T7477] bridge_slave_1: left promiscuous mode [ 716.927992][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.996201][ T7477] bridge_slave_0: left allmulticast mode [ 717.025595][ T7477] bridge_slave_0: left promiscuous mode [ 717.044315][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.528578][T11117] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 717.536482][T11117] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end] [ 717.544921][T11117] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 717.561193][T11117] Error parsing options; rc = [-22] [ 718.182728][ T29] audit: type=1400 audit(1720369971.578:770): avc: denied { setopt } for pid=11125 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.205819][T11126] netlink: 'syz.2.1982': attribute type 3 has an invalid length. [ 718.214939][T11126] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1982'. [ 718.258604][ T5095] Bluetooth: hci3: command tx timeout [ 719.008745][ T7477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.031954][ T7477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.053336][ T7477] bond0 (unregistering): Released all slaves [ 719.195511][T11122] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 719.222893][T11122] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 719.233712][T11122] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 720.588824][ T5095] Bluetooth: hci3: command tx timeout [ 720.866845][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.879580][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.912391][T11066] bridge_slave_0: entered allmulticast mode [ 720.958350][T11066] bridge_slave_0: entered promiscuous mode [ 720.977710][T11148] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 721.009136][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.049704][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.095257][T11066] bridge_slave_1: entered allmulticast mode [ 721.143599][T11066] bridge_slave_1: entered promiscuous mode [ 721.433598][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.642319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 721.848011][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.923574][T11162] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.939079][T11162] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 721.951828][T11162] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 722.211334][T11066] team0: Port device team_slave_0 added [ 722.314701][ T7477] hsr_slave_0: left promiscuous mode [ 722.362421][ T7477] hsr_slave_1: left promiscuous mode [ 722.415050][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.450704][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.502051][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.532414][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.602092][T11171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1996'. [ 722.765731][ T5095] Bluetooth: hci3: command tx timeout [ 722.869544][ T7477] veth1_macvtap: left promiscuous mode [ 722.914660][ T7477] veth0_macvtap: left promiscuous mode [ 722.932076][ T7477] veth1_vlan: left promiscuous mode [ 722.970395][ T7477] veth0_vlan: left allmulticast mode [ 723.011780][ T7477] veth0_vlan: left promiscuous mode [ 723.046936][T11179] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 723.362415][T11185] netlink: 588 bytes leftover after parsing attributes in process `syz.4.2001'. [ 723.922410][ T9677] libceph: connect (1)[c::]:6789 error -101 [ 723.929349][ T9677] libceph: mon0 (1)[c::]:6789 connect error [ 724.152002][ T29] audit: type=1326 audit(1720369977.107:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.4.2002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1de975bd9 code=0x0 [ 724.228891][ T5137] libceph: connect (1)[c::]:6789 error -101 [ 724.246878][ T5137] libceph: mon0 (1)[c::]:6789 connect error [ 724.729423][T11188] ceph: No mds server is up or the cluster is laggy [ 724.994470][T11195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.222787][ T7477] team0 (unregistering): Port device team_slave_1 removed [ 725.340364][ T7477] team0 (unregistering): Port device team_slave_0 removed [ 727.386778][T11066] team0: Port device team_slave_1 added [ 727.486907][T11170] netlink: 'syz.3.1996': attribute type 27 has an invalid length. [ 727.732235][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.784568][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.871891][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.915726][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.959643][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.011714][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.357081][T11066] hsr_slave_0: entered promiscuous mode [ 728.385415][T11066] hsr_slave_1: entered promiscuous mode [ 728.410285][T11066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.415902][T11227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.425298][T11066] Cannot create hsr debugfs directory [ 730.973463][T11250] __vm_enough_memory: pid: 11250, comm: syz.3.2023, bytes: 549733863424 not enough memory for the allocation [ 731.278051][T11258] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 731.299042][T11258] netlink: 'syz.1.2025': attribute type 2 has an invalid length. [ 731.478714][T11262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 731.485337][T11262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.543938][T11262] vhci_hcd vhci_hcd.0: Device attached [ 731.700814][T11066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 731.791775][T11066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 731.844712][ T5170] usb 13-1: new low-speed USB device number 3 using vhci_hcd [ 731.880161][ T5134] libceph: connect (1)[c::]:6789 error -101 [ 731.886974][ T5134] libceph: mon0 (1)[c::]:6789 connect error [ 731.913248][T11066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 731.998391][T11066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 732.020969][ T29] audit: type=1326 audit(1720369984.380:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87c4575bd9 code=0x0 [ 732.182096][ T5134] libceph: connect (1)[c::]:6789 error -101 [ 732.188252][ T5134] libceph: mon0 (1)[c::]:6789 connect error [ 732.779142][ T5134] libceph: connect (1)[c::]:6789 error -101 [ 732.831556][ T5134] libceph: mon0 (1)[c::]:6789 connect error [ 733.150650][T11263] vhci_hcd: connection reset by peer [ 733.169205][ T7477] vhci_hcd: stop threads [ 733.173530][ T7477] vhci_hcd: release socket [ 733.200185][T11268] ceph: No mds server is up or the cluster is laggy [ 733.207087][ T7477] vhci_hcd: disconnect device [ 733.478464][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.588420][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.659368][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.666707][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.679141][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.686478][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.122454][T11066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.172427][T11322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.206973][T11322] syz.1.2044: attempt to access beyond end of device [ 736.206973][T11322] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 736.244320][T11322] SQUASHFS error: Failed to read block 0x0: -5 [ 736.249769][T11307] overlayfs: failed to resolve './bus': -2 [ 736.250840][T11322] unable to read squashfs_super_block [ 736.576140][T11066] veth0_vlan: entered promiscuous mode [ 736.660127][T11066] veth1_vlan: entered promiscuous mode [ 736.761411][T11325] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.771603][T11325] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.842970][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.850241][T11327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.857849][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.865111][T11327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.949668][T11327] bridge0: entered promiscuous mode [ 736.954953][T11327] bridge0: entered allmulticast mode [ 737.135892][T11066] veth0_macvtap: entered promiscuous mode [ 737.600559][ T5170] vhci_hcd: vhci_device speed not set [ 737.864653][T11066] veth1_macvtap: entered promiscuous mode [ 738.034530][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.217206][T11333] __vm_enough_memory: pid: 11333, comm: syz.1.2047, bytes: 549870026752 not enough memory for the allocation [ 738.260837][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.277002][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.289769][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.300928][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.311575][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.321544][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.332877][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.342842][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.353357][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.395939][T11066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.455300][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.529965][ T29] audit: type=1400 audit(1720369990.379:773): avc: denied { remount } for pid=11335 comm="syz.4.2048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 738.555747][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.602157][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.658096][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.707045][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.744036][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.778033][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.802581][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.817718][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.828255][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.842559][T11066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.868929][T11066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.883062][T11066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.073936][ T5095] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 739.083577][ T5095] Bluetooth: hci4: Injecting HCI hardware error event [ 739.096984][ T4478] Bluetooth: hci4: hardware error 0x00 [ 739.189484][T11066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.513953][T11066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.125550][T11359] netlink: 'syz.2.2056': attribute type 27 has an invalid length. [ 740.133996][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.162845][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.404170][ T5069] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 740.485491][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.501323][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.621259][ T5069] usb 4-1: Using ep0 maxpacket: 32 [ 740.640132][ T5069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.692088][ T5069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.759589][ T5069] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 740.787736][ T5069] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 740.800640][ T5069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.952928][ T5069] usb 4-1: config 0 descriptor?? [ 741.279895][T11372] __vm_enough_memory: pid: 11372, comm: syz.1.2060, bytes: 549870026752 not enough memory for the allocation [ 741.806433][ T4478] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 742.278506][ T5069] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 742.311580][ T5069] usb 4-1: USB disconnect, device number 12 [ 742.506480][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.514456][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.681810][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.689155][T11377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.697798][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.705172][T11377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.741931][T11377] bridge0: entered promiscuous mode [ 742.750844][T11377] bridge0: entered allmulticast mode [ 742.915525][ T29] audit: type=1400 audit(1720369994.431:774): avc: denied { write } for pid=11384 comm="syz.3.2064" path="socket:[38927]" dev="sockfs" ino=38927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 744.063768][ T29] audit: type=1400 audit(1720369995.493:775): avc: denied { getopt } for pid=11397 comm="syz.1.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 744.509370][T11405] __vm_enough_memory: pid: 11405, comm: syz.4.2071, bytes: 549667201024 not enough memory for the allocation [ 744.747696][T11413] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2076'. [ 744.771395][T11413] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 745.896447][ T29] audit: type=1400 audit(1720369997.182:776): avc: denied { execute } for pid=11420 comm="syz.4.2079" name="file0" dev="ramfs" ino=38821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 746.176264][ T29] audit: type=1400 audit(1720369997.440:777): avc: denied { getopt } for pid=11426 comm="syz.4.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 746.404828][ T29] audit: type=1326 audit(1720369997.653:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ee3575bd9 code=0x0 [ 746.466618][T11437] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 749.332104][T11470] binder: 11467:11470 ioctl 541b 20000100 returned -22 [ 749.687468][T11470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11470 comm=syz.0.2101 [ 750.143988][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'. [ 750.207188][T11476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.085878][ T29] audit: type=1400 audit(1720370001.972:779): avc: denied { read write } for pid=11482 comm="syz.0.2105" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 751.327390][ T29] audit: type=1400 audit(1720370002.000:780): avc: denied { open } for pid=11482 comm="syz.0.2105" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 751.350869][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.439701][ T8933] hid-generic 0000:0000:0000.0007: unknown main item tag 0x5 [ 751.484225][ T8933] hid-generic 0000:0000:0000.0007: item fetching failed at offset 6/9 [ 751.518058][ T8933] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 751.700940][ T29] audit: type=1400 audit(1720370002.544:781): avc: denied { ioctl } for pid=11488 comm="syz.2.2107" path="socket:[39037]" dev="sockfs" ino=39037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 751.747346][ T5134] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 751.833173][ T29] audit: type=1326 audit(1720370002.664:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.4.2109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1de975bd9 code=0x0 [ 751.978591][ T5134] usb 1-1: not running at top speed; connect to a high speed hub [ 751.999069][ T5134] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 752.029478][ T5134] usb 1-1: config 1 interface 0 has no altsetting 0 [ 752.037430][ T5134] usb 1-1: language id specifier not provided by device, defaulting to English [ 752.056168][ T5134] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.40 [ 752.065629][ T5134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.083857][ T5134] usb 1-1: Product: 㖕缤⒚ရ䃭踐폣൰頟အ渹ᾀ뱓ᆎ兇ꓶ꽇ᯂ㾡㨃ꓷ⌱篑펺䓁௟✤苹䤜몇㓎瀯䓛潃㼙쑈Ẳ쭫略뱫괻툃뒌⫏︚ꍴ⦗鳹ꙡ漼ὦ䙍｛硖뉒≳젴⩾䚭櫈柩㽓뇧 [ 752.116784][ T5134] usb 1-1: Manufacturer: ꖰ霎ใ犩䉾໪鐕莤 [ 752.146371][T11486] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.159012][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.251611][T11511] input: syz0 as /devices/virtual/input/input21 [ 753.903492][T11515] netlink: 'syz.2.2116': attribute type 11 has an invalid length. [ 754.103071][ T5134] usbhid 1-1:1.0: can't add hid device: -71 [ 754.130487][ T5134] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 754.152756][ T5134] usb 1-1: USB disconnect, device number 11 [ 754.263246][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 754.401986][T11526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.923820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 755.140650][ T5095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 755.606872][ T5095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 755.626289][ T5095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 755.639676][ T5095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 755.649105][ T5095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 755.657722][ T5095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 757.857656][ T29] audit: type=1400 audit(1720370008.221:783): avc: denied { accept } for pid=11554 comm="syz.2.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 757.961699][ T5095] Bluetooth: hci6: command tx timeout [ 758.052657][ T5137] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 758.254116][T11538] chnl_net:caif_netlink_parms(): no params data found [ 758.261205][ T5137] usb 2-1: Using ep0 maxpacket: 16 [ 758.276973][ T5137] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.339525][ T5137] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=15.6f [ 758.364039][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.378243][ T5137] usb 2-1: Product: syz [ 758.383881][ T5137] usb 2-1: Manufacturer: syz [ 758.393524][ T5137] usb 2-1: SerialNumber: syz [ 758.415829][ T5137] r8152-cfgselector 2-1: Unknown version 0x0000 [ 758.422381][ T5137] r8152-cfgselector 2-1: config 0 descriptor?? [ 758.588828][ T29] audit: type=1400 audit(1720370008.904:784): avc: denied { bind } for pid=11568 comm="syz.0.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 758.819093][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.210611][T11538] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.221424][T11538] bridge_slave_0: entered allmulticast mode [ 759.231289][T11538] bridge_slave_0: entered promiscuous mode [ 759.244703][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.252312][T11538] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.261845][T11538] bridge_slave_1: entered allmulticast mode [ 759.271083][T11538] bridge_slave_1: entered promiscuous mode [ 759.394183][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.426591][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.209989][ T5095] Bluetooth: hci6: command tx timeout [ 760.779970][ T5164] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 761.016210][T11538] team0: Port device team_slave_0 added [ 761.069135][T11538] team0: Port device team_slave_1 added [ 761.325234][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.332256][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.425154][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.479036][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.554857][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.644742][ T5095] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 761.693971][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.171337][T11538] hsr_slave_0: entered promiscuous mode [ 762.216119][T11538] hsr_slave_1: entered promiscuous mode [ 762.244849][T11538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.266565][T11538] Cannot create hsr debugfs directory [ 762.462336][ T5095] Bluetooth: hci6: command tx timeout [ 762.725550][ T5095] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 762.739147][ T5095] Bluetooth: hci3: Injecting HCI hardware error event [ 762.750891][ T4478] Bluetooth: hci3: hardware error 0x00 [ 762.976499][ T29] audit: type=1400 audit(1720370012.928:785): avc: denied { mount } for pid=11619 comm="syz.1.2152" name="/" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 763.157663][T11621] 9pnet_fd: p9_fd_create_tcp (11621): problem connecting socket to 127.0.0.1 [ 763.192881][T11620] netlink: 'syz.1.2152': attribute type 5 has an invalid length. [ 763.958279][T11538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.284817][T11635] cgroup: subsys name conflicts with all [ 764.350332][T11538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.741408][ T5092] Bluetooth: hci6: command tx timeout [ 764.752334][ T5092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 764.765614][ T5092] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 764.780925][ T5092] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 764.791219][ T5092] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 764.800862][ T5092] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 764.808762][ T5092] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 764.877638][T11538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.976285][ T4478] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 766.154917][T11538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.427684][ T5134] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 766.471578][ T7477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.685696][ T5134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.736379][ T5134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.764490][ T5134] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 766.819454][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.846238][ T7477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.874342][ T5134] usb 2-1: config 0 descriptor?? [ 766.921140][ T5134] usbhid 2-1:0.0: can't add hid device: -22 [ 766.931957][ T5134] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 767.026902][ T7477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.057200][ T4478] Bluetooth: hci7: command tx timeout [ 767.268868][ T7477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.321537][T11664] netlink: 'syz.2.2169': attribute type 21 has an invalid length. [ 767.344784][T11664] netlink: 'syz.2.2169': attribute type 6 has an invalid length. [ 767.359298][T11664] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2169'. [ 767.816283][T11672] cgroup: subsys name conflicts with all [ 767.862996][T11538] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 767.888872][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.911904][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.027806][T11538] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 768.048064][T11538] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 768.074080][T11538] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 768.315131][ T7477] bridge_slave_1: left allmulticast mode [ 768.338858][ T7477] bridge_slave_1: left promiscuous mode [ 768.373972][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.430016][ T7477] bridge_slave_0: left allmulticast mode [ 768.463919][ T7477] bridge_slave_0: left promiscuous mode [ 768.472111][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.287910][T11683] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 769.297569][T11683] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end] [ 769.306463][T11683] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 769.313217][ T4478] Bluetooth: hci7: command tx timeout [ 769.353436][T11683] Error parsing options; rc = [-22] [ 770.681847][ T7477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.726807][ T7477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.781096][ T7477] bond0 (unregistering): Released all slaves [ 770.839864][T11645] chnl_net:caif_netlink_parms(): no params data found [ 771.097174][ T5170] usb 2-1: USB disconnect, device number 12 [ 771.609272][ T4478] Bluetooth: hci7: command tx timeout [ 772.885753][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.893564][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.905663][T11645] bridge_slave_0: entered allmulticast mode [ 772.914273][T11645] bridge_slave_0: entered promiscuous mode [ 773.040450][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.073873][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.090649][T11645] bridge_slave_1: entered allmulticast mode [ 773.140186][T11645] bridge_slave_1: entered promiscuous mode [ 773.148512][T11713] Bluetooth: MGMT ver 1.22 [ 773.721191][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.780486][ T7477] hsr_slave_0: left promiscuous mode [ 773.788137][ T7477] hsr_slave_1: left promiscuous mode [ 773.817372][ T4478] Bluetooth: hci7: command tx timeout [ 773.825648][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.836916][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.880259][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.907874][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.059710][ T7477] veth1_macvtap: left promiscuous mode [ 774.065319][ T7477] veth0_macvtap: left promiscuous mode [ 774.071999][ T7477] veth1_vlan: left promiscuous mode [ 774.087374][ T7477] veth0_vlan: left promiscuous mode [ 776.507661][ T7477] team0 (unregistering): Port device team_slave_1 removed [ 776.727392][ T7477] team0 (unregistering): Port device team_slave_0 removed [ 777.254285][ T29] audit: type=1400 audit(1720370026.127:786): avc: denied { listen } for pid=11734 comm="syz.2.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 778.220481][ T29] audit: type=1326 audit(1720370027.022:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x7ffc0000 [ 778.294885][ T29] audit: type=1326 audit(1720370027.022:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f35cd575bd9 code=0x7ffc0000 [ 778.346774][ T29] audit: type=1326 audit(1720370027.022:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x7ffc0000 [ 778.407589][ T29] audit: type=1326 audit(1720370027.022:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f35cd575bd9 code=0x7ffc0000 [ 778.465779][ T29] audit: type=1326 audit(1720370027.022:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x7ffc0000 [ 778.506136][ T29] audit: type=1326 audit(1720370027.022:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f35cd575bd9 code=0x7ffc0000 [ 778.506234][ T29] audit: type=1326 audit(1720370027.022:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x7ffc0000 [ 778.506322][ T29] audit: type=1326 audit(1720370027.022:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f35cd5746bc code=0x7ffc0000 [ 778.506414][ T29] audit: type=1326 audit(1720370027.124:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f35cd57475f code=0x7ffc0000 [ 778.656953][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.799338][T11747] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 778.849180][T11645] team0: Port device team_slave_0 added [ 778.929190][T11645] team0: Port device team_slave_1 added [ 778.989282][T11538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.243878][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.504477][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.972847][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.271837][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 780.509027][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.522816][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.880295][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.818235][T11645] hsr_slave_0: entered promiscuous mode [ 782.828692][T11645] hsr_slave_1: entered promiscuous mode [ 782.875784][T11645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.912458][T11645] Cannot create hsr debugfs directory [ 782.936156][T11538] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.176852][ T61] Bluetooth: hci3: Frame reassembly failed (-84) [ 783.211897][T10785] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.219188][T10785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.247247][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 783.247271][ T29] audit: type=1326 audit(1720370031.656:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.2.2202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x0 [ 783.364991][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 783.371635][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.428933][T10785] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.436420][T10785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.925408][T11783] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2205'. [ 783.936676][T11783] openvswitch: netlink: Multiple metadata blocks provided [ 785.080879][T11795] random: crng reseeded on system resumption [ 785.351512][ T4478] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 785.359264][ T5095] Bluetooth: hci3: command 0x1003 tx timeout [ 785.628304][T11538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.704424][T11645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 785.821906][T11645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.889637][T11645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.899870][T11791] overlayfs: failed to resolve './bus': -2 [ 785.913814][T11645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 786.452598][T11538] veth0_vlan: entered promiscuous mode [ 786.516628][T11538] veth1_vlan: entered promiscuous mode [ 786.808447][T11795] Unrecognized hibernate image header format! [ 786.823363][T11795] PM: hibernation: Image mismatch: architecture specific data [ 787.044507][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.160861][T11538] veth0_macvtap: entered promiscuous mode [ 787.249919][T11538] veth1_macvtap: entered promiscuous mode [ 