last executing test programs: 1m19.043611494s ago: executing program 4 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) 1m3.75345191s ago: executing program 4 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) 50.006085705s ago: executing program 4 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) 35.213342524s ago: executing program 4 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) 19.30295415s ago: executing program 4 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) 17.961346823s ago: executing program 1 (id=600): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201000057571a20cd0c8000fe67010203010902120001000000000904000000cd760700"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40bc5311, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20008854) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xff, 0x52060) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x1cb46, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) setfsuid(0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20a840, &(0x7f0000004800)={{}, 0x2c, {'rootmode', 0x3d, 0xc001}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}]}}) faccessat2(0xffffffffffffffff, &(0x7f0000002240)='./file0\x00', 0xb4, 0x1200) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) 16.667024722s ago: executing program 3 (id=609): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, &(0x7f0000001800)={0x1, 0xfffffffffffffff8, 0x0, 0x29, 0x80000000, 0x8000, 0xfc, 0x8}, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001940)={0x20, 0x11, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x0, 0x0, 0x0, @binary="92be0995"}]}, 0x20}], 0x1, 0x0, 0x0, 0x700}, 0x0) 15.967352372s ago: executing program 0 (id=610): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8929, &(0x7f0000000280)={'gre0\x00', 0x2000081}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x40, 0x90, 0x2}, 0x18) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f00000004c0)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x2}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000016c0)="0f78230e5785afc908467503c09bb1a593ef10f37293e86cdac2bb2f3d7480c1885a8517e3b1eda071f1f95e541d308acff3a30dfdef2e7169ec2f6aa3cd7da5bee6276c7969c55a55ffa6d49284f2407053770effcc3e", 0x57}, {&(0x7f0000001740)="4321f46bc1c3a2b621b36750268dcad4e290c9d1e62fa4273c0368cb9f2358f37c5e5186061d042cef5a34a6b7ecde0e9b437ca97dc822a5fe7244844890287b52a200af3e384b58eb094f0dbcb3a3276d187c58f2ad4f3a0356709ccf9bd05c56bc1c8626052ff5a0f18490e0bb5e1f6d", 0x71}], 0x2, 0x0, 0x0, 0x2004c814}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00e8216154370028b2bc238a00fbff", @ANYRES16=r4, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000580)) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}], 0x0, 0x0, '\x00', 0x8, 0x1}) syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES64], 0x0) write(r1, &(0x7f00000006c0)="096bf611e3f3821c3c2c308587b82e3b60517904a20b07501f6ea0f9f9282a945aea30b9168f290d1c8f9f2c6fcecf3e596160ee17283b94632ebdf6655301917e8acb82e60b993e9ed230fd0be4003d72ba6d80492008f58a74fe2892cffb852666222c921d6cc5d4487328b43fd7ae30a8e09fe96204ecf71244725d1de3be830b06aa0499bad3bb55e3b1bb064800770cfd9f17d53e7588d7c5d2b7ac79abd32e1b470a5fb0fa5a70149b88ad1658721b890f45888f4656cdf40bb8b7ff57db401ede6360c11a0d380be648497b9e1a23d1e14ffacec35b7e4f570be40014210d187365d5e82ecee8c59c900e0feb512b92b65925c94aa03d78a6a26e4fadd244d3526fcef724ee731ac4f79b2f4e9008a79ff1acb749d45b61f19a8b89dce4174328d217973e0bf5bea0bcae9bfe579f6462cff7c12e8a28b31d1f0cd55d1cd7255cc0e030ca106016ae8aabadab86a86e2a4990b27eb9e49ef7f76bb3224924aed353fe95849c2acc01b38ed8a53e6437eb2089076bb137fc8503006640c9e2dd7b3c8ea0b87bca0a27636ba9aede35b45766e8e7fb2f319b7d66471ce2cbeef8ba169e9b47034792ce7ae3b0012c64b0e62150f84556920f4e96c5a4429d2441c88863eec58330b604720ec6ede841ccceaba1a53c9cd016b3747d9b8c416c6f4e3bc4041b3836eea410d745abfaacd5c1e18e4b48939fe19166113ddede7cbbc9f6e985c5be3800fa0cd43b1b27c80f6085ae808ffb9ffc7345fd57b5f82712b719915e285ef88f8d6f7dd0cf0d8eba661fb6345fa29a6c14122cda1d6a0f2affbba4d9eacfe84dad73b0d733b3b826ee23338c8feb9272169d25b2b6167cba511ecbadeeabea6926af26a71474c32850df5b4eb5f23c23c529dd2232906e1d4d7a499624fa50646c53d33fc0a12ad1f4a4772204e638c1707b65fc2839aab89a62ff2686ce5f2ea76266848e9c396e41db1f9325bc016f249d7669d6674f9142048e15cc8dc9bac48d6e74d4eb7ec32b2a8c50e5d8c7a3132156cd4af8eeecd067667561928081d2b9bd7e12993e0b872479398cf2fd09a5518a8218da15f3df219288a6b9a73b693e7c6aaff9678b0152852fdb92b244b9b10c2b175b45a772c046c88dc8068644bcc19b71d8c90861b2e855baa6ae509a716f92f2dd25021f3b08e403486836fc2321182b48fcc6832584ee7a27488ff01bc35daa77870b95bd1a577a0206566ab1cd7442bfbe1cacfed614814a0ddb04b139028b2bb7ecfb67769a5aaab0dddf73c5db7ad2f5d0ed443c78214dad6e837828305c97c68792d5d4413264fde64b1b291082d1a7d4012b147edf6a6d5626131589ceb34a0dc23f70a3304f880322b3751ca83b9f3ab1cb0bf9c6038a4ebec4f4ae3db7c9fa00b9cb45cbafe3ef077fca05ab7fad4652b94f62a4922efde819d59f490091f82226bfc13cd384cb8389028baf7c8afc152f19d7df38c8f5d22fe3bf08d43a2f1465404ab30c48b6b7c877f91359281453146682655ddfbafac2584eddde48184426b6038df094536072b61b8c9eb2e7e4ad875077a32af99c0e60fff6a704c6bc6caa49acb328429cc557de847287e790433daa521afe7a9c6709826c6ad176353d5cfe737ad99a4a818209101ae51e0bb19cd63df416c5ef0c4de24689fcf58c911e26480a9b5be133505be415beb5aac561632dc5d6138471cedf27ff8bf8f3ccd8032acad393064dba29fd91db9bec1d8e25966d724e2c00d6a8ac1659ecb5fb622ff31768f7a19104b4506888be9e77dccf2c0371536b6c7bf33e553747a952dfd63003c1d5604f9e643b836ed3d441b9e57e3e43a968f9f3d9f3fe0dcd00a344e565a8f38c8341a3b7ab8697665aa1b525237aaf5cd80e95c1f20246f97bb989c815e6dfb173b7406ae71be9d03cbe5f42f68af93aa5ebf4cff5a192920976362d0a1edf9338197910f95d330518419c85dc5ff7e1f3a8f06e3aca19f9a8d60ccb7259a043375d037b5b367333281d9217a522cb740cba1374e6361d055914969f1ea52b13e81024782b434f7f1a1180994e91998c77a590fbd36b205372c41cdc66331c40c551e5109ee61b38f7c9e15a4d37a5d745404f4555b47ed70262b7e8d0464a52c1f1dc507aa2e74631f174847ca185eb70cac1604c17ef1a9372b90f332aeabd6f947cfec4e52a3872bed0be409d5ae8e875d86c178690301245e4ea340642665cde169b159239bf990b9c0be9f0f7b15177efe16e7480981f25e780d5066ab6dba21341419f4898b2cb1c2d5a43e3c7cb48578a6b79140bf6fc7f9c167a557dc4a876a34c809ea7c1224d1566d214b1c31bd881e4348d486a598c4f912415aea96ba204c862de6c0d0f59722952139b058fabe059a44eb759de201f073a762ce6c3d6a013991e01b2e1650e43489ec72148101b2030090cecc45a2d4c77d33551ce84156d5a52b197b06e6ff665adb8a7ced4527a705c517553c855d426d1f059c74a60603bd28a899f38f4dce60b3a5f0fd422da779774d85018bd8e18fc671fc026a5750acd99dff5d6e6d4093d6f2e3d74a4fd4fde1e054ac1fb8913316135a39fd5fef3227c4ea06b7a57a7546e663287c2b26e7fefbbfb3b8f2252e79942552c4049f7321e0ffbf41384475ad5225796519678e7f2eb91a14c311c18441669ad930dda4de84db0e1feda5a24be77b7816aa2594d9e4a0607b3be5a5f98f267d383077c9ae7ea1f7eafca4181edbd3e2c94060e5c5a2697d76e580903865346f993fc43748b75b82116a901751b17da92cb41a62b2777e90f6f2c22dcd6e19a580a795435224d894a378c4359c7de413dbedf8754fb87a47be1c896a8e416ab493088eda3846e086b6e78a09bddab6d3c30967d402c9e1f3e579907faf44b848800652af7b18558e9674e28a4730cb0bcf910965e3f5dfcd13d19f14a02c1144e128a1987d5e8e7a40e322eeb76a285e8f58a7cca24de06893bc1a2f91660428302659ab5b0e12f7fb830a73d576304b678573811c691c80a273d6f04c9699f555a36c1b159b0bc50e2ea8c0401b9efd6c4199d0b5f2d319a15041dc0809d8d5296fcdc19e6aae711f1a3b60cb110e24842f78814ba0cd1a054b634f85c90d07f6e344fa70e2542c431b13cd0cecfaad0650d104e6a87f5543891ff7e39c48e7ede4cdf4ded49c5ff764241d49ff1b91c3d3e069da07bdad8dc5ba2f2023280450621bdf4620ae117a533dc32ae73c28ba2d4d7a5fd638f2772a9eecc81a0810d50cab47ef30e032d829f38cf1b3c5b9fa8306f36e376e08635de215ef54290c529536347f6f0cc6bc8a2c6a9f2d19666c883e66afd29b13c7935041f453eece549305d0653c317fa6622cddc582535655e79fc0e8e00faec0ed02d0e5d1889a92c8224d1f1bb68afdf317bdf3306dd4453a915e0b6a471b7d9f51cee39a459c4d4b73b19590098acf2bc598b27b3245005057bcbd4e2e57634438a4f4f073c2392392aa624b501e4249b10091bb4262116e61b4192a0c78ff64dca80e7387d3dde3f5af99b1a68f32f92b5bef6f045f82138997e98f45178bdd0a2d9c606c53d23b9d9ee87c0fa8aa31ddd90af415f154c147d181bf9e24f6fae376385f46c5587e548621bb584a6d1731e0ae45c334d4ff6f6dbf5dd1e735aa47b0eb0b6956518fd6691846dc117137937e93c36804ea5b1a85fcf9b6cae345f4baac09d1ac6efb6266bd905941fb519d0e2cab37b1d7bc6718aa573026e946d1cc127dcad36cb8870ae93e7ea613b3674a11b0dd483bac2e1642fed8da5c8d07c7ea04754f0ce6c31eac89e497fe908e19390be8d4e4f518260f85f89d46e94b670ec6a3727b59fba2cac04629ea7dc81e2b353bdb47aca4bf038ecc02922949fd973ba098058d89875f14ff1a97a8252cb3ad60e41577b4aba27cdb57ef84c53365b8343dcf5fd5280287f06431b73dd53e9a94f0735abcd93fb58604e40d7153a2180c1cd499bbc8c3e5ebe1400ac7f06332fc5d2639834b3e9110abc38d1f257ce72db12992f43e324bbdc94b69b781b006ad2d2a41f9b060d5f469d72b56b3a1bbd7c867062a60a6ab0b211e11091f91e8228bc9ac65c23ce682d07c8a4e651834bc0cbe72f456598a9a0850ecd3d37fe837c56663abf5425736d1f405d9469e4abd3fed71d0ad754fc5855478f7a6e4f36ae1d73b5d72f1479dac2b4ee2727d27da3d67fac58d624105aeff63c700f9622d095a0b2ad492da7f1706fd5ebdefb3dfce9379f9c3caba09c9f5b9d73d3e051fe5c2a6db94f196206cb9f97718b6f939be3f89395a3bac07aa73b52d87bea80d448e270c927630ef63a86a6c32c5b25cce1405f52f148fc3d85ea51e130ee48a1d8b465dd4f2c05eeb462cb2c673eb06da311bd92d0ce52053a4fee8fe848146afc4b33addcd776339a6558753f22c5a7f68c7d0d22c607e9e9bb50451b7c7ad2c89bed7bc1034c0021bf197316ee8bd8b0a2e32878d9530fff7be7aecaaeb69810c1dd0b3b43b61cfb298adbeeee94e99454cccc44c1e68a80987846d1a064fa78b07f7cd972c0aa8cb4923a3a0b69fd9dd49a20b034a99990dc84d0f1da4d9b1f9df136fd49277fef5d12fe98eb43589b1e1060403017082ca7e47606eccfc0b6ab1804cc2a38456570d71c141a3441cdc95c5881ed62e2f0d3812a024afde2ea347bf38e034494e93bf1c3c5e621a789e79d9c762bc5ac9e160889767f18da47ab8c4f8bde09265f198a2a54ebf7c8fab14cdacf9e1eaf6837b496663e4df1c41f5b77ba9d83d1fd87a324eb6b8bf15ffa9db4d65cdeb94f0e42ac5ee971cddda25a11087b27562ac1d18a669b3e481c63577ab920c16001ce3f1fa646b35d3b48d6961289e41047d16d3f7d3c89c9314005c12ff61f4ad296a2a5dc58c0678eb3efd3d9a30784fd3604b3618e1cea6bdb5689e68a24d28c9d468c58bd3426976330beef1962b06234c3d6543d9b19824ee257cea6eaac8dbc9b4afd1c679abfd6dd6486b49d3648893c4e5ab2bfce97d4b5ef58c9838e8df4eb456b4bc851b582a08b6cfbc82597defba9fc7fedd361968c51189f5e348b25ac0059e8b6b6473c95e6ca1d1d361c7302e784b37c0111e748c9fb2b7ba981fd8d5d0aa5ea53f3676a9bf331a4e94f00a83f06fad930ea57b5ff327a182b0c50601e0f6b3fd4d3d0c3c417e453183ff5d16e0784b5520d3cf54c5905b8ac407ba20278ae3d17fc8141a7a6bf0e76c2ccfaa65e56b3566ef8dba664658e1e5f3560568792a7851465ede199a629bab02b0be1c8a200b7f40cc11299e18df03f4d7b1f2fdc61e4855956188d328a4692a5105c7ae395e4c97a8ba8984228612b49e38d840ad5acda60591d9a85c3e5d5179889389106fcef8ca222256c3f1ecfc1d00deebead377e17508f62197310431f2f2651d548662650a351c0169458021cafed844a1a0c7152cd8a9b3f1e4d929d2445ec9c4151d4589dd616e1254ade00ea08d3537433ad2aeb15f33470e0195819a1783fe7b81c50c0ec88561495bcd12aaa8903dcc465654b4303770f0166fd1326053013c9bb716d39f0dd91f12f487e48ed1f5efdfe9a8c802b632b18c6caa6f7ed6f7737c8485b1045c56e77ad776261e4ab487876ca709544e8368ca6035a4bc21383077fb119c33e775f79c8f2d76acb396fdd594e1dc98ec137b8b110d7e2bb6e247e48ddd30f384f938b14d1c5b7a32e41d02da0119e327c526f32998860ca0dd407ece0228913bad0957c78bd74e2f9f994b0de5f", 0x1000) 15.731184854s ago: executing program 3 (id=612): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r0, 0x1e571e7c5836dfbf, 0x0, 0xa6}, 0x14}}, 0x0) 15.676437101s ago: executing program 3 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)={0x96cb, 0x7, 0x7, 0x5, 0x9, 0x6}) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000180)=0x872, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x2, 0x6, 0x10, 0x2, 'syz1\x00', 0xfffffffd}, 0x4, 0x0, 0x3e, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000440)=['\xbb\xf6x\x06\x00\x17\xd6\xb7b\x94\'\x00\xf0\x00\x00\x91\xdf\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x11\x00\x00\xeez\xad\x8f;5)\x00\b\x10H\xf0\xf9\x93\xe1\xe8y0-B\xed\xe6&\x95\x8f\n\x1e#\xa7\xd6i\x96\xdd\xaf\xd9\x91\xb5\xfd\n\x1a\xc1\x96\x8ea\rMj\xc2\x02\xceE\xc9\x81x\xd2\xc7\xfbp'], 0x58}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r8 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x8) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='f\x1c\x93<\xd7\xb1\xe1{\x06\x9a\xf3\xbeL\x13d\xb1\xda2L\xa8e\xce\xa9\xb0!G\x1cn\x19\x12\x01p\xca/\xae[\x19\xa3UJ\xeb_\x83K\x882]j\xfec\x89\xffV\xb3\x83\xf1\xd2l\xda\x91\x8b\xd1\xf1\x0e\x1b\xe6\x0e|\xd6\x839_\x1d\xd7', &(0x7f0000000600)='-\xfb\xc2J6\xa9e\xae(\x9eN\x97\xf3Z\x15\xac\xf4,\xf3\xf9q\x800\xccX\xa8z\xbcq\xee[\x1aZ\xfa\xd6\xed\r3\x9d\x00\x00\x00\x00\b\x00\x10>\xd2t\xaa\xdd\v\' 0\a\'\xfdgJ\xc6\xee\xfd\xb7yHAe\x1a\xd7\xd97\x19\xffI\xef\xaf\xfb\xa2\\\x9c|7^\xfd\x152|\x82\xc6\x9cv\x86\xbe\xadM\xe8\xe3\xceG\xd0\xf9\xacZ<\x06\nd\x92#\xff\x03\xff\x953\x85xUo\xd4\xbaUc\xfet\xb0\x16\xa6;\t\x96G\x93Kh\xac#9F\a\x88\x83\x8c \f\x8f\xf0Z\xbc\x11\xf9\xd5\x8e\x83\xb0\x0eu\xaby\x99j', 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x5c, r1, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x40}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x4044040}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x27b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xd, 0x9}}]}}}]}}]}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000008c0)={{r10, 0x3d, 0x0, 0x1, 0x8, 0x2, 0x5, 0xca8, 0x5bc, 0xf5, 0x401, 0x9, 0x2, 0x6f49, 0x6}}) syz_usb_control_io(r9, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_control_io$hid(r9, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01744360d280027ae9da00ba8aabd55366fac92b84c7837c4700000000187f7a84f8adc371403db0f9974fbdc6f361355faeacb9f0418b9b2543107fc0bd22493d1571d14fbc1ea4023a3e8a527a592759de29d6915cc90050148c774410f4af7407ed348d9fe09c7ee32453b42464e491a74c8fdf730aead75fa76de26f18e40d73e6d87b20869ffe1816b4b47ac5279a5d15856803ec1dc5bd998248f2814533bf451e2cd557b899c79f3bfa9c16f0d89810252c5113b1e0d3d7f3475d7aba4fa35657b1e8033e4399cd782469b207c63b04cacd567514943f16cfd028a0"], 0x0}, 0x0) 5.152595362s ago: executing program 0 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) ftruncate(r7, 0x2007ffd) sendfile(r5, r6, 0x0, 0x1000a3) 5.151891658s ago: executing program 1 (id=616): mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x9000000, 0x0, 0x0, 0x1ff}}, 0x50) recvmmsg(r3, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 5.151010784s ago: executing program 3 (id=617): accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x0, 0x80000) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_uring_setup(0x70f8, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e", 0x4}, {&(0x7f0000000280)="d7ced286", 0xfe74}], 0x2}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = io_uring_setup(0x15cc, &(0x7f0000000000)={0x0, 0x7e52, 0x100, 0x2, 0x91}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r6, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), &(0x7f0000000380)={&(0x7f00000003c0)={[0x7]}, 0x8}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f80)=@nat={'nat\x00', 0x1b, 0x5, 0x1498, 0xb8, 0x0, 0xffffffff, 0xb8, 0x1c8, 0x1400, 0x1400, 0xffffffff, 0x1400, 0x1400, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x9, @ipv6=@private0, @ipv6=@remote, @gre_key=0xfff9, @port=0x4e22}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@multicast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @port=0x4e21, @gre_key=0x8}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, 0xffffffff, 0xffffff00, 'wg0\x00', 'xfrm0\x00', {0xff}, {}, 0x73, 0x3, 0x6c}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xe, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @local, @local, @port=0x4e24, @icmp_id=0x65}}}}, {{@ip={@multicast2, @loopback, 0x0, 0xffffffff, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x5c, 0x2, 0x70}, 0x0, 0x1108, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x1, './cgroup/syz1\x00', 0x1}}, @common=@unspec=@physdev={{0x68}, {'batadv_slave_1\x00', {}, 'netdevsim0\x00', {0xff}, 0x0, 0x18}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xa, @remote, @loopback, @icmp_id=0x64, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x14f8) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f00000000c0)={r7}, 0x1) unshare(0x68040200) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x801) 4.8911301s ago: executing program 2 (id=618): dup(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000001040), 0x0, 0x800) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000d4050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x18, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f0000000480)={0x2c, 0x0, r3, 0x29, r1}, 0x10) 4.251053387s ago: executing program 2 (id=619): socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f7274000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x19}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}, {@in6=@remote, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x3503, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x2}}]}, 0x184}, 0x1, 0x0, 0x0, 0x880}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x1e, &(0x7f0000000000)={0x11, 0x0, 0x1}, 0x8) r9 = socket$inet(0x2, 0x3, 0xed) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000080)={@remote, @local, r10}, 0xc) read(r7, &(0x7f0000001480)=""/213, 0xd5) r11 = syz_open_procfs(0x0, 0x0) statx(r11, &(0x7f00000005c0)='.