last executing test programs: 8m5.748406132s ago: executing program 2 (id=1397): pipe2(&(0x7f0000000040), 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), 0x4) syz_open_dev$loop(0x0, 0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x31) 8m3.171691767s ago: executing program 2 (id=1399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047457, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x2]}, 0x8) 8m1.98227517s ago: executing program 2 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r3, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) unshare(0x2c020400) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) 8m0.680726307s ago: executing program 2 (id=1402): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x69) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x0, 0x19, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x8d) 7m58.970326101s ago: executing program 2 (id=1407): pipe2(&(0x7f0000000040), 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), 0x4) syz_open_dev$loop(0x0, 0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x31) 7m56.627711658s ago: executing program 2 (id=1410): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 14.996914724s ago: executing program 0 (id=2524): rename(&(0x7f0000000e00)='./bus\x00', &(0x7f0000001080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) shmat(r1, &(0x7f00006a0000/0x4000)=nil, 0x6000) memfd_create(&(0x7f0000000600)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\xceB\xfc\xd4c\x1a\x8d>Xt\xdd\xbb\x80!Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6\xde7\x17\x95$\xdd\x8ew\a\xe5\x1f\xe0:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\t\xdbb\x9d\x9dN\xa2\xee\xb8\xf6\xe2\xb4c\xc4\xb0\xc3\x964\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfe\xae>\xf6quc9\xe0\xbf\x94\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xe0\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\f=_\t\x18L&\xaf\xb4v\"ukO\xa6\xf3\xde\x96\x85\xc5\xdd\x12|C.\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY3\xeb\xf6\xa3\x95!:\xd1CF\xfd\xcdx\x86\xe3\x19\xb2u[2\xd6=\xd6\'\n\xc1\xdc\x7f\x8c\xdc\x02\xb7=\xc1\xf9\xb5\xa8\x88\a\xbbL\x87\xa5\xd8_\xae\xa4\r\xc9\b6)&\xe1\xea\xcdo\xa3\xcc\x9d`.\xdb\"Y\xd8\x86J#o\xcc\xff\xaaS\x03\xa8~\x99\xe5\n\x00\x00\x00\x00\x00\x00\x03\xcd\xab\x89h6FvS\xf9\x1a\xa0\xba\xed\xcc\x94\x91\xfez\x96MQ\x99{w\x82ge5\xa0K\xd8\xba\x87u\xe19\x8a{,\x06\x06\xcb\x17:~\xa0@\xefF?\x00\x00\x00\x00\xb6\x9ff\x96\x0e\x1b/\x12lUpW@\x90\"\x02L\"S\xeb\xd6\xb3\xf1\a\x8f\x93\xb5P\xd5\x892\xaa\xa4N\xf9\xf6C\xc4\n\xe3\xf9\xcb\xce\xe7\xdcS\xb0r\xf6M0\xe3y\xcdQ\xfc9C<\x06W\x8f\n\xa13L\xfb\xee?dN\"\xa8\xe6\x10L\xd9\xc6|\xear\r\xb7\xda`\xb8\xf2\b\xf6\xa76\xdb\xbe&\x16\x06\xc0\x97\xab\x98\xcdA\x1f&\x98\xb4\xf0g\x05\xe2[\x97\xbb\xd7\xba\xcc\x9b3L5\x06\x95!\\\x81\x16\xdeY\xcb=\x8e\xe4\xd5\xc1\xbd!\x1dp]Q\x03\x1e0\xb0\x05\xe6Frv\xf5Lu\xdc7\xa13s\xd9j\xe2\b\x00\x00\x00\x00\x00\x00\x00/\x1b(\xeea(~\xb7\xf2\xd7\xdc\xea\x02f\x04\x14\x0e\xcc\x99\x9ff\xa0\xaa\xe2\x94\xfd\xfa\xfbW\xa8\xe0\x00\x00\xb8\xb4o\xdd\xd0\xd1\x9a\xc9\xc2\xfc(\x8c7\xce\xf8N\xa3\x91R&\xb2\x04;g\x8c/x~\x16\x8co<\x8bh\xdd\x87&\x01y\x9b\n_|\x06<\xd7n\xff\xd0\xdd0\x1d?\x88m\aB_\x94(XAv\x10\x14\x9c\xb1\xb7\xcf\x02\x1f4\xa5\xd7\x14\xd6Y*\x02\x06j\x87\x89G\xfb\xce6\x0e\x95h4-\xbc\x11a4\"@qs\xf4\x9a\xc8\xbfyo\x12\b\x9b\xb9}\x00\xd534\xc7(\x01w\x9c\x94u\x8b!\xac\xd6\x89\x19J\xae\x7fE\x0eB\x9a\xc4%\xf8\xa7\x16\x8a\x05Rj\x85\xeb\xa3L\xcc\x9a\x02\xe5\x83h!\x99\x93lD\xe1\xa7\xfe>\xdb\x9d\xab\x1d\xb6r\xee\x04D\xa0\x94(\xdb\xe1&\x11\xdf\xb3\xa7b\x14\xda^U5\xf6\x9dN\x9d\x9cM\xb2\xf5\x10\xc4QW\xe2\xe0\xf4\x7f\x0e\xd3\xd9)\x9eq2\xeb\xd8\xbf\xfe\xef^\x1e\xb2\x7f\xf1\xb3\xa7\xe1G\xc1\x06Q7\x95\x02`\x93\xf4\xb6YM_\xa3\x94q\xb0\xe1\x01\xf1 \f\xaeM\xa7\x8e\r:A\x1b\x06\xd6e\x85\xf1\x7fG\xf6\x9aa?\xd6v\x9f\xe2\xdd\xd9\xb6\x87\x88\xc2+\xc4\xfb\xdc\x95\x89\xc1\xd0yD\xac\x1b\x00Zo\xd4\xcf\'+\x00e\x85\x00'/1214, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 14.378347472s ago: executing program 3 (id=2526): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000200)=""/242, &(0x7f0000000100)=0xf2) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) read$hidraw(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12.491851412s ago: executing program 1 (id=2530): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500), 0xbf) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340)={0x3, 0x6, 0xc, 0xde, 0xb, 0x7f, 0x5a}, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7f06) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.202277662s ago: executing program 3 (id=2531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r5) get_robust_list(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_clone3(&(0x7f0000000340)={0x101000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.927464002s ago: executing program 3 (id=2534): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x20000040) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000500), &(0x7f0000000640)=r4}, 0x17) 9.436010238s ago: executing program 1 (id=2536): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8f, 0x0, 0x6}, {0x0, 0x0, 0x9}, 0x10000, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xba770000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000084c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)}, {0x0}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4", 0xe0}, {0x0}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51ad", 0xa6}], 0x5, 0x8) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, 0x0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r6, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 9.367003415s ago: executing program 0 (id=2537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x20000040) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x8, 0xffff133a, 0x1], [{0x35, 0x0, 0x0, 0x1}], 0xc}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.538472884s ago: executing program 4 (id=2538): socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='jffs2\x00', 0x0, 0x0) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f000058f000/0x3000)=nil, 0x3000, 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) 8.253563149s ago: executing program 4 (id=2539): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) recvmmsg(r3, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x8, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$packet(r0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ptype\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, 0xc81, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 7.76342691s ago: executing program 1 (id=2540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x103) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1d, 0xdc, 0xdb, 0x8, 0x7ca, 0xb800, 0x311f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000094000040"]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 6.05012541s ago: executing program 0 (id=2541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}) 5.983129953s ago: executing program 3 (id=2542): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getpgrp(0xffffffffffffffff) getpgid(0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 4.66624243s ago: executing program 4 (id=2543): clock_nanosleep(0x8, 0x2, &(0x7f0000000080)={0x77359400}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) futex(&(0x7f0000000200)=0x2, 0x2, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)=0x1, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@loopback, 0x3ff, 0x2, 0x0, 0x0, 0x3, 0x91a}, 0x20) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 2.495111465s ago: executing program 3 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.475662206s ago: executing program 0 (id=2545): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="89000000120081ae08060cdc040000000000000a0000000000e2ffca1b1f0000000006c00e72f7507a05d08a56096e362d6dbff5ca1ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc020000003240ea7c12f21308f868fece01955fed0009d78f0a947ee6b49e33538afa8af9234751", 0x81}], 0x1}, 0x0) 2.182677453s ago: executing program 0 (id=2546): r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500), 0xbf) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340)={0x3, 0x6, 0xc, 0xde, 0xb, 0x7f, 0x5a}, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7f06) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.022390983s ago: executing program 1 (id=2547): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) read$FUSE(r0, &(0x7f0000001a00)={0x2020}, 0x2020) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000400) signalfd4(r1, &(0x7f0000000140), 0x8, 0x0) 1.987551825s ago: executing program 4 (id=2548): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.771191251s ago: executing program 3 (id=2549): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8f, 0x0, 0x6}, {0x0, 0x0, 0x9}, 0x10000, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xba770000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000084c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)}, {0x0}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4", 0xe0}, {0x0}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51ad", 0xa6}], 0x5, 0x8) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, 0x0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r6, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 978.256515ms ago: executing program 1 (id=2550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x20000040) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x8, 0xffff133a, 0x1], [{0x35, 0x0, 0x0, 0x1}], 0xc}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 923.843791ms ago: executing program 0 (id=2551): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x20000040) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000500), &(0x7f0000000640)=r4}, 0x17) 525.545597ms ago: executing program 4 (id=2552): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 358.356883ms ago: executing program 4 (id=2553): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000180)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xb0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x74, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}]}}]}, 0xb0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r5, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r7, &(0x7f0000000240)=[{&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000340)=""/178, 0xb2}], 0x2) 0s ago: executing program 1 (id=2554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r6}, 0xc) kernel console output (not intermixed with test programs): gs: Mfr=1, Product=2, SerialNumber=3 [ 922.894397][ T5296] usb 5-1: Product: syz [ 922.898824][ T5296] usb 5-1: Manufacturer: syz [ 922.907410][ T5296] usb 5-1: SerialNumber: syz [ 922.915454][ T5296] usb 5-1: config 0 descriptor?? [ 922.933691][ T5278] (null): radio-mr800 - initialization failed [ 923.016649][ T5278] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 923.153512][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.234658][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.257125][ T5278] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 923.597526][T12777] ALSA: seq fatal error: cannot create timer (-22) [ 923.891920][T11639] usb 1-1: USB disconnect, device number 82 [ 924.989854][ T5296] usb 5-1: USB disconnect, device number 102 [ 925.124368][ T9854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.321756][ T9854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.365254][ T9515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 926.386081][ T9515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 926.394822][ T9515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 926.407052][ T9515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 926.415742][ T9515] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 926.423308][ T9515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 926.591931][ T9854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.637918][ T5239] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 926.800831][ T9854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.916893][ T9854] bridge_slave_1: left allmulticast mode [ 927.946474][ T9854] bridge_slave_1: left promiscuous mode [ 927.970239][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.000189][ T9854] bridge_slave_0: left allmulticast mode [ 928.005876][ T9854] bridge_slave_0: left promiscuous mode [ 928.057894][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.370438][ T5239] Bluetooth: hci0: command tx timeout [ 929.052938][ T9515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.072906][ T9515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.082112][ T9515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.091733][ T9515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.099705][ T9515] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 929.108092][ T9515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 930.055604][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 930.066590][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 930.076711][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 930.085582][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 930.095625][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 930.106508][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 930.212075][ T9854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.241296][ T9854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.254631][ T9854] bond0 (unregistering): Released all slaves [ 930.356672][ T9515] Bluetooth: hci0: command tx timeout [ 930.727715][T12808] chnl_net:caif_netlink_parms(): no params data found [ 931.113429][ T9515] Bluetooth: hci5: command tx timeout [ 931.238726][ T9854] hsr_slave_0: left promiscuous mode [ 931.273081][ T9854] hsr_slave_1: left promiscuous mode [ 931.305887][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.338740][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.439765][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.451846][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.538816][ T9854] veth1_macvtap: left promiscuous mode [ 931.544718][ T9854] veth0_macvtap: left promiscuous mode [ 931.551334][ T9854] veth1_vlan: left promiscuous mode [ 931.561432][ T9854] veth0_vlan: left promiscuous mode [ 932.105897][ T9515] Bluetooth: hci6: command tx timeout [ 932.336513][ T9515] Bluetooth: hci0: command tx timeout [ 933.116950][ T9515] Bluetooth: hci5: command tx timeout [ 934.137268][ T5239] Bluetooth: hci6: command tx timeout [ 934.313642][ T9515] Bluetooth: hci0: command tx timeout [ 