last executing test programs: 5.617911311s ago: executing program 3 (id=1059): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x11, 0x0, [{0x0, 0xb, "7e7f8a2c555e900c99"}]}, @rr={0x7, 0x17, 0x0, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, @dev]}, @end, @rr={0x7, 0x13, 0x0, [@remote, @dev, @dev, @multicast1]}]}}}}}) 5.414215221s ago: executing program 3 (id=1061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc000000190063480000000000000000ff01000000000000000000000000000100000000000000000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500fe880000000000000000000000000001000000002b"], 0xfc}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="88040000080211000001080211000000505050505050"], 0x28) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="0800000008021100000108021100000050505050505009007159b33057e51ce0122db34a3b6f5cc3709fe4a406512382da0cc68675be6d0cfe4a575984b2906d767c8bae6b8e93a07c5729f5bd3199ecbcaa322deb3ff373228d1cccbf23f73617abb70211d7ecf79f17c49c689d3b"], 0x18) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in6={0xa, 0x4e22, 0x0, @empty}], 0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r3}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) sendto$l2tp6(0xffffffffffffffff, 0x0, 0xe5259f08, 0x4000854, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) 5.110659727s ago: executing program 4 (id=1062): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.898476165s ago: executing program 4 (id=1064): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = gettid() futex(&(0x7f000000cffc)=0x1, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880000000314010000000000400000000900020073797a3200000000080041007278650014003300766c616e3000000000000029976fe0000900020073797a3000000000080041007369770014003300776c618f3000000000000000000000000900020073797a3200000000080041007369770014003300697036677265746170300065000000000cf0a0aff7dfa152d39e726faa3829200e6d0dee20da62b197fa714231b0d02b571f1910182af06c5f7906ee76e4f290baa194eee71824069ec9e976e0744459101301a64fe64a79d75caaa30375ff39fa3e2b6d8278d5f196af43ed9f082ad9fb26f3a57069ef9af5ae6b552f2ef7"], 0x88}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_io_uring_setup(0x4ee7, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x8, 0x8000, 0x8, {{0x30, 0x4, 0x0, 0x3d, 0xc0, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x10, 0x7c, 0x0, 0x3, [0x463, 0x7, 0x7]}, @noop, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x4, [{@multicast1, 0x8}, {@multicast1, 0x9}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x1}, {@loopback, 0x7}, {@rand_addr=0x64010102, 0x7b9}, {@loopback, 0x80000000}]}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x3, [{@empty, 0xffff29b6}, {@rand_addr=0x64010102, 0x200000}]}, @timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0x9, [{@rand_addr=0x64010100, 0x1}, {@private=0xa010101, 0xff}, {@local}, {@empty, 0x4e}, {@broadcast, 0x81}]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x5, [0x10000, 0x3b25, 0xa, 0x3]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x2, [0xffff7fff]}]}}}}}) add_key$user(&(0x7f0000000480), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000a00)="c218b8fb4f2711662cda1925942565487e7d348d3cb55586a0b8af4c8b0e15dd9b6a54e2b1949a11fd43529b6d7178ad1bca2c14db39ff5a5cc5653035257088bc479654863b4172cad06d296711c31da28fd6ee8733d014bdff64c5adb64d1df761b14bf856875d2ccbe1d4559c3a7600ffffff237a5aa929be91720ce0468e265d13f9ce80c2d474cff4fabd20cfa00fdc867ccd24521a769b61fd609b55a3672c221fc7ad9d29bb5a826e9e7fc46139e19b", 0xb3, r0) 4.420922659s ago: executing program 3 (id=1067): mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, 0x0, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.543039495s ago: executing program 1 (id=1071): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r4}, 0x10) close(r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000710e4e0000ff7f0000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) unlink(0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 3.41114799s ago: executing program 3 (id=1072): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.33844854s ago: executing program 0 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.148927883s ago: executing program 1 (id=1074): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 3.117816964s ago: executing program 3 (id=1075): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) read$msr(r1, &(0x7f0000000140)=""/24, 0x18) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x1, "a2"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x390, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x7c, 0x20, 0x31, 0x20, 0x5c6, 0x7102, 0x35f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37e, 0x1, 0x9, 0x90, 0xc0, 0x0, [{{0x9, 0x4, 0x3, 0x5, 0x8, 0xd9, 0x73, 0x72, 0xfb, [], [{{0x9, 0x5, 0x770ea19ec0650654, 0x0, 0x40, 0x6, 0xeb, 0x3}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x2, 0x4, 0x3, [@generic={0xd0, 0x30, "a4fa093fef70b288f4b207abdd56741ea6193fa17eb5f31c9c298c0a0f0558ee4057ff6bf465de0b6359efff36a0aca6ea4371e237c4e35730b92a5f1c05015b0797e5a4267f6ba90125f7d0c9620ecd5ffc10ae61c470984f0145a85b2fae15e259e65f76b0081ef5f080b2f77eb5a5578c946fd34f41a3a6dbbeb7a66c7f9d1e6dfae91b261d328a71ee9edb9ac681a79815584b34f9786ae4f0fdb8ff71394ef21c1561f76b907dd386013f39c8d465478cdd117d32cbf292f8b016c0f1dbf97716166a9040d4b345ff2bec08"}, @uac_iso={0x7, 0x25, 0x1, 0x640abff9fd6279de, 0xfc, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x4, 0x6, 0x5, [@generic={0x102, 0x5, "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"}, @generic={0x5f, 0x6, "405f4ca78647cc03f4b369e9fd6ef1b2cf7f2b1d037a783551610156ad0b9efd8f5645bfbacfaab180c794cbbdbde0ab66efdf01c1749aa246da03757a99f96a73dac380eb00c6c5f5eb30c286f78fceb1b27c18064876e64686375d63"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xc, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x6, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0xf001}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x0, 0x5, 0x29}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x6e, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x46}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xc, 0xf, 0x10, [@generic={0xd0, 0x8, "643e5175fbd4fd296ae0e5b093c855216239025964b0f6037ea2a54c996d235ce373cfd1e7776366d8ac8ab44aa709a51c99d8003805103556814c44eb574506767fe4aba3b23db1d72898718e9ae158e2ce0a870b61c861c37292d3729e67db6fa420e097c8ecdbd4c56cb4c2f10f685db01673e94f8fb15d5ad49e4a5d889cb92dcfde45e9e146f4b9c63d05f9c3374ba59a4bf10a8a421d832bf00fe60845e900e9c25301d2f9f1eeec71be43f7f92f2763ca37fe9b8c559bfc1746cb3460329a5e555ea4762ba027b6a12ab3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x81}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x5, 0x4, 0x40, 0x40}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1009}}, {0x1c, &(0x7f00000009c0)=@string={0x1c, 0x3, "a326df6bc350bddfda5da9ffa39bcaf3613ea156a3d7f2e8f38e"}}, {0x5d, &(0x7f0000000a00)=@string={0x5d, 0x3, "6f27b0a638f9323a92730d99cf02c2fda7f6c205d5ac6a4766cf7b58d8813b58ae503a412d6d572c5e4592d8aa63d645c94173c7b3519394e63909214aa8955a30c2564eae88ed9fc2b8d45e48e1d8fae0de5e620fd7eca492d46e"}}, {0x6, &(0x7f0000000a80)=@string={0x6, 0x3, "fc0749d7"}}, {0x95, &(0x7f0000000ac0)=@string={0x95, 0x3, "cee6966825ac6d136802254fc1b1244d421c98242065562ab9c7d6269e9bdd8c2e2064fb9c8d6f0c17c0e8d0ca234c38387c76a83269bd846fa1e7a01c861e5957d18e220160ec53e5aa294f3d38b422b1932aa5ad8e46f490a51e59b2f82445e8c1f56dc8de512aa979005c1d9fa90a054fca8182a05c7390fbbcf91178c58b93e9b3695b464b328dbe848fe4109fbb29a564"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc54, 0x4) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2023020000002421d7b16035cf75d9f228b42b840464b363f29736b6b39003412b462a0eee9a683a2def"], &(0x7f0000000080)={0x0, 0x3, 0x52, @string={0x52, 0x3, "4e123e85643343693a52af3a9d1e9805a6413226610802de895131aa2e4662797eaf9a37ad98b5b08df756631161b0c1c97444f69e376144c024c4e869fbf89b18b072938b1bdf5fbd0c9b8014a3b8c9"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="002211000000540756214bd376b8ed51537fa3ccabe82d32dd2cd2078e2bf4b632c4a3ebe42f929b7184548b4cddf90513"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xe39}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0xd, 0x68, "f5fcfad4663ab7469360b3d110368c66f824b4f015a433eb585a09be80b5e5f33d0614e43a65da91367320de16c6d4c5e3e8ad4fa27c40d143d6ab283e5373fa2cda35165ad176af826a0d4f9a7f23cb6241182eec52f1d9371f2432a4d40be4534104813c23cfe0"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0x6e, "f9fbe7a3c2c92e174ebf4cb32a0fba3df572fc47870920d622379af30e09152ccd46e83bc2cd1ef113860a569d87c2af0bed96a1ca088c3f956633406ddc5f67d607385a6b3ba41e79d9f7b476a102b58399249a53ec2d50b761130db59a912e3c7ee7652f089734e6d644aaed77"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xf}}) 2.93075979s ago: executing program 1 (id=1076): r0 = creat(&(0x7f0000005040)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) rt_sigreturn() recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541b, 0x0) 2.502917392s ago: executing program 1 (id=1077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc000000190063480000000000000000ff01000000000000000000000000000100000000000000000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500fe880000000000000000000000000001000000002b"], 0xfc}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="88040000080211000001080211000000505050505050"], 0x28) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="0800000008021100000108021100000050505050505009007159b33057e51ce0122db34a3b6f5cc3709fe4a406512382da0cc68675be6d0cfe4a575984b2906d767c8bae6b8e93a07c5729f5bd3199ecbcaa322deb3ff373228d1cccbf23f73617abb70211d7ecf79f17c49c689d3b"], 0x18) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in6={0xa, 0x4e22, 0x0, @empty}], 0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r3}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) sendto$l2tp6(0xffffffffffffffff, 0x0, 0xe5259f08, 0x4000854, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) 2.300716281s ago: executing program 4 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 1.84399116s ago: executing program 0 (id=1080): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @mcast1, @private1, {[], {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) syz_emit_vhci(0x0, 0xd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a", 0x67}, {&(0x7f0000000d40)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d533060084d", 0x16c}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e0", 0xc4}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$packet(0x11, 0x0, 0x300) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000140)="3a1a083ab7ead0649c1d243fc0119d1bbce67488e627bbbe84a7da64eaa6727fec9aedec9eeddf49dca9cbb1cdf15f63cdfd16bb5c7fd86e18a59d1656d0a0688c362d2572f5f4d3dd97c9078cfd249b356b406bfd9e22924a10bc87f4a7615d19ea1d204a4a6608ed") socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.825221289s ago: executing program 4 (id=1081): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x8000) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 1.604474752s ago: executing program 4 (id=1082): mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, 0x0, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.306853579s ago: executing program 1 (id=1084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.291426455s ago: executing program 2 (id=1085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x48}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) 988.532848ms ago: executing program 1 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 911.969837ms ago: executing program 2 (id=1087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 754.439799ms ago: executing program 0 (id=1088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newchain={0x24, 0x66, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xe}}}, 0x24}}, 0x0) 628.912955ms ago: executing program 2 (id=1089): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x240088a4) sendmmsg$sock(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)=@generic={0x0, "6fc4dd320a83bdae872ff904967d3687a83dc9972351b729ff841bfea9c4f474790fcb1f11bd84a2f7ad59f46f21eae2ebde9a19d72bc3f65c64676d4e3018e7aa644adf16d5c6d8cb0d20420aae7f9e9e4573a7b72898f9c28ab7fdd652411669a320f6953e45511bdfc8c0c7900c9e6a5ea89b9e75c7d1cc42f06e641f"}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x25}}], 0x18}}], 0x2, 0x0) 591.520541ms ago: executing program 4 (id=1090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="610301032e19d5e1ad9c"], 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x154}}, 0x9000) r6 = syz_usbip_server_init(0x3) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r7, &(0x7f00000000c0)={0x1a, 0x5, 0x0, 0x0, 0x4, 0x0, @remote}, 0x10) write$usbip_server(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x265) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000011c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x4800) ioperm(0xfffffffffffffffd, 0x5, 0x2) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 520.942586ms ago: executing program 0 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 424.462234ms ago: executing program 2 (id=1092): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) 372.34799ms ago: executing program 0 (id=1093): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x0, 0x2028, 0x4, @link_id}, 0x20) 224.705393ms ago: executing program 3 (id=1094): socket$inet(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) r0 = getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYRES64], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',', @ANYRESDEC]) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_pts(r7, 0x520901) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = inotify_init1(0x0) fcntl$setown(r9, 0x8, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r10, 0x81009431, 0x0) 164.678685ms ago: executing program 2 (id=1095): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a00)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 86.72206ms ago: executing program 0 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) madvise(&(0x7f0000a2e000/0x3000)=nil, 0xffffffffdf5d1fff, 0x12) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r7, 0x7fff) write$FUSE_ATTR(r7, &(0x7f00000006c0)={0x78}, 0x78) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000480)={0x7, 0x0, [{0x6000, 0x8c, &(0x7f0000000180)=""/140}, {0x5000, 0x4, &(0x7f0000000040)=""/4}, {0xf000, 