\x00', 0x0, 0x0, 0x0) 4.179624836s ago: executing program 1 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = syz_io_uring_setup(0x4349, &(0x7f0000000180)={0x0, 0xd46f, 0x80, 0x200}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf, 0x0, "08007e000001080000000000000000004e0600"}) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x1986a000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000100)={'team_slave_1\x00', {0x2, 0x0, @broadcast}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b2a, &(0x7f00000002c0)="f677cc7cc13ce55997677a0a00df6085deacc06959824f43a00a3a8a2e4e3e12fc1416ba835b250511d50a8c445d14e6b69721d0efe7b8346c00") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r6) r7 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r5, r7, &(0x7f00000001c0), 0x8) fcntl$addseals(r7, 0x409, 0x8) fallocate(r7, 0x3, 0x0, 0x3) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = socket$unix(0x1, 0x2, 0x0) dup2(r9, r8) 4.075168244s ago: executing program 4 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) 2.334961909s ago: executing program 0 (id=621): syz_emit_ethernet(0x329, &(0x7f0000000800)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb88a8400081000160884700010b00000006000000"], 0x0) 2.333883952s ago: executing program 1 (id=622): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x22, 0x0, 0x0, 0xfffff010}, {0x4006, 0x0, 0xfe}]}, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000440)=""/184, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@local, @broadcast, @val, {@mpls_mc={0x806, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 2.332846846s ago: executing program 2 (id=623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e000000270000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00 '}) 2.326707156s ago: executing program 3 (id=624): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = socket(0x11, 0x800000003, 0x3) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffdfb, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x2, 0x4, 0x5, 0x3, 0xfffb, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x5, 0x0, 0x6, 0x2, 0x1, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0x4, 0x100, 0xa, 0x800ca6, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0xfffffffe, 0x7, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x8, 0x8002, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x800, 0xb, 0xffffff80, 0x43, 0xc22, 0x1, 0x6, 0x5, 0xb, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0xfffffffc, 0x5, 0x4, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3b, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0x8, 0x7fff, 0x9, 0x2e4c20b6, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x8, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x3ff, 0x5d, 0x1000000, 0x5, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0xfffffffd, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x2, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x150, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0xffff}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x2, 0x1, 0x4, 0xb, 0x12, 0x1e, 0x2}}]}}]}, 0x150}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002b00000018900000786c6c2500000000002020207b1af8ff00000000bfa117000000000007010000f8ffffffb702000008000000b70300000000000085000000100000009565af2121c183b961c4385979a19d263db96b540a2df44a282b30712a708304c93fdc7eb18c23d1f4401fde90479ac6a986e4968f8365a2bc2198811d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f00000002c0)={0x0, 0x9, 0x7fffffff}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x633f14264af4a4a7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4041) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r0, 0x10, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 2.192184875s ago: executing program 0 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xfffffffd], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000002a00000008005800000000000e0001"], 0x44}}, 0x0) 2.10681085s ago: executing program 2 (id=626): r0 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r0, 0x0, 0x81f) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, 0x0, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000010000000000000000000000850000001700000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b90400", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x28a82, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(r7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff00"}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000000000, 0x100, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 1.166149987s ago: executing program 2 (id=627): syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200000000000, 0x20, 0x300}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x800000000000}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 1.152756077s ago: executing program 1 (id=628): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x126) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x10) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000480)={'0000000000000000000000000000000', 0x31}, 0xffd7, 0x2) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}]}}) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}]}}) dup3(r4, r6, 0x80000) (async) dup3(r4, r6, 0x80000) 1.070754873s ago: executing program 0 (id=629): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a28000000000a01f3000000005e"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() eventfd(0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) creat(&(0x7f0000000740)='./file0\x00', 0x28) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001d00010028bd7000fcdbdf250a000000", @ANYRES32=r6, @ANYBLOB="0800000414000100"], 0x30}}, 0x0) syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.027099102s ago: executing program 2 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r2 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 142.001567ms ago: executing program 1 (id=631): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1f9303) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$binfmt_aout(r0, 0x0, 0xc8) r5 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020701020000000000000000020000080c00024000000000000000030c00"], 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x20004010) 4.960388ms ago: executing program 3 (id=632): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40000000}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x5, 0x7b, 0x8, 0x82d, 0x300, 0xc34b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0x8, 0x1, 0xb8, 0x8}}]}}]}}, 0x0) 0s ago: executing program 0 (id=633): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa}, {0x0, 0x4}]}]}}, 0x0, 0x36, 0x6c, 0x1, 0x6, 0x0, @void, @value}, 0x20) kernel console output (not intermixed with test programs): nfig 0 descriptor?? [ 180.521445][ T7637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.646054][ T6774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.658659][ T6774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.694019][ T7637] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 180.703911][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.719551][ T7661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.732005][ T7661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.774998][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 180.781436][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 180.788135][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 180.794237][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 182.313232][ T969] usb 4-1: USB disconnect, device number 18 [ 183.142863][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 183.303018][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 183.315216][ T8] usb 1-1: New USB device found, idVendor=13d2, idProduct=3311, bcdDevice=1e.b2 [ 183.328681][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.336971][ T8] usb 1-1: Product: syz [ 183.341130][ T8] usb 1-1: Manufacturer: syz [ 183.473578][ T8] usb 1-1: SerialNumber: syz [ 183.486515][ T8] usb 1-1: config 0 descriptor?? [ 184.102588][ T5941] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 184.215970][ T969] usb 1-1: USB disconnect, device number 16 [ 184.333884][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.352393][ T5941] usb 4-1: device descriptor read/64, error -71 [ 184.484354][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.591328][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.611979][ T5941] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 184.691460][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.742403][ T5941] usb 4-1: device descriptor read/64, error -71 [ 184.787607][ T1162] bridge_slave_1: left allmulticast mode [ 184.799660][ T1162] bridge_slave_1: left promiscuous mode [ 184.811008][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.831826][ T1162] bridge_slave_0: left allmulticast mode [ 184.845855][ T1162] bridge_slave_0: left promiscuous mode [ 184.858053][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.882972][ T5941] usb usb4-port1: attempt power cycle [ 185.163997][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.232567][ T5941] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 185.281824][ T5941] usb 4-1: device descriptor read/8, error -71 [ 185.443088][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.923851][ T1162] bond0 (unregistering): Released all slaves [ 186.190050][ T5941] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 186.242834][ T5941] usb 4-1: device descriptor read/8, error -71 [ 186.275343][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 186.275362][ T29] audit: type=1400 audit(1732778901.613:980): avc: denied { mount } for pid=7839 comm="syz.0.478" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 186.353008][ T5941] usb usb4-port1: unable to enumerate USB device [ 186.500092][ T29] audit: type=1400 audit(1732778901.853:981): avc: denied { open } for pid=7854 comm="syz.1.481" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 186.623227][ T29] audit: type=1400 audit(1732778901.893:982): avc: denied { read write } for pid=7860 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.677844][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.687919][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.704532][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.714353][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.721755][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.741312][ T29] audit: type=1400 audit(1732778901.893:983): avc: denied { open } for pid=7860 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.741413][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.765325][ T29] audit: type=1400 audit(1732778901.983:984): avc: denied { ioctl } for pid=7860 comm="syz-executor" path="socket:[20479]" dev="sockfs" ino=20479 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.809855][ T29] audit: type=1400 audit(1732778902.163:985): avc: denied { read write } for pid=7854 comm="syz.1.481" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.838024][ T7863] input: syz0 as /devices/virtual/input/input10 [ 186.857307][ T29] audit: type=1400 audit(1732778902.163:986): avc: denied { open } for pid=7854 comm="syz.1.481" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.880976][ T29] audit: type=1400 audit(1732778902.163:987): avc: denied { ioctl } for pid=7854 comm="syz.1.481" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.906772][ T29] audit: type=1400 audit(1732778902.213:988): avc: denied { read } for pid=5195 comm="acpid" name="event4" dev="devtmpfs" ino=2926 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.932464][ T29] audit: type=1400 audit(1732778902.213:989): avc: denied { open } for pid=5195 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2926 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.355959][ T7860] chnl_net:caif_netlink_parms(): no params data found [ 187.398066][ T1162] hsr_slave_0: left promiscuous mode [ 187.406347][ T1162] hsr_slave_1: left promiscuous mode [ 187.412026][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.419759][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.427270][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.434810][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.449196][ T1162] veth1_macvtap: left promiscuous mode [ 187.454758][ T1162] veth0_macvtap: left promiscuous mode [ 187.460263][ T1162] veth1_vlan: left promiscuous mode [ 187.465642][ T1162] veth0_vlan: left promiscuous mode [ 187.696440][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 187.727160][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 187.978076][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.987529][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.995462][ T7860] bridge_slave_0: entered allmulticast mode [ 188.001858][ T7860] bridge_slave_0: entered promiscuous mode [ 188.022219][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.029448][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.036680][ T7860] bridge_slave_1: entered allmulticast mode [ 188.043242][ T7860] bridge_slave_1: entered promiscuous mode [ 188.070637][ T7860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.081301][ T7860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.112110][ T7860] team0: Port device team_slave_0 added [ 188.121704][ T7860] team0: Port device team_slave_1 added [ 188.135730][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.143565][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.170133][ T7860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.190329][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.197371][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.223809][ T7860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.251553][ T7860] hsr_slave_0: entered promiscuous mode [ 188.257669][ T7860] hsr_slave_1: entered promiscuous mode [ 188.263797][ T7860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.271351][ T7860] Cannot create hsr debugfs directory [ 188.546732][ T7860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.561951][ T7860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.570051][ T7860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.578111][ T7860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.616772][ T7860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.630114][ T7860] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.639792][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.646878][ T6774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.659625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.666700][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.759582][ T7860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.869552][ T7860] veth0_vlan: entered promiscuous mode [ 188.878544][ T7860] veth1_vlan: entered promiscuous mode [ 188.895923][ T7860] veth0_macvtap: entered promiscuous mode [ 188.904445][ T7860] veth1_macvtap: entered promiscuous mode [ 188.915647][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.926571][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.936485][ T5851] Bluetooth: hci2: command tx timeout [ 188.942776][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.953370][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.963274][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.973715][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.983608][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.994348][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.004920][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.016282][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.028198][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.038359][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.049015][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.058889][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.069561][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.079439][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.090001][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.100661][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.111371][ T7860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.120128][ T7860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.128843][ T7860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.137599][ T7860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.178076][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.186168][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.201849][ T7860] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 189.211774][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.227056][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.235011][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.012494][ T5851] Bluetooth: hci2: command tx timeout [ 193.092708][ T5851] Bluetooth: hci2: command tx timeout [ 193.974916][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.981283][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.173039][ T5851] Bluetooth: hci2: command tx timeout [ 197.341462][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 197.341479][ T29] audit: type=1400 audit(1732778912.693:992): avc: denied { read } for pid=7885 comm="syz.0.489" path="socket:[21917]" dev="sockfs" ino=21917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.690750][ T7901] No source specified [ 197.822472][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 197.830454][ T969] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.983837][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 197.992366][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 198.011492][ T8] usb 4-1: New USB device found, idVendor=13d2, idProduct=3311, bcdDevice=1e.b2 [ 198.033773][ T29] audit: type=1400 audit(1732778913.043:993): avc: denied { mounton } for pid=7889 comm="syz.2.491" path="/114/bus" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.041349][ T969] usb 2-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 198.079319][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.099371][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.120657][ T8] usb 4-1: Product: syz [ 198.129200][ T8] usb 4-1: Manufacturer: syz [ 198.145087][ T8] usb 4-1: SerialNumber: syz [ 198.151860][ T969] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.167913][ T969] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 198.178219][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.259037][ T8] usb 4-1: config 0 descriptor?? [ 198.264074][ T969] usb 2-1: Product: syz [ 198.268240][ T969] usb 2-1: Manufacturer: syz [ 198.272989][ T969] usb 2-1: SerialNumber: syz [ 198.288389][ T969] usb 2-1: config 0 descriptor?? [ 198.303758][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.320619][ T7899] trusted_key: encrypted_key: master key parameter 'ecryp' is invalid [ 198.374233][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.389811][ T29] audit: type=1400 audit(1732778913.743:994): avc: denied { read } for pid=7898 comm="syz.0.494" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.414002][ T29] audit: type=1400 audit(1732778913.743:995): avc: denied { open } for pid=7898 comm="syz.0.494" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.438013][ T29] audit: type=1400 audit(1732778913.793:996): avc: denied { ioctl } for pid=7898 comm="syz.0.494" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.487507][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.564336][ T29] audit: type=1400 audit(1732778913.923:997): avc: denied { connect } for pid=7891 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.712238][ T11] bridge_slave_1: left allmulticast mode [ 198.770550][ T11] bridge_slave_1: left promiscuous mode [ 198.852066][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.977024][ T5894] usb 4-1: USB disconnect, device number 23 [ 198.993626][ T29] audit: type=1326 audit(1732778914.333:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.1.490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27ca580809 code=0x0 [ 199.016408][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.027378][ T11] bridge_slave_0: left allmulticast mode [ 199.044892][ T11] bridge_slave_0: left promiscuous mode [ 199.065147][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.131581][ T29] audit: type=1400 audit(1732778914.483:999): avc: denied { ioctl } for pid=7914 comm="syz.2.497" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 199.545208][ T29] audit: type=1400 audit(1732778914.893:1000): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.565080][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.597157][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.607542][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.617429][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.626950][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.642396][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 199.655304][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.671868][ T29] audit: type=1400 audit(1732778915.013:1001): avc: denied { getopt } for pid=7919 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.856099][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.867080][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.877664][ T11] bond0 (unregistering): Released all slaves [ 200.130789][ T7917] chnl_net:caif_netlink_parms(): no params data found [ 200.252547][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 200.303536][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.312402][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.319678][ T7917] bridge_slave_0: entered allmulticast mode [ 200.326649][ T7917] bridge_slave_0: entered promiscuous mode [ 200.394020][ T7942] FAULT_INJECTION: forcing a failure. [ 200.394020][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.407131][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.0.503 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 200.417372][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.427437][ T7942] Call Trace: [ 200.430714][ T7942] [ 200.433639][ T7942] dump_stack_lvl+0x16c/0x1f0 [ 200.438324][ T7942] should_fail_ex+0x497/0x5b0 [ 200.443011][ T7942] _copy_from_user+0x2e/0xd0 [ 200.447597][ T7942] snd_seq_oss_write+0x398/0x7b0 [ 200.452546][ T7942] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 200.458007][ T7942] ? inode_security+0x101/0x130 [ 200.462867][ T7942] ? __pfx_odev_write+0x10/0x10 [ 200.467725][ T7942] odev_write+0x51/0xa0 [ 200.471884][ T7942] vfs_write+0x24c/0x1150 [ 200.476213][ T7942] ? __fget_files+0x1fc/0x3a0 [ 200.480894][ T7942] ? __pfx_lock_release+0x10/0x10 [ 200.485919][ T7942] ? __pfx_vfs_write+0x10/0x10 [ 200.490681][ T7942] ? lock_acquire+0x2f/0xb0 [ 200.495188][ T7942] ? __fget_files+0x40/0x3a0 [ 200.499779][ T7942] ? __fget_files+0x206/0x3a0 [ 200.504479][ T7942] ksys_write+0x12b/0x250 [ 200.508811][ T7942] ? __pfx_ksys_write+0x10/0x10 [ 200.513664][ T7942] do_syscall_64+0xcd/0x250 [ 200.518175][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.524074][ T7942] RIP: 0033:0x7f7b3d180809 [ 200.528484][ T7942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.548091][ T7942] RSP: 002b:00007f7b3aff6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.556503][ T7942] RAX: ffffffffffffffda RBX: 00007f7b3d346160 RCX: 00007f7b3d180809 [ 200.564470][ T7942] RDX: 000000000000fd85 RSI: 0000000020000080 RDI: 0000000000000007 [ 200.572436][ T7942] RBP: 00007f7b3aff60a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.580400][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.588365][ T7942] R13: 0000000000000000 R14: 00007f7b3d346160 R15: 00007ffcd502a578 [ 200.596342][ T7942] [ 200.606718][ T11] hsr_slave_0: left promiscuous mode [ 200.613108][ T11] hsr_slave_1: left promiscuous mode [ 200.619285][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.626807][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.634594][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.642008][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.655712][ T11] veth1_macvtap: left promiscuous mode [ 200.661259][ T11] veth0_macvtap: left promiscuous mode [ 200.669448][ T11] veth1_vlan: left promiscuous mode [ 200.675729][ T11] veth0_vlan: left promiscuous mode [ 200.687031][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.711214][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.731902][ T8] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 200.750829][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.764860][ T8] usb 3-1: config 0 descriptor?? [ 200.794487][ T5895] usb 2-1: USB disconnect, device number 14 [ 200.871583][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 201.139969][ T7949] netlink: 80 bytes leftover after parsing attributes in process `syz.0.506'. [ 201.176344][ T11] team0 (unregistering): Port device team_slave_1 removed [ 201.190532][ T46] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 201.252929][ T11] team0 (unregistering): Port device team_slave_0 removed [ 201.258542][ T8] elo 0003:04E7:0030.0009: unknown main item tag 0x0 [ 201.268562][ T8] elo 0003:04E7:0030.0009: unknown main item tag 0x4 [ 201.279516][ T8] elo 0003:04E7:0030.0009: item fetching failed at offset 3/7 [ 201.295326][ T8] elo 0003:04E7:0030.0009: parse failed [ 201.303573][ T8] elo 0003:04E7:0030.0009: probe with driver elo failed with error -22 [ 201.388340][ T46] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.402926][ T46] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.417800][ T46] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.427067][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.443633][ T7944] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 201.454070][ T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.561965][ T5941] usb 3-1: USB disconnect, device number 25 [ 201.590722][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.598025][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.605507][ T7917] bridge_slave_1: entered allmulticast mode [ 201.613140][ T7917] bridge_slave_1: entered promiscuous mode [ 201.644088][ T7917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.690691][ T7917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.732448][ T5856] Bluetooth: hci2: command tx timeout [ 201.753228][ T7917] team0: Port device team_slave_0 added [ 201.827634][ T7917] team0: Port device team_slave_1 added [ 201.844126][ T5941] usb 4-1: USB disconnect, device number 24 [ 201.913388][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.922514][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.950326][ T7917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.963342][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.963358][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.963379][ T7917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.000371][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.025634][ T7917] hsr_slave_0: entered promiscuous mode [ 202.026392][ T7917] hsr_slave_1: entered promiscuous mode [ 202.026736][ T7917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.026779][ T7917] Cannot create hsr debugfs directory [ 202.402501][ T5894] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 202.499628][ T7917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.501820][ T7917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.504315][ T7917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.506114][ T7917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.553075][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 202.562132][ T5894] usb 3-1: New USB device found, idVendor=13d2, idProduct=3311, bcdDevice=1e.b2 [ 202.562162][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.562183][ T5894] usb 3-1: Product: syz [ 202.562198][ T5894] usb 3-1: Manufacturer: syz [ 202.562212][ T5894] usb 3-1: SerialNumber: syz [ 202.564261][ T5894] usb 3-1: config 0 descriptor?? [ 202.575121][ T7917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.614093][ T7917] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.649571][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.649637][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.652483][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.652528][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.808775][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.989994][ T7917] veth0_vlan: entered promiscuous mode [ 202.994973][ T7917] veth1_vlan: entered promiscuous mode [ 203.018526][ T7917] veth0_macvtap: entered promiscuous mode [ 203.041492][ T7917] veth1_macvtap: entered promiscuous mode [ 203.049596][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.049613][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.049623][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.049635][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.049644][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.049656][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.049665][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.049678][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.050380][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.055132][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.055146][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.055153][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.055162][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.055169][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.055179][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.055185][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.055195][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.055623][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.057178][ T7917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.057208][ T7917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.057231][ T7917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.057251][ T7917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.106858][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.106878][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.119673][ T7917] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 203.119691][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.129323][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.129340][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.812384][ T5856] Bluetooth: hci2: command tx timeout [ 205.892352][ T5856] Bluetooth: hci2: command tx timeout [ 207.972712][ T5856] Bluetooth: hci2: command tx timeout [ 212.367461][ T5941] usb 3-1: USB disconnect, device number 26 [ 212.561861][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 212.561881][ T29] audit: type=1400 audit(1732778927.793:1017): avc: denied { setopt } for pid=7981 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.361628][ T29] audit: type=1400 audit(1732778929.713:1018): avc: denied { create } for pid=8003 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.423493][ T29] audit: type=1400 audit(1732778929.783:1019): avc: denied { setopt } for pid=8003 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.512491][ T5941] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 214.520165][ T5891] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 214.841648][ T6774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.994312][ T5941] usb 4-1: device descriptor read/64, error -71 [ 215.128812][ T8007] mac80211_hwsim hwsim9 : renamed from wlan1 [ 215.184532][ T6774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.203573][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 215.210186][ T5891] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 215.218721][ T5891] usb 1-1: config 0 has no interface number 0 [ 215.227095][ T5891] usb 1-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 215.240502][ T5891] usb 1-1: config 0 interface 84 altsetting 246 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 215.242809][ T6774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.253701][ T5891] usb 1-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 215.273872][ T5941] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 215.281540][ T5891] usb 1-1: config 0 interface 84 altsetting 246 endpoint 0xE has invalid wMaxPacketSize 0 [ 215.291543][ T5891] usb 1-1: config 0 interface 84 has no altsetting 0 [ 215.299915][ T5891] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 215.308968][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.316981][ T5891] usb 1-1: Product: syz [ 215.321154][ T5891] usb 1-1: Manufacturer: syz [ 215.326068][ T5891] usb 1-1: SerialNumber: syz [ 215.332186][ T5891] usb 1-1: config 0 descriptor?? [ 215.338704][ T6774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.410965][ T6774] bridge_slave_1: left allmulticast mode [ 215.419701][ T6774] bridge_slave_1: left promiscuous mode [ 215.436900][ T5941] usb 4-1: device descriptor read/64, error -71 [ 215.439451][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.447242][ T5891] comedi comedi0: Endpoint has wrong direction [ 215.457965][ T5891] dt9812 1-1:0.84: driver 'dt9812' failed to auto-configure device. [ 215.470424][ T6774] bridge_slave_0: left allmulticast mode [ 215.478791][ T5891] usb 1-1: USB disconnect, device number 17 [ 215.481000][ T6774] bridge_slave_0: left promiscuous mode [ 215.490401][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.552477][ T5941] usb usb4-port1: attempt power cycle [ 215.625068][ T8019] exFAT-fs (loop0): mounting with "discard" option, but the device does not support discard [ 215.631886][ T29] audit: type=1400 audit(1732778930.973:1020): avc: denied { watch watch_reads } for pid=8015 comm="syz.2.521" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.664362][ T8019] syz.0.519: attempt to access beyond end of device [ 215.664362][ T8019] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 215.681469][ T8019] exFAT-fs (loop0): unable to read boot sector [ 215.687986][ T8019] exFAT-fs (loop0): failed to read boot sector [ 215.721230][ T8019] exFAT-fs (loop0): failed to recognize exfat type [ 215.731517][ T29] audit: type=1400 audit(1732778930.983:1021): avc: denied { mounton } for pid=8014 comm="syz.0.519" path="/126/bus" dev="tmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 215.754278][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.789567][ T29] audit: type=1400 audit(1732778931.073:1022): avc: denied { create } for pid=8014 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.825291][ T29] audit: type=1400 audit(1732778931.133:1023): avc: denied { execute } for pid=8026 comm="syz.2.523" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 215.926790][ T8031] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 215.938333][ T29] audit: type=1400 audit(1732778931.153:1024): avc: denied { read write } for pid=8026 comm="syz.2.523" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.938481][ T29] audit: type=1400 audit(1732778931.153:1025): avc: denied { open } for pid=8026 comm="syz.2.523" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.985866][ T5941] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 216.062518][ T5891] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 216.062657][ T29] audit: type=1400 audit(1732778931.243:1026): avc: denied { ioctl } for pid=8026 comm="syz.2.523" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 216.095663][ T5941] usb 4-1: device descriptor read/8, error -71 [ 216.222437][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 216.239762][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.352522][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.422349][ T5941] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 216.447029][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.505009][ T5941] usb 4-1: device descriptor read/8, error -71 [ 216.540450][ T5891] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 216.595404][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.614282][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.628592][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.639336][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.646937][ T5941] usb usb4-port1: unable to enumerate USB device [ 216.659565][ T5891] usb 1-1: config 0 descriptor?? [ 216.688437][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.696879][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.704385][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.800829][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.811152][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.822975][ T6774] bond0 (unregistering): Released all slaves [ 217.597715][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 217.608682][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 217.614935][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 217.628173][ T5891] usb 1-1: USB disconnect, device number 18 [ 217.646343][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.656890][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.664171][ T8042] bridge_slave_0: entered allmulticast mode [ 217.670534][ T8042] bridge_slave_0: entered promiscuous mode [ 217.680987][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.688280][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.695564][ T8042] bridge_slave_1: entered allmulticast mode [ 217.701908][ T8042] bridge_slave_1: entered promiscuous mode [ 217.721563][ T6774] hsr_slave_0: left promiscuous mode [ 217.727338][ T6774] hsr_slave_1: left promiscuous mode [ 217.735387][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.743215][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.750670][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.758131][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.771849][ T6774] veth1_macvtap: left promiscuous mode [ 217.777375][ T6774] veth0_macvtap: left promiscuous mode [ 217.783037][ T6774] veth1_vlan: left promiscuous mode [ 217.788264][ T6774] veth0_vlan: left promiscuous mode [ 218.020009][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 218.047704][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 218.294500][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.305640][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.339348][ T8042] team0: Port device team_slave_0 added [ 218.354398][ T8042] team0: Port device team_slave_1 added [ 218.367430][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.379101][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.405136][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.417578][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.424610][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.451057][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.496678][ T8042] hsr_slave_0: entered promiscuous mode [ 218.503520][ T8042] hsr_slave_1: entered promiscuous mode [ 218.509430][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.519317][ T8042] Cannot create hsr debugfs directory [ 218.770967][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 218.770982][ T29] audit: type=1400 audit(1732778934.123:1036): avc: denied { create } for pid=8042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.772138][ T8042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.777111][ T29] audit: type=1400 audit(1732778934.123:1037): avc: denied { write } for pid=8042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.797675][ T5856] Bluetooth: hci2: command tx timeout [ 218.827731][ T29] audit: type=1400 audit(1732778934.123:1038): avc: denied { read } for pid=8042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.853709][ T8042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.870005][ T8042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.878842][ T8042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.912150][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.928880][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.939794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.946853][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.958995][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.966073][ T6774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.983128][ T8042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.994252][ T8042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.026877][ T29] audit: type=1400 audit(1732778934.383:1039): avc: denied { sys_module } for pid=8042 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 219.079083][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.181973][ T8042] veth0_vlan: entered promiscuous mode [ 219.191408][ T8042] veth1_vlan: entered promiscuous mode [ 219.210593][ T8042] veth0_macvtap: entered promiscuous mode [ 219.218641][ T8042] veth1_macvtap: entered promiscuous mode [ 219.230635][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.241450][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.251644][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.262110][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.272001][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.282678][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.292513][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.303784][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.314750][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.329391][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.339996][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.350092][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.360582][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.371268][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.381703][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.391564][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.401998][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.414442][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.428802][ T8042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.438378][ T8042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.447750][ T8042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.456807][ T8042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.498377][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.506553][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.521090][ T8042] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 219.531624][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.547558][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.555414][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.862722][ T5856] Bluetooth: hci2: command tx timeout [ 222.932390][ T5856] Bluetooth: hci2: command tx timeout [ 225.012759][ T5856] Bluetooth: hci2: command tx timeout [ 227.434521][ T29] audit: type=1400 audit(1732778942.783:1040): avc: denied { mounton } for pid=8042 comm="syz-executor" path="/root/syzkaller.Xs3OlK/syz-tmp" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 227.480954][ T29] audit: type=1400 audit(1732778942.783:1041): avc: denied { mount } for pid=8042 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.503783][ T8073] tmpfs: Bad value for 'mpol' [ 227.546442][ T29] audit: type=1400 audit(1732778942.783:1042): avc: denied { mounton } for pid=8042 comm="syz-executor" path="/root/syzkaller.Xs3OlK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 227.600542][ T29] audit: type=1400 audit(1732778942.793:1043): avc: denied { mount } for pid=8042 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 227.649375][ T29] audit: type=1400 audit(1732778942.793:1044): avc: denied { mounton } for pid=8042 comm="syz-executor" path="/root/syzkaller.Xs3OlK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 227.689033][ T29] audit: type=1400 audit(1732778942.793:1045): avc: denied { mounton } for pid=8042 comm="syz-executor" path="/root/syzkaller.Xs3OlK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 227.723694][ T29] audit: type=1400 audit(1732778942.793:1046): avc: denied { unmount } for pid=8042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 229.324910][ T29] audit: type=1400 audit(1732778942.833:1047): avc: denied { mounton } for pid=8042 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 229.348046][ T29] audit: type=1400 audit(1732778942.833:1048): avc: denied { mount } for pid=8042 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 229.352958][ T8090] Bluetooth: hci2: Frame reassembly failed (-84) [ 229.370760][ T29] audit: type=1400 audit(1732778942.833:1049): avc: denied { mounton } for pid=8042 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 229.479708][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 229.955744][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.016958][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.051771][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.102402][ T969] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 230.132131][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.206921][ T12] bridge_slave_1: left allmulticast mode [ 230.212782][ T12] bridge_slave_1: left promiscuous mode [ 230.218442][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.227300][ T12] bridge_slave_0: left allmulticast mode [ 230.233276][ T12] bridge_slave_0: left promiscuous mode [ 230.238884][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.264527][ T969] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.279778][ T969] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.289802][ T969] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.299004][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.312889][ T8096] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 230.325276][ T969] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.531871][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.532144][ T969] usb 1-1: USB disconnect, device number 19 [ 230.548042][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.557983][ T12] bond0 (unregistering): Released all slaves [ 230.775338][ T12] hsr_slave_0: left promiscuous mode [ 230.781008][ T12] hsr_slave_1: left promiscuous mode [ 230.787162][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.794893][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.802439][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.809820][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.821439][ T12] veth1_macvtap: left promiscuous mode [ 230.826984][ T12] veth0_macvtap: left promiscuous mode [ 230.832729][ T12] veth1_vlan: left promiscuous mode [ 230.837959][ T12] veth0_vlan: left promiscuous mode [ 231.105920][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.114975][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.128924][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.136971][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.194159][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.201907][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.243084][ T5941] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 231.478596][ T5856] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 231.834971][ T12] team0 (unregistering): Port device team_slave_1 removed [ 231.871000][ T12] team0 (unregistering): Port device team_slave_0 removed [ 231.875359][ T5941] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 231.898450][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.906529][ T5941] usb 4-1: Product: syz [ 231.910721][ T5941] usb 4-1: Manufacturer: syz [ 231.915433][ T5941] usb 4-1: SerialNumber: syz [ 231.921933][ T5941] usb 4-1: config 0 descriptor?? [ 231.929815][ T5941] ch341 4-1:0.0: ch341-uart converter detected [ 232.276310][ T969] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 232.463987][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 232.515775][ T969] usb 2-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 232.588848][ T8102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.534'. [ 232.599108][ T969] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 232.628703][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 232.628742][ T29] audit: type=1400 audit(1732778947.983:1107): avc: denied { map_read map_write } for pid=8114 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 232.656451][ T969] usb 2-1: config 1 interface 0 altsetting 235 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 232.667986][ T969] usb 2-1: config 1 interface 0 has no altsetting 0 [ 232.716567][ T969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.725694][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.733825][ T969] usb 2-1: Product: syz [ 232.738250][ T969] usb 2-1: Manufacturer: syz [ 232.743408][ T969] usb 2-1: SerialNumber: syz [ 232.751522][ T8113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 232.759780][ T969] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 232.824892][ T29] audit: type=1400 audit(1732778948.183:1108): avc: denied { module_request } for pid=8106 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.867253][ T8106] chnl_net:caif_netlink_parms(): no params data found [ 232.919736][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.927162][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.934451][ T8106] bridge_slave_0: entered allmulticast mode [ 232.941075][ T8106] bridge_slave_0: entered promiscuous mode [ 232.950102][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.960770][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.967964][ T8106] bridge_slave_1: entered allmulticast mode [ 232.974938][ T8106] bridge_slave_1: entered promiscuous mode [ 232.991225][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.003655][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.019298][ T5941] usb 4-1: failed to receive control message: -110 [ 233.025928][ T5941] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 233.045974][ T8106] team0: Port device team_slave_0 added [ 233.055607][ T8106] team0: Port device team_slave_1 added [ 233.070872][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.078226][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.104927][ T8106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.117773][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.124809][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.151051][ T8106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.177273][ T8106] hsr_slave_0: entered promiscuous mode [ 233.183330][ T8106] hsr_slave_1: entered promiscuous mode [ 233.189171][ T8106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.197450][ T8106] Cannot create hsr debugfs directory [ 233.254504][ T54] Bluetooth: hci5: command tx timeout [ 233.427297][ T8106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.437795][ T8106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.452692][ T8106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.460660][ T8106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.478098][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.485201][ T8106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.492526][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.499563][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.530866][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.545861][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.553932][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.568708][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.578980][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.586091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.599721][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.606822][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.649356][ T29] audit: type=1400 audit(1732778949.003:1109): avc: denied { sys_module } for pid=8106 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 233.716348][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.824539][ T8106] veth0_vlan: entered promiscuous mode [ 233.834119][ T8106] veth1_vlan: entered promiscuous mode [ 233.853862][ T8106] veth0_macvtap: entered promiscuous mode [ 233.861141][ T8106] veth1_macvtap: entered promiscuous mode [ 233.871593][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.882267][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.892085][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.904005][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.913832][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.924285][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.934113][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.946583][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.957434][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.969544][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.984583][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.995070][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.005504][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.015435][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.025935][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.035915][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.046378][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.056992][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.067085][ T8106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.075813][ T8106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.084688][ T8106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.094183][ T8106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.137967][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.148459][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.161434][ T8106] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 234.173950][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.187676][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.195767][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.843364][ T5941] usb 2-1: USB disconnect, device number 15 [ 235.332642][ T54] Bluetooth: hci5: command tx timeout [ 237.412467][ T54] Bluetooth: hci5: command tx timeout [ 239.492362][ T54] Bluetooth: hci5: command tx timeout [ 242.489856][ T29] audit: type=1400 audit(1732778957.843:1110): avc: denied { mounton } for pid=8106 comm="syz-executor" path="/root/syzkaller.UJdrTz/syz-tmp" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 242.519206][ T29] audit: type=1400 audit(1732778957.843:1111): avc: denied { mount } for pid=8106 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.522597][ T5892] usb 4-1: USB disconnect, device number 29 [ 242.548978][ T5892] ch341 4-1:0.0: device disconnected [ 242.568616][ T29] audit: type=1400 audit(1732778957.843:1112): avc: denied { mounton } for pid=8106 comm="syz-executor" path="/root/syzkaller.UJdrTz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 242.597862][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 242.712215][ T29] audit: type=1400 audit(1732778957.843:1113): avc: denied { mount } for pid=8106 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 242.762518][ T29] audit: type=1400 audit(1732778957.843:1114): avc: denied { mounton } for pid=8106 comm="syz-executor" path="/root/syzkaller.UJdrTz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 243.261896][ T29] audit: type=1400 audit(1732778957.843:1115): avc: denied { mounton } for pid=8106 comm="syz-executor" path="/root/syzkaller.UJdrTz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 243.290206][ T29] audit: type=1400 audit(1732778957.843:1116): avc: denied { unmount } for pid=8106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 243.310155][ T29] audit: type=1400 audit(1732778957.923:1117): avc: denied { mounton } for pid=8106 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 243.333963][ T29] audit: type=1400 audit(1732778957.923:1118): avc: denied { mount } for pid=8106 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 243.369127][ T29] audit: type=1400 audit(1732778957.923:1119): avc: denied { mounton } for pid=8106 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 243.574944][ T6774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.688756][ T6774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.753825][ T6774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.816292][ T6774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.907969][ T6774] bridge_slave_1: left allmulticast mode [ 243.915106][ T6774] bridge_slave_1: left promiscuous mode [ 243.921980][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.930005][ T6774] bridge_slave_0: left allmulticast mode [ 243.935852][ T6774] bridge_slave_0: left promiscuous mode [ 243.941447][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.167432][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.191503][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.201323][ T6774] bond0 (unregistering): Released all slaves [ 244.432358][ T6774] hsr_slave_0: left promiscuous mode [ 244.438000][ T6774] hsr_slave_1: left promiscuous mode [ 244.443747][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.451108][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.459039][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.466627][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.479462][ T6774] veth1_macvtap: left promiscuous mode [ 244.486114][ T6774] veth0_macvtap: left promiscuous mode [ 244.491617][ T6774] veth1_vlan: left promiscuous mode [ 244.496901][ T6774] veth0_vlan: left promiscuous mode [ 244.875768][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 244.925063][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.934711][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.950326][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.962162][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.969614][ T5941] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 244.979351][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 244.987566][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.052640][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 245.062014][ T25] usb 1-1: config 0 has no interfaces? [ 245.070903][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 245.071883][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 245.091251][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.100760][ T25] usb 1-1: config 0 descriptor?? [ 245.115507][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 245.142548][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 245.154691][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.170387][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.181126][ T5941] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 245.190356][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.200140][ T5941] usb 2-1: config 0 descriptor?? [ 245.206187][ T5894] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 245.376916][ T25] usb 1-1: USB disconnect, device number 20 [ 245.383308][ T5894] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 245.397858][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.406017][ T5894] usb 4-1: Product: syz [ 245.410202][ T5894] usb 4-1: Manufacturer: syz [ 245.415147][ T5894] usb 4-1: SerialNumber: syz [ 245.421468][ T5894] usb 4-1: config 0 descriptor?? [ 245.428105][ T5894] ch341 4-1:0.0: ch341-uart converter detected [ 245.623203][ T5941] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x2 [ 245.631946][ T5941] lua 0003:1E7D:2C2E.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 245.645390][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 245.670411][ T5894] usb 4-1: failed to receive control message: -71 [ 245.687134][ T5894] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 245.707036][ T5894] usb 4-1: USB disconnect, device number 30 [ 245.713567][ T5894] ch341 4-1:0.0: device disconnected [ 245.769434][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.779988][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.787199][ T8169] bridge_slave_0: entered allmulticast mode [ 245.793255][ T969] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 245.801658][ T8169] bridge_slave_0: entered promiscuous mode [ 245.809839][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.818043][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.826946][ T8169] bridge_slave_1: entered allmulticast mode [ 245.833638][ T8169] bridge_slave_1: entered promiscuous mode [ 245.836045][ T25] usb 2-1: USB disconnect, device number 16 [ 245.858478][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.871618][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.906881][ T8169] team0: Port device team_slave_0 added [ 245.918096][ T8169] team0: Port device team_slave_1 added [ 245.943039][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.950051][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.962304][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 245.982664][ T969] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.987078][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.996180][ T969] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.012347][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.013341][ T969] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.029653][ T969] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.036777][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.069090][ T969] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.078621][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.088509][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.131731][ T8169] hsr_slave_0: entered promiscuous mode [ 246.142022][ T8169] hsr_slave_1: entered promiscuous mode [ 246.148229][ T8169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.160607][ T8169] Cannot create hsr debugfs directory [ 246.296957][ T969] usb 3-1: GET_CAPABILITIES returned 0 [ 246.302661][ T969] usbtmc 3-1:16.0: can't read capabilities [ 246.869347][ T25] usb 3-1: USB disconnect, device number 27 [ 247.013350][ T54] Bluetooth: hci2: command tx timeout [ 247.155716][ T8210] netlink: 'syz.1.562': attribute type 4 has an invalid length. [ 247.259177][ T8169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.262411][ T969] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 247.277349][ T8169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.288512][ T8169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.305567][ T8169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.365545][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.386372][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.399146][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.406268][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.423915][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.432044][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.441992][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.589091][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.604546][ T969] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 247.607378][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.613981][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.615280][ T969] usb 4-1: config 0 descriptor?? [ 247.837067][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 247.837099][ T29] audit: type=1400 audit(1732778963.163:1190): avc: denied { execmem } for pid=8213 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 247.866052][ T29] audit: type=1400 audit(1732778963.173:1191): avc: denied { create } for pid=8213 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.886834][ T29] audit: type=1400 audit(1732778963.183:1192): avc: denied { write } for pid=8213 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.167022][ T29] audit: type=1400 audit(1732778963.523:1193): avc: denied { module_request } for pid=8169 comm="syz-executor" kmod="netdev-netdevsim4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 248.200476][ T29] audit: type=1400 audit(1732778963.553:1194): avc: denied { sys_module } for pid=8169 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 248.221917][ T29] audit: type=1400 audit(1732778963.553:1195): avc: denied { read write } for pid=5838 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.246561][ T29] audit: type=1400 audit(1732778963.553:1196): avc: denied { open } for pid=5838 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.270843][ T29] audit: type=1400 audit(1732778963.553:1197): avc: denied { ioctl } for pid=5838 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.355276][ T8169] veth0_vlan: entered promiscuous mode [ 248.366920][ T8169] veth1_vlan: entered promiscuous mode [ 248.387585][ T8169] veth0_macvtap: entered promiscuous mode [ 248.396634][ T8169] veth1_macvtap: entered promiscuous mode [ 248.409921][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.421210][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.431077][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.441688][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.451557][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.462790][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.472766][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.483304][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.494136][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.504788][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.515793][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.525674][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.536368][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.546243][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.556796][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.566645][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.577462][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.587978][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.598833][ T8169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.607830][ T8169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.617810][ T8169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.628235][ T8169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.669771][ T29] audit: type=1400 audit(1732778964.023:1198): avc: denied { create } for pid=8169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.693932][ T29] audit: type=1400 audit(1732778964.023:1199): avc: denied { write } for pid=8169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.720978][ T8169] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 248.730838][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.741730][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.748603][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.752223][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.757407][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.092384][ T54] Bluetooth: hci2: command tx timeout [ 251.172404][ T54] Bluetooth: hci2: command tx timeout [ 252.697815][ T969] usbhid 4-1:0.0: can't add hid device: -32 [ 252.703980][ T969] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 253.252402][ T54] Bluetooth: hci2: command tx timeout [ 255.414205][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.420502][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.663308][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 257.663324][ T29] audit: type=1400 audit(1732778973.023:1201): avc: denied { mounton } for pid=8169 comm="syz-executor" path="/root/syzkaller.84DF1o/syz-tmp" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 257.702391][ T29] audit: type=1400 audit(1732778973.023:1202): avc: denied { mount } for pid=8169 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 257.724721][ T29] audit: type=1400 audit(1732778973.023:1203): avc: denied { mounton } for pid=8169 comm="syz-executor" path="/root/syzkaller.84DF1o/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 257.745866][ T46] usb 4-1: USB disconnect, device number 31 [ 257.750270][ T29] audit: type=1400 audit(1732778973.023:1204): avc: denied { mount } for pid=8169 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 257.778136][ T29] audit: type=1400 audit(1732778973.023:1205): avc: denied { mounton } for pid=8169 comm="syz-executor" path="/root/syzkaller.84DF1o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 257.805508][ T8229] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 257.805837][ T29] audit: type=1400 audit(1732778973.023:1206): avc: denied { mounton } for pid=8169 comm="syz-executor" path="/root/syzkaller.84DF1o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 257.841030][ T29] audit: type=1400 audit(1732778973.023:1207): avc: denied { unmount } for pid=8169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 257.860841][ T29] audit: type=1400 audit(1732778973.053:1208): avc: denied { ioctl } for pid=8228 comm="syz.0.567" path="socket:[25342]" dev="sockfs" ino=25342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.886479][ T29] audit: type=1400 audit(1732778973.083:1209): avc: denied { read write } for pid=8231 comm="syz.1.569" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.909954][ T29] audit: type=1400 audit(1732778973.083:1210): avc: denied { open } for pid=8231 comm="syz.1.569" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.953419][ T8238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.968818][ T8238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.012550][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 258.130331][ T46] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 258.540377][ T8251] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 258.541877][ T25] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 258.556897][ T1137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.558393][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.576341][ T25] usb 2-1: Product: syz [ 258.580499][ T25] usb 2-1: Manufacturer: syz [ 258.585315][ T25] usb 2-1: SerialNumber: syz [ 258.622924][ T25] usb 2-1: config 0 descriptor?? [ 258.628888][ T25] ch341 2-1:0.0: ch341-uart converter detected [ 258.659044][ T1137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.713885][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.724580][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.738579][ T46] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.747963][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.756035][ T46] usb 4-1: SerialNumber: syz [ 258.763186][ T1137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.837088][ T1137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.859827][ T25] usb 2-1: failed to receive control message: -71 [ 258.866342][ T25] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 258.877256][ T25] usb 2-1: USB disconnect, device number 17 [ 258.883566][ T25] ch341 2-1:0.0: device disconnected [ 258.931446][ T1137] bridge_slave_1: left allmulticast mode [ 258.937269][ T1137] bridge_slave_1: left promiscuous mode [ 258.943242][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.951650][ T1137] bridge_slave_0: left allmulticast mode [ 258.957449][ T1137] bridge_slave_0: left promiscuous mode [ 258.966499][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.031948][ T8252] FAULT_INJECTION: forcing a failure. [ 259.031948][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 259.045166][ T8252] CPU: 0 UID: 0 PID: 8252 Comm: syz.3.570 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 259.055421][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.065476][ T8252] Call Trace: [ 259.068747][ T8252] [ 259.071665][ T8252] dump_stack_lvl+0x16c/0x1f0 [ 259.076346][ T8252] should_fail_ex+0x497/0x5b0 [ 259.081031][ T8252] should_failslab+0xc2/0x120 [ 259.085693][ T8252] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 259.092007][ T8252] ? sidtab_sid2str_get+0x17a/0x680 [ 259.097196][ T8252] kmemdup_noprof+0x29/0x60 [ 259.101682][ T8252] sidtab_sid2str_get+0x17a/0x680 [ 259.106694][ T8252] sidtab_entry_to_string+0x33/0x110 [ 259.111966][ T8252] security_sid_to_context_core+0x35c/0x640 [ 259.117883][ T8252] avc_audit_post_callback+0x10b/0x8c0 [ 259.123350][ T8252] ? audit_log_format+0xe9/0x130 [ 259.128275][ T8252] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 259.134333][ T8252] ? skb_put+0x138/0x1b0 [ 259.138563][ T8252] ? audit_log_n_string+0x251/0x540 [ 259.143769][ T8252] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 259.149739][ T8252] common_lsm_audit+0x33f/0x2250 [ 259.154662][ T8252] ? irqentry_exit+0x3b/0x90 [ 259.159250][ T8252] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 259.165218][ T8252] ? __pfx_common_lsm_audit+0x10/0x10 [ 259.170578][ T8252] ? preempt_schedule_thunk+0x1a/0x30 [ 259.175937][ T8252] ? preempt_schedule_common+0x44/0xc0 [ 259.181397][ T8252] ? slow_avc_audit+0x17d/0x210 [ 259.186233][ T8252] slow_avc_audit+0x17d/0x210 [ 259.190914][ T8252] ? __pfx_slow_avc_audit+0x10/0x10 [ 259.196106][ T8252] ? avc_denied+0x138/0x180 [ 259.200602][ T8252] ? avc_has_perm_noaudit+0x2f8/0x3a0 [ 259.205963][ T8252] avc_has_perm+0x18d/0x1c0 [ 259.210458][ T8252] ? __pfx_avc_has_perm+0x10/0x10 [ 259.215476][ T8252] ? __pfx___might_resched+0x10/0x10 [ 259.220754][ T8252] inode_has_perm+0x168/0x1d0 [ 259.225417][ T8252] selinux_mount+0x2f5/0x380 [ 259.229992][ T8252] ? __pfx_selinux_mount+0x10/0x10 [ 259.235095][ T8252] ? get_current_fs_domain+0x184/0x1f0 [ 259.240550][ T8252] security_sb_mount+0xc8/0x260 [ 259.245387][ T8252] path_mount+0x129/0x1f20 [ 259.249790][ T8252] ? kmem_cache_free+0x152/0x4c0 [ 259.254718][ T8252] ? __pfx_path_mount+0x10/0x10 [ 259.259557][ T8252] ? putname+0x13c/0x180 [ 259.263800][ T8252] __x64_sys_mount+0x294/0x320 [ 259.268550][ T8252] ? __pfx___x64_sys_mount+0x10/0x10 [ 259.273828][ T8252] do_syscall_64+0xcd/0x250 [ 259.278324][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.284201][ T8252] RIP: 0033:0x7f2f41b80809 [ 259.288599][ T8252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.308456][ T8252] RSP: 002b:00007f2f428e3058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 259.316853][ T8252] RAX: ffffffffffffffda RBX: 00007f2f41d46080 RCX: 00007f2f41b80809 [ 259.324810][ T8252] RDX: 0000000020000300 RSI: 0000000020000000 RDI: 00000000200000c0 [ 259.332761][ T8252] RBP: 00007f2f428e30a0 R08: 0000000000000000 R09: 0000000000000000 [ 259.340801][ T8252] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 259.348751][ T8252] R13: 0000000000000001 R14: 00007f2f41d46080 R15: 00007ffd6b4725b8 [ 259.356713][ T8252] [ 259.359763][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.381685][ T8252] syz.3.570: attempt to access beyond end of device [ 259.381685][ T8252] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 259.395378][ T8252] SQUASHFS error: Failed to read block 0x0: -5 [ 259.401680][ T8252] unable to read squashfs_super_block [ 259.680446][ T46] usb 4-1: 0:2 : does not exist [ 259.745486][ T46] usb 4-1: USB disconnect, device number 32 [ 259.751991][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 259.853039][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.869221][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.905915][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.920352][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.927937][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 259.936743][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.183521][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.236466][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.260311][ T1137] bond0 (unregistering): Released all slaves [ 260.763010][ T46] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 261.030481][ T46] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 261.065994][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.077641][ T8259] chnl_net:caif_netlink_parms(): no params data found [ 261.634452][ T46] usb 1-1: Product: syz [ 261.638651][ T46] usb 1-1: Manufacturer: syz [ 261.643303][ T46] usb 1-1: SerialNumber: syz [ 261.651024][ T46] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 261.972438][ T5856] Bluetooth: hci2: command tx timeout [ 261.981798][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.988956][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.996154][ T8259] bridge_slave_0: entered allmulticast mode [ 262.002648][ T8259] bridge_slave_0: entered promiscuous mode [ 262.017161][ T1137] hsr_slave_0: left promiscuous mode [ 262.023338][ T1137] hsr_slave_1: left promiscuous mode [ 262.028892][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.036795][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.603903][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.614023][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.667973][ T1137] veth1_macvtap: left promiscuous mode [ 262.974628][ T1137] veth0_macvtap: left promiscuous mode [ 262.980334][ T1137] veth1_vlan: left promiscuous mode [ 262.995535][ T1137] veth0_vlan: left promiscuous mode [ 263.501581][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 263.501593][ T29] audit: type=1400 audit(1732778978.843:1292): avc: denied { write } for pid=8299 comm="syz.1.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.536936][ T5892] usb 1-1: USB disconnect, device number 21 [ 263.793701][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 263.828385][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 264.052526][ T5856] Bluetooth: hci2: command tx timeout [ 264.088077][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.097610][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.104768][ T8259] bridge_slave_1: entered allmulticast mode [ 264.111190][ T8259] bridge_slave_1: entered promiscuous mode [ 264.142800][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.155073][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.175538][ T8259] team0: Port device team_slave_0 added [ 264.190855][ T8259] team0: Port device team_slave_1 added [ 264.208653][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.215736][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.241850][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.254926][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.261868][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.287856][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.318556][ T8259] hsr_slave_0: entered promiscuous mode [ 264.325415][ T8259] hsr_slave_1: entered promiscuous mode [ 264.331662][ T8259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.339334][ T8259] Cannot create hsr debugfs directory [ 264.580064][ T29] audit: type=1400 audit(1732778979.933:1293): avc: denied { write } for pid=8259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.580975][ T8259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.602349][ T29] audit: type=1400 audit(1732778979.933:1294): avc: denied { read } for pid=8259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.629841][ T8259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.638184][ T8259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.647983][ T8259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.684047][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.700058][ T8259] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.712025][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.719148][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.731872][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.738965][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.780821][ T29] audit: type=1400 audit(1732778980.133:1295): avc: denied { sys_module } for pid=8259 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 264.840844][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.946751][ T8259] veth0_vlan: entered promiscuous mode [ 264.958080][ T8259] veth1_vlan: entered promiscuous mode [ 264.975052][ T8259] veth0_macvtap: entered promiscuous mode [ 264.982542][ T8259] veth1_macvtap: entered promiscuous mode [ 264.996611][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.007468][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.017498][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.028223][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.038222][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.048706][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.058638][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.069386][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.080107][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.091054][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.108499][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.118458][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.129303][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.139318][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.149845][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.159967][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.170432][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.181209][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.191844][ T8259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.200762][ T8259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.209709][ T8259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.218966][ T8259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.260179][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.271779][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.284556][ T8259] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 265.295111][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.307797][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.316690][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.132560][ T5856] Bluetooth: hci2: command tx timeout [ 268.212523][ T5856] Bluetooth: hci2: command tx timeout [ 273.090066][ T29] audit: type=1400 audit(1732778988.443:1296): avc: denied { mounton } for pid=8259 comm="syz-executor" path="/root/syzkaller.ebDTqq/syz-tmp" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 273.122481][ T29] audit: type=1400 audit(1732778988.443:1297): avc: denied { mount } for pid=8259 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 273.154111][ T8320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8320 comm=syz.0.590 [ 273.166743][ T29] audit: type=1400 audit(1732778988.443:1298): avc: denied { mounton } for pid=8259 