934.560764][T12865] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 934.560764][T12865] program syz.0.2007 not setting count and/or reply_len properly [ 934.946563][ T9854] team0 (unregistering): Port device team_slave_1 removed [ 935.026657][ T9854] team0 (unregistering): Port device team_slave_0 removed [ 935.095480][ T9515] Bluetooth: hci5: command tx timeout [ 936.120445][ T9515] Bluetooth: hci6: command tx timeout [ 937.664732][ T9515] Bluetooth: hci5: command tx timeout [ 938.071223][ T5238] Bluetooth: hci6: command tx timeout [ 939.356762][T12808] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.365396][T12808] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.410355][T12808] bridge_slave_0: entered allmulticast mode [ 939.417648][T12808] bridge_slave_0: entered promiscuous mode [ 939.495944][T12808] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.517877][T12808] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.553834][T12808] bridge_slave_1: entered allmulticast mode [ 939.573432][T12808] bridge_slave_1: entered promiscuous mode [ 940.762779][ T5238] Bluetooth: hci6: command 0x0405 tx timeout [ 941.678545][T12808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.872327][T12808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.983153][ T5293] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 941.995013][T12808] team0: Port device team_slave_0 added [ 942.025607][T12808] team0: Port device team_slave_1 added [ 942.076885][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 942.076910][ T29] audit: type=1326 audit(1729141222.242:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.4.2021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x0 [ 942.089591][T12836] chnl_net:caif_netlink_parms(): no params data found [ 942.205894][T12808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.213149][ T5293] usb 1-1: Using ep0 maxpacket: 16 [ 942.219362][T12808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.222641][ T5293] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 942.245405][ C1] vkms_vblank_simulate: vblank timer overrun [ 942.245839][T12808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.270858][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 942.276957][T12808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.292333][T12808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.319238][T12808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.346444][ T5293] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 942.356066][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.365518][ T5293] usb 1-1: Product: syz [ 942.381893][ T5293] usb 1-1: Manufacturer: syz [ 942.388222][ T5293] usb 1-1: SerialNumber: syz [ 942.409437][ T5293] usb 1-1: config 0 descriptor?? [ 942.433691][ T5293] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 942.446027][ T5293] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 942.508128][T12808] hsr_slave_0: entered promiscuous mode [ 942.518178][T12808] hsr_slave_1: entered promiscuous mode [ 942.545204][T12833] chnl_net:caif_netlink_parms(): no params data found [ 942.616404][ T9854] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.728884][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.742240][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.753512][T12836] bridge_slave_0: entered allmulticast mode [ 942.760847][T12836] bridge_slave_0: entered promiscuous mode [ 942.822885][ T9854] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.843354][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.856388][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.866418][T12836] bridge_slave_1: entered allmulticast mode [ 942.888356][T12836] bridge_slave_1: entered promiscuous mode [ 943.039884][ T5293] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 943.076677][ T29] audit: type=1400 audit(1729141223.292:2035): avc: denied { create } for pid=12941 comm="syz.4.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 943.077653][ T5293] em28xx 1-1:0.0: Config register raw data: 0x41 [ 943.353820][ T29] audit: type=1400 audit(1729141223.523:2036): avc: denied { create } for pid=12941 comm="syz.4.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 943.619647][ T9854] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.666263][ T5296] usb 1-1: USB disconnect, device number 83 [ 943.673244][ T5296] em28xx 1-1:0.0: Disconnecting em28xx [ 943.688253][ T5296] em28xx 1-1:0.0: Freeing device [ 943.737301][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.750516][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.816783][ T9854] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.913547][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.932022][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.947814][ T29] audit: type=1400 audit(1729141224.195:2037): avc: denied { ioctl } for pid=12950 comm="syz.4.2024" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 943.954133][T12833] bridge_slave_0: entered allmulticast mode [ 943.973524][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.175010][T12833] bridge_slave_0: entered promiscuous mode [ 944.193850][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.202465][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.210136][T12833] bridge_slave_1: entered allmulticast mode [ 944.217511][T12833] bridge_slave_1: entered promiscuous mode [ 944.352548][T12833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.396945][T12836] team0: Port device team_slave_0 added [ 944.416059][T12836] team0: Port device team_slave_1 added [ 944.449504][T12833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.775074][T12833] team0: Port device team_slave_0 added [ 944.823119][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.858784][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.205986][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.477165][T12833] team0: Port device team_slave_1 added [ 945.643614][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.659212][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.714200][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.929042][T12833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.954769][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.063083][T12833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.793432][T12833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.836457][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.944526][T12833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.990241][T12836] hsr_slave_0: entered promiscuous mode [ 947.012798][T12836] hsr_slave_1: entered promiscuous mode [ 947.025782][T12836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.043444][T12836] Cannot create hsr debugfs directory [ 947.162340][ T9854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.455662][ T9854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.588928][T12833] hsr_slave_0: entered promiscuous mode [ 947.607893][T12833] hsr_slave_1: entered promiscuous mode [ 947.637781][T12833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.656742][T12833] Cannot create hsr debugfs directory [ 947.723065][ T9854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.893501][ T9854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.078477][ T5296] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 948.247429][ T5293] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 948.268851][ T5296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.283754][T12808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 948.286661][ T5296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 948.308775][T12808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 948.316611][ T5296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 948.352402][ T5296] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 948.380351][T12808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 948.388278][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.440387][ T5293] usb 5-1: Using ep0 maxpacket: 32 [ 948.451727][T12808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 948.468845][T12989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 948.478278][ T5296] hub 1-1:1.0: bad descriptor, ignoring hub [ 948.484306][ T5296] hub 1-1:1.0: probe with driver hub failed with error -5 [ 948.502587][ T5293] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.514848][ T5293] usb 5-1: config 0 has no interfaces? [ 948.521393][ T9854] bridge_slave_1: left allmulticast mode [ 948.536739][ T5296] cdc_wdm 1-1:1.0: skipping garbage [ 948.542073][ T5296] cdc_wdm 1-1:1.0: skipping garbage [ 948.547635][ T9854] bridge_slave_1: left promiscuous mode [ 948.553424][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.561658][ T5293] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 948.582089][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.602006][ T5296] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 948.610324][ T9854] bridge_slave_0: left allmulticast mode [ 948.618936][ T5293] usb 5-1: config 0 descriptor?? [ 948.624391][ T5296] cdc_wdm 1-1:1.0: Unknown control protocol [ 948.632555][ T9854] bridge_slave_0: left promiscuous mode [ 948.638439][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.687304][ T9854] bridge_slave_1: left allmulticast mode [ 948.718471][ T9854] bridge_slave_1: left promiscuous mode [ 948.724279][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.759623][ T9854] bridge_slave_0: left allmulticast mode [ 948.765485][ T9854] bridge_slave_0: left promiscuous mode [ 948.771280][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.891752][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 948.898717][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 948.905288][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 948.911976][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 948.919853][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 948.926545][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 948.932753][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 949.012316][T12989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.040235][T12989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.156616][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 949.163328][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 949.170018][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 949.176685][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 949.183263][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 949.189936][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 949.196655][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 949.203346][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 949.210033][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 949.216749][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 949.223463][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 949.927660][ T9854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.940399][ T9854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.952987][ T9854] bond0 (unregistering): Released all slaves [ 950.183012][ T9854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.195993][ T9854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.210322][ T9854] bond0 (unregistering): Released all slaves [ 950.343976][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2031'. [ 950.768281][T12808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.953450][ T9854] hsr_slave_0: left promiscuous mode [ 950.967209][ T9854] hsr_slave_1: left promiscuous mode [ 950.983564][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.992986][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.014031][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.022218][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.043117][ T9854] hsr_slave_0: left promiscuous mode [ 951.056028][ T9854] hsr_slave_1: left promiscuous mode [ 951.068531][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.076703][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.085775][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.094073][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.162499][ T9854] veth1_macvtap: left promiscuous mode [ 951.168671][ T9854] veth0_macvtap: left promiscuous mode [ 951.174715][ T9854] veth1_vlan: left promiscuous mode [ 951.180776][ T9854] veth0_vlan: left promiscuous mode [ 951.188262][ T9854] veth1_macvtap: left promiscuous mode [ 951.194835][ T9854] veth0_macvtap: left promiscuous mode [ 951.202950][ T9854] veth1_vlan: left promiscuous mode [ 951.208894][ T9854] veth0_vlan: left promiscuous mode [ 951.385245][ T5333] usb 5-1: USB disconnect, device number 103 [ 953.415234][ T9854] team0 (unregistering): Port device team_slave_1 removed [ 953.494972][ T9854] team0 (unregistering): Port device team_slave_0 removed [ 954.781074][ T9854] team0 (unregistering): Port device team_slave_1 removed [ 954.855058][ T9854] team0 (unregistering): Port device team_slave_0 removed [ 955.589081][T12808] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.752445][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.759715][ T7906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.887104][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.894305][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.977427][ T29] audit: type=1400 audit(1729141236.824:2038): avc: denied { module_request } for pid=13037 comm="syz.4.2034" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 956.035474][T12808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 956.093710][T12808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 956.151082][T12836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 956.185284][T12836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 956.314203][T12836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 956.350156][T12836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 957.054714][T12808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.139470][T12836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.342378][T12836] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.372096][T12808] veth0_vlan: entered promiscuous mode [ 957.427652][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.434901][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.513511][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.520851][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.637640][T12833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 957.657283][T12808] veth1_vlan: entered promiscuous mode [ 