787.309218][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.496377][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.503847][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.545294][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.557176][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.567184][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.578033][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.588028][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.599155][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.609145][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.619683][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.630816][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.651108][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.671772][T11538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.699230][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.706505][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.744146][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.765741][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.831113][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.916709][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.971014][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.992782][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.032955][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.056529][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.078025][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.094576][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.150317][T11538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.447781][T11538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.471670][T11538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.494018][ T5095] Bluetooth: hci3: sending frame failed (-49) [ 788.506511][ T5092] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 788.533307][T11538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.562812][T11538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.784747][ T29] audit: type=1326 audit(1720370036.603:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.2.2217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x0 [ 788.830927][ T7488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.863399][ T7488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.145823][ T7488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.196717][ T7488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.523086][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.606874][T11645] veth0_vlan: entered promiscuous mode [ 790.770323][T11645] veth1_vlan: entered promiscuous mode [ 790.912524][T11645] veth0_macvtap: entered promiscuous mode [ 790.939646][T11645] veth1_macvtap: entered promiscuous mode [ 791.040854][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.064060][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.077891][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.088998][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.099465][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.110503][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.122734][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.134549][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.147101][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.159596][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.169653][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.182236][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.196053][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.226136][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.236868][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.266798][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.279252][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.293698][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.309427][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.321117][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.333573][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.349683][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.361991][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.373939][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.390009][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.404652][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.426924][T11645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.435995][T11645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.445363][T11645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.456114][T11645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.653485][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.661809][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.751511][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.762757][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.448831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 795.871324][ T8933] IPVS: starting estimator thread 0... [ 795.890022][T11859] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 795.983464][T11862] IPVS: using max 16 ests per chain, 38400 per kthread [ 796.173280][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.428437][T11879] netlink: 'syz.2.2232': attribute type 9 has an invalid length. [ 796.472087][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 796.553199][T11867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.701693][ T5095] Bluetooth: hci5: command 0x0406 tx timeout [ 800.284456][ T5134] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 800.332560][ T29] audit: type=1326 audit(1720370047.273:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.1.2240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87c4575bd9 code=0x0 [ 800.772062][ T5134] usb 4-1: Using ep0 maxpacket: 8 [ 800.992849][ T5134] usb 4-1: unable to get BOS descriptor or descriptor too short [ 801.016162][ T5134] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 801.319026][ T5134] usb 4-1: can't read configurations, error -71 [ 805.085665][ T5134] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 805.322965][ T5134] usb 1-1: Using ep0 maxpacket: 16 [ 805.338415][ T5134] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 805.355941][ T5134] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 805.376490][ T5134] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 805.390542][ T5134] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 805.401003][ T5134] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 805.415037][ T5134] usb 1-1: config 1 interface 0 has no altsetting 0 [ 805.428264][ T5134] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 805.451568][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.596098][ T5134] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 806.942761][T11942] xt_hashlimit: max too large, truncated to 1048576 [ 807.403120][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 807.543918][ T29] audit: type=1400 audit(1720370054.094:820): avc: denied { name_bind } for pid=11941 comm="syz.0.2255" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 807.671408][ T5134] scsi host1: usb-storage 1-1:1.0 [ 807.981240][ T5134] usb 1-1: USB disconnect, device number 12 [ 808.512649][T11987] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 808.610557][T11987] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end] [ 808.620354][T11987] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 808.636207][T11987] Error parsing options; rc = [-22] [ 809.244478][T10785] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 810.403692][ T29] audit: type=1326 audit(1720370056.568:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.2.2276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x0 [ 816.120569][T10785] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 816.641538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 817.047085][T10785] usb 4-1: can't read configurations, error -110 [ 817.063864][T12004] raw-gadget.0 gadget.3: fail, usb_ep_queue returned -108 [ 817.220675][T10785] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 817.458796][T10785] usb 4-1: device descriptor read/64, error -32 [ 817.587263][T10785] usb usb4-port1: attempt power cycle [ 817.622511][T12018] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 818.544423][T12033] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 818.551011][T12033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 818.605858][T12035] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 818.641001][T12033] vhci_hcd vhci_hcd.0: Device attached [ 818.930334][T10785] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 819.059885][T12035] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 819.134073][ T29] audit: type=1400 audit(1720370064.782:822): avc: denied { map } for pid=12048 comm="syz.3.2287" path="socket:[41868]" dev="sockfs" ino=41868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 819.212110][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 819.227315][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 819.379514][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 819.668744][ T5069] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 820.222335][ T5069] usb 5-1: Using ep0 maxpacket: 32 [ 820.671616][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 820.685729][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 820.736255][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 820.754655][ T5069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 820.771387][ T5069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 820.789525][ T5069] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 820.808004][ T5069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.852302][ T5069] usb 5-1: config 0 descriptor?? [ 820.901440][T12039] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 821.165514][ T5069] hub 5-1:0.0: USB hub found [ 821.447326][ T5069] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 821.574284][ T5095] Bluetooth: hci7: command tx timeout [ 821.752764][ T5069] hid-generic 0003:046D:C314.0008: unknown main item tag 0x0 [ 821.869649][ T5069] hid-generic 0003:046D:C314.0008: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 822.144811][ T5095] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 822.155729][ T5095] Bluetooth: hci6: Injecting HCI hardware error event [ 822.168146][ T5092] Bluetooth: hci6: hardware error 0x00 [ 822.283483][ T5137] usb 5-1: USB disconnect, device number 4 [ 822.330454][T12037] vhci_hcd: connection reset by peer [ 822.483817][ T7477] vhci_hcd: stop threads [ 822.488134][ T7477] vhci_hcd: release socket [ 822.598396][ T7477] vhci_hcd: disconnect device [ 822.773750][ T29] audit: type=1400 audit(1720370068.142:823): avc: denied { bind } for pid=12083 comm="syz.2.