comm="syz-executor" path="/root/syzkaller.ebDTqq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 273.199437][ T29] audit: type=1400 audit(1732778988.443:1299): avc: denied { mount } for pid=8259 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 273.218107][ T8320] 9pnet: p9_errstr2errno: server reported unknown error 7j1' /!6V65~X [ 273.230288][ T29] audit: type=1400 audit(1732778988.443:1300): avc: denied { mounton } for pid=8259 comm="syz-executor" path="/root/syzkaller.ebDTqq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 273.285220][ T29] audit: type=1400 audit(1732778988.443:1301): avc: denied { mounton } for pid=8259 comm="syz-executor" path="/root/syzkaller.ebDTqq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 273.313401][ T29] audit: type=1400 audit(1732778988.443:1302): avc: denied { unmount } for pid=8259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 273.333346][ T29] audit: type=1400 audit(1732778988.463:1303): avc: denied { write } for pid=8317 comm="syz.2.591" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.353961][ T29] audit: type=1400 audit(1732778988.503:1304): avc: denied { read write } for pid=8319 comm="syz.0.590" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.394277][ T29] audit: type=1400 audit(1732778988.503:1305): avc: denied { open } for pid=8319 comm="syz.0.590" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.692489][ T46] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 273.862579][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 273.875494][ T46] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 273.886783][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.965233][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.976464][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.986648][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.000328][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.009495][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.200205][ T1137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.227794][ T46] usb 3-1: GET_CAPABILITIES returned 0 [ 274.237332][ T46] usbtmc 3-1:16.0: can't read capabilities [ 274.241956][ T8342] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 274.283631][ T1137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.342212][ T1137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.403042][ T1137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.429228][ T5894] usb 3-1: USB disconnect, device number 28 [ 274.478135][ T1137] bridge_slave_1: left allmulticast mode [ 274.483872][ T1137] bridge_slave_1: left promiscuous mode [ 274.489492][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.497537][ T1137] bridge_slave_0: left allmulticast mode [ 274.505320][ T1137] bridge_slave_0: left promiscuous mode [ 274.511086][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.731226][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.741159][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.751565][ T1137] bond0 (unregistering): Released all slaves [ 274.902148][ T1137] hsr_slave_0: left promiscuous mode [ 274.907952][ T1137] hsr_slave_1: left promiscuous mode [ 274.915085][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.922905][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.930806][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.938397][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.950207][ T1137] veth1_macvtap: left promiscuous mode [ 274.956105][ T1137] veth0_macvtap: left promiscuous mode [ 274.961660][ T1137] veth1_vlan: left promiscuous mode [ 274.966931][ T1137] veth0_vlan: left promiscuous mode [ 275.210948][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 275.241422][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 275.661015][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.671123][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.680216][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.687598][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.695308][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.702528][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.765517][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 275.946442][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 275.965763][ T8369] netlink: 'syz.3.607': attribute type 3 has an invalid length. [ 275.983623][ T8369] random: crng reseeded on system resumption [ 275.991315][ T5941] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 276.021549][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 276.298948][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.312817][ T25] usb 2-1: Product: syz [ 276.317386][ T8351] chnl_net:caif_netlink_parms(): no params data found [ 276.325802][ T25] usb 2-1: Manufacturer: syz [ 276.332344][ T25] usb 2-1: SerialNumber: syz [ 276.347423][ T25] usb 2-1: config 0 descriptor?? [ 276.363948][ T5941] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 276.376844][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.386712][ T5941] usb 3-1: config 0 descriptor?? [ 276.398820][ T5941] gspca_main: spca508-2.14.0 probing 8086:0110 [ 276.423024][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.431916][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.443359][ T8351] bridge_slave_0: entered allmulticast mode [ 276.451073][ T8351] bridge_slave_0: entered promiscuous mode [ 276.461576][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.469570][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.477975][ T8351] bridge_slave_1: entered allmulticast mode [ 276.486854][ T8351] bridge_slave_1: entered promiscuous mode [ 276.543651][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.564339][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.566191][ T25] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 276.671980][ T5941] gspca_spca508: reg_read err -32 [ 276.686745][ T5941] gspca_spca508: reg_read err -32 [ 276.692024][ T25] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 276.701840][ T5941] gspca_spca508: reg_read err -32 [ 276.710010][ T5941] gspca_spca508: reg_read err -32 [ 276.716050][ T5941] gspca_spca508: reg_read err -32 [ 276.719709][ T8351] team0: Port device team_slave_0 added [ 276.732196][ T8351] team0: Port device team_slave_1 added [ 276.989187][ T5941] gspca_spca508: reg write: error -71 [ 277.043341][ T5941] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 277.268177][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.272311][ T5941] usb 3-1: USB disconnect, device number 29 [ 277.278955][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.308388][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.321006][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.328129][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.354775][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.474566][ T8351] hsr_slave_0: entered promiscuous mode [ 277.481264][ T8351] hsr_slave_1: entered promiscuous mode [ 277.501378][ T8351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.514368][ T8351] Cannot create hsr debugfs directory [ 277.732372][ T54] Bluetooth: hci2: command tx timeout [ 277.766030][ T8390] capability: warning: `syz.3.613' uses 32-bit capabilities (legacy support in use) [ 278.200112][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 278.224523][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 278.279004][ T8351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.288190][ T8351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.297589][ T8351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.307162][ T8351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.365356][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.381027][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.392589][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.399723][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.411390][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.418474][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.491223][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 278.491242][ T29] audit: type=1400 audit(1732778993.843:1440): avc: denied { sys_module } for pid=8351 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 278.522116][ T969] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 278.575762][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.662543][ T969] usb 4-1: device descriptor read/64, error -71 [ 278.705908][ T8351] veth0_vlan: entered promiscuous mode [ 278.719778][ T8351] veth1_vlan: entered promiscuous mode [ 278.720171][ T5895] usb 2-1: USB disconnect, device number 18 [ 278.748640][ T8351] veth0_macvtap: entered promiscuous mode [ 278.759980][ T8351] veth1_macvtap: entered promiscuous mode [ 278.776501][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.790552][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.800400][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.811157][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.821018][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.831512][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.842248][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.855291][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.866658][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.878961][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.890219][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.900388][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.911610][ T969] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 278.911995][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.929306][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.940401][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.950262][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.960710][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.971117][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.981810][ T8351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.990566][ T8351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.999248][ T8351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.008222][ T8351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.048757][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.060602][ T969] usb 4-1: device descriptor read/64, error -71 [ 279.061178][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.079753][ T8351] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 279.089977][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.107024][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.115006][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.173013][ T969] usb usb4-port1: attempt power cycle [ 279.512449][ T969] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 279.533430][ T969] usb 4-1: device descriptor read/8, error -71 [ 279.772419][ T969] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 279.792771][ T969] usb 4-1: device descriptor read/8, error -71 [ 279.812412][ T54] Bluetooth: hci2: command tx timeout [ 279.902641][ T969] usb usb4-port1: unable to enumerate USB device [ 281.892350][ T54] Bluetooth: hci2: command tx timeout [ 283.972458][ T54] Bluetooth: hci2: command tx timeout [ 288.272317][ T29] audit: type=1400 audit(1732779003.623:1441): avc: denied { mounton } for pid=8351 comm="syz-executor" path="/root/syzkaller.Vu6lVC/syz-tmp" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 288.352965][ T29] audit: type=1400 audit(1732779003.663:1442): avc: denied { mount } for pid=8351 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 288.375519][ T29] audit: type=1400 audit(1732779003.673:1443): avc: denied { mounton } for pid=8351 comm="syz-executor" path="/root/syzkaller.Vu6lVC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.401007][ T29] audit: type=1400 audit(1732779003.673:1444): avc: denied { mount } for pid=8351 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 288.423831][ T29] audit: type=1400 audit(1732779003.673:1445): avc: denied { mounton } for pid=8351 comm="syz-executor" path="/root/syzkaller.Vu6lVC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 288.485231][ T29] audit: type=1400 audit(1732779003.693:1446): avc: denied { mounton } for pid=8351 comm="syz-executor" path="/root/syzkaller.Vu6lVC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 289.053930][ T29] audit: type=1400 audit(1732779003.693:1447): avc: denied { unmount } for pid=8351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 289.177330][ T29] audit: type=1400 audit(1732779003.703:1448): avc: denied { create } for pid=8414 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 289.220364][ T29] audit: type=1400 audit(1732779003.703:1449): avc: denied { write } for pid=8414 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 289.240284][ T29] audit: type=1400 audit(1732779003.843:1450): avc: denied { mounton } for pid=8351 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 289.456103][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.604439][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.745509][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.831653][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.927831][ T11] bridge_slave_1: left allmulticast mode [ 289.934737][ T11] bridge_slave_1: left promiscuous mode [ 289.944272][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.955723][ T11] bridge_slave_0: left allmulticast mode [ 289.961409][ T11] bridge_slave_0: left promiscuous mode [ 289.968800][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.287083][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.296951][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.306465][ T11] bond0 (unregistering): Released all slaves [ 290.533910][ T11] hsr_slave_0: left promiscuous mode [ 290.539597][ T11] hsr_slave_1: left promiscuous mode [ 290.546520][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.553921][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.561362][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.569227][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.582479][ T11] veth1_macvtap: left promiscuous mode [ 290.587977][ T11] veth0_macvtap: left promiscuous mode [ 290.593539][ T11] veth1_vlan: left promiscuous mode [ 290.598749][ T11] veth0_vlan: left promiscuous mode [ 290.836133][ T11] team0 (unregistering): Port device team_slave_1 removed [ 290.868505][ T11] team0 (unregistering): Port device team_slave_0 removed [ 291.484826][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'. [ 292.308552][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.318674][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.334155][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.444161][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.451771][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 292.459132][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.548440][ T8467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.563692][ T8440] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 293.477466][ T8467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.548379][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 293.573774][ T8467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.605823][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.614030][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.621182][ T8454] bridge_slave_0: entered allmulticast mode [ 293.627721][ T8454] bridge_slave_0: entered promiscuous mode [ 293.635557][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.642872][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.650012][ T8454] bridge_slave_1: entered allmulticast mode [ 293.656481][ T8454] bridge_slave_1: entered promiscuous mode [ 293.670729][ T8467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.703432][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.714644][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.741409][ T8454] team0: Port device team_slave_0 added [ 293.750508][ T8454] team0: Port device team_slave_1 added [ 293.769148][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.776382][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.802468][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.814517][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.821451][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.847588][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.869445][ T8467] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.888842][ T8467] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.906453][ T8467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.917395][ T8454] hsr_slave_0: entered promiscuous mode [ 293.923508][ T8454] hsr_slave_1: entered promiscuous mode [ 293.929345][ T8454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.936978][ T8454] Cannot create hsr debugfs directory [ 293.947436][ T8467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.281445][ T8454] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.299851][ T8454] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.308691][ T8454] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.316948][ T8454] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.350532][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.368231][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.380816][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.387942][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.399415][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.406506][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.499395][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.532703][ T54] Bluetooth: hci2: command tx timeout [ 294.602067][ T8454] veth0_vlan: entered promiscuous mode [ 294.610918][ T8454] veth1_vlan: entered promiscuous mode [ 294.627433][ T8454] veth0_macvtap: entered promiscuous mode [ 294.635275][ T8454] veth1_macvtap: entered promiscuous mode [ 294.647012][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.657918][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.667754][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.678493][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.688352][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.698914][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.708829][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.719338][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.730061][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.739217][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.750280][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.760194][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.770747][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.780943][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.791711][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.801632][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.813304][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.824131][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.837143][ T8454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.845899][ T8454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.854752][ T8454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.863590][ T8454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.905761][ T6212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.917130][ T6212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.929823][ T8454] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 294.940230][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.955561][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.963464][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.612589][ T54] Bluetooth: hci2: command tx timeout [ 298.692342][ T54] Bluetooth: hci2: command tx timeout [ 300.772409][ T54] Bluetooth: hci2: command tx timeout [ 316.854514][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.860829][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.294509][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.300811][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.212384][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 417.972525][ T30] INFO: task kworker/0:4:5892 blocked for more than 143 seconds. [ 417.980268][ T30] Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 417.987634][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.996331][ T30] task:kworker/0:4 state:D stack:22256 pid:5892 tgid:5892 ppid:2 flags:0x00004000 [ 418.006559][ T30] Workqueue: usb_hub_wq hub_event [ 418.011562][ T30] Call Trace: [ 418.014840][ T30] [ 418.017747][ T30] __schedule+0xe58/0x5ad0 [ 418.022139][ T30] ? __pfx___schedule+0x10/0x10 [ 418.027117][ T30] ? __pfx_mark_lock+0x10/0x10 [ 418.031863][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 418.037695][ T30] ? find_held_lock+0x2d/0x110 [ 418.042535][ T30] ? __pfx___schedule+0x10/0x10 [ 418.047380][ T30] ? schedule+0x298/0x350 [ 418.051683][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.056847][ T30] schedule+0xe7/0x350 [ 418.060901][ T30] schedule_timeout+0x244/0x280 [ 418.065890][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 418.071272][ T30] ? mark_held_locks+0x9f/0xe0 [ 418.076539][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.081794][ T30] __wait_for_common+0x3e1/0x600 [ 418.086794][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 418.092151][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 418.097694][ T30] ? mark_held_locks+0x9f/0xe0 [ 418.102531][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.107741][ T30] ath9k_hif_usb_disconnect+0xf7/0x3f0 [ 418.113204][ T30] ? mark_held_locks+0x9f/0xe0 [ 418.117939][ T30] ? __pfx_ath9k_hif_usb_disconnect+0x10/0x10 [ 418.124034][ T30] ? usb_disable_interface+0x204/0x4c0 [ 418.129471][ T30] usb_unbind_interface+0x1e8/0x970 [ 418.134688][ T30] ? kernfs_find_ns+0x2ee/0x3f0 [ 418.139546][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 418.145300][ T30] device_remove+0x122/0x170 [ 418.149866][ T30] device_release_driver_internal+0x44a/0x610 [ 418.155939][ T30] bus_remove_device+0x22f/0x420 [ 418.160852][ T30] device_del+0x396/0x9f0 [ 418.165214][ T30] ? __pfx_device_del+0x10/0x10 [ 418.170038][ T30] ? kobject_put+0x210/0x5a0 [ 418.174657][ T30] usb_disable_device+0x36c/0x7f0 [ 418.179895][ T30] usb_disconnect+0x2e1/0x920 [ 418.184624][ T30] hub_event+0x1da5/0x4e10 [ 418.189020][ T30] ? lock_acquire+0x2f/0xb0 [ 418.193567][ T30] ? __pfx_hub_event+0x10/0x10 [ 418.198322][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 418.204127][ T30] ? rcu_is_watching+0x12/0xc0 [ 418.208886][ T30] ? trace_lock_acquire+0x146/0x1e0 [ 418.214162][ T30] ? process_one_work+0x921/0x1ba0 [ 418.219273][ T30] ? lock_acquire+0x2f/0xb0 [ 418.223864][ T30] ? process_one_work+0x921/0x1ba0 [ 418.228972][ T30] process_one_work+0x9c5/0x1ba0 [ 418.233916][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 418.239534][ T30] ? __pfx_process_one_work+0x10/0x10 [ 418.244959][ T30] ? rcu_is_watching+0x12/0xc0 [ 418.249704][ T30] ? assign_work+0x1a0/0x250 [ 418.254332][ T30] worker_thread+0x6c8/0xf00 [ 418.258917][ T30] ? __kthread_parkme+0x148/0x220 [ 418.263974][ T30] ? __pfx_worker_thread+0x10/0x10 [ 418.269070][ T30] kthread+0x2c1/0x3a0 [ 418.273184][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.278617][ T30] ? __pfx_kthread+0x10/0x10 [ 418.283338][ T30] ret_from_fork+0x45/0x80 [ 418.287768][ T30] ? __pfx_kthread+0x10/0x10 [ 418.292654][ T30] ret_from_fork_asm+0x1a/0x30 [ 418.297443][ T30] [ 418.300482][ T30] [ 418.300482][ T30] Showing all locks held in the system: [ 418.308255][ T30] 1 lock held by khungtaskd/30: [ 418.313238][ T30] #0: ffffffff8e1bba80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 418.323201][ T30] 6 locks held by kworker/u8:4/61: [ 418.328320][ T30] #0: ffff888020eb2948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 418.339047][ T30] #1: ffffc9000212fd80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 418.351003][ T30] #2: ffff88814f0f40e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 418.361637][ T30] #3: ffff88814f0f6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 [ 418.372005][ T30] #4: ffff8880339f8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 418.381880][ T30] #5: ffff88807cf9e598 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 [ 418.391776][ T30] 2 locks held by getty/5587: [ 418.396486][ T30] #0: ffff8880323520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 418.406279][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 418.416388][ T30] 3 locks held by syz-executor/5828: [ 418.421652][ T30] #0: ffff88807f7702f8 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 418.432046][ T30] #1: ffff88814f0f4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 418.441751][ T30] #2: ffff8880339f8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 418.451421][ T30] 3 locks held by kworker/1:3/5891: [ 418.456685][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 418.467237][ T30] #1: ffffc90003d17d80 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 418.478734][ T30] #2: ffff88802ff65b08 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x885/0x2370 [ 418.490597][ T30] 5 locks held by kworker/0:4/5892: [ 418.495827][ T30] #0: ffff8880216ee548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 418.506704][ T30] #1: ffffc9000419fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 418.517938][ T30] #2: ffff888144f75190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 418.526872][ T30] #3: ffff888030e30190 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x920 [ 418.536351][ T30] #4: ffff88805d75d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x610 [ 418.546933][ T30] 3 locks held by syz-executor/8454: [ 418.552269][ T30] #0: ffff88814f0f4420 (sb_writers#5){.+.+}-{0:0}, at: filename_create+0x10d/0x530 [ 418.561682][ T30] #1: ffff88805cfb17c8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c2/0x530 [ 418.572508][ T30] #2: ffff8880339f8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 418.582104][ T30] 3 locks held by syz.1.631/8473: [ 418.587367][ T30] #0: ffff888034ad6730 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 418.597744][ T30] #1: ffff88814f0f4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 418.607289][ T30] #2: ffff8880339f8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 418.617331][ T30] 3 locks held by syz.3.632/8476: [ 418.622407][ T30] #0: ffff888066a3e808 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 418.632750][ T30] #1: ffff88814f0f4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 418.642349][ T30] #2: ffff8880339f8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 418.651893][ T30] 3 locks held by syz.0.633/8478: [ 418.656952][ T30] #0: ffff88807d612ec8 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 418.667240][ T30] #1: ffff88814f0f4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 418.676806][ T30] #2: ffff8880339f8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 418.686414][ T30] [ 418.688980][ T30] ============================================= [ 418.688980][ T30] [ 418.697533][ T30] NMI backtrace for cpu 0 [ 418.701850][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 418.711993][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.722023][ T30] Call Trace: [ 418.725282][ T30] [ 418.728190][ T30] dump_stack_lvl+0x116/0x1f0 [ 418.732846][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 418.737759][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 418.743712][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 418.749665][ T30] watchdog+0xf14/0x1240 [ 418.753889][ T30] ? __pfx_watchdog+0x10/0x10 [ 418.758550][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 418.763734][ T30] ? __kthread_parkme+0x148/0x220 [ 418.768748][ T30] ? __pfx_watchdog+0x10/0x10 [ 418.773409][ T30] kthread+0x2c1/0x3a0 [ 418.777470][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.782651][ T30] ? __pfx_kthread+0x10/0x10 [ 418.787225][ T30] ret_from_fork+0x45/0x80 [ 418.791622][ T30] ? __pfx_kthread+0x10/0x10 [ 418.796213][ T30] ret_from_fork_asm+0x1a/0x30 [ 418.800980][ T30] [ 418.804260][ T30] Sending NMI from CPU 0 to CPUs 1: [ 418.809653][ C1] NMI backtrace for cpu 1 [ 418.809664][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 418.809680][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.809689][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 418.809708][ C1] RIP: 0010:lockdep_hardirqs_off+0x66/0xf0 [ 418.809727][ C1] Code: c3 cc cc cc cc 9c 58 f6 c4 02 74 e7 90 e8 b2 d9 62 f9 85 c0 74 0a 8b 05 f8 67 31 05 85 c0 74 68 90 eb db 48 c7 c7 20 df 6c 8b 35 1a 00 00 65 8b 05 b6 01 d3 74 85 c0 74 af 5b 5d c3 cc cc cc [ 418.809739][ C1] RSP: 0018:ffffc900001079f8 EFLAGS: 00000046 [ 418.809750][ C1] RAX: 0000000080000201 RBX: ffffffff8151171d RCX: 0000000000000001 [ 418.809758][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8b6cdf20 [ 418.809767][ C1] RBP: ffffffff8a9c10e5 R08: 0000000000000000 R09: ffffed100fa9b389 [ 418.809775][ C1] R10: ffff88807d4d9c4b R11: 0000000000000003 R12: 0000000000000006 [ 418.809784][ C1] R13: ffff88807d4d9c48 R14: 0000000000000001 R15: 0000000000000080 [ 418.809792][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 418.809807][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.809816][ C1] CR2: 0000555558ffe5c8 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 418.809825][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.809832][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.809841][ C1] Call Trace: [ 418.809845][ C1] [ 418.809851][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 418.809866][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 418.809879][ C1] ? nmi_handle+0x1a7/0x5c0 [ 418.809894][ C1] ? lockdep_hardirqs_off+0x66/0xf0 [ 418.809910][ C1] ? default_do_nmi+0x6a/0x160 [ 418.809923][ C1] ? exc_nmi+0x170/0x1e0 [ 418.809936][ C1] ? end_repeat_nmi+0xf/0x53 [ 418.809955][ C1] ? ieee80211_ibss_work+0x385/0x14c0 [ 418.809970][ C1] ? __local_bh_enable_ip+0xcd/0x120 [ 418.809988][ C1] ? lockdep_hardirqs_off+0x66/0xf0 [ 418.810004][ C1] ? lockdep_hardirqs_off+0x66/0xf0 [ 418.810025][ C1] ? lockdep_hardirqs_off+0x66/0xf0 [ 418.810040][ C1] [ 418.810044][ C1] [ 418.810049][ C1] ? ieee80211_ibss_work+0x385/0x14c0 [ 418.810063][ C1] trace_hardirqs_off+0xd/0x40 [ 418.810078][ C1] __local_bh_enable_ip+0xcd/0x120 [ 418.810093][ C1] ieee80211_ibss_work+0x385/0x14c0 [ 418.810107][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 418.810121][ C1] ? __pfx_mark_lock+0x10/0x10 [ 418.810134][ C1] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 418.810149][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 418.810162][ C1] ? find_held_lock+0x2d/0x110 [ 418.810180][ C1] ? skb_dequeue+0x126/0x180 [ 418.810197][ C1] ? __pfx_lock_release+0x10/0x10 [ 418.810211][ C1] ? mark_held_locks+0x9f/0xe0 [ 418.810224][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 418.810241][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 418.810256][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 418.810272][ C1] ieee80211_iface_work+0xd01/0xf00 [ 418.810289][ C1] cfg80211_wiphy_work+0x3de/0x560 [ 418.810303][ C1] process_one_work+0x9c5/0x1ba0 [ 418.810320][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 418.810334][ C1] ? __pfx_process_one_work+0x10/0x10 [ 418.810347][ C1] ? rcu_is_watching+0x12/0xc0 [ 418.810366][ C1] ? assign_work+0x1a0/0x250 [ 418.810380][ C1] worker_thread+0x6c8/0xf00 [ 418.810397][ C1] ? __pfx_worker_thread+0x10/0x10 [ 418.810410][ C1] kthread+0x2c1/0x3a0 [ 418.810426][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.810440][ C1] ? __pfx_kthread+0x10/0x10 [ 418.810456][ C1] ret_from_fork+0x45/0x80 [ 418.810469][ C1] ? __pfx_kthread+0x10/0x10 [ 418.810484][ C1] ret_from_fork_asm+0x1a/0x30 [ 418.810505][ C1] [ 418.810699][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 419.182576][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 419.192698][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.202730][ T30] Call Trace: [ 419.205988][ T30] [ 419.208895][ T30] dump_stack_lvl+0x3d/0x1f0 [ 419.213475][ T30] panic+0x71d/0x800 [ 419.217359][ T30] ? __pfx_panic+0x10/0x10 [ 419.221753][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 419.227101][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.233062][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 419.238404][ T30] ? watchdog+0xd7e/0x1240 [ 419.242793][ T30] ? watchdog+0xd71/0x1240 [ 419.247182][ T30] watchdog+0xd8f/0x1240 [ 419.251397][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.256058][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.261243][ T30] ? __kthread_parkme+0x148/0x220 [ 419.266242][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.270903][ T30] kthread+0x2c1/0x3a0 [ 419.274943][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.280112][ T30] ? __pfx_kthread+0x10/0x10 [ 419.284676][ T30] ret_from_fork+0x45/0x80 [ 419.289070][ T30] ? __pfx_kthread+0x10/0x10 [ 419.293633][ T30] ret_from_fork_asm+0x1a/0x30 [ 419.298385][ T30] [ 419.301598][ T30] Kernel Offset: disabled [ 419.305903][ T30] Rebooting in 86400 seconds..