957.675534][T12833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 957.699022][T12833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 957.736384][T12833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 957.905351][T12808] veth0_macvtap: entered promiscuous mode [ 957.950908][T12808] veth1_macvtap: entered promiscuous mode [ 958.031732][T12808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.045089][T12808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.061616][T12808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.078802][T12808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.101582][T12808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.168260][T12808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.188950][T12808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.213813][T12808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.237404][T12808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.262548][T12808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.284044][T12808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.341763][T12808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.363678][T12808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.395364][T12808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.441845][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.467934][T12833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.541918][ T9515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 959.576138][ T9515] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 959.586295][ T9515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 959.594508][ T9515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 959.602677][ T9515] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 959.613639][ T9515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 959.713028][T12833] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.772402][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.793805][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.921652][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.929286][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.433906][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.441055][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.510617][ T9860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.518686][ T9860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.816082][T12836] veth0_vlan: entered promiscuous mode [ 960.856477][T12836] veth1_vlan: entered promiscuous mode [ 960.915894][T12836] veth0_macvtap: entered promiscuous mode [ 960.932466][T12836] veth1_macvtap: entered promiscuous mode [ 960.971763][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.002553][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.013915][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.024614][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.034579][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.241595][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.329083][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.748576][ T9515] Bluetooth: hci2: command tx timeout [ 961.888987][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.912254][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.929995][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.949543][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.962590][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.975051][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.990229][T12836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.008324][T12836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.017298][T12836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.026990][T12836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.036627][T12836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.045676][ T29] audit: type=1400 audit(1729141243.207:2039): avc: denied { bind } for pid=13117 comm="syz.4.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 962.393194][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.399760][T13095] chnl_net:caif_netlink_parms(): no params data found [ 962.401565][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.473997][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.486648][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.662834][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.670108][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.679932][T13095] bridge_slave_0: entered allmulticast mode [ 962.687725][T13095] bridge_slave_0: entered promiscuous mode [ 962.749680][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.757241][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.764773][T13095] bridge_slave_1: entered allmulticast mode [ 962.797049][T13095] bridge_slave_1: entered promiscuous mode [ 962.914920][T12833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.933076][ T29] audit: type=1326 audit(1729141244.078:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13146 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80cf7dff9 code=0x7ffc0000 [ 962.965892][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.997899][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.083151][ T29] audit: type=1326 audit(1729141244.141:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13146 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80cf7dff9 code=0x7ffc0000 [ 963.123193][T13095] team0: Port device team_slave_0 added [ 963.155969][ T29] audit: type=1326 audit(1729141244.141:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13146 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc80cf7c990 code=0x7ffc0000 [ 963.215618][T13095] team0: Port device team_slave_1 added [ 963.239576][ T29] audit: type=1326 audit(1729141244.141:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13146 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc80cf7dbfb code=0x7ffc0000 [ 963.325457][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.340352][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.350504][ T29] audit: type=1326 audit(1729141244.141:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13146 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc80cf7dbfb code=0x7ffc0000 [ 963.409351][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.430306][ T29] audit: type=1326 audit(1729141244.246:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13146 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc80cf7dbfb code=0x7ffc0000 [ 963.485850][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.513634][ T29] audit: type=1326 audit(1729141244.246:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13146 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc80cf7dbfb code=0x7ffc0000 [ 963.537445][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.587218][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.614109][T12833] veth0_vlan: entered promiscuous mode [ 963.730344][T12833] veth1_vlan: entered promiscuous mode [ 963.738543][ T9515] Bluetooth: hci2: command tx timeout [ 963.804652][T13095] hsr_slave_0: entered promiscuous mode [ 963.828405][T13095] hsr_slave_1: entered promiscuous mode [ 963.845228][T13095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.860806][T13095] Cannot create hsr debugfs directory [ 964.003065][T12833] veth0_macvtap: entered promiscuous mode [ 964.050862][T12833] veth1_macvtap: entered promiscuous mode [ 964.154687][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.185008][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.212305][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.224258][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.239707][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.260884][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.290920][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.310353][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.336182][T12833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.348962][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.360853][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.373395][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.388465][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.411693][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.439329][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.454404][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.473983][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.492581][T12833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.581710][T13095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.617733][T12833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.626942][T12833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.639874][T12833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.649078][T12833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.737218][T13095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.864562][T13095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.023077][T13095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.171873][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.204129][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.294262][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.335837][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.496392][T13095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 965.518108][T13095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 965.553737][T13095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 965.588635][T13095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 965.719778][ T9515] Bluetooth: hci2: command tx timeout [ 965.973114][T13095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.062891][T13095] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.105166][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.112506][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.147933][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.155304][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.281958][ T29] audit: type=1326 audit(1729141247.605:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13211 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 966.321590][T13216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 966.330172][T13216] IPv6: NLM_F_CREATE should be set when creating new route [ 966.340831][T13216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 966.369402][ T29] audit: type=1326 audit(1729141247.605:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13211 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 966.787336][T13095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.960799][T13095] veth0_vlan: entered promiscuous mode [ 966.994279][T13095] veth1_vlan: entered promiscuous mode [ 967.022867][T13095] veth0_macvtap: entered promiscuous mode [ 967.033682][T13095] veth1_macvtap: entered promiscuous mode [ 967.052427][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.063325][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.073597][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.084338][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.094762][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.105795][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.115815][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.126347][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.136258][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.146778][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.160456][T13095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.171421][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.182056][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.193120][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.204903][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.215765][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.226562][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.238032][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.248675][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.262772][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.275058][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.287474][T13095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.407126][T13095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.423403][T13095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.432606][T13095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.441750][T13095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.692349][ T9515] Bluetooth: hci2: command tx timeout [ 967.756452][ T7906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.806371][ T7906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.929796][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.937694][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.248023][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 969.248052][ T29] audit: type=1326 audit(1729141250.765:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 969.302709][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.352314][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.369166][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.377380][ T29] audit: type=1326 audit(1729141250.807:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 969.414088][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.470867][ T29] audit: type=1326 audit(1729141250.828:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff85a37c990 code=0x7ffc0000 [ 969.515644][T13259] ALSA: seq fatal error: cannot create timer (-22) [ 969.553692][ T29] audit: type=1326 audit(1729141250.828:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff85a37dbfb code=0x7ffc0000 [ 969.663242][ T29] audit: type=1326 audit(1729141250.828:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff85a37dbfb code=0x7ffc0000 [ 969.716676][ T29] audit: type=1326 audit(1729141250.891:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 969.776153][ T29] audit: type=1326 audit(1729141250.891:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 969.844507][ T29] audit: type=1326 audit(1729141250.891:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff85a37c990 code=0x7ffc0000 [ 969.911273][ T29] audit: type=1326 audit(1729141250.891:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff85a37dbfb code=0x7ffc0000 [ 969.959670][ T29] audit: type=1326 audit(1729141250.891:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff85a37dbfb code=0x7ffc0000 [ 970.155946][T13270] 9pnet: Could not find request transport: f [ 