0xb6, &(0x7f0000000240)=""/182}, {0x100000, 0x0, &(0x7f00000000c0)}, {0x1, 0xaa, &(0x7f0000000300)=""/170}, {0x1000, 0xab, &(0x7f00000003c0)=""/171}, {0x2000, 0x2, &(0x7f0000000100)=""/2}]}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x9, 0x2, 0x88, 0x3, 0x8, 0x4}) 0s ago: executing program 2 (id=1097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000180)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'crc32c\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) kernel console output (not intermixed with test programs): [ 215.633477][ T5143] usb 5-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 215.644206][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 215.666972][ T35] hsr_slave_0: left promiscuous mode [ 215.678187][ T5143] usb 5-1: Product: syz [ 215.702286][ T35] hsr_slave_1: left promiscuous mode [ 215.707690][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 215.748689][ T5143] usb 5-1: Manufacturer: syz [ 215.762462][ T5143] usb 5-1: SerialNumber: syz [ 215.778156][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.791886][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 215.810467][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.814984][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 215.861788][ T5143] usb 5-1: config 0 descriptor?? [ 215.875410][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.879564][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 215.897953][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.929486][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 215.960620][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 215.990966][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.021696][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.037085][ T35] veth1_macvtap: left promiscuous mode [ 216.055903][ T35] veth0_macvtap: left promiscuous mode [ 216.064537][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.079161][ T35] veth1_vlan: left promiscuous mode [ 216.093731][ T35] veth0_vlan: left promiscuous mode [ 216.104110][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.163820][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.172657][ T5143] usb 5-1: USB disconnect, device number 4 [ 216.190866][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.219340][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.246849][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.283059][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 217.398276][ T6108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.216'. [ 217.614264][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 218.742269][ T35] team0 (unregistering): Port device team_slave_1 removed [ 218.834173][ T35] team0 (unregistering): Port device team_slave_0 removed [ 219.480226][ T6120] syzkaller0: entered promiscuous mode [ 219.588433][ T6120] syzkaller0: left promiscuous mode [ 219.853920][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.861406][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.917581][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.958825][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.992554][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.029919][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.048255][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.082161][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.121829][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.174082][ T5145] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 220.183720][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.221636][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.261212][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.305540][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.338039][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.387727][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.402149][ T5145] usb 5-1: config 0 has no interfaces? [ 220.410203][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.440417][ T5145] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 220.455193][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.477790][ T5145] usb 5-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 220.516478][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.551909][ T5145] usb 5-1: Product: syz [ 220.557314][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.570152][ T5145] usb 5-1: Manufacturer: syz [ 220.583935][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.602022][ T5145] usb 5-1: SerialNumber: syz [ 220.625982][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.647619][ T5145] usb 5-1: config 0 descriptor?? [ 220.661081][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.694697][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.728142][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.754154][ T29] audit: type=1400 audit(1721128449.770:254): avc: denied { setopt } for pid=6157 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.783425][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.818992][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.826567][ T29] audit: type=1400 audit(1721128449.770:255): avc: denied { ioctl } for pid=6157 comm="syz.1.231" path="socket:[14917]" dev="sockfs" ino=14917 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.869301][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.891420][ T9] usb 5-1: USB disconnect, device number 5 [ 220.907119][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.935234][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.980038][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 221.023375][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 221.061385][ T5143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 221.123052][ T5143] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 221.507718][ T29] audit: type=1400 audit(1721128450.510:256): avc: denied { mount } for pid=6166 comm="syz.1.233" name="/" dev="autofs" ino=14158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 221.651020][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.729101][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.848123][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.958218][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.064122][ T29] audit: type=1400 audit(1721128451.070:257): avc: denied { unmount } for pid=5560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 222.065399][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 222.366398][ T6180] syzkaller0: entered promiscuous mode [ 222.438979][ T6178] syzkaller0: left promiscuous mode [ 222.838312][ T29] audit: type=1400 audit(1721128451.840:258): avc: denied { mount } for pid=6185 comm="syz.1.237" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 223.069621][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.240847][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.308255][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.320941][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.362499][ T29] audit: type=1400 audit(1721128452.350:259): avc: denied { remount } for pid=6185 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 223.425830][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.433211][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.472200][ T29] audit: type=1400 audit(1721128452.480:260): avc: denied { read } for pid=6185 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.602374][ T6199] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 223.642701][ T29] audit: type=1400 audit(1721128452.650:261): avc: denied { connect } for pid=6185 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.743971][ T29] audit: type=1400 audit(1721128452.700:262): avc: denied { bind } for pid=6185 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.893416][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.901648][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.131084][ T6231] bridge_slave_1: left allmulticast mode [ 225.145268][ T6231] bridge_slave_1: left promiscuous mode [ 225.180415][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.290329][ T6231] bridge_slave_0: left allmulticast mode [ 225.307532][ T6231] bridge_slave_0: left promiscuous mode [ 225.346144][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.789923][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.015327][ T29] audit: type=1400 audit(1721128455.010:263): avc: denied { unmount } for pid=5560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 226.260638][ T5924] veth0_vlan: entered promiscuous mode [ 226.323965][ T29] audit: type=1400 audit(1721128455.330:264): avc: denied { write } for pid=6251 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.375188][ T5924] veth1_vlan: entered promiscuous mode [ 226.612225][ T5924] veth0_macvtap: entered promiscuous mode [ 226.666207][ T5924] veth1_macvtap: entered promiscuous mode [ 226.708786][ T29] audit: type=1400 audit(1721128455.720:265): avc: denied { create } for pid=6258 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.811639][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.942638][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.973637][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.020226][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.051711][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.113016][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.137170][ T29] audit: type=1400 audit(1721128456.150:266): avc: denied { open } for pid=6256 comm="syz.3.254" path="/dev/ptyqb" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 227.153167][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.280272][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.331489][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.437786][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.480662][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.524877][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.578063][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.600146][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.661414][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.708225][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.750945][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.823068][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.269089][ T5924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.264150][ T5924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.332933][ T5924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.472494][ T5924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.571600][ T6282] ip6gre1: entered allmulticast mode [ 232.295418][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.329867][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.375618][ T29] audit: type=1400 audit(1721128461.380:267): avc: denied { ioctl } for pid=6297 comm="syz.4.265" path="socket:[15399]" dev="sockfs" ino=15399 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 232.584665][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 232.619313][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.664818][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.562761][ T56] Bluetooth: hci2: ACL packet for unknown connection handle 203 [ 234.684313][ T6349] syz.4.276[6349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.684595][ T6349] syz.4.276[6349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.845840][ T29] audit: type=1400 audit(1721128463.850:268): avc: denied { relabelfrom } for pid=6348 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 234.925092][ T29] audit: type=1400 audit(1721128463.890:269): avc: denied { relabelto } for pid=6348 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 234.992427][ T29] audit: type=1400 audit(1721128463.990:270): avc: denied { unlink } for pid=6352 comm="syz.0.277" name="#1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.120082][ T29] audit: type=1400 audit(1721128464.120:271): avc: denied { mount } for pid=6352 comm="syz.0.277" name="/" dev="overlay" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.302354][ T29] audit: type=1400 audit(1721128464.300:272): avc: denied { write } for pid=6359 comm="syz.4.278" path="socket:[15492]" dev="sockfs" ino=15492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.392254][ T29] audit: type=1400 audit(1721128464.300:273): avc: denied { nlmsg_write } for pid=6359 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.602603][ T54] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 235.803641][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 235.812130][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 235.847411][ T54] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 235.852704][ T5145] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 235.882443][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.920462][ T54] usb 5-1: config 0 descriptor?? [ 236.160193][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.210813][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.240351][ T5145] usb 1-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 236.288415][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.341211][ T5145] usb 1-1: config 0 descriptor?? [ 236.370973][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.414105][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.482818][ T54] hid (null): unknown global tag 0xc [ 236.527782][ T54] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 236.566294][ T54] hid-generic 0003:0158:0100.0005: unexpected long global item [ 236.603609][ T54] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 236.670193][ T54] usb 5-1: USB disconnect, device number 6 [ 236.719245][ T6380] ªªªªªª: renamed from vlan0 (while UP) [ 236.831028][ T5145] smartjoyplus 0003:0925:0005.0006: unknown main item tag 0x0 [ 236.858349][ T5145] smartjoyplus 0003:0925:0005.0006: unbalanced collection at end of report description [ 236.886681][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'. [ 237.171916][ T5145] smartjoyplus 0003:0925:0005.0006: parse failed [ 237.190993][ T5145] smartjoyplus 0003:0925:0005.0006: probe with driver smartjoyplus failed with error -22 [ 237.250583][ T5145] usb 1-1: USB disconnect, device number 2 [ 239.495991][ T29] audit: type=1400 audit(1721128468.500:274): avc: denied { wake_alarm } for pid=6432 comm="syz.0.297" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.579023][ T56] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 241.210688][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'. [ 241.362449][ T54] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 241.568329][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.602227][ T54] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.636138][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.674129][ T54] usb 5-1: config 0 descriptor?? [ 242.184178][ T54] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 242.252077][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input6 [ 242.444413][ T54] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 242.598395][ T54] usb 5-1: USB disconnect, device number 7 [ 243.891047][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.313'. [ 246.636472][ T29] audit: type=1400 audit(1721128473.070:275): avc: denied { mount } for pid=6477 comm="syz.4.311" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 247.085167][ T29] audit: type=1400 audit(1721128473.340:276): avc: denied { remount } for pid=6477 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 247.208266][ T29] audit: type=1400 audit(1721128476.190:277): avc: denied { unmount } for pid=5566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 247.387770][ T56] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 247.956553][ T29] audit: type=1400 audit(1721128476.970:278): avc: denied { write } for pid=6490 comm="syz.4.316" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.497377][ T5146] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 249.717345][ T5146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.770848][ T5146] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.816125][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.865709][ T5146] usb 4-1: config 0 descriptor?? [ 250.183897][ T29] audit: type=1400 audit(1721128479.190:279): avc: denied { setopt } for pid=6521 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.270726][ T29] audit: type=1400 audit(1721128479.250:280): avc: denied { name_connect } for pid=6521 comm="syz.2.324" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 250.693535][ T5146] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 250.769739][ T5146] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input7 [ 251.070207][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 251.094074][ T5146] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 251.180097][ T5146] usb 4-1: USB disconnect, device number 3 [ 251.646885][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 251.854794][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.904313][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 251.936016][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.985586][ T8] usb 1-1: config 0 descriptor?? [ 252.500182][ T29] audit: type=1400 audit(1721128481.500:281): avc: denied { create } for pid=6542 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.617578][ T29] audit: type=1400 audit(1721128481.540:282): avc: denied { setopt } for pid=6542 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.694592][ T29] audit: type=1400 audit(1721128481.540:283): avc: denied { create } for pid=6542 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 252.772511][ T29] audit: type=1400 audit(1721128481.540:284): avc: denied { ioctl } for pid=6542 comm="syz.3.331" path="socket:[17000]" dev="sockfs" ino=17000 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 252.799542][ T8] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 252.931686][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input8 [ 253.251462][ T8] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 253.317420][ T8] usb 1-1: USB disconnect, device number 3 [ 254.038488][ T29] audit: type=1400 audit(1721128483.040:285): avc: denied { write } for pid=6569 comm="syz.0.340" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.147654][ T29] audit: type=1400 audit(1721128484.160:286): avc: denied { write } for pid=6585 comm="syz.0.346" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 255.221628][ T29] audit: type=1400 audit(1721128484.160:287): avc: denied { open } for pid=6585 comm="syz.0.346" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 255.405781][ T29] audit: type=1400 audit(1721128484.190:288): avc: denied { ioctl } for pid=6585 comm="syz.0.346" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 255.716218][ T6589] block nbd0: NBD_DISCONNECT [ 256.341980][ T29] audit: type=1400 audit(1721128485.350:289): avc: denied { map } for pid=6598 comm="syz.2.352" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 256.352582][ T5145] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 256.417079][ T29] audit: type=1400 audit(1721128485.390:290): avc: denied { read write } for pid=6598 comm="syz.2.352" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 256.477399][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 256.905137][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.917709][ T5145] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.927279][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.000555][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 257.145549][ T5145] usb 1-1: config 0 descriptor?? [ 257.745134][ T5105] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 257.914295][ T5145] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 257.975635][ T5145] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input9 [ 257.975632][ T5105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.975722][ T5105] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.101364][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.150408][ T5105] usb 5-1: config 0 descriptor?? [ 258.155763][ T5145] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 258.438459][ T5198] usb 1-1: USB disconnect, device number 4 [ 258.791925][ T5105] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 258.892106][ T5105] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input10 [ 258.929965][ T29] audit: type=1400 audit(1721128487.940:291): avc: denied { execute } for pid=6619 comm="syz.2.359" path="/67/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 259.040287][ T5105] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 259.154329][ T5145] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 259.256069][ T5105] usb 5-1: USB disconnect, device number 8 [ 259.406515][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.453958][ T5145] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.486151][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.520698][ T5145] usb 2-1: config 0 descriptor?? [ 260.043296][ T29] audit: type=1400 audit(1721128489.060:292): avc: denied { watch } for pid=6638 comm="syz.2.367" path="/proc/202" dev="proc" ino=16038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 260.097729][ T5145] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 260.192820][ T5145] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input11 [ 260.753519][ T5145] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 260.815552][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 261.504220][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.510765][ T5145] usb 2-1: USB disconnect, device number 2 [ 262.768240][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.376'. [ 262.998006][ T6671] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 263.066966][ T29] audit: type=1400 audit(1721128492.070:293): avc: denied { relabelto } for pid=6667 comm="syz.2.377" name="ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 263.292982][ T29] audit: type=1400 audit(1721128492.080:294): avc: denied { associate } for pid=6667 comm="syz.2.377" name="ptmx" dev="devtmpfs" ino=617 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 264.029517][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 264.122933][ T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 265.035290][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.072432][ T54] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.113132][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.145126][ T54] usb 2-1: config 0 descriptor?? [ 265.712565][ T54] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 265.764750][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input12 [ 265.959182][ T54] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 266.015544][ T29] audit: type=1400 audit(1721128495.030:295): avc: denied { read } for pid=6691 comm="syz.4.384" name="ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 266.135604][ T54] usb 2-1: USB disconnect, device number 3 [ 266.165641][ T29] audit: type=1400 audit(1721128495.030:296): avc: denied { open } for pid=6691 comm="syz.4.384" path="/dev/ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 266.305000][ T29] audit: type=1400 audit(1721128495.070:297): avc: denied { ioctl } for pid=6691 comm="syz.4.384" path="/dev/ptmx" dev="devtmpfs" ino=617 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 267.013697][ T29] audit: type=1400 audit(1721128496.000:298): avc: denied { create } for pid=6696 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 267.405263][ T29] audit: type=1400 audit(1721128496.410:299): avc: denied { read write } for pid=6698 comm="syz.1.388" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.543755][ T29] audit: type=1400 audit(1721128496.450:300): avc: denied { open } for pid=6698 comm="syz.1.388" path="/dev/raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.690207][ T29] audit: type=1400 audit(1721128496.450:301): avc: denied { ioctl } for pid=6698 comm="syz.1.388" path="/dev/raw-gadget" dev="devtmpfs" ino=733 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.780834][ T29] audit: type=1400 audit(1721128496.790:302): avc: denied { name_bind } for pid=6703 comm="syz.2.390" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 267.824011][ T5105] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 268.096519][ T5105] usb 2-1: Using ep0 maxpacket: 16 [ 268.111203][ T5105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.166712][ T5105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.236019][ T5105] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.290380][ T5105] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.309771][ T5105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.355772][ T5105] usb 2-1: config 0 descriptor?? [ 268.366394][ T29] audit: type=1400 audit(1721128497.380:303): avc: denied { ioctl } for pid=6712 comm="syz.2.393" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 268.447299][ T6713] binder: BINDER_SET_CONTEXT_MGR already set [ 268.490971][ T6713] binder: 6712:6713 ioctl 4018620d 20000100 returned -16 [ 268.506721][ T29] audit: type=1400 audit(1721128497.410:304): avc: denied { set_context_mgr } for pid=6712 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 268.598715][ T6714] binder: 6712:6714 ioctl c018620c 20000000 returned -1 [ 269.038610][ T5105] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 269.114962][ T5105] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 269.186228][ T5105] microsoft 0003:045E:07DA.000E: no inputs found [ 269.210234][ T5105] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 270.732825][ T5105] usb 2-1: USB disconnect, device number 4 [ 271.073654][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.094454][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.116758][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.127923][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.136625][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.160829][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.190713][ T29] audit: type=1400 audit(1721128501.200:305): avc: denied { shutdown } for pid=6757 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 272.379754][ T29] audit: type=1400 audit(1721128501.390:306): avc: denied { read } for pid=6757 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 272.657222][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 273.232691][ T56] Bluetooth: hci3: command tx timeout [ 273.282701][ T6746] chnl_net:caif_netlink_parms(): no params data found [ 274.165065][ T5103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.183582][ T5103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.208399][ T5103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.218762][ T5103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.242907][ T5103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.255513][ T5103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.482909][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.490523][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.602701][ T6746] bridge_slave_0: entered allmulticast mode [ 274.611097][ T6746] bridge_slave_0: entered promiscuous mode [ 274.714132][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.742832][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.760772][ T6746] bridge_slave_1: entered allmulticast mode [ 274.805698][ T6746] bridge_slave_1: entered promiscuous mode [ 275.312574][ T56] Bluetooth: hci3: command tx timeout [ 275.544207][ T6746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.788935][ T6746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.200686][ T6746] team0: Port device team_slave_0 added [ 276.230435][ T6746] team0: Port device team_slave_1 added [ 276.352720][ T56] Bluetooth: hci5: command tx timeout [ 276.531764][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.571562][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.700616][ T6746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.937321][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.986189][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.069221][ T6746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.395414][ T56] Bluetooth: hci3: command tx timeout [ 278.186171][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 278.257003][ T6784] chnl_net:caif_netlink_parms(): no params data found [ 278.334210][ T6746] hsr_slave_0: entered promiscuous mode [ 278.432649][ T56] Bluetooth: hci5: command tx timeout [ 278.438797][ T6746] hsr_slave_1: entered promiscuous mode [ 278.472686][ T29] audit: type=1400 audit(1721128507.480:307): avc: denied { read write } for pid=6835 comm="syz.2.425" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 278.496869][ T6746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.521242][ T6746] Cannot create hsr debugfs directory [ 278.566860][ T29] audit: type=1400 audit(1721128507.480:308): avc: denied { open } for pid=6835 comm="syz.2.425" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 278.660501][ T29] audit: type=1400 audit(1721128507.580:309): avc: denied { write } for pid=6851 comm="syz.1.431" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 278.766583][ T3467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.876454][ T29] audit: type=1400 audit(1721128507.890:310): avc: denied { create } for pid=6851 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 278.911071][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 279.042412][ T29] audit: type=1400 audit(1721128508.050:311): avc: denied { ioctl } for pid=6851 comm="syz.1.431" path="socket:[18644]" dev="sockfs" ino=18644 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 279.241047][ T29] audit: type=1326 audit(1721128508.250:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.1.