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 823.051518][T12084] netlink: 'syz.2.2298': attribute type 11 has an invalid length. [ 823.134044][ T5095] Bluetooth: hci3: command tx timeout [ 823.454614][T12046] chnl_net:caif_netlink_parms(): no params data found [ 823.756941][ T29] audit: type=1400 audit(1720370069.047:824): avc: denied { setopt } for pid=12108 comm="syz.4.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 823.852704][T12114] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 823.859320][T12114] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 823.859792][ T29] audit: type=1400 audit(1720370069.102:825): avc: denied { getopt } for pid=12107 comm="syz.2.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 823.890433][T12114] vhci_hcd vhci_hcd.0: Device attached [ 823.918044][T12117] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 823.949077][T12121] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2312'. [ 824.177290][ T8933] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 824.187635][T12126] netlink: 'syz.2.2313': attribute type 11 has an invalid length. [ 824.442918][T12046] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.496838][T12046] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.520798][T10785] vhci_hcd: vhci_device speed not set [ 824.528331][T12046] bridge_slave_0: entered allmulticast mode [ 824.573767][T12046] bridge_slave_0: entered promiscuous mode [ 824.634198][T12046] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.654446][ T5069] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 824.667794][T12046] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.675311][T12046] bridge_slave_1: entered allmulticast mode [ 824.689770][T12046] bridge_slave_1: entered promiscuous mode [ 824.696096][ T5092] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 824.871963][T12137] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 825.003657][ T5069] usb 4-1: Using ep0 maxpacket: 32 [ 825.170534][ T5069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 825.415000][ T5092] Bluetooth: hci3: command tx timeout [ 825.515465][T12046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.571843][ T5069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 825.648514][ T5069] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 825.657658][ T5069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.672170][T12046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.834211][ T5069] usb 4-1: config 0 descriptor?? [ 825.844637][T12114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 825.858777][ T5069] hub 4-1:0.0: USB hub found [ 825.951954][T12046] team0: Port device team_slave_0 added [ 826.006706][T12046] team0: Port device team_slave_1 added [ 826.269436][ T5069] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 826.474087][T12046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.486300][ T29] audit: type=1800 audit(1720370071.566:826): pid=12147 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2319" name="file1" dev="overlay" ino=609 res=0 errno=0 [ 826.520790][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.631448][ T5069] hid-generic 0003:046D:C314.0009: unknown main item tag 0x0 [ 826.634745][T12046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.688986][ T29] audit: type=1400 audit(1720370071.723:827): avc: denied { module_load } for pid=12142 comm="syz.4.2319" path="/109/bus/file1" dev="overlay" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 826.713276][T12147] Invalid ELF header magic: != ELF [ 826.738573][ T5069] hid-generic 0003:046D:C314.0009: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 826.785368][T12046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.800944][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.839779][T12046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.908849][ T29] audit: type=1400 audit(1720370071.889:828): avc: denied { connect } for pid=12152 comm="syz.2.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 826.930881][ T29] audit: type=1400 audit(1720370071.899:829): avc: denied { read } for pid=12152 comm="syz.2.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 827.137939][T12046] hsr_slave_0: entered promiscuous mode [ 827.188276][T12046] hsr_slave_1: entered promiscuous mode [ 827.235869][T12115] vhci_hcd: connection reset by peer [ 827.244247][T12046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.262077][ T7472] vhci_hcd: stop threads [ 827.264771][ T5134] usb 4-1: USB disconnect, device number 18 [ 827.288755][T12046] Cannot create hsr debugfs directory [ 827.309593][T12154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2322'. [ 827.346838][ T7472] vhci_hcd: release socket [ 827.372211][ T7472] vhci_hcd: disconnect device [ 827.381044][T12154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2322'. [ 827.641121][ T5092] Bluetooth: hci3: command tx timeout [ 827.736269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 828.056932][T12162] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 828.065894][T12162] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 828.078508][T12162] overlayfs: missing 'lowerdir' [ 831.481239][T12176] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 833.788382][ T5092] Bluetooth: hci3: command tx timeout [ 834.066378][ T8933] vhci_hcd: vhci_device speed not set [ 834.096874][T12046] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.238979][ T29] audit: type=1400 audit(1720370078.701:830): avc: denied { write } for pid=12181 comm="syz.0.2329" path="socket:[43184]" dev="sockfs" ino=43184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 835.264124][T12046] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.610572][T12046] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.893276][T12204] i2c i2c-0: Invalid block write size 34 [ 835.932438][T12046] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.963415][ T5095] Bluetooth: hci3: command tx timeout [ 840.136820][T12046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 840.186692][T12046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 840.279992][T12046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 840.336739][T12046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 840.397515][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 840.534443][ T29] audit: type=1400 audit(1720370084.535:831): avc: denied { append } for pid=12235 comm="syz.3.2348" name="event2" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 840.649147][T12241] xt_ecn: cannot match TCP bits for non-tcp packets [ 841.187482][ T5137] IPVS: starting estimator thread 0... [ 843.340993][T12245] IPVS: using max 16 ests per chain, 38400 per kthread [ 843.383233][ T29] audit: type=1400 audit(1720370087.156:832): avc: denied { execute } for pid=12248 comm="syz.3.2351" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 843.443192][T12046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.509496][T12046] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.573857][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.581228][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.659394][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.666792][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.055781][T12046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 844.085618][T12046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 844.361618][ T29] audit: type=1400 audit(1720370088.051:833): avc: denied { read write } for pid=12265 comm="syz.3.2356" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 844.465609][ T29] audit: type=1400 audit(1720370088.097:834): avc: denied { open } for pid=12265 comm="syz.3.2356" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 844.649408][ T29] audit: type=1400 audit(1720370088.328:835): avc: denied { read } for pid=12268 comm="syz.2.