973.181478][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 973.210790][T13307] netlink: 145 bytes leftover after parsing attributes in process `syz.1.2079'. [ 973.246813][T13307] netlink: 145 bytes leftover after parsing attributes in process `syz.1.2079'. [ 973.372730][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.436840][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.041419][T13330] bond1: entered promiscuous mode [ 975.126368][T13330] bond1: entered allmulticast mode [ 975.179183][T13330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.286916][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 975.286942][ T29] audit: type=1400 audit(1729141257.106:2116): avc: denied { ioctl } for pid=13338 comm="syz.1.2091" path="socket:[50614]" dev="sockfs" ino=50614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 975.369316][ T5278] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 975.531425][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 975.539184][ T5278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.559940][ T5278] usb 4-1: config 0 has no interfaces? [ 975.565524][ T5278] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 975.611294][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.695330][ T5278] usb 4-1: config 0 descriptor?? [ 976.999593][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 977.916691][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 978.707403][T13368] loop7: detected capacity change from 0 to 7 [ 978.753169][ T9564] usb 4-1: USB disconnect, device number 83 [ 978.782384][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 978.867685][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 978.922287][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 978.953869][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 979.083369][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 979.402057][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 979.414567][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 979.422685][T13368] ldm_validate_partition_table(): Disk read failed. [ 979.429426][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 979.678587][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 979.703912][T13368] Buffer I/O error on dev loop7, logical block 0, async page read [ 979.712112][T13368] Dev loop7: unable to read RDB block 0 [ 979.752708][T13368] loop7: unable to read partition table [ 979.767321][T13368] loop7: partition table beyond EOD, truncated [ 979.777968][T13368] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 979.777968][T13368] ) failed (rc=-5) [ 980.152382][ T29] audit: type=1400 audit(1729141262.208:2117): avc: denied { bind } for pid=13386 comm="syz.1.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.447069][ T29] audit: type=1400 audit(1729141262.523:2118): avc: denied { ioctl } for pid=13396 comm="syz.0.2114" path="socket:[50715]" dev="sockfs" ino=50715 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 980.574607][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 980.584231][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 981.015308][T13416] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 982.327038][ T29] audit: type=1326 audit(1729141264.465:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 982.352732][ T29] audit: type=1326 audit(1729141264.486:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 982.376806][ T29] audit: type=1326 audit(1729141264.486:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 982.400618][ T29] audit: type=1326 audit(1729141264.486:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 982.568552][ T29] audit: type=1400 audit(1729141264.748:2123): avc: denied { getopt } for pid=13428 comm="syz.0.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 982.900849][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.235144][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.538433][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.938219][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.968705][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 983.984415][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 984.028397][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 984.069441][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 984.092177][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 984.132948][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 984.435629][ T35] bridge_slave_1: left allmulticast mode [ 984.447236][ T35] bridge_slave_1: left promiscuous mode [ 984.454328][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.557458][ T35] bridge_slave_0: left allmulticast mode [ 984.564072][ T35] bridge_slave_0: left promiscuous mode [ 984.570497][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.571482][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.584123][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.601014][ T35] bond0 (unregistering): Released all slaves [ 985.636730][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 985.666457][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.673973][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.748798][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.771440][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.979459][ T29] audit: type=1400 audit(1729141268.328:2124): avc: denied { write } for pid=13502 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 986.139940][ T9515] Bluetooth: hci0: command tx timeout [ 986.337753][T13467] chnl_net:caif_netlink_parms(): no params data found [ 987.708096][ T35] hsr_slave_0: left promiscuous mode [ 988.295529][ T29] audit: type=1400 audit(1729141270.543:2125): avc: denied { sqpoll } for pid=13556 comm="syz.0.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 988.335899][ T9515] Bluetooth: hci0: command tx timeout [ 988.381437][ T29] audit: type=1326 audit(1729141270.680:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 988.944730][ T29] audit: type=1326 audit(1729141270.680:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 988.989650][ T29] audit: type=1326 audit(1729141270.701:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 989.013607][ T29] audit: type=1326 audit(1729141270.701:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 989.037903][ T29] audit: type=1326 audit(1729141270.701:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 989.062503][ T29] audit: type=1326 audit(1729141270.701:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 989.137888][ T29] audit: type=1326 audit(1729141270.701:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 989.170145][ T29] audit: type=1326 audit(1729141270.701:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 989.574468][ T35] hsr_slave_1: left promiscuous mode [ 989.629071][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.636628][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.706509][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.714095][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.754120][ T35] veth1_macvtap: left promiscuous mode [ 989.759933][ T35] veth0_macvtap: left promiscuous mode [ 989.771811][ T35] veth1_vlan: left promiscuous mode [ 989.777207][ T35] veth0_vlan: left promiscuous mode [ 990.249448][ T9515] Bluetooth: hci0: command tx timeout [ 990.282263][T13589] capability: warning: `syz.0.2186' uses 32-bit capabilities (legacy support in use) [ 990.868494][T13595] serio: Serial port pts0 [ 991.464452][T13602] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 991.464452][T13602] program syz.1.2191 not setting count and/or reply_len properly [ 991.614134][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 991.614157][ T29] audit: type=1400 audit(1729141274.249:2137): avc: denied { create } for pid=13608 comm="syz.4.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 991.660554][ T29] audit: type=1400 audit(1729141274.302:2138): avc: denied { bind } for pid=13608 comm="syz.4.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 991.771786][ T35] team0 (unregistering): Port device team_slave_1 removed [ 991.875770][ T35] team0 (unregistering): Port device team_slave_0 removed [ 991.922043][ T29] audit: type=1326 audit(1729141274.564:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 991.956134][ T29] audit: type=1326 audit(1729141274.564:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 991.982337][ T29] audit: type=1326 audit(1729141274.606:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 992.015356][ T29] audit: type=1326 audit(1729141274.606:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 992.062347][ T29] audit: type=1326 audit(1729141274.606:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 992.114871][ T29] audit: type=1326 audit(1729141274.606:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 992.138972][ T29] audit: type=1326 audit(1729141274.606:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 992.166016][ T29] audit: type=1326 audit(1729141274.606:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 992.234561][ T9515] Bluetooth: hci0: command tx timeout [ 992.851485][T13578] tipc: Failed to obtain node identity [ 992.872655][T13578] tipc: Enabling of bearer rejected, failed to enable media [ 993.199889][T13467] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.244627][T13467] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.319017][T13467] bridge_slave_0: entered allmulticast mode [ 993.345629][T13467] bridge_slave_0: entered promiscuous mode [ 993.388619][T13467] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.402271][T13467] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.412395][T13467] bridge_slave_1: entered allmulticast mode [ 993.419745][T13467] bridge_slave_1: entered promiscuous mode [ 993.445034][T13626] SELinux: syz.4.2199 (13626) set checkreqprot to 1. This is no longer supported. [ 993.586058][T13467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.623527][T13467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.706980][T13467] team0: Port device team_slave_0 added [ 993.715963][ T5279] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 993.773432][T13467] team0: Port device team_slave_1 added [ 993.896412][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 993.913316][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 993.974257][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 994.024389][T13467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.039089][ T5279] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 994.039577][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.071652][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.097684][ T5278] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 994.105477][T13467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.124160][ T5279] usb 4-1: config 0 descriptor?? [ 994.136665][T13467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.143697][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.148608][ T5279] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 994.241234][T13467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.296877][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 994.310907][ T5278] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 994.325019][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.358858][ T5278] usb 5-1: Product: syz [ 994.363113][ T5278] usb 5-1: Manufacturer: syz [ 994.374350][ T5278] usb 5-1: SerialNumber: syz [ 994.397890][ T5278] usb 5-1: config 0 descriptor?? [ 994.418331][ T5278] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 994.467587][T13467] hsr_slave_0: entered promiscuous mode [ 994.484677][T13467] hsr_slave_1: entered promiscuous mode [ 994.938880][T13651] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 994.938880][T13651] program syz.0.2207 not setting count and/or reply_len properly [ 995.537195][ T5278] gspca_sn9c20x: Write register 1000 failed -110 [ 995.543694][ T5278] gspca_sn9c20x: Device initialization failed [ 995.549988][ T5278] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 995.559691][ T5278] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 996.659481][T13633] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2202'. [ 996.687145][T13633] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2202'. [ 996.696906][ T5278] usb 4-1: USB disconnect, device number 84 [ 996.872687][ T5333] usb 5-1: USB disconnect, device number 104 [ 997.006913][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2209'. [ 997.075501][T13665] ip6gretap1: entered promiscuous mode [ 997.359816][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 997.359841][ T29] audit: type=1326 audit(1729141280.275:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.427764][ T29] audit: type=1326 audit(1729141280.275:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.496655][ T29] audit: type=1326 audit(1729141280.317:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.562011][ T29] audit: type=1326 audit(1729141280.317:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.655199][ T29] audit: type=1326 audit(1729141280.317:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.744327][ T29] audit: type=1326 audit(1729141280.317:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.836704][ T29] audit: type=1326 audit(1729141280.317:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.894689][ T29] audit: type=1326 audit(1729141280.317:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 997.921793][ T29] audit: type=1326 audit(1729141280.327:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 998.932151][ T29] audit: type=1326 audit(1729141280.327:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a37dff9 code=0x7ffc0000 [ 998.978928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.118763][ T9515] Bluetooth: hci6: link tx timeout [ 1003.124458][ T9515] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1003.614006][T13467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1003.638293][T13467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1003.687309][T13467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1003.729096][T13467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1003.992195][T13467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.095982][T13467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.138668][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.145842][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.208831][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.216084][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.226749][ T5296] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1004.365654][ T5296] usb 4-1: device descriptor read/64, error -71 [ 1004.378143][T13467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1004.399254][T13467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1004.613135][ T5296] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1004.755793][ T5296] usb 4-1: device descriptor read/64, error -71 [ 1004.871551][ T5296] usb usb4-port1: attempt power cycle [ 1004.918285][T13467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.061621][T13467] veth0_vlan: entered promiscuous mode [ 1005.103385][T13467] veth1_vlan: entered promiscuous mode [ 1005.109343][ T5238] Bluetooth: hci6: command 0x0405 tx timeout [ 1005.213055][ T5296] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1005.260773][ T5296] usb 4-1: device descriptor read/8, error -71 [ 1005.283895][T13467] veth0_macvtap: entered promiscuous mode [ 1005.340095][T13467] veth1_macvtap: entered promiscuous mode [ 1005.429727][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.480676][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.511141][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.536156][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1005.560179][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.585319][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1005.611852][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.651471][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.679827][ T5296] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1005.681453][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.709827][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.719298][ T5296] usb 4-1: device descriptor read/8, error -71 [ 1005.739072][T13467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.749934][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1005.789690][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.807957][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.823167][ T5296] usb usb4-port1: unable to enumerate USB device [ 1005.825330][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.848006][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.875332][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.898913][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.937057][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.965107][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.992489][T13467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.044174][T13467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.044294][T13467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.044347][T13467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.044398][T13467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.144721][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1006.144804][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1006.144835][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1006.380127][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.380161][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.526089][ T9854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.546736][ T9854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.789407][ T9515] Bluetooth: hci5: link tx timeout [ 1006.796465][ T9515] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1006.819431][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1006.819455][ T29] audit: type=1400 audit(1729141290.206:2187): avc: denied { listen } for pid=13797 comm="syz.1.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1006.997617][T13812] serio: Serial port pts0 [ 1007.317845][T13823] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 1007.345342][T13823] veth1_macvtap: left promiscuous mode [ 1007.366365][ T5279] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1007.523311][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 1007.550885][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.562677][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.585031][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1007.607235][ T5279] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1007.623109][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.644839][ T5279] usb 4-1: config 0 descriptor?? [ 1007.818409][T13835] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 1008.050075][ T5279] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 1008.093123][ T5279] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1008.115315][ T5279] microsoft 0003:045E:07DA.0019: no inputs found [ 1008.122950][ T5279] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 1008.307658][ T5279] usb 4-1: USB disconnect, device number 89 [ 1008.832859][ T9515] Bluetooth: hci5: command 0x0406 tx timeout [ 1012.669338][T13882] netlink: 'syz.1.2252': attribute type 21 has an invalid length. [ 1014.542384][T13903] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2258'. [ 1014.973768][T13909] tipc: Started in network mode [ 1014.986593][T13909] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1015.006670][T13909] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 1015.025466][T13909] tipc: Enabled bearer , priority 10 [ 1015.224494][ T5278] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1015.382405][ T5278] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 1015.422685][ T5278] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1015.462668][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.487444][ T5278] usb 4-1: Product: syz [ 1015.500777][ T5278] usb 4-1: Manufacturer: syz [ 1015.505642][ T5278] usb 4-1: SerialNumber: syz [ 1015.581507][ T5278] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1015.658208][ T5333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1015.999641][ T5278] tipc: Node number set to 1 [ 1016.208602][ T5278] usb 4-1: USB disconnect, device number 90 [ 1016.700697][ T5333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1016.712594][ T5333] ath9k_htc: Failed to initialize the device [ 1016.722557][ T5278] usb 4-1: ath9k_htc: USB layer deinitialized [ 1016.777999][T13934] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2268'. [ 1018.595916][T13952] usb usb8: usbfs: process 13952 (syz.4.2271) did not claim interface 0 before use [ 1020.197629][T13949] tipc: Enabling of bearer rejected, failed to enable media [ 1020.666313][T13973] syz.1.2282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1020.835038][T13977] tipc: Started in network mode [ 1020.857277][T13977] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1020.959547][T13977] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 1020.968952][T13977] tipc: Enabled bearer , priority 10 [ 1022.036393][ T8] tipc: Node number set to 1 [ 1022.423295][T14006] 9pnet_fd: Insufficient options for proto=fd [ 1023.972158][ T29] audit: type=1326 audit(1729141308.221:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052318][ T29] audit: type=1326 audit(1729141308.242:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052383][ T29] audit: type=1326 audit(1729141308.252:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052439][ T29] audit: type=1326 audit(1729141308.252:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052496][ T29] audit: type=1326 audit(1729141308.252:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052552][ T29] audit: type=1326 audit(1729141308.252:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052609][ T29] audit: type=1326 audit(1729141308.252:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052667][ T29] audit: type=1326 audit(1729141308.252:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052726][ T29] audit: type=1326 audit(1729141308.252:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.052785][ T29] audit: type=1326 audit(1729141308.252:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427097dff9 code=0x7ffc0000 [ 1024.126439][ T5279] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1024.315978][ T5279] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 1024.369550][ T5279] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1024.369616][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.369654][ T5279] usb 5-1: Product: syz [ 1024.369696][ T5279] usb 5-1: Manufacturer: syz [ 1024.369718][ T5279] usb 5-1: SerialNumber: syz [ 1024.374759][ T5279] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1024.400409][ T5279] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1024.810864][ T938] usb 5-1: USB disconnect, device number 105 [ 1025.388925][ T5279] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1025.405015][ T5279] ath9k_htc: Failed to initialize the device [ 1025.623614][ T938] usb 5-1: ath9k_htc: USB layer deinitialized [ 1026.584925][T14040] usb usb8: usbfs: process 14040 (syz.0.2305) did not claim interface 0 before use [ 1028.839206][T14067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.704625][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1031.704653][ T29] audit: type=1404 audit(1729141316.325:2236): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 Oct 17 05:01:56 syzkaller kern.warn kernel: [ 1031.704625][ T29] kauditd_printk_skb: 38 callbacks suppressed Oct 17 05:01:56 syzkaller kern.notice kernel: [ 1031.704653][ T29] audit: type=1404 audit(1729141316.325:2236): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1032.485344][ T29] audit: type=1400 audit(1729141316.357:2237): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Oct 17 05:01:57 [ 1032.515260][ T29] audit: type=1400 audit(1729141316.367:2238): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.notice kernel: [ [ 1032.539812][ T29] audit: type=1400 audit(1729141316.493:2239): avc: denied { read } for pid=14089 comm="syz.1.2322" dev="nsfs" ino=4026533438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 1032.485344][ T29] audit: type=1400 audit(1729[ 1032.565320][ T29] audit: type=1400 audit(1729141317.144:2240): avc: denied { read write } for pid=12836 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 141316.357:2237): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=sy[ 1032.601571][ T29] audit: type=1400 audit(1729141317.186:2241): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 stem_u:system_r:syslogd_t tcontext=system_u:obje[ 1032.627973][ T29] audit: type=1400 audit(1729141317.217:2242): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ct_r:var_t tclass= Oct 17 05:01:57 syzkaller kern.notice kernel: [ 1032.515260][ T29] audit: type=1400 audit(1729141316.367:2238): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t t[ 1032.677452][ T29] audit: type=1400 audit(1729141317.238:2243): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 class= Oct 17 05:01:57 syzkaller kern.notice kernel: [ 1032.539812][ T29] audit: type=1400 audit(1729141316.493:2239): avc: denied { read } for pid=14089 comm="syz.1.2322" dev="nsfs" ino=4026533438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file Oct 17 05:01:57 syzkaller kern.notice kernel: [ 1032.565320][ T29] audit: type=1400 audit(1729141317.144:2240): avc: denied { read write } for pid=12836 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:f Oct 17 05:01:57 syzkaller kern.notice kernel: [ 1032.601571][ T29] audit: type=1400 audit(1729141317.186:2241): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= Oct 17 05:01:57 syzkaller kern.notice kernel: [ 1032.627973][ T29] audit: type=1400 audit(1729141317.217:2242): avc: deni[ 1032.783921][ T29] audit: type=1400 audit(1729141317.280:2244): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ed { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= [ 1032.849525][ T29] audit: type=1400 audit(1729141317.301:2245): avc: denied { read } for pid=4659 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1033.038333][T14100] ebtables: ebtables: counters copy to user failed while replacing table [ 1033.664088][T14109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.406400][T14135] netlink: 'syz.3.2336': attribute type 10 has an invalid length. [ 1035.485972][T14135] team0: Device ipvlan1 failed to register rx_handler [ 1035.774190][T14136] usb usb8: usbfs: process 14136 (syz.0.2335) did not claim interface 0 before use [ 1036.117417][T14148] 9pnet_fd: Insufficient options for proto=fd [ 1036.528895][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1036.528920][ T29] audit: type=1400 audit(1729141321.396:2301): avc: denied { write } for pid=14150 comm="+}[@" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1036.913038][ T29] audit: type=1400 audit(1729141321.396:2302): avc: denied { ioctl } for pid=14150 comm="+}[@" path="socket:[54094]" dev="sockfs" ino=54094 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1036.999366][ T29] audit: type=1400 audit(1729141321.396:2303): avc: denied { getopt } for pid=14150 comm="+}[@" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1037.075837][ T29] audit: type=1800 audit(1729141321.742:2304): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2340" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1037.150120][ T29] audit: type=1400 audit(1729141321.763:2305): avc: denied { mounton } for pid=14149 comm="syz.3.2340" path="/proc/172/task" dev="proc" ino=54745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1037.240174][ T29] audit: type=1400 audit(1729141321.763:2306): avc: denied { mount } for pid=14149 comm="syz.3.2340" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1037.744164][ T29] audit: type=1400 audit(1729141322.676:2307): avc: denied { write } for pid=14172 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1038.257045][T14178] 9pnet_fd: Insufficient options for proto=fd [ 1038.975306][ T29] audit: type=1400 audit(1729141323.968:2308): avc: denied { bind } for pid=14184 comm="syz.4.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1039.045671][ T29] audit: type=1400 audit(1729141323.968:2309): avc: denied { write } for pid=14184 comm="syz.4.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1039.101290][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.107871][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.498594][T14196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1039.578746][ T29] audit: type=1400 audit(1729141324.598:2310): avc: denied { create } for pid=14195 comm="syz.4.