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e3575bd9 code=0x0 [ 279.472574][ T56] Bluetooth: hci3: command tx timeout [ 279.532164][ T3467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.422242][ T3467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.522815][ T56] Bluetooth: hci5: command tx timeout [ 280.914733][ T3467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.444389][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.452921][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.474057][ T6784] bridge_slave_0: entered allmulticast mode [ 281.484274][ T6784] bridge_slave_0: entered promiscuous mode [ 281.613866][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.627205][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.638763][ T6784] bridge_slave_1: entered allmulticast mode [ 281.671897][ T6784] bridge_slave_1: entered promiscuous mode [ 281.791153][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 281.842820][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.954661][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.983982][ T29] audit: type=1326 audit(1721128511.000:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b84b75bd9 code=0x0 [ 282.226320][ T6784] team0: Port device team_slave_0 added [ 282.246835][ T3467] bridge_slave_1: left allmulticast mode [ 282.261781][ T3467] bridge_slave_1: left promiscuous mode [ 282.280471][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.310792][ T3467] bridge_slave_0: left allmulticast mode [ 282.329083][ T3467] bridge_slave_0: left promiscuous mode [ 282.335522][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.602442][ T5103] Bluetooth: hci5: command tx timeout [ 283.952682][ T5103] Bluetooth: hci4: command 0x0406 tx timeout [ 283.958700][ T5101] Bluetooth: hci6: command 0x0406 tx timeout [ 284.136854][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.193493][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.210756][ T3467] bond0 (unregistering): Released all slaves [ 284.405101][ T6784] team0: Port device team_slave_1 added [ 284.714661][ T6929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.455'. [ 284.752765][ T6929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.455'. [ 284.876793][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 285.046328][ T29] audit: type=1326 audit(1721128514.050:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.4.454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f530a775bd9 code=0x0 [ 285.180511][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.216058][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.292827][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.397142][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.427571][ T29] audit: type=1400 audit(1721128514.430:315): avc: denied { connect } for pid=6936 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.448839][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.572484][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.714072][ T3467] hsr_slave_0: left promiscuous mode [ 285.745718][ T3467] hsr_slave_1: left promiscuous mode [ 285.754107][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.761699][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.792597][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.802697][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.861909][ T3467] veth1_macvtap: left promiscuous mode [ 285.871377][ T3467] veth0_macvtap: left promiscuous mode [ 285.877578][ T3467] veth1_vlan: left promiscuous mode [ 285.883416][ T3467] veth0_vlan: left promiscuous mode [ 287.865925][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 288.071913][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 288.373723][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 288.555326][ T29] audit: type=1326 audit(1721128517.570:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.1.468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e3575bd9 code=0x0 [ 289.153634][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 289.280097][ T6784] hsr_slave_0: entered promiscuous mode [ 289.300424][ T6784] hsr_slave_1: entered promiscuous mode [ 289.316944][ T6784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.341651][ T6784] Cannot create hsr debugfs directory [ 289.422506][ T29] audit: type=1400 audit(1721128518.430:317): avc: denied { connect } for pid=6970 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 289.755629][ T6979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.474'. [ 290.039119][ T6746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.211107][ T6746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.298352][ T6746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.338585][ T6746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.576723][ T6784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.810225][ T6784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.868477][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 290.937324][ T29] audit: type=1326 audit(1721128519.950:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6992 comm="syz.4.478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f530a775bd9 code=0x0 [ 291.022956][ T6784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.196130][ T6784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.390580][ T3467] bridge_slave_1: left allmulticast mode [ 291.419888][ T3467] bridge_slave_1: left promiscuous mode [ 291.441560][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.480844][ T3467] bridge_slave_0: left allmulticast mode [ 291.491294][ T3467] bridge_slave_0: left promiscuous mode [ 291.498825][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.270873][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.308470][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.345913][ T3467] bond0 (unregistering): Released all slaves [ 293.465225][ T7024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.712075][ T7025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.759625][ T7025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.489'. [ 293.828686][ T29] audit: type=1400 audit(1721128522.840:319): avc: denied { connect } for pid=7028 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 293.853132][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 293.921495][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.997546][ T29] audit: type=1326 audit(1721128523.010:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.1.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e3575bd9 code=0x0 [ 294.039869][ T7024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.121364][ T6784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.136607][ T6784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.156579][ T6784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.196469][ T6784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.222520][ T54] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 294.235479][ T3467] hsr_slave_0: left promiscuous mode [ 294.247500][ T3467] hsr_slave_1: left promiscuous mode [ 294.257384][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.265237][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.276734][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.284453][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.315409][ T3467] veth1_macvtap: left promiscuous mode [ 294.321067][ T3467] veth0_macvtap: left promiscuous mode [ 294.327377][ T3467] veth1_vlan: left promiscuous mode [ 294.333190][ T3467] veth0_vlan: left promiscuous mode [ 294.422661][ T54] usb 3-1: Using ep0 maxpacket: 32 [ 294.437482][ T54] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 294.457835][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.472838][ T54] usb 3-1: config 0 descriptor?? [ 295.881604][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 295.918326][ T54] usb 3-1: string descriptor 0 read error: -71 [ 295.964498][ T54] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 296.019453][ T4521] bcm5974 3-1:0.0: could not read from device [ 296.066734][ T4521] bcm5974 3-1:0.0: could not read from device [ 296.094624][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 296.103536][ T54] usb 3-1: USB disconnect, device number 4 [ 296.972408][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 297.130706][ T29] audit: type=1326 audit(1721128526.140:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.2.500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b84b75bd9 code=0x0 [ 297.280690][ T6746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.492846][ T6746] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.571327][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.578713][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.587440][ T7068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.501'. [ 297.626458][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.633814][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.157582][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.228545][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 298.287808][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.344336][ T7082] syzkaller0: entered promiscuous mode [ 298.358000][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.365563][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.379835][ T7081] syzkaller0: left promiscuous mode [ 298.415518][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.422932][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.082915][ T6746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.091093][ T7105] Zero length message leads to an empty skb [ 299.385511][ T6746] veth0_vlan: entered promiscuous mode [ 299.440211][ T6746] veth1_vlan: entered promiscuous mode [ 299.670862][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.816230][ T6746] veth0_macvtap: entered promiscuous mode [ 300.053512][ T6746] veth1_macvtap: entered promiscuous mode [ 300.145030][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.166849][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.178711][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.203671][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.227455][ T7125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.249646][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.287215][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.308328][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.423703][ T6784] veth0_vlan: entered promiscuous mode [ 300.450869][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.497173][ T7126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.511377][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.542646][ T7126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.520'. [ 300.552605][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.574805][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.599123][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.621968][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.655247][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.669060][ T6746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.681180][ T7128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.694005][ T6746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.707165][ T6746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.724241][ T6746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.778362][ T7128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.904298][ T6784] veth1_vlan: entered promiscuous mode [ 300.945653][ T29] audit: type=1400 audit(1721128529.960:322): avc: denied { unmount } for pid=5566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 301.130302][ T6784] veth0_macvtap: entered promiscuous mode [ 301.197091][ T6784] veth1_macvtap: entered promiscuous mode [ 301.286213][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.297051][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.312725][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.332461][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.349012][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.361544][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.378690][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.397369][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.421383][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.467387][ T4096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.513371][ T4096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.591441][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.626029][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.639588][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.658639][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.674428][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.695791][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.710823][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.728853][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.746083][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.900578][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.914996][ T6784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.931847][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.938646][ T6784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.950835][ T6784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.978440][ T6784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.515829][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.563524][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.686098][ T7170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.698846][ T4096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.714330][ T4096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.027284][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.086233][ T7170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.536'. [ 303.143953][ T7170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.244205][ T7173] netlink: 160 bytes leftover after parsing attributes in process `syz.3.536'. [ 303.459592][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.700985][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 304.405093][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 304.467239][ T7202] bridge_slave_1: left allmulticast mode [ 304.499308][ T7202] bridge_slave_1: left promiscuous mode [ 304.541247][ T29] audit: type=1400 audit(1721128533.540:323): avc: denied { mounton } for pid=7196 comm="syz.2.542" path="/proc/376/task" dev="proc" ino=20884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 304.603577][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.684601][ T7202] bridge_slave_0: left allmulticast mode [ 304.701346][ T7202] bridge_slave_0: left promiscuous mode [ 304.723873][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.415078][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.546'. [ 305.444715][ T7219] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 305.968371][ T56] Bluetooth: hci3: unexpected cc 0x1407 length: 100 > 9 [ 306.370843][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 306.411307][ T7243] bridge_slave_1: left allmulticast mode [ 306.423981][ T7243] bridge_slave_1: left promiscuous mode [ 306.436890][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.458774][ T7243] bridge_slave_0: left allmulticast mode [ 306.464962][ T7243] bridge_slave_0: left promiscuous mode [ 306.480706][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.309019][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.337838][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.362358][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.391534][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.410715][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.424187][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.453749][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.478750][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.510923][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.523047][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.530494][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.837022][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.870330][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.903857][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.913100][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 307.921612][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 307.937495][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.962523][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 307.993154][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.010447][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.041391][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.071383][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.100316][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.128930][ T9] usb 3-1: config 0 has no interfaces? [ 308.130143][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.142414][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.150014][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.157782][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.160378][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 308.165370][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.165411][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.165448][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.165485][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.165522][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.165559][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.165605][ T5198] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 308.240735][ T5198] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 308.250393][ T9] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 308.250436][ T9] usb 3-1: Product: syz [ 308.250463][ T9] usb 3-1: Manufacturer: syz [ 308.250492][ T9] usb 3-1: SerialNumber: syz [ 308.282003][ T9] usb 3-1: config 0 descriptor?? [ 309.017544][ T29] audit: type=1400 audit(1721128538.030:324): avc: denied { read write } for pid=7282 comm="syz.3.569" name="video9" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 309.105555][ T29] audit: type=1400 audit(1721128538.030:325): avc: denied { open } for pid=7282 comm="syz.3.569" path="/dev/video9" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 309.179948][ T29] audit: type=1400 audit(1721128538.060:326): avc: denied { ioctl } for pid=7282 comm="syz.3.569" path="/dev/video9" dev="devtmpfs" ino=875 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 309.487331][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 310.033394][ T56] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 310.042440][ T56] Bluetooth: hci3: Injecting HCI hardware error event [ 310.051187][ T5095] Bluetooth: hci3: hardware error 0x00 [ 310.126723][ T29] audit: type=1400 audit(1721128539.140:327): avc: denied { ioctl } for pid=7307 comm="syz.4.578" path="socket:[21527]" dev="sockfs" ino=21527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 310.188571][ T7309] mmap: syz.4.578 (7309) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 310.311817][ T9] usb 3-1: USB disconnect, device number 5 [ 310.530896][ T29] audit: type=1326 audit(1721128539.540:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.2.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b84b75bd9 code=0x0 [ 310.727489][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.867188][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.059454][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.705702][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 312.192966][ T5095] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 312.517442][ T29] audit: type=1804 audit(1721128541.520:329): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.592" name="/" dev="pidfs" ino=7649 res=1 errno=0 [ 314.246994][ T29] audit: type=1326 audit(1721128543.260:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.2.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b84b75bd9 code=0x0 [ 314.352801][ T7387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.445308][ T7387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.508779][ T7387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.559231][ T29] audit: type=1804 audit(1721128543.570:331): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.604" name="/" dev="pidfs" ino=7689 res=1 errno=0 [ 315.952737][ T5095] Bluetooth: hci5: command 0x0406 tx timeout [ 316.703020][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 317.054921][ T7427] block nbd3: NBD_DISCONNECT [ 317.068083][ T7427] block nbd3: Disconnected due to user request. [ 317.076467][ T7427] block nbd3: shutting down sockets [ 317.176179][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.298917][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.789751][ T7458] netlink: 64 bytes leftover after parsing attributes in process `syz.2.629'. [ 319.515748][ T56] Bluetooth: hci5: unexpected cc 0x1407 length: 100 > 9 [ 319.524217][ T56] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 319.741546][ T7475] process 'syz.4.635' launched './file0' with NULL argv: empty string added [ 319.742439][ T29] audit: type=1400 audit(1721128548.750:332): avc: denied { execute } for pid=7474 comm="syz.4.635" name="file0" dev="ramfs" ino=21977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 319.844297][ T29] audit: type=1400 audit(1721128548.760:333): avc: denied { execute_no_trans } for pid=7474 comm="syz.4.635" path="/122/file0/file0" dev="ramfs" ino=21977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 319.910983][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 319.924576][ T29] audit: type=1400 audit(1721128548.890:334): avc: denied { unmount } for pid=5566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 319.939027][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 319.972371][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.013329][ T29] audit: type=1400 audit(1721128549.020:335): avc: denied { create } for pid=7481 comm="syz.4.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 320.014280][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.069991][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.102926][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.110498][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.149852][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.174334][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.181843][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.219614][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.238095][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 320.246226][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.281520][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.290884][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.298854][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.322566][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.344306][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.371277][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.390056][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.399688][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.412481][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.440496][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.471501][ T8] usb 1-1: config 0 has no interfaces? [ 320.480311][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.513498][ T8] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 320.523776][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.531350][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.549485][ T8] usb 1-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 320.561400][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.573737][ T8] usb 1-1: Product: syz [ 320.582471][ T8] usb 1-1: Manufacturer: syz [ 320.589352][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.602619][ T8] usb 1-1: SerialNumber: syz [ 320.617184][ T8] usb 1-1: config 0 descriptor?? [ 320.632938][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.640527][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.660109][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.670706][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.686306][ T5143] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 320.701784][ T5143] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 320.821608][ T29] audit: type=1400 audit(1721128549.830:336): avc: denied { create } for pid=7489 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 320.894481][ T29] audit: type=1400 audit(1721128549.860:337): avc: denied { write } for pid=7489 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 322.843599][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.552567][ T56] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 323.561577][ T56] Bluetooth: hci5: Injecting HCI hardware error event [ 323.570800][ T5095] Bluetooth: hci5: hardware error 0x00 [ 326.962181][ T8] usb 1-1: USB disconnect, device number 5 [ 327.320932][ T56] Bluetooth: hci5: unexpected cc 0x1407 length: 100 > 9 [ 327.328138][ T56] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 327.610927][ T7522] block nbd3: NBD_DISCONNECT [ 327.879407][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 327.889093][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 327.896948][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 327.905134][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 327.935485][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 327.988525][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.021001][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.049232][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.062479][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.080308][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.098359][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.112415][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.141139][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.181047][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.197379][ T56] Bluetooth: hci4: unexpected cc 0x1407 length: 100 > 9 [ 328.205842][ T56] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 328.228121][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.242553][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 328.252499][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.260508][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.274046][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.281674][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.300674][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.322442][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.452008][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.656829][ T8] usb 3-1: config 0 has no interfaces? [ 328.799008][ T8] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 328.825200][ T8] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 328.927617][ T8] usb 3-1: Product: syz [ 328.931820][ T8] usb 3-1: Manufacturer: syz [ 328.940094][ T8] usb 3-1: SerialNumber: syz [ 328.951780][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 328.953078][ T8] usb 3-1: config 0 descriptor?? [ 328.993717][ T5095] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 329.012778][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.022194][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.036561][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.047613][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.059244][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.068858][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.092453][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.114004][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.121714][ T54] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.186341][ T54] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 329.955523][ T7565] block nbd1: NBD_DISCONNECT [ 330.917198][ T5105] usb 3-1: USB disconnect, device number 6 [ 331.049027][ T7592] overlayfs: missing 'workdir' [ 331.799600][ T29] audit: type=1400 audit(1721128560.810:338): avc: denied { read } for pid=7616 comm="syz.3.679" name="ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 331.921759][ T29] audit: type=1400 audit(1721128560.850:339): avc: denied { open } for pid=7616 comm="syz.3.679" path="/dev/ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 334.942935][ T5095] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 334.951925][ T5095] Bluetooth: hci4: Injecting HCI hardware error event [ 334.961623][ T56] Bluetooth: hci4: hardware error 0x00 [ 335.009380][ T29] audit: type=1400 audit(1721128560.880:340): avc: denied { ioctl } for pid=7616 comm="syz.3.679" path="/dev/ptmx" dev="devtmpfs" ino=617 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 335.307117][ T29] audit: type=1400 audit(1721128564.310:341): avc: denied { write } for pid=7630 comm="syz.0.686" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 335.720362][ T29] audit: type=1400 audit(1721128564.730:342): avc: denied { read } for pid=7651 comm="syz.4.691" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 336.295100][ T7664] overlayfs: missing 'workdir' [ 337.146629][ T7664] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 337.152985][ T56] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 337.228623][ T7664] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 339.782488][ T29] audit: type=1326 audit(1721128568.790:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.2.