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 846.718916][T12046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.033535][ T5137] IPVS: starting estimator thread 0... [ 847.153440][T12291] IPVS: using max 15 ests per chain, 36000 per kthread [ 847.270832][T12046] veth0_vlan: entered promiscuous mode [ 847.384204][T12046] veth1_vlan: entered promiscuous mode [ 847.650421][T12046] veth0_macvtap: entered promiscuous mode [ 847.797629][T12046] veth1_macvtap: entered promiscuous mode [ 848.036663][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.153419][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.233644][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.288417][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.300122][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.311069][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.395381][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.407515][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.440266][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.503063][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.532876][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.545658][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.556313][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.567089][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.596359][T12046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.725474][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.744212][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.773914][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.789670][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.822183][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.837484][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.849460][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.861481][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.874551][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.887461][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.897437][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.908077][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.918246][T12046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.928875][T12046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.951094][T12046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.013065][T12046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.023411][T12046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.033145][T12046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.042769][T12046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.321598][ T29] audit: type=1400 audit(1720370092.639:836): avc: denied { mount } for pid=12317 comm="syz.0.2370" name="/" dev="rpc_pipefs" ino=43605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 849.932624][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.941978][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 850.009874][ T29] audit: type=1400 audit(1720370093.238:837): avc: denied { unmount } for pid=12317 comm="syz.0.2370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 850.491126][ T7488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.523599][ T7488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.632474][T10873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.667789][T10873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.673127][T12332] netlink: 'syz.0.2375': attribute type 39 has an invalid length. [ 850.767074][T12332] macvtap0: entered promiscuous mode [ 852.147210][ T5095] Bluetooth: hci7: link tx timeout [ 852.154519][ T5095] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 853.071279][ T29] audit: type=1400 audit(1720370096.109:838): avc: denied { read write } for pid=12362 comm="syz.1.2384" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 853.094470][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.242322][ T29] audit: type=1400 audit(1720370096.146:839): avc: denied { open } for pid=12362 comm="syz.1.2384" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 854.423397][ T5092] Bluetooth: hci7: command 0x0406 tx timeout [ 856.281714][T12407] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 856.746830][ T29] audit: type=1400 audit(1720370099.164:840): avc: denied { create } for pid=12410 comm="syz.0.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 857.477516][ T9677] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 857.493114][ T29] audit: type=1400 audit(1720370100.189:841): avc: denied { write } for pid=12410 comm="syz.0.2402" path="socket:[44448]" dev="sockfs" ino=44448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 857.766012][ T29] audit: type=1400 audit(1720370100.419:842): avc: denied { ioctl } for pid=12410 comm="syz.0.2402" path="socket:[44448]" dev="sockfs" ino=44448 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 857.792040][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.339152][ T9677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.350404][ T9677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.429060][ T9677] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.529328][ T9677] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 858.547685][ T9677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.564748][ T9677] usb 2-1: config 0 descriptor?? [ 859.692212][ T9677] acrux 0003:1A34:0802.000A: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 859.710532][ T9677] acrux 0003:1A34:0802.000A: no inputs found [ 859.716595][ T9677] acrux 0003:1A34:0802.000A: Failed to enable force feedback support, error: -19 [ 860.466285][ T5069] usb 2-1: USB disconnect, device number 13 [ 861.158701][T12450] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2412'. [ 861.231284][T12450] openvswitch: netlink: Multiple metadata blocks provided [ 861.829453][T12463] xt_NFQUEUE: number of total queues is 0 [ 862.414989][T12468] block nbd2: shutting down sockets [ 864.813599][ T5069] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 864.858262][T12498] input: syz1 as /devices/virtual/input/input22 [ 866.387279][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.796686][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.053222][ T5069] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.127042][ T5069] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 867.175858][ T5069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.679534][ T5069] usb 2-1: config 0 descriptor?? [ 867.767599][ T5069] usb 2-1: can't set config #0, error -71 [ 867.803928][ T5069] usb 2-1: USB disconnect, device number 14 [ 868.291444][ T9677] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 868.510787][ T9677] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 868.581225][ T9677] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 868.582794][ T29] audit: type=1400 audit(1720370110.416:843): avc: denied { create } for pid=12517 comm="syz.2.2437" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 868.626915][ T9677] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 868.647782][ T9677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.687805][T12516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 869.774609][ T9677] usb 5-1: USB disconnect, device number 5 [ 870.373800][T12539] netlink: 'syz.4.2446': attribute type 5 has an invalid length. [ 870.970721][T12545] input: syz1 as /devices/virtual/input/input23 [ 871.591594][T12549] program syz.3.2451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.663633][ T29] audit: type=1400 audit(1720370113.258:844): avc: denied { write } for pid=12548 comm="syz.3.2451" name="fdinfo" dev="proc" ino=44654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 871.686794][ T29] audit: type=1400 audit(1720370113.268:845): avc: denied { add_name } for pid=12548 comm="syz.3.2451" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 871.708883][ T29] audit: type=1400 audit(1720370113.286:846): avc: denied { create } for pid=12548 comm="syz.3.2451" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 871.736140][ T29] audit: type=1400 audit(1720370113.286:847): avc: denied { associate } for pid=12548 comm="syz.3.2451" name="cpuacct.usage_sys" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 871.812677][ T784] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 872.710936][ T784] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 872.758779][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.786220][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.834777][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 872.848875][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.858402][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.870591][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 872.883294][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.897031][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.908606][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 872.916878][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.937096][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.008562][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.028158][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.045975][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.076604][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.092639][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.106976][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.140079][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.154489][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.167463][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.183329][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.191805][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.200845][ T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.223192][ T784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.256442][ T784] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 873.299619][ T784] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 873.334195][ T784] usb 1-1: Product: syz [ 873.343856][ T784] usb 1-1: Manufacturer: syz [ 873.348581][ T784] usb 1-1: SerialNumber: syz [ 873.370033][ T784] usb 1-1: config 0 descriptor?? [ 873.405983][ T784] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 873.712384][ T784] usb 1-1: USB disconnect, device number 13 [ 873.779008][ T784] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 874.958386][T12576] netlink: 'syz.2.2459': attribute type 5 has an invalid length. [ 876.080246][T12601] fuse: Bad value for 'fd' [ 876.090097][ T29] audit: type=1400 audit(1720370117.329:848): avc: denied { write } for pid=12591 comm="syz.0.2467" laddr=172.20.20.10 lport=55304 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 877.207176][T12602] program syz.2.2469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.403972][T12602] Cannot find add_set index 0 as target [ 878.170462][T12627] fuse: Bad value for 'fd' [ 879.439929][ T29] audit: type=1400 audit(1720370120.430:849): avc: denied { search } for pid=12638 comm="syz.1.2483" name="/" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 879.473244][ T29] audit: type=1400 audit(1720370120.430:850): avc: denied { setattr } for pid=12638 comm="syz.1.2483" name="/" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 879.541400][T12644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.562487][T12644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.579536][ T29] audit: type=1400 audit(1720370120.550:851): avc: denied { unmount } for pid=12046 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 880.158788][ T29] audit: type=1326 audit(1720370121.113:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.4.2488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1de975bd9 code=0x0 [ 880.744977][T12636] fuse: Bad value for 'fd' [ 881.343470][T12663] netlink: 211388 bytes leftover after parsing attributes in process `syz.1.2493'. [ 884.325017][ T29] audit: type=1400 audit(1720370124.934:853): avc: denied { read } for pid=12682 comm="syz.1.