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1041.705726][ T965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.960036][T14207] 9pnet_fd: Insufficient options for proto=fd [ 1042.457518][T14223] syz.1.2366[14223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1042.457643][T14223] syz.1.2366[14223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1042.469660][T14223] syz.1.2366[14223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1042.542964][ T965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.589397][ T29] audit: type=1400 audit(1729141327.757:2311): avc: denied { read write } for pid=14227 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1042.649136][ T9515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1042.660647][ T9515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1042.677226][ T29] audit: type=1400 audit(1729141327.757:2312): avc: denied { open } for pid=14227 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1042.703651][ T9515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1042.716346][ T9515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1042.730238][ T9515] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1042.738183][ T9515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1042.772849][ T29] audit: type=1400 audit(1729141327.810:2313): avc: denied { write } for pid=14216 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1042.796146][ T29] audit: type=1400 audit(1729141327.810:2314): avc: denied { connect } for pid=14216 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1042.816722][ T29] audit: type=1400 audit(1729141327.810:2315): avc: denied { name_connect } for pid=14216 comm="syz.3.2363" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1042.840253][ T29] audit: type=1400 audit(1729141327.810:2316): avc: denied { ioctl } for pid=14227 comm="syz-executor" path="socket:[54238]" dev="sockfs" ino=54238 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1042.866006][ T29] audit: type=1400 audit(1729141327.841:2317): avc: denied { sys_module } for pid=14222 comm="syz.1.2366" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1042.894773][ T29] audit: type=1400 audit(1729141327.925:2318): avc: denied { mounton } for pid=14227 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1042.906797][ T965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.123051][ T965] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.543924][T14236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.799557][ T29] audit: type=1400 audit(1729141329.028:2319): avc: denied { read } for pid=4891 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1044.118362][T14237] usb usb8: usbfs: process 14237 (syz.4.2365) did not claim interface 0 before use [ 1044.279733][ T965] bridge_slave_1: left allmulticast mode [ 1044.285487][ T965] bridge_slave_1: left promiscuous mode [ 1044.291500][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.603022][T14249] usb 1-1: USB disconnect, device number 84 [ 1044.604399][ T965] bridge_slave_0: left allmulticast mode [ 1044.639375][ T965] bridge_slave_0: left promiscuous mode [ 1044.645533][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.753881][ T9515] Bluetooth: hci0: command tx timeout [ 1044.911378][T14255] 9pnet_fd: Insufficient options for proto=fd [ 1045.127380][ T29] audit: type=1400 audit(1729141330.403:2320): avc: denied { ioctl } for pid=14259 comm="syz.4.2373" path="socket:[54915]" dev="sockfs" ino=54915 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1045.235169][T14261] trusted_key: encrypted_key: key user:syz not found [ 1045.885093][ T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.921683][ T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.934180][ T965] bond0 (unregistering): Released all slaves [ 1046.094840][T14227] chnl_net:caif_netlink_parms(): no params data found [ 1046.679666][T14278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.749473][ T9515] Bluetooth: hci0: command tx timeout [ 1047.490015][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1047.490034][ T29] audit: type=1400 audit(1729141332.912:2330): avc: denied { write } for pid=14275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.706839][ T29] audit: type=1400 audit(1729141333.048:2331): avc: denied { add_name } for pid=14275 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.778124][ T965] hsr_slave_0: left promiscuous mode [ 1047.845137][ T29] audit: type=1400 audit(1729141333.048:2332): avc: denied { create } for pid=14275 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1047.920212][ T965] hsr_slave_1: left promiscuous mode [ 1047.931150][T14300] 9pnet_fd: Insufficient options for proto=fd [ 1047.984554][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.006442][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.431016][ T29] audit: type=1400 audit(1729141333.048:2333): avc: denied { write } for pid=14275 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=9117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1048.458754][ T29] audit: type=1400 audit(1729141333.048:2334): avc: denied { append } for pid=14275 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=9117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1048.483927][ T29] audit: type=1400 audit(1729141333.899:2335): avc: denied { remove_name } for pid=14299 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=9117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.516508][ T29] audit: type=1400 audit(1729141333.899:2336): avc: denied { unlink } for pid=14299 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=9117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1048.548891][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.556475][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.604909][ T965] veth1_macvtap: left promiscuous mode [ 1048.610521][ T965] veth0_macvtap: left promiscuous mode [ 1048.640698][ T965] veth1_vlan: left promiscuous mode [ 1048.659728][ T965] veth0_vlan: left promiscuous mode [ 1048.699498][ T9515] Bluetooth: hci0: command tx timeout [ 1048.937384][T14306] trusted_key: encrypted_key: key user:syz not found [ 1050.151490][ T29] audit: type=1400 audit(1729141335.694:2337): avc: denied { setopt } for pid=14311 comm="syz.1.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1050.222851][ T29] audit: type=1400 audit(1729141335.736:2338): avc: denied { bind } for pid=14311 comm="syz.1.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1050.264668][ T29] audit: type=1400 audit(1729141335.736:2339): avc: denied { name_bind } for pid=14311 comm="syz.1.2386" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1050.683507][ T9515] Bluetooth: hci0: command tx timeout [ 1051.015619][T14317] usb usb8: usbfs: process 14317 (syz.4.2382) did not claim interface 0 before use [ 1051.027071][T14320] syz.3.2388[14320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1051.027184][T14320] syz.3.2388[14320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1051.053349][T14320] syz.3.2388[14320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1051.069570][ T9515] Bluetooth: hci5: command 0x0406 tx timeout [ 1051.328927][ T965] team0 (unregistering): Port device team_slave_1 removed [ 1051.461346][ T965] team0 (unregistering): Port device team_slave_0 removed [ 1052.831311][T14320] netlink: 'syz.3.2388': attribute type 10 has an invalid length. [ 1052.839375][T14320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2388'. [ 1052.878133][T14320] bridge0: port 3(macvlan1) entered blocking state [ 1052.886968][T14320] bridge0: port 3(macvlan1) entered disabled state [ 1052.898776][T14320] macvlan1: entered allmulticast mode [ 1052.904242][T14320] veth1_vlan: entered allmulticast mode [ 1052.920213][T14320] macvlan1: entered promiscuous mode [ 1052.928887][T14320] bridge0: port 3(macvlan1) entered blocking state [ 1052.936138][T14320] bridge0: port 3(macvlan1) entered forwarding state [ 1052.967922][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.991452][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.000555][T14227] bridge_slave_0: entered allmulticast mode [ 1053.052473][T14227] bridge_slave_0: entered promiscuous mode [ 1053.108786][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.185012][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.205734][T14227] bridge_slave_1: entered allmulticast mode [ 1053.232092][T14227] bridge_slave_1: entered promiscuous mode [ 1053.919805][T14330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.992992][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.095254][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.426583][T14227] team0: Port device team_slave_0 added [ 1054.737711][T14345] 9pnet_fd: Insufficient options for proto=fd [ 1055.130433][T14227] team0: Port device team_slave_1 added [ 1055.445118][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.453292][ T9515] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1055.463233][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.504743][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.518386][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.525398][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.552216][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.570337][ T9515] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1055.581162][ T9515] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1055.593511][ T9515] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1055.602138][ T9515] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1055.609940][ T9515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1055.804644][T14227] hsr_slave_0: entered promiscuous mode [ 1055.823527][T14227] hsr_slave_1: entered promiscuous mode [ 1055.858384][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2396'. [ 1056.821946][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1056.821972][ T29] audit: type=1400 audit(1729141342.686:2348): avc: denied { watch watch_reads } for pid=14377 comm="syz.1.2399" path="/proc/260" dev="proc" ino=55666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1057.120374][T14349] chnl_net:caif_netlink_parms(): no params data found [ 1057.414054][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.617156][ T5238] Bluetooth: hci3: command tx timeout [ 1057.648543][T14349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.656817][T14349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.687999][T14349] bridge_slave_0: entered allmulticast mode [ 1057.715281][T14349] bridge_slave_0: entered promiscuous mode [ 1057.745207][T14349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.761257][T14349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.774935][T14349] bridge_slave_1: entered allmulticast mode [ 1057.884055][T14349] bridge_slave_1: entered promiscuous mode [ 1057.963048][T14394] 9pnet_fd: Insufficient options for proto=fd [ 1058.080315][T14349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.151638][T14349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.258482][T14227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1058.271461][ T29] audit: type=1326 audit(1729141344.229:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1058.302040][ T29] audit: type=1326 audit(1729141344.250:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1058.329254][T14227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1058.350320][T14349] team0: Port device team_slave_0 added [ 1058.354958][ T29] audit: type=1326 audit(1729141344.250:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1058.362828][T14349] team0: Port device team_slave_1 added [ 1058.481913][ T29] audit: type=1326 audit(1729141344.250:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1058.581175][ T29] audit: type=1326 audit(1729141344.250:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1058.657732][ T29] audit: type=1326 audit(1729141344.260:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1058.693319][ T29] audit: type=1326 audit(1729141344.260:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1058.723221][T14227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1058.853479][ T29] audit: type=1400 audit(1729141344.838:2356): avc: denied { read write } for pid=14403 comm="syz.1.2406" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1058.890458][ T29] audit: type=1400 audit(1729141344.838:2357): avc: denied { open } for pid=14403 comm="syz.1.2406" path="/dev/raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1058.915649][T14227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1058.941588][T14349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.949109][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.143580][T14349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.175101][T14349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.182768][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.214959][T14349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.327128][T14349] hsr_slave_0: entered promiscuous mode [ 1059.334040][T14349] hsr_slave_1: entered promiscuous mode [ 1059.357163][T14349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1059.376806][T14349] Cannot create hsr debugfs directory [ 1059.595467][ T5238] Bluetooth: hci3: command tx timeout [ 1059.713310][T14349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.814188][T14227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.883713][T14349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.007242][T14349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.041804][T14227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.122083][T14349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.163964][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.171234][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.231478][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.239088][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.570835][T14349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1060.601222][T14349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1060.640769][T14349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1060.684307][T14349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1060.810210][T14227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.012411][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 1061.069405][T14227] veth0_vlan: entered promiscuous mode [ 1061.091001][T14349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.117936][T14227] veth1_vlan: entered promiscuous mode [ 1061.202335][T14349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.303845][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.311083][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.388965][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.396706][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.547760][T14455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.578978][ T5238] Bluetooth: hci3: command tx timeout [ 