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b84b75bd9 code=0x0 [ 340.172925][ T5198] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 340.415854][ T5198] usb 3-1: config 0 has no interfaces? [ 340.450183][ T5198] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 340.494848][ T5198] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 340.525365][ T5198] usb 3-1: Product: syz [ 340.544661][ T5198] usb 3-1: Manufacturer: syz [ 340.557847][ T5198] usb 3-1: SerialNumber: syz [ 340.582744][ T5198] usb 3-1: config 0 descriptor?? [ 340.864406][ T29] audit: type=1400 audit(1721128569.880:344): avc: denied { create } for pid=7730 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 340.872504][ T5198] usb 3-1: USB disconnect, device number 7 [ 341.043769][ T29] audit: type=1400 audit(1721128570.060:345): avc: denied { write } for pid=7730 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 341.133891][ T29] audit: type=1400 audit(1721128570.150:346): avc: denied { getopt } for pid=7741 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.333992][ T29] audit: type=1400 audit(1721128570.340:347): avc: denied { bind } for pid=7743 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.380866][ T29] audit: type=1400 audit(1721128570.340:348): avc: denied { name_bind } for pid=7743 comm="syz.3.718" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 341.442493][ T29] audit: type=1400 audit(1721128570.340:349): avc: denied { node_bind } for pid=7743 comm="syz.3.718" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 341.535494][ T29] audit: type=1400 audit(1721128570.480:350): avc: denied { ioctl } for pid=7745 comm="syz.1.717" path="socket:[23710]" dev="sockfs" ino=23710 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 341.720312][ T29] audit: type=1400 audit(1721128570.730:351): avc: denied { bind } for pid=7750 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 341.802170][ T29] audit: type=1400 audit(1721128570.770:352): avc: denied { connect } for pid=7750 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 341.852905][ T7751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.954706][ T7751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.017171][ T7753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.721'. [ 342.043160][ T7752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.948746][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 344.267008][ T7793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.735'. [ 344.322378][ T7791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.226155][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 345.226179][ T29] audit: type=1400 audit(1721128574.230:355): avc: denied { write } for pid=7809 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.378014][ T29] audit: type=1326 audit(1721128574.350:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.1.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e3575bd9 code=0x0 [ 346.495686][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 346.820901][ T5105] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 347.052434][ T5105] usb 4-1: Using ep0 maxpacket: 8 [ 347.060490][ T5105] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 347.092443][ T5105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.141093][ T5105] usb 4-1: config 0 descriptor?? [ 347.616814][ T7839] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 347.689148][ T29] audit: type=1400 audit(1721128576.700:357): avc: denied { create } for pid=7837 comm="syz.3.748" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 348.111075][ T29] audit: type=1400 audit(1721128576.700:358): avc: denied { associate } for pid=7837 comm="syz.3.748" name=E91F7189591E9233614B scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 348.429816][ T29] audit: type=1400 audit(1721128577.440:359): avc: denied { read } for pid=7837 comm="syz.3.748" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.728904][ T29] audit: type=1400 audit(1721128577.740:360): avc: denied { mount } for pid=7862 comm="syz.0.757" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 348.753426][ T5105] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 348.773711][ T7864] ======================================================= [ 348.773711][ T7864] WARNING: The mand mount option has been deprecated and [ 348.773711][ T7864] and is ignored by this kernel. Remove the mand [ 348.773711][ T7864] option from the mount to silence this warning. [ 348.773711][ T7864] ======================================================= [ 348.820091][ T5105] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 348.846542][ T5105] asix 4-1:0.0: probe with driver asix failed with error -71 [ 348.861928][ T29] audit: type=1400 audit(1721128577.780:361): avc: denied { ioctl } for pid=7860 comm="syz.4.756" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 348.884021][ T5105] usb 4-1: USB disconnect, device number 4 [ 348.924196][ T29] audit: type=1400 audit(1721128577.790:362): avc: denied { remount } for pid=7862 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 349.119935][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 349.129734][ T7876] bridge_slave_1: left allmulticast mode [ 349.143688][ T7876] bridge_slave_1: left promiscuous mode [ 349.149704][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.179709][ T7876] bridge_slave_0: left allmulticast mode [ 349.199175][ T7876] bridge_slave_0: left promiscuous mode [ 349.217359][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.328971][ T29] audit: type=1400 audit(1721128578.330:363): avc: denied { unlink } for pid=6746 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 349.425693][ T29] audit: type=1400 audit(1721128578.430:364): avc: denied { write } for pid=7881 comm="syz.1.763" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 350.102492][ T7899] pim6reg1: entered promiscuous mode [ 350.110889][ T7899] pim6reg1: entered allmulticast mode [ 350.632848][ T5143] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 350.700681][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 350.847013][ T5143] usb 1-1: Using ep0 maxpacket: 8 [ 350.870603][ T5143] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 350.895796][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.946791][ T5143] usb 1-1: config 0 descriptor?? [ 351.066423][ T5145] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 351.299278][ T5145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.319961][ T5145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 351.334639][ T5145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 351.346191][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 351.346213][ T29] audit: type=1326 audit(1721128580.360:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35be175bd9 code=0x0 [ 351.377724][ T5145] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 351.421923][ T5145] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.433338][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.441609][ T5145] usb 3-1: SerialNumber: syz [ 351.471916][ T7923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 351.482393][ T7923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 351.497935][ T5145] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 351.597501][ T7948] binder: 7947:7948 ioctl c0306201 0 returned -14 [ 351.619654][ T5143] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 351.636890][ T5143] asix 1-1:0.0: probe with driver asix failed with error -32 [ 351.713111][ T54] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 351.829354][ T5145] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 351.849024][ T5145] usb 3-1: USB disconnect, device number 8 [ 351.928512][ T54] usb 4-1: config 0 has no interfaces? [ 351.945404][ T54] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 351.972399][ T54] usb 4-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 351.980976][ T54] usb 4-1: Product: syz [ 351.993901][ T54] usb 4-1: Manufacturer: syz [ 351.999504][ T54] usb 4-1: SerialNumber: syz [ 352.027843][ T54] usb 4-1: config 0 descriptor?? [ 352.263729][ T5145] usb 4-1: USB disconnect, device number 5 [ 353.415661][ T5105] usb 1-1: USB disconnect, device number 6 [ 354.073888][ T5105] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 354.266835][ T5105] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.293937][ T5105] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 354.356990][ T5105] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 354.412511][ T5105] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 354.462315][ T5105] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.479881][ T5105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 354.502342][ T5105] usb 1-1: SerialNumber: syz [ 354.524208][ T7984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.537926][ T7984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.552029][ T5105] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 354.964456][ T5105] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 355.029451][ T5105] usb 1-1: USB disconnect, device number 7 [ 355.302440][ T5143] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 355.523140][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 355.531154][ T5143] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 355.540371][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.570971][ T5143] usb 3-1: config 0 descriptor?? [ 356.122557][ T5198] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 356.242353][ T5143] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 356.272048][ T5143] asix 3-1:0.0: probe with driver asix failed with error -32 [ 356.336008][ T5198] usb 4-1: config 0 has no interfaces? [ 356.350130][ T5198] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 356.370150][ T5198] usb 4-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 356.411525][ T5198] usb 4-1: Product: syz [ 356.423191][ T5198] usb 4-1: Manufacturer: syz [ 356.434416][ T5198] usb 4-1: SerialNumber: syz [ 356.461956][ T5198] usb 4-1: config 0 descriptor?? [ 356.689799][ T5198] usb 4-1: USB disconnect, device number 6 [ 356.967540][ T29] audit: type=1400 audit(1721128585.980:367): avc: denied { create } for pid=8038 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 357.036901][ T29] audit: type=1400 audit(1721128586.040:368): avc: denied { connect } for pid=8038 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 357.100069][ T29] audit: type=1400 audit(1721128586.110:369): avc: denied { write } for pid=8038 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 357.141163][ T29] audit: type=1400 audit(1721128586.140:370): avc: denied { connect } for pid=8038 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 357.204813][ T29] audit: type=1400 audit(1721128586.140:371): avc: denied { read } for pid=8038 comm="syz.1.826" path="socket:[24326]" dev="sockfs" ino=24326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 357.271746][ T29] audit: type=1400 audit(1721128586.280:372): avc: denied { read } for pid=8038 comm="syz.1.826" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 357.358588][ T29] audit: type=1400 audit(1721128586.280:373): avc: denied { open } for pid=8038 comm="syz.1.826" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 358.115097][ T9] usb 3-1: USB disconnect, device number 9 [ 358.200315][ T29] audit: type=1400 audit(1721128587.210:374): avc: denied { setopt } for pid=8056 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.461808][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.690473][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.745419][ T8072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.793517][ T29] audit: type=1400 audit(1721128587.810:375): avc: denied { create } for pid=8076 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.863099][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.672396][ T5105] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 359.848076][ T8098] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.848'. [ 359.892362][ T5105] usb 5-1: Using ep0 maxpacket: 8 [ 359.900464][ T5105] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 359.930995][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.962770][ T5105] usb 5-1: config 0 descriptor?? [ 360.589377][ T5105] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 360.621988][ T5105] asix 5-1:0.0: probe with driver asix failed with error -32 [ 361.339483][ T29] audit: type=1400 audit(1721128590.350:376): avc: denied { getopt } for pid=8123 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 