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 886.517171][ T5095] Bluetooth: hci3: command tx timeout [ 888.759252][T12698] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 889.377266][ T29] audit: type=1326 audit(1720370129.623:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 890.310336][T12713] 9pnet_fd: Insufficient options for proto=fd [ 890.432959][ T29] audit: type=1326 audit(1720370130.592:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80f2574610 code=0x7ffc0000 [ 891.671346][ T29] audit: type=1326 audit(1720370130.592:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 891.687647][T12722] netlink: 211388 bytes leftover after parsing attributes in process `syz.4.2511'. [ 891.715375][ T29] audit: type=1326 audit(1720370130.592:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 891.740129][ T29] audit: type=1326 audit(1720370131.700:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 891.897193][ T29] audit: type=1326 audit(1720370131.700:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 892.075402][ T29] audit: type=1326 audit(1720370131.700:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 892.900858][ T29] audit: type=1326 audit(1720370131.700:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 892.955452][ T29] audit: type=1326 audit(1720370131.718:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 893.039303][ T29] audit: type=1326 audit(1720370131.718:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 893.155609][ T29] audit: type=1326 audit(1720370131.718:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2575bd9 code=0x7ffc0000 [ 894.257895][T12746] tipc: Started in network mode [ 894.290679][T12746] tipc: Node identity 5, cluster identity 4711 [ 894.345024][T12746] tipc: Node number set to 5 [ 895.565318][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 895.858907][T12776] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2533'. [ 895.872815][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 895.872839][ T29] audit: type=1326 audit(1720370135.613:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.3.2531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ae6975bd9 code=0x0 [ 896.163548][ T29] audit: type=1400 audit(1720370135.881:911): avc: denied { create } for pid=12782 comm="syz.4.2536" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 896.225173][T12785] syz.4.2536: attempt to access beyond end of device [ 896.225173][T12785] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 896.243085][T12785] F2FS-fs (loop9): Unable to read 1th superblock [ 896.251451][T12785] syz.4.2536: attempt to access beyond end of device [ 896.251451][T12785] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 896.266630][T12785] F2FS-fs (loop9): Unable to read 2th superblock [ 896.299085][T12785] syz.4.2536: attempt to access beyond end of device [ 896.299085][T12785] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 896.410384][T12785] F2FS-fs (loop9): Unable to read 1th superblock [ 896.489773][T12785] syz.4.2536: attempt to access beyond end of device [ 896.489773][T12785] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 896.525131][T12785] F2FS-fs (loop9): Unable to read 2th superblock [ 896.973799][ T29] audit: type=1400 audit(1720370136.601:912): avc: denied { unlink } for pid=10696 comm="syz-executor" name="file0" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 899.133141][T12800] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 899.158977][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2543'. [ 902.206076][ T29] audit: type=1400 audit(1720370141.447:913): avc: denied { read } for pid=12825 comm="syz.2.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 903.297734][T12841] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 904.868186][ T29] audit: type=1400 audit(1720370143.920:914): avc: denied { map } for pid=12851 comm="syz.1.2560" path="socket:[45704]" dev="sockfs" ino=45704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 904.951958][ T29] audit: type=1400 audit(1720370143.920:915): avc: denied { read } for pid=12851 comm="syz.1.2560" path="socket:[45704]" dev="sockfs" ino=45704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 905.083069][T12861] block nbd1: shutting down sockets [ 906.488250][T12875] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 906.531544][ T29] audit: type=1326 audit(1720370145.453:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.2.2570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35cd575bd9 code=0x0 [ 906.734830][ T29] audit: type=1400 audit(1720370145.628:917): avc: denied { write } for pid=12873 comm="syz.2.2570" path="socket:[45739]" dev="sockfs" ino=45739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 909.081856][T12906] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 910.276383][ T29] audit: type=1326 audit(1720370148.905:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.344391][ T29] audit: type=1326 audit(1720370148.932:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.403726][ T29] audit: type=1326 audit(1720370148.932:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.471502][ T29] audit: type=1326 audit(1720370148.932:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.501183][ T29] audit: type=1326 audit(1720370148.942:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.527589][ T29] audit: type=1326 audit(1720370148.942:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.575942][ T29] audit: type=1326 audit(1720370148.942:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.626306][ T29] audit: type=1326 audit(1720370148.951:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 910.731699][ T29] audit: type=1326 audit(1720370148.951:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 915.366099][ T29] audit: type=1326 audit(1720370148.951:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1975bd9 code=0x7ffc0000 [ 915.581681][T12951] xt_limit: Overflow, try lower: 0/0 [ 916.505106][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 916.515158][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 917.168986][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 917.169011][ T29] audit: type=1400 audit(1720370155.273:946): avc: denied { view } for pid=12973 comm="syz.0.2605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 917.364270][T12987] xt_limit: Overflow, try lower: 0/0 [ 917.906282][ T30] INFO: task syz.3.2064:11385 blocked for more than 143 seconds. [ 918.168723][ T30] Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 918.209144][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 918.243098][ T30] task:syz.3.2064 state:D stack:27952 pid:11385 tgid:11384 ppid:10393 flags:0x00004004 [ 918.294511][ T30] Call Trace: [ 918.313726][ T30] [ 918.343814][ T30] __schedule+0xf15/0x5d00 [ 918.368917][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 918.387391][ T30] ? hlock_class+0x4e/0x130 [ 918.405719][ T30] ? mark_lock+0xb5/0xc60 [ 918.421017][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 918.433543][ T30] ? hlock_class+0x4e/0x130 [ 918.446825][ T30] ? __pfx___schedule+0x10/0x10 [ 918.462700][ T30] ? schedule+0x298/0x350 [ 918.475073][ T30] ? __pfx_lock_release+0x10/0x10 [ 918.490272][ T30] ? rwsem_down_read_slowpath+0x2c4/0xb20 [ 918.515652][ T30] schedule+0xe7/0x350 [ 918.531666][ T30] schedule_preempt_disabled+0x13/0x30 [ 918.559841][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 918.588555][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 918.612688][ T30] ? __pfx___might_resched+0x10/0x10 [ 918.634093][ T30] down_read+0x124/0x330 [ 918.642037][ T30] ? __pfx_down_read+0x10/0x10 [ 918.657375][ T30] page_cache_ra_unbounded+0x12b/0x5a0 [ 918.667005][ T30] ? filemap_get_read_batch+0x351/0x9a0 [ 918.675333][ T30] page_cache_ra_order+0x6e5/0xae0 [ 918.683424][ T30] ? blk_cgroup_congested+0x156/0x2a0 [ 918.691025][ T30] ondemand_readahead+0x520/0x1140 [ 918.698638][ T30] page_cache_sync_ra+0x174/0x1d0 [ 918.707282][ T30] filemap_get_pages+0xc01/0x1830 [ 918.719821][ T30] ? __pfx_filemap_get_pages+0x10/0x10 [ 918.733549][ T30] ? stack_depot_save_flags+0x28/0x8f0 [ 918.739736][ T30] ? __pfx___might_resched+0x10/0x10 [ 918.745188][ T30] filemap_splice_read+0x5c3/0xd00 [ 918.750906][ T30] ? do_splice_direct+0x17e/0x250 [ 918.757980][ T30] ? do_sendfile+0xb1e/0xe50 [ 