1061.586440][T14227] veth0_macvtap: entered promiscuous mode [ 1061.628439][T14227] veth1_macvtap: entered promiscuous mode [ 1061.705454][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.745269][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.764780][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.786853][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.823186][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.835469][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.847736][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.865526][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.878395][T14227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.923878][T14459] bridge0: port 3(syz_tun) entered blocking state [ 1061.948147][T14459] bridge0: port 3(syz_tun) entered disabled state [ 1061.965841][T14459] syz_tun: entered allmulticast mode [ 1061.980136][T14459] syz_tun: entered promiscuous mode [ 1061.990936][T14459] bridge0: port 3(syz_tun) entered blocking state [ 1061.999725][T14459] bridge0: port 3(syz_tun) entered forwarding state [ 1062.075444][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.135761][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.154653][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.187423][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.200342][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.223360][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.239603][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.335915][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.364892][T14227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.533433][T14227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.580716][T14227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.633749][T14227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.673098][T14227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.813078][T14349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.236666][ T7906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.255960][T14349] veth0_vlan: entered promiscuous mode [ 1063.273731][ T7906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.445154][ T9854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.456710][T14349] veth1_vlan: entered promiscuous mode [ 1063.479071][ T9854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.566720][ T5238] Bluetooth: hci3: command tx timeout [ 1063.661621][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1063.661644][ T29] audit: type=1400 audit(1729141349.877:2362): avc: denied { mounton } for pid=14227 comm="syz-executor" path="/root/syzkaller.VnSo0p/syz-tmp" dev="sda1" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1063.730377][ T29] audit: type=1400 audit(1729141349.919:2363): avc: denied { mount } for pid=14227 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1063.777896][ T29] audit: type=1400 audit(1729141349.940:2364): avc: denied { mounton } for pid=14227 comm="syz-executor" path="/root/syzkaller.VnSo0p/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1063.829290][ T29] audit: type=1400 audit(1729141349.940:2365): avc: denied { mounton } for pid=14227 comm="syz-executor" path="/root/syzkaller.VnSo0p/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1063.865667][ T29] audit: type=1400 audit(1729141349.961:2366): avc: denied { unmount } for pid=14227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1063.888915][ T29] audit: type=1400 audit(1729141349.992:2367): avc: denied { mounton } for pid=14227 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1063.912933][ T29] audit: type=1400 audit(1729141350.003:2368): avc: denied { mount } for pid=14227 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1063.937363][T14349] veth0_macvtap: entered promiscuous mode [ 1063.961130][T14349] veth1_macvtap: entered promiscuous mode [ 1064.016277][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.045606][ T29] audit: type=1400 audit(1729141350.003:2369): avc: denied { mounton } for pid=14227 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1064.088939][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.099550][ T29] audit: type=1400 audit(1729141350.003:2370): avc: denied { mount } for pid=14227 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1064.132938][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.193423][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.218791][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.262481][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.272689][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.283318][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.295382][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.306150][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.328890][T14349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.385153][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.396687][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.411339][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.422012][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.432025][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.446418][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.456643][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.473473][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.483602][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.494247][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.505909][T14349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.519656][T14349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.535699][T14349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.545274][T14349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.554610][T14349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.875593][ T7906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.883698][ T7906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.952497][ T9854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.969744][ T9854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.580474][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2433'. [ 1067.039241][ T29] audit: type=1400 audit(1729141353.425:2371): avc: denied { create } for pid=14553 comm="syz.3.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1067.235488][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2443'. [ 1067.638812][T14575] usb usb8: usbfs: process 14575 (syz.4.2450) did not claim interface 0 before use [ 1068.137099][T14585] sd 0:0:1:0: device reset [ 1068.432756][T14597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2456'. [ 1069.079973][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.106046][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.171366][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1069.171391][ T29] audit: type=1400 audit(1729141355.672:2424): avc: denied { create } for pid=14601 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1069.211826][ T29] audit: type=1400 audit(1729141355.672:2425): avc: denied { write } for pid=14601 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1070.352660][T14618] usb usb8: usbfs: process 14618 (syz.4.2463) did not claim interface 0 before use [ 1070.371083][ T29] audit: type=1326 audit(1729141356.931:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.397302][ T29] audit: type=1326 audit(1729141356.952:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.452649][ T29] audit: type=1326 audit(1729141356.984:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.483880][ T29] audit: type=1326 audit(1729141356.984:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.508891][ T29] audit: type=1326 audit(1729141356.984:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.537871][ T29] audit: type=1326 audit(1729141356.984:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.565475][ T29] audit: type=1326 audit(1729141356.984:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.591537][ T29] audit: type=1326 audit(1729141356.984:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe184f7dff9 code=0x7ffc0000 [ 1070.729104][T14627] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2466'. [ 1073.035870][T14661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14661 comm=syz.4.2478 [ 1073.074710][T14660] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1074.149928][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1074.149985][ T29] audit: type=1400 audit(1729141360.742:2471): avc: denied { create } for pid=14674 comm="syz.0.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1074.689021][ T29] audit: type=1400 audit(1729141360.753:2472): avc: denied { write } for pid=14674 comm="syz.0.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1075.065505][T14690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14690 comm=syz.3.2489 [ 1075.219534][ T29] audit: type=1800 audit(1729141362.012:2473): pid=14696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2492" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1076.047095][ T29] audit: type=1400 audit(1729141362.863:2474): avc: denied { write } for pid=14705 comm="syz.3.2496" name="protocols" dev="proc" ino=4026533133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1079.774008][ T9515] Bluetooth: hci1: unexpected event for opcode 0x201c [ 1080.247553][T14316] Bluetooth: hci2: command 0x0406 tx timeout [ 1080.320534][T14738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14738 comm=syz.3.2504 [ 1080.460643][ T29] audit: type=1400 audit(1729141367.513:2475): avc: denied { create } for pid=14739 comm="syz.4.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1081.460481][T14753] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2509'. [ 1081.590656][ T29] audit: type=1400 audit(1729141368.563:2476): avc: denied { nlmsg_write } for pid=14748 comm="syz.0.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1082.306675][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.409511][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.604275][ T5238] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1083.604738][T14772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14772 comm=syz.1.2515 [ 1083.613963][ T5238] Bluetooth: hci1: Injecting HCI hardware error event [ 1083.617151][ T5238] Bluetooth: hci1: hardware error 0x00 [ 1083.697369][ T9515] Bluetooth: hci1: unexpected event for opcode 0x201c [ 1084.850481][T14787] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1085.971121][ T5238] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1086.424338][ T5238] Bluetooth: hci6: command 0x0405 tx timeout [ 1087.504764][T11639] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1087.562456][ T5238] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1087.570941][ T5238] Bluetooth: hci1: Injecting HCI hardware error event [ 1087.701207][T11639] usb 4-1: Using ep0 maxpacket: 16 [ 1088.157171][T11639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.173567][T11639] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1088.206277][T11639] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1088.216717][T11639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.227966][T11639] usb 4-1: config 0 descriptor?? [ 1088.295553][ T5278] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1088.632036][ T5238] Bluetooth: hci6: unexpected event for opcode 0x201c [ 1088.633882][ T5278] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 1089.000057][ T5278] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1089.020232][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.039696][ T5278] usb 5-1: Product: syz [ 1089.043950][ T5278] usb 5-1: Manufacturer: syz [ 1089.057308][ T5278] usb 5-1: SerialNumber: syz [ 1089.083921][ T5278] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1089.155296][T11639] usbhid 4-1:0.0: can't add hid device: -71 [ 1089.161771][T11639] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1089.187082][T11639] usb 4-1: USB disconnect, device number 91 [ 1089.199333][ T29] audit: type=1400 audit(1729141376.668:2477): avc: denied { create } for pid=14820 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1089.486160][ T5333] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1089.588504][ T29] audit: type=1400 audit(1729141377.077:2478): avc: denied { bind } for pid=14820 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1090.209946][ T29] audit: type=1400 audit(1729141377.077:2479): avc: denied { setopt } for pid=14820 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1090.473624][ T938] usb 5-1: USB disconnect, device number 106 [ 1090.815852][T14828] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2531'. [ 1091.600993][ T5333] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1091.608084][ T5333] ath9k_htc: Failed to initialize the device [ 1091.626600][ T938] usb 5-1: ath9k_htc: USB layer deinitialized [ 1092.515238][ T5238] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1092.525056][ T5238] Bluetooth: hci6: Injecting HCI hardware error event [ 1092.537145][ T5238] Bluetooth: hci6: hardware error 0x00 [ 1092.795204][ T29] audit: type=1400 audit(1729141380.468:2480): avc: denied { bind } for pid=14840 comm="syz.1.2536" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1092.888959][ T29] audit: type=1400 audit(1729141380.468:2481): avc: denied { node_bind } for pid=14840 comm="syz.1.2536" saddr=172.20.20.51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1092.963053][ T29] audit: type=1400 audit(1729141380.489:2482): avc: denied { connect } for pid=14840 comm="syz.1.2536" laddr=172.20.20.51 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1094.667952][ T5238] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1094.753803][ T29] audit: type=1400 audit(1729141382.504:2483): avc: denied { bind } for pid=14854 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1095.001270][ T29] audit: type=1400 audit(1729141382.777:2484): avc: denied { create } for pid=14858 comm="syz.1.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1097.129575][T14866] usb usb8: usbfs: process 14866 (syz.3.2542) did not claim interface 0 before use [ 1097.653415][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1097.660349][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1098.659400][ T29] audit: type=1400 audit(1729141386.620:2485): avc: denied { mount } for pid=14870 comm="syz.4.2543" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1099.231931][ T29] audit: type=1400 audit(1729141387.229:2486): avc: denied { write } for pid=14875 comm="syz.0.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1100.389551][T14887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14887 comm=syz.4.2548 [ 1100.634154][ T7906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.750324][ T9515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.763668][ T9515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.774159][ T9515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.784622][ T9515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.792994][ T9515] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1100.800650][ T9515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.067075][ T7906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.258192][ T7906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.556757][ T30] INFO: task syz.0.2030:13006 blocked for more than 144 seconds. [ 1102.627623][ T30] Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 1102.854220][ T9515] Bluetooth: hci0: command tx timeout [ 1102.887961][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1102.926674][ T30] task:syz.0.2030 state:D stack:27952 pid:13006 tgid:12987 ppid:10517 flags:0x00004004 [ 1102.955415][ T30] Call Trace: [ 1102.958785][ T30] [ 1102.961858][ T30] __schedule+0xef5/0x5750 [ 1102.974239][ T29] audit: type=1400 audit(1729141391.102:2487): avc: denied { write } for pid=5214 comm="syz-executor" path="pipe:[2894]" dev="pipefs" ino=2894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1103.001374][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1103.006905][ T30] ? __pfx___schedule+0x10/0x10 [ 1103.011848][ T30] ? schedule+0x298/0x350 [ 1103.016360][ T30] ? __pfx_lock_release+0x10/0x10 [ 1103.021445][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1103.041248][ T30] ? lock_acquire+0x2f/0xb0 [ 1103.045856][ T30] ? schedule+0x1fd/0x350 [ 1103.050263][ T30] schedule+0xe7/0x350 [ 1103.061447][ T30] rpm_resume+0x5a8/0x1330 [ 1103.066579][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 1103.072313][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1103.078471][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1103.084062][ T30] ? lock_acquire+0x2f/0xb0 [ 1103.088721][ T30] ? rpm_resume+0x672/0x1330 [ 1103.093393][ T30] rpm_resume+0x750/0x1330 [ 1103.097903][ T30] ? lock_acquire.part.0+0xa8/0x380 [ 1103.103250][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 1103.108330][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1103.113425][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1103.118963][ T30] ? lock_acquire+0x2f/0xb0 [ 1103.123525][ T30] ? __pm_runtime_resume+0xa9/0x170 [ 1103.128885][ T30] __pm_runtime_resume+0xb6/0x170 [ 1103.133985][ T30] usb_autopm_get_interface+0x20/0xe0 [ 1103.139539][ T30] wdm_open+0x24a/0x630 [ 1103.143776][ T30] ? __pfx_wdm_open+0x10/0x10 [ 1103.148566][ T30] usb_open+0x186/0x220 [ 1103.152807][ T30] ? __pfx_usb_open+0x10/0x10 [ 1103.157728][ T30] chrdev_open+0x237/0x6a0 [ 1103.163407][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1103.168493][ T30] ? security_file_open+0x62a/0x9d0 [ 1103.173758][ T30] do_dentry_open+0x6ca/0x1530 [ 1103.178672][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1103.183687][ T30] ? inode_permission+0xdd/0x5f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1103.188772][ T30] vfs_open+0x82/0x3f0 [ 1103.192926][ T30] ? may_open+0x1f2/0x400 [ 1103.197716][ T30] path_openat+0x1e6a/0x2d60 [ 1103.202412][ T30] ? __pfx_path_openat+0x10/0x10 [ 1103.208393][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1103.213815][ T30] do_filp_open+0x1dc/0x430 [ 1103.218389][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1103.223557][ T30] ? find_held_lock+0x2d/0x110 [ 1103.228430][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1103.233423][ T30] ? alloc_fd+0x2d7/0x6c0 [ 1103.237947][ T30] do_sys_openat2+0x17a/0x1e0 [ 1103.242797][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1103.248084][ T30] ? __pfx_get_timespec64+0x10/0x10 [ 1103.253681][ T30] __x64_sys_openat+0x175/0x210 [ 1103.258608][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1103.264966][ T30] do_syscall_64+0xcd/0x250 [ 1103.270703][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.276684][ T30] RIP: 0033:0x7f60d3d7c990 [ 1103.281243][ T30] RSP: 002b:00007f60d4b15b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1103.289768][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f60d3d7c990 [ 1103.297803][ T30] RDX: 0000000000000002 RSI: 00007f60d4b15c10 RDI: 00000000ffffff9c [ 1103.305974][ T30] RBP: 00007f60d4b15c10 R08: 0000000000000000 R09: 00007f60d4b15987 [ 1103.314043][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1103.322176][ T30] R13: 0000000000000000 R14: 00007f60d3f36058 R15: 00007ffd09af2538 [ 1103.330717][ T30] [ 1103.333867][ T30] [ 1103.333867][ T30] Showing all locks held in the system: [ 1103.341821][ T30] 1 lock held by khungtaskd/30: [ 1103.346774][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 1103.357682][ T30] 3 locks held by kworker/u8:5/965: [ 1103.363468][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1103.375564][ T30] #1: ffffc90003a47d80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1103.386942][ T30] #2: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1103.397297][ T30] 4 locks held by klogd/4666: [ 1103.402027][ T30] #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1103.412356][ T30] #1: ffff8880b8628a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 1103.424029][ T30] #2: ffff888070b62818 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xa1/0x14f0 [ 1103.433469][ T30] #3: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1103.443585][ T30] 2 locks held by getty/4984: [ 1103.448322][ T30] #0: ffff88802e40f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1103.458919][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 1103.479980][ T30] 3 locks held by kworker/0:5/5293: [ 1103.485267][ T30] #0: ffff88801e2a7948 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1103.495585][ T30] #1: ffffc90004147d80 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1103.507417][ T30] #2: ffff8881457af510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x255/0xf10 [ 1103.517954][ T30] 6 locks held by kworker/u8:11/7906: [ 1103.523370][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1103.533910][ T30] #1: ffffc90009817d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1103.544707][ T30] #2: ffffffff8fecbd50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 1103.554932][ T30] #3: ffff88805f8560e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 1103.566098][ T30] #4: ffff88805f855250 (&devlink->lock_key#29){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 1103.577173][ T30] #5: ffffffff8fee16e8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6b0 [ 1103.586221][ T30] 3 locks held by kworker/u8:13/9854: [ 1103.591639][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1103.602972][ T30] #1: ffffc9000d227d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1103.613495][ T30] #2: ffffffff8fee16e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1103.622751][ T30] 1 lock held by syz-executor/12833: [ 1103.628098][ T30] 2 locks held by syz.0.2030/13006: [ 1103.633415][ T30] #0: ffffffff8f4d03f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220 [ 1103.642565][ T30] #1: ffffffff8f58acc8 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x5d/0x630 [ 1103.651776][ T30] 3 locks held by syz.4.2042/13120: [ 1103.657027][ T30] #0: ffff88805d145c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 1103.668482][ T30] #1: ffff888061e3e258 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pptp_release+0x53/0x270 [ 1103.678117][ T30] #2: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1103.688414][ T30] 2 locks held by syz.0.2369/14249: [ 1103.693668][ T30] #0: ffff8881457ac190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x1a9/0x4010 [ 1103.703017][ T30] #1: ffff8881457ad160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 1103.713730][ T30] 1 lock held by syz.0.2369/14250: [ 1103.719135][ T30] #0: ffff8881457ac190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x1a9/0x4010 [ 1103.728515][ T30] 3 locks held by syz.3.2542/14868: [ 1103.733776][ T30] 1 lock held by syz.3.2549/14899: [ 1103.739140][ T30] 2 locks held by syz-executor/14892: [ 1103.744571][ T30] #0: ffffffff8fecbd50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 1103.754876][ T30] #1: ffffffff8fee16e8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 1103.765129][ T30] 2 locks held by syz.4.2553/14910: [ 1103.770471][ T30] #0: ffff88805e51e6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x970 [ 1103.781076][ T30] #1: ffffffff8fee16e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x18f/0x1f0 [ 1103.790193][ T30] [ 1103.792560][ T30] ============================================= [ 1103.792560][ T30] [ 1103.801201][ T30] NMI backtrace for cpu 1 [ 1103.805584][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 1103.816158][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1103.826270][ T30] Call Trace: [ 1103.829594][ T30] [ 1103.832574][ T30] dump_stack_lvl+0x116/0x1f0 [ 1103.837324][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1103.842328][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1103.848389][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1103.854444][ T30] watchdog+0xf0c/0x1240 [ 1103.858785][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.863513][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1103.868756][ T30] ? __kthread_parkme+0x148/0x220 [ 1103.873822][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.878536][ T30] kthread+0x2c1/0x3a0 [ 1103.882646][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1103.887878][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.892508][ T30] ret_from_fork+0x45/0x80 [ 1103.896951][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.901580][ T30] ret_from_fork_asm+0x1a/0x30 [ 1103.906404][ T30] [ 1103.910434][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1103.915697][ C0] NMI backtrace for cpu 0 [ 1103.915714][ C0] CPU: 0 UID: 0 PID: 9860 Comm: kworker/u8:16 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 1103.915747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1103.915765][ C0] Workqueue: events_unbound kfree_rcu_work [ 1103.915796][ C0] RIP: 0010:debug_check_no_obj_freed+0x2ec/0x600 [ 1103.915835][ C0] Code: b9 00 01 00 00 00 00 ad de 49 89 57 08 48 89 c7 48 89 08 4c 89 68 08 e8 12 c8 ff ff 4c 89 f8 48 89 c2 48 c1 ea 03 80 3c 1a 00 <0f> 84 24 ff ff ff 48 89 c7 48 89 44 24 10 e8 e1 db 59 fd 48 8b 44 [ 1103.915862][ C0] RSP: 0018:ffffc9000cf07980 EFLAGS: 00000046 [ 1103.915883][ C0] RAX: ffff88802aff39a0 RBX: dffffc0000000000 RCX: fffff520019e0f0d [ 1103.915902][ C0] RDX: 1ffff110055fe734 RSI: ffffffff8bd1a140 RDI: ffff888079b95fa0 [ 1103.915921][ C0] RBP: ffffc9000cf07ac0 R08: 1ffff1100f372bf2 R09: fffff520019e0f1e [ 1103.915940][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88804f0639c0 [ 1103.915958][ C0] R13: dead000000000122 R14: 0000000000000002 R15: ffff88802aff39a0 [ 1103.915976][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1103.916002][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1103.916022][ C0] CR2: 00000000201ab030 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 1103.916040][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1103.916056][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1103.916073][ C0] Call Trace: [ 1103.916081][ C0] [ 1103.916092][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1103.916125][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1103.916166][ C0] ? nmi_handle+0x1a9/0x5c0 [ 1103.916196][ C0] ? debug_check_no_obj_freed+0x2ec/0x600 [ 1103.916230][ C0] ? default_do_nmi+0x6a/0x160 [ 1103.916257][ C0] ? exc_nmi+0x170/0x1e0 [ 1103.916281][ C0] ? end_repeat_nmi+0xf/0x53 [ 1103.916323][ C0] ? debug_check_no_obj_freed+0x2ec/0x600 [ 1103.916357][ C0] ? debug_check_no_obj_freed+0x2ec/0x600 [ 1103.916392][ C0] ? debug_check_no_obj_freed+0x2ec/0x600 [ 1103.916427][ C0] [ 1103.916435][ C0] [ 1103.916450][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1103.916490][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 1103.916523][ C0] kmem_cache_free_bulk.part.0+0x3cd/0x7c0 [ 1103.916556][ C0] ? kvfree_rcu_bulk+0x454/0x550 [ 1103.916596][ C0] kvfree_rcu_bulk+0x454/0x550 [ 1103.916626][ C0] kfree_rcu_work+0x2f2/0x5a0 [ 1103.916655][ C0] ? __pfx_kfree_rcu_work+0x10/0x10 [ 1103.916683][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 1103.916721][ C0] ? lock_acquire+0x2f/0xb0 [ 1103.916745][ C0] ? process_one_work+0x921/0x1ba0 [ 1103.916774][ C0] process_one_work+0x9c5/0x1ba0 [ 1103.916807][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1103.916838][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1103.916872][ C0] ? assign_work+0x1a0/0x250 [ 1103.916916][ C0] worker_thread+0x6c8/0xf00 [ 1103.916949][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1103.916975][ C0] kthread+0x2c1/0x3a0 [ 1103.917008][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1103.917038][ C0] ? __pfx_kthread+0x10/0x10 [ 1103.917072][ C0] ret_from_fork+0x45/0x80 [ 1103.917097][ C0] ? __pfx_kthread+0x10/0x10 [ 1103.917130][ C0] ret_from_fork_asm+0x1a/0x30 [ 1103.917177][ C0] [ 1103.918235][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1103.918256][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 1103.918300][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1103.918321][ T30] Call Trace: [ 1103.918333][ T30] [ 1103.918347][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1103.918402][ T30] panic+0x71d/0x800 [ 1103.918454][ T30] ? __pfx_panic+0x10/0x10 [ 1103.918505][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1103.918549][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1103.918604][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1103.918643][ T30] ? watchdog+0xd76/0x1240 [ 1103.918676][ T30] ? watchdog+0xd69/0x1240 [ 1103.918715][ T30] watchdog+0xd87/0x1240 [ 1103.918757][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.918789][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1103.918848][ T30] ? __kthread_parkme+0x148/0x220 [ 1103.918897][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.918933][ T30] kthread+0x2c1/0x3a0 [ 1103.918976][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1103.919019][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.919065][ T30] ret_from_fork+0x45/0x80 [ 1103.919099][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.919145][ T30] ret_from_fork_asm+0x1a/0x30 [ 1103.919214][ T30] [ 1104.361941][ T30] Kernel Offset: disabled [ 1104.366303][ T30] Rebooting in 86400 seconds..