918.765212][ T30] ? __x64_sys_sendfile64+0x1da/0x220 [ 918.773298][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.779680][ T30] ? __pfx_filemap_splice_read+0x10/0x10 [ 918.785694][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 918.799421][ T30] ? __pfx_filemap_splice_read+0x10/0x10 [ 918.833307][ T30] do_splice_read+0x294/0x380 [ 918.838513][ T30] splice_direct_to_actor+0x2a4/0xa40 [ 918.853097][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 918.871076][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 918.912238][ T30] ? __pfx_file_has_perm+0x10/0x10 [ 918.919131][ T30] do_splice_direct+0x17e/0x250 [ 918.937807][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 918.954690][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 918.972227][ T30] ? security_file_permission+0x98/0xc0 [ 918.979323][ T30] do_sendfile+0xb1e/0xe50 [ 918.986485][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 918.992995][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 918.999626][ T30] ? __x64_sys_futex+0x1ea/0x4c0 [ 919.006634][ T30] __x64_sys_sendfile64+0x1da/0x220 [ 919.013382][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 919.022060][ T30] do_syscall_64+0xcd/0x250 [ 919.028431][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.075987][ T30] RIP: 0033:0x7f925ff75bd9 [ 919.104429][ T30] RSP: 002b:00007f9260dac048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 919.112942][ T30] RAX: ffffffffffffffda RBX: 00007f9260103f60 RCX: 00007f925ff75bd9 [ 919.169940][ T30] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 919.180224][ T30] RBP: 00007f925ffe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 919.213832][ T30] R10: 0000000000089ffc R11: 0000000000000246 R12: 0000000000000000 [ 919.235976][ T30] R13: 000000000000000b R14: 00007f9260103f60 R15: 00007fffb4658a88 [ 919.268829][ T30] [ 919.272308][ T30] [ 919.272308][ T30] Showing all locks held in the system: [ 919.376789][ T30] 1 lock held by khungtaskd/30: [ 919.392607][ T30] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 919.434917][ T30] 5 locks held by kworker/u8:4/61: [ 919.501324][ T30] 2 locks held by getty/4837: [ 919.542265][ T30] #0: ffff88802acde0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 919.600822][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 919.615226][ T30] 3 locks held by kworker/1:2H/5295: [ 919.622488][ T30] 1 lock held by syz.1.443/6522: [ 919.631082][ T30] 2 locks held by kworker/u8:2/10873: [ 919.644329][ T30] #0: ffff88801677d948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 919.659532][ T30] #1: ffffc900037cfd80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 919.671883][ T30] 1 lock held by syz.3.2064/11385: [ 919.677663][ T30] #0: ffff88801d8ace48 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x12b/0x5a0 [ 919.689755][ T30] 1 lock held by syz.3.2608/12984: [ 919.694912][ T30] #0: ffffffff8dbbcc80 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x6c0 [ 919.705685][ T30] [ 919.708580][ T30] ============================================= [ 919.708580][ T30] [ 919.718114][ T30] NMI backtrace for cpu 1 [ 919.722488][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 919.732416][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 919.742486][ T30] Call Trace: [ 919.745792][ T30] [ 919.748774][ T30] dump_stack_lvl+0x116/0x1f0 [ 919.753490][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 919.758469][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 919.764506][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 919.770690][ T30] watchdog+0xf86/0x1240 [ 919.774958][ T30] ? __pfx_watchdog+0x10/0x10 [ 919.779668][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 919.784932][ T30] ? __kthread_parkme+0x148/0x220 [ 919.790038][ T30] ? __pfx_watchdog+0x10/0x10 [ 919.794792][ T30] kthread+0x2c1/0x3a0 [ 919.799027][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 919.804246][ T30] ? __pfx_kthread+0x10/0x10 [ 919.808863][ T30] ret_from_fork+0x45/0x80 [ 919.813317][ T30] ? __pfx_kthread+0x10/0x10 [ 919.817949][ T30] ret_from_fork_asm+0x1a/0x30 [ 919.822774][ T30] [ 919.827793][ T30] Sending NMI from CPU 1 to CPUs 0: [ 919.834629][ C0] NMI backtrace for cpu 0 [ 919.834652][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 919.834682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 919.834697][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x60 [ 919.834766][ C0] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 64 f4 75 7e 65 8b 05 65 f4 75 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 35 <8b> 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 83 f8 02 75 20 48 [ 919.834792][ C0] RSP: 0018:ffffc900001577d8 EFLAGS: 00000202 [ 919.834814][ C0] RAX: 0000000080000101 RBX: ffffffff8ffcc8c4 RCX: ffffffff813ccc24 [ 919.834832][ C0] RDX: ffff8880176bda00 RSI: ffffffff813ccbd0 RDI: 0000000000000006 [ 919.834851][ C0] RBP: ffffffff8ffcc8e0 R08: 0000000000000006 R09: ffffffff81e9a5ca [ 919.834868][ C0] R10: ffffffff81e9a566 R11: 0000000000000002 R12: ffffffff81e9a5ca [ 919.834886][ C0] R13: ffffffff81e9a566 R14: dffffc0000000000 R15: ffffffff8ffcc8c0 [ 919.834904][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 919.834931][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 919.834949][ C0] CR2: 00007fdfd1ad0ab8 CR3: 000000007cc76000 CR4: 00000000003526f0 [ 919.834966][ C0] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 919.834982][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 919.834999][ C0] Call Trace: [ 919.835008][ C0] [ 919.835016][ C0] ? show_regs+0x8c/0xa0 [ 919.835056][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 919.835102][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 919.835146][ C0] ? nmi_handle+0x1a9/0x5c0 [ 919.835185][ C0] ? __sanitizer_cov_trace_pc+0x23/0x60 [ 919.835211][ C0] ? default_do_nmi+0x6a/0x160 [ 919.835236][ C0] ? exc_nmi+0x170/0x1e0 [ 919.835259][ C0] ? end_repeat_nmi+0xf/0x53 [ 919.835283][ C0] ? kasan_save_alloc_info+0x36/0x50 [ 919.835315][ C0] ? kasan_save_free_info+0x3a/0x60 [ 919.835346][ C0] ? kasan_save_alloc_info+0x36/0x50 [ 919.835376][ C0] ? kasan_save_free_info+0x3a/0x60 [ 919.835407][ C0] ? __orc_find+0xc4/0x130 [ 919.835445][ C0] ? __orc_find+0x70/0x130 [ 919.835481][ C0] ? __sanitizer_cov_trace_pc+0x23/0x60 [ 919.835508][ C0] ? __sanitizer_cov_trace_pc+0x23/0x60 [ 919.835535][ C0] ? __sanitizer_cov_trace_pc+0x23/0x60 [ 919.835561][ C0] [ 919.835569][ C0] [ 919.835577][ C0] __orc_find+0x70/0x130 [ 919.835615][ C0] ? kasan_save_free_info+0x3a/0x60 [ 919.835646][ C0] unwind_next_frame+0x335/0x23a0 [ 919.835687][ C0] ? kasan_save_free_info+0x3b/0x60 [ 919.835718][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 919.835756][ C0] arch_stack_walk+0x100/0x170 [ 919.835785][ C0] ? kasan_save_free_info+0x3b/0x60 [ 919.835817][ C0] ? rcu_core+0x828/0x16b0 [ 919.835871][ C0] stack_trace_save+0x95/0xd0 [ 919.835906][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 919.835941][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 919.835969][ C0] ? _raw_spin_unlock+0x28/0x50 [ 919.835995][ C0] kasan_save_stack+0x33/0x60 [ 919.836033][ C0] ? kasan_save_stack+0x33/0x60 [ 919.836068][ C0] ? kasan_save_track+0x14/0x30 [ 919.836109][ C0] ? kasan_save_free_info+0x3b/0x60 [ 919.836153][ C0] kasan_save_track+0x14/0x30 [ 919.836190][ C0] kasan_save_free_info+0x3b/0x60 [ 919.836221][ C0] poison_slab_object+0xf7/0x160 [ 919.836259][ C0] __kasan_slab_free+0x32/0x50 [ 919.836298][ C0] kmem_cache_free+0x12f/0x3a0 [ 919.836338][ C0] ? rcu_core+0x828/0x16b0 [ 919.836377][ C0] ? rcu_core+0x826/0x16b0 [ 919.836414][ C0] rcu_core+0x828/0x16b0 [ 919.836454][ C0] ? __pfx_wake_up_var+0x10/0x10 [ 919.836494][ C0] ? __pfx_rcu_core+0x10/0x10 [ 919.836537][ C0] handle_softirqs+0x216/0x8f0 [ 919.836570][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 919.836601][ C0] ? rcu_is_watching+0x12/0xc0 [ 919.836627][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 919.836656][ C0] ? smpboot_thread_fn+0x59d/0xa10 [ 919.836688][ C0] run_ksoftirqd+0x3a/0x60 [ 919.836716][ C0] smpboot_thread_fn+0x661/0xa10 [ 919.836748][ C0] ? __kthread_parkme+0x148/0x220 [ 919.836781][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 919.836813][ C0] kthread+0x2c1/0x3a0 [ 919.836843][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 919.836870][ C0] ? __pfx_kthread+0x10/0x10 [ 919.836902][ C0] ret_from_fork+0x45/0x80 [ 919.836939][ C0] ? __pfx_kthread+0x10/0x10 [ 919.836970][ C0] ret_from_fork_asm+0x1a/0x30 [ 919.837013][ C0] [ 919.924943][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 919.924970][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 919.925009][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 919.925030][ T30] Call Trace: [ 919.925044][ T30] [ 919.925056][ T30] dump_stack_lvl+0x3d/0x1f0 [ 919.925103][ T30] panic+0x6f5/0x7a0 [ 919.925156][ T30] ? __pfx_panic+0x10/0x10 [ 919.925207][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 919.925245][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 919.925293][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 919.925329][ T30] ? watchdog+0xd3d/0x1240 [ 919.925364][ T30] ? watchdog+0xd30/0x1240 [ 919.925399][ T30] watchdog+0xd4e/0x1240 [ 919.925437][ T30] ? __pfx_watchdog+0x10/0x10 [ 919.925472][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 919.925516][ T30] ? __kthread_parkme+0x148/0x220 [ 919.925560][ T30] ? __pfx_watchdog+0x10/0x10 [ 919.925595][ T30] kthread+0x2c1/0x3a0 [ 919.925638][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 919.925676][ T30] ? __pfx_kthread+0x10/0x10 [ 919.925720][ T30] ret_from_fork+0x45/0x80 [ 919.925770][ T30] ? __pfx_kthread+0x10/0x10 [ 919.925813][ T30] ret_from_fork_asm+0x1a/0x30 [ 919.925959][ T30] [ 919.928291][ T30] Kernel Offset: disabled