362.075919][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 362.450334][ T9] usb 5-1: USB disconnect, device number 9 [ 362.994855][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.006374][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.018661][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.029165][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.038276][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 363.047116][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.219559][ T3467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.424715][ T3467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.537590][ T5095] Bluetooth: hci6: ACL packet for unknown connection handle 203 [ 363.577285][ T3467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.721348][ T3467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.538164][ T3467] bridge_slave_1: left allmulticast mode [ 364.557119][ T3467] bridge_slave_1: left promiscuous mode [ 364.572352][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.614195][ T3467] bridge_slave_0: left allmulticast mode [ 364.639885][ T3467] bridge_slave_0: left promiscuous mode [ 364.913711][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.157351][ T5095] Bluetooth: hci0: command tx timeout [ 367.084290][ T8220] syz.0.894[8220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.084545][ T8220] syz.0.894[8220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.126525][ T8221] syz.0.894[8221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.169355][ T8221] syz.0.894[8221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.232516][ T5095] Bluetooth: hci0: command tx timeout [ 367.330754][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.415433][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.460942][ T3467] bond0 (unregistering): Released all slaves [ 367.524771][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 368.974583][ T8236] warning: `syz.4.898' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 369.082482][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 369.230877][ T29] audit: type=1326 audit(1721128598.240:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.1.902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e3575bd9 code=0x0 [ 369.314228][ T5095] Bluetooth: hci0: command tx timeout [ 369.458307][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.471031][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.490923][ T8166] bridge_slave_0: entered allmulticast mode [ 369.503314][ T8166] bridge_slave_0: entered promiscuous mode [ 369.667146][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.685308][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.699674][ T8166] bridge_slave_1: entered allmulticast mode [ 369.728915][ T8166] bridge_slave_1: entered promiscuous mode [ 369.852881][ T3467] hsr_slave_0: left promiscuous mode [ 369.889942][ T3467] hsr_slave_1: left promiscuous mode [ 369.908893][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.929755][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.970432][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.988142][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.068094][ T3467] veth1_macvtap: left promiscuous mode [ 370.078241][ T3467] veth0_macvtap: left promiscuous mode [ 370.084406][ T3467] veth1_vlan: left promiscuous mode [ 370.091399][ T3467] veth0_vlan: left promiscuous mode [ 371.101963][ T5095] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 371.171086][ T8300] 9pnet_fd: Insufficient options for proto=fd [ 371.194531][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 371.392992][ T5095] Bluetooth: hci0: command tx timeout [ 371.420477][ T29] audit: type=1326 audit(1721128600.430:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.1.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e3575bd9 code=0x0 [ 371.594028][ T29] audit: type=1400 audit(1721128600.600:379): avc: denied { write } for pid=8308 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 371.871839][ T29] audit: type=1400 audit(1721128600.860:380): avc: denied { getopt } for pid=8313 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 372.450198][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 372.601347][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 373.163563][ T5095] Bluetooth: hci6: command 0x0406 tx timeout [ 373.599102][ T8326] evm: overlay not supported [ 373.720435][ T29] audit: type=1804 audit(1721128602.730:381): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.931" name="/newroot/183/bus/file0" dev="overlay" ino=983 res=1 errno=0 [ 373.929083][ T29] audit: type=1400 audit(1721128602.940:382): avc: denied { ioctl } for pid=8324 comm="syz.4.931" path="socket:[26100]" dev="sockfs" ino=26100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 374.560217][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.618338][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.736724][ T8336] 9pnet_fd: Insufficient options for proto=fd [ 374.881843][ T8166] team0: Port device team_slave_0 added [ 374.901260][ T8166] team0: Port device team_slave_1 added [ 375.075115][ T29] audit: type=1804 audit(1721128604.090:383): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.935" name="/newroot/98/bus/file0" dev="overlay" ino=526 res=1 errno=0 [ 375.181773][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.197115][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.282642][ T29] audit: type=1400 audit(1721128604.290:384): avc: denied { map } for pid=8343 comm="syz.4.938" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 375.294870][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.382221][ T29] audit: type=1400 audit(1721128604.400:385): avc: denied { call } for pid=8343 comm="syz.4.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 375.413217][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.459522][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.574060][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.961858][ T8166] hsr_slave_0: entered promiscuous mode [ 375.998910][ T8166] hsr_slave_1: entered promiscuous mode [ 377.790644][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 377.857614][ T29] audit: type=1326 audit(1721128606.860:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.4.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f530a775bd9 code=0x0 [ 378.121408][ T29] audit: type=1804 audit(1721128607.130:387): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.942" name="/newroot/99/bus/file0" dev="overlay" ino=540 res=1 errno=0 [ 378.150276][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 378.338339][ T8372] 9pnet_fd: Insufficient options for proto=fd [ 378.613143][ T5105] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 378.624360][ T29] audit: type=1400 audit(1721128607.620:388): avc: denied { setattr } for pid=8375 comm="syz.0.949" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 378.820659][ T8166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.832638][ T5105] usb 2-1: Using ep0 maxpacket: 8 [ 378.844779][ T5105] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 378.847143][ T8166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.869647][ T5095] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 378.894273][ T5105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.910597][ T8166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.935840][ T5105] usb 2-1: config 0 descriptor?? [ 378.949402][ T8166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.640345][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.706566][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.751610][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.758989][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.835949][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.843489][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.282674][ T5105] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 380.318599][ T5105] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 380.333767][ T5105] asix 2-1:0.0: probe with driver asix failed with error -71 [ 380.361516][ T5105] usb 2-1: USB disconnect, device number 5 [ 380.712924][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.922841][ T5095] Bluetooth: hci6: command 0x0406 tx timeout [ 380.959742][ T8166] veth0_vlan: entered promiscuous mode [ 381.023873][ T8166] veth1_vlan: entered promiscuous mode [ 381.209619][ T8166] veth0_macvtap: entered promiscuous mode [ 381.276128][ T8166] veth1_macvtap: entered promiscuous mode [ 381.369000][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.406663][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.434645][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.462419][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.485690][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.502747][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.520537][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.533299][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.553089][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.573702][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 381.647602][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.651958][ T8406] 9pnet_fd: Insufficient options for proto=fd [ 381.690918][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.730184][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.749114][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.770642][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.796053][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.818658][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.844298][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.876109][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.957831][ T8166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.002074][ T8166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.014666][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 382.027254][ T8166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.052514][ T8166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.194892][ T29] audit: type=1326 audit(1721128611.190:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e3575bd9 code=0x0 [ 382.476385][ T4096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.508995][ T4096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.775007][ T4096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.807646][ T4096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.278141][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.312600][ T5105] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 384.513144][ T5105] usb 5-1: Using ep0 maxpacket: 8 [ 384.534905][ T5105] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 384.594142][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.628393][ T5105] usb 5-1: config 0 descriptor?? [ 385.097534][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 385.113562][ T8436] 9pnet_fd: Insufficient options for proto=fd [ 385.169089][ T5105] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 385.222513][ T5105] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 385.252580][ T5105] asix 5-1:0.0: probe with driver asix failed with error -61 [ 387.885422][ T5105] usb 5-1: USB disconnect, device number 10 [ 389.689942][ T29] audit: type=1326 audit(1721128618.700:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 389.779716][ T29] audit: type=1326 audit(1721128618.700:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 389.856603][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 389.864556][ T29] audit: type=1326 audit(1721128618.700:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 389.997209][ T29] audit: type=1326 audit(1721128618.700:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 390.074264][ T5143] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 390.093597][ T29] audit: type=1326 audit(1721128618.730:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 390.142155][ T8481] 9pnet_fd: Insufficient options for proto=fd [ 390.154161][ T29] audit: type=1326 audit(1721128618.730:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 390.246090][ T29] audit: type=1326 audit(1721128618.730:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 390.318286][ T29] audit: type=1326 audit(1721128618.730:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 390.323722][ T5143] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 390.390895][ T5143] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 390.441336][ T29] audit: type=1326 audit(1721128618.730:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 390.479694][ T29] audit: type=1326 audit(1721128618.730:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0653175bd9 code=0x7ffc0000 [ 390.505120][ T5143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.532658][ T5143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.540912][ T5143] usb 1-1: Manufacturer: Ḩ [ 390.662445][ T5198] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 390.824348][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 390.855153][ T5198] usb 2-1: Using ep0 maxpacket: 8 [ 390.865958][ T5198] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 390.883471][ T5198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.905132][ T5198] usb 2-1: config 0 descriptor?? [ 390.947988][ T5143] cdc_ncm 1-1:1.0: bind() failure [ 390.984354][ T5143] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 391.006723][ T5143] cdc_ncm 1-1:1.1: bind() failure [ 391.037837][ T5143] usb 1-1: USB disconnect, device number 8 [ 391.241242][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 391.342608][ T5198] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 391.362354][ T5198] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 391.382612][ T5198] asix 2-1:0.0: probe with driver asix failed with error -61 [ 391.884812][ T8517] /dev/nullb0: Can't open blockdev [ 392.156185][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 392.543173][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 393.122366][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 393.339266][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 393.352426][ T54] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 393.371822][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 393.416157][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.431281][ T5143] usb 2-1: USB disconnect, device number 6 [ 393.454683][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.474594][ T9] usb 3-1: Manufacturer: Ḩ [ 393.572631][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 393.587998][ T54] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 393.607761][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.640157][ T54] usb 4-1: config 0 descriptor?? [ 393.726057][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 393.753039][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 393.821449][ T9] cdc_ncm 3-1:1.0: bind() failure [ 393.862036][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 393.892528][ T9] cdc_ncm 3-1:1.1: bind() failure [ 393.910956][ T54] usb 4-1: string descriptor 0 read error: -71 [ 393.924407][ T9] usb 3-1: USB disconnect, device number 10 [ 393.938584][ T54] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 394.008818][ T4521] bcm5974 4-1:0.0: could not read from device [ 394.043243][ T4521] bcm5974 4-1:0.0: could not read from device [ 394.055806][ T54] usb 4-1: USB disconnect, device number 7 [ 395.451186][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 395.528223][ T5143] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 395.754227][ T5143] usb 5-1: Using ep0 maxpacket: 8 [ 395.794358][ T5143] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 395.823322][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.866957][ T5143] usb 5-1: config 0 descriptor?? [ 395.953487][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1030'. [ 396.307017][ T5143] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 396.327568][ T5143] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 396.362617][ T5143] asix 5-1:0.0: probe with driver asix failed with error -61 [ 396.467648][ T54] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 396.706870][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 396.716284][ T54] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 396.729909][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.770217][ T54] usb 1-1: config 0 descriptor?? [ 397.001917][ T54] usb 1-1: string descriptor 0 read error: -71 [ 397.048532][ T54] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 397.071447][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 397.116980][ T4521] bcm5974 1-1:0.0: could not read from device [ 397.143337][ T4521] bcm5974 1-1:0.0: could not read from device [ 397.150080][ T54] usb 1-1: USB disconnect, device number 9 [ 397.426565][ T8643] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 397.684784][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.706319][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.791215][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 398.019866][ T8648] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 398.284583][ T5198] usb 5-1: USB disconnect, device number 11 [ 398.354950][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 398.896100][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 398.906942][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.965978][ T8673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.974552][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 399.029162][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 399.029185][ T29] audit: type=1400 audit(1721128628.040:500): avc: denied { connect } for pid=8668 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.045270][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 399.260483][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 399.339341][ T8648] ip6gretap0 speed is unknown, defaulting to 1000 [ 399.622342][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 399.842320][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 399.867525][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 399.892615][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.941048][ T9] usb 5-1: config 0 descriptor?? [ 400.142565][ T5198] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 400.353058][ T5198] usb 1-1: Using ep0 maxpacket: 8 [ 400.367275][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 400.404455][ T5198] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 400.438135][ T5198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.507738][ T5198] usb 1-1: config 0 descriptor?? [ 400.887095][ T8694] bond0: (slave bond_slave_0): Releasing backup interface [ 401.235216][ T9] usb 5-1: string descriptor 0 read error: -71 [ 401.270002][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 401.348025][ T4521] bcm5974 5-1:0.0: could not read from device [ 401.361869][ T9] usb 5-1: USB disconnect, device number 12 [ 401.850196][ T5198] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 401.897413][ T5198] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 401.923108][ T8717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.941289][ T5198] asix 1-1:0.0: probe with driver asix failed with error -71 [ 401.971528][ T8717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.994035][ T5198] usb 1-1: USB disconnect, device number 10 [ 402.047986][ T29] audit: type=1400 audit(1721128631.050:501): avc: denied { create } for pid=8710 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 402.079971][ T8711] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 402.087434][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.100752][ T29] audit: type=1400 audit(1721128631.090:502): avc: denied { connect } for pid=8710 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 402.147947][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 402.309606][ T8729] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 402.422425][ T9] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 402.523053][ T8737] siw: device registration error -23 [ 402.849026][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 404.482631][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 404.697572][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 404.774138][ T8] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 404.827794][ T8718] vhci_hcd: connection reset by peer [ 404.863169][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.944252][ T8] usb 4-1: config 0 descriptor?? [ 405.024901][ T8807] vhci_hcd: stop threads [ 405.071105][ T8807] vhci_hcd: release socket [ 405.090918][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.135207][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 405.159426][ T8807] vhci_hcd: disconnect device [ 406.225343][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 406.249603][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 406.269600][ T8] asix 4-1:0.0: probe with driver asix failed with error -71 [ 406.298203][ T8] usb 4-1: USB disconnect, device number 8 [ 406.704233][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 406.933541][ T4096] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 406.993400][ T8851] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 407.000004][ T8851] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 407.041613][ T8851] vhci_hcd vhci_hcd.0: Device attached [ 407.343000][ T8] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 407.582415][ T9] vhci_hcd: vhci_device speed not set [ 488.760924][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 512.642213][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 512.649300][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P63/1:b..l P8835/1:b..l [ 512.658702][ C1] rcu: (detected by 1, t=10502 jiffies, g=50969, q=644 ncpus=2) [ 512.666565][ C1] task:syz.1.1086 state:R running task stack:25056 pid:8835 tgid:8834 ppid:5560 flags:0x00004006 [ 512.679671][ C1] Call Trace: [ 512.682979][ C1] [ 512.686035][ C1] __schedule+0xf27/0x5d10 [ 512.690502][ C1] ? __kernel_text_address+0xd/0x40 [ 512.695750][ C1] ? unwind_get_return_address+0x45/0xe0 [ 512.701456][ C1] ? __pfx___schedule+0x10/0x10 [ 512.706352][ C1] ? find_held_lock+0x2d/0x110 [ 512.711365][ C1] preempt_schedule_irq+0x51/0x90 [ 512.716793][ C1] irqentry_exit+0x36/0x90 [ 512.721314][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.727484][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x60 [ 512.736915][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 54 bf 75 7e 65 8b 05 55 bf 75 7e a9 00 01 ff 00 <48> 8b 34 24 74 0f f6 c4 01 74 35 8b 82 1c 16 00 00 85 c0 74 2b 8b [ 512.756723][ C1] RSP: 0018:ffffc90003247250 EFLAGS: 00000246 [ 512.762829][ C1] RAX: 0000000080000000 RBX: ffffffff898a01e8 RCX: ffffc90009699000 [ 512.771871][ C1] RDX: ffff888022a75a00 RSI: ffffffff813cf170 RDI: 0000000000000005 [ 512.780051][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 512.788052][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900032472c8 [ 512.796051][ C1] R13: ffffffff8179aef0 R14: ffffc90003247340 R15: ffff888022a75a00 [ 512.804034][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.810231][ C1] ? ip6_sk_dst_lookup_flow+0x568/0x960 [ 512.815816][ C1] ? unwind_get_return_address+0x90/0xe0 [ 512.821677][ C1] unwind_get_return_address+0xb0/0xe0 [ 512.827162][ C1] arch_stack_walk+0xc1/0x170 [ 512.831864][ C1] ? ip6_sk_dst_lookup_flow+0x568/0x960 [ 512.837447][ C1] stack_trace_save+0x95/0xd0 [ 512.842143][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 512.847568][ C1] ? kasan_save_track+0x14/0x30 [ 512.852457][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 512.857261][ C1] ref_tracker_alloc+0x1be/0x5b0 [ 512.862229][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 512.867899][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.873125][ C1] ? dst_init+0xda/0x580 [ 512.877406][ C1] ? dst_alloc+0xbb/0x1a0 [ 512.881751][ C1] ? ip6_blackhole_route+0x5f/0x4e0 [ 512.886973][ C1] ? xfrm_lookup_route+0x10b/0x200 [ 512.892102][ C1] ? ip6_dst_lookup_flow+0x15c/0x1d0 [ 512.897502][ C1] ? rcu_is_watching+0x12/0xc0 [ 512.902282][ C1] dst_init+0xda/0x580 [ 512.906483][ C1] dst_alloc+0xbb/0x1a0 [ 512.910677][ C1] ip6_blackhole_route+0x5f/0x4e0 [ 512.915748][ C1] xfrm_lookup_route+0x10b/0x200 [ 512.920713][ C1] ip6_dst_lookup_flow+0x15c/0x1d0 [ 512.925883][ C1] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 512.931549][ C1] ? dst_release+0x1b5/0x1e0 [ 512.936158][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 512.941387][ C1] ip6_sk_dst_lookup_flow+0x568/0x960 [ 512.946986][ C1] udpv6_sendmsg+0x1b76/0x3030 [ 512.951787][ C1] ? avc_has_perm_noaudit+0x119/0x3a0 [ 512.957207][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 512.963202][ C1] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 512.968339][ C1] ? avc_has_perm_noaudit+0x143/0x3a0 [ 512.973875][ C1] ? avc_has_perm+0x11b/0x1c0 [ 512.978587][ C1] ? __import_iovec+0x1fd/0x6e0 [ 512.983470][ C1] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 512.988629][ C1] ? inet6_sendmsg+0x105/0x140 [ 512.993526][ C1] inet6_sendmsg+0x105/0x140 [ 512.998134][ C1] ____sys_sendmsg+0x692/0xc90 [ 513.002915][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 513.008416][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.013720][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 513.018771][ C1] ___sys_sendmsg+0x135/0x1e0 [ 513.023487][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.028695][ C1] ? handle_mm_fault+0x4ec/0xa00 [ 513.033675][ C1] ? __pfx___might_resched+0x10/0x10 [ 513.038977][ C1] ? __might_fault+0xe3/0x190 [ 513.043669][ C1] __sys_sendmmsg+0x1a1/0x450 [ 513.048356][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 513.053567][ C1] ? ip6_datagram_connect+0x38/0x50 [ 513.058787][ C1] ? __pfx_do_futex+0x10/0x10 [ 513.063486][ C1] ? fput+0x32/0x390 [ 513.067422][ C1] ? xfd_validate_state+0x5d/0x180 [ 513.072565][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 513.077531][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.082851][ C1] do_syscall_64+0xcd/0x250 [ 513.087456][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.093421][ C1] RIP: 0033:0x7fd5e3575bd9 [ 513.097854][ C1] RSP: 002b:00007fd5e43b4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 513.106286][ C1] RAX: ffffffffffffffda RBX: 00007fd5e3703f60 RCX: 00007fd5e3575bd9 [ 513.114528][ C1] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000003 [ 513.122513][ C1] RBP: 00007fd5e35e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 513.130514][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.138493][ C1] R13: 000000000000000b R14: 00007fd5e3703f60 R15: 00007ffd8cffc268 [ 513.146477][ C1] [ 513.149518][ C1] task:kworker/u8:4 state:R running task stack:23296 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 513.161455][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 513.169295][ C1] Call Trace: [ 513.172576][ C1] [ 513.175534][ C1] __schedule+0xf27/0x5d10 [ 513.180152][ C1] ? __pfx_mark_lock+0x10/0x10 [ 513.184941][ C1] ? __pfx_mark_lock+0x10/0x10 [ 513.189727][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 513.194890][ C1] ? __pfx___schedule+0x10/0x10 [ 513.199780][ C1] ? mark_held_locks+0x9f/0xe0 [ 513.204950][ C1] preempt_schedule_irq+0x51/0x90 [ 513.210349][ C1] irqentry_exit+0x36/0x90 [ 513.214811][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 513.220391][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 513.225839][ C1] Code: c1 05 4a 85 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 513.245652][ C1] RSP: 0018:ffffc900015e7a70 EFLAGS: 00000206 [ 513.251733][ C1] RAX: dffffc0000000000 RBX: 1ffff920002bcf50 RCX: 00000000b4644ffe [ 513.259713][ C1] RDX: 0000000000000001 RSI: ffffffff8b2cb300 RDI: ffffffff8b903ba0 [ 513.267692][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284e460 [ 513.275803][ C1] R10: ffffffff94272307 R11: 0000000000000003 R12: 0000000000000000 [ 513.283838][ C1] R13: 0000000000000000 R14: ffffffff8dbb19e0 R15: 0000000000000000 [ 513.291858][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 513.296959][ C1] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 513.303086][ C1] ? __pfx_lock_release+0x10/0x10 [ 513.308164][ C1] ? rcu_is_watching+0x12/0xc0 [ 513.312953][ C1] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 513.318890][ C1] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 513.325046][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 513.331604][ C1] ? batadv_send_skb_packet+0x56c/0x6b0 [ 513.337205][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 513.344310][ C1] process_one_work+0x9c5/0x1b40 [ 513.349298][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 513.358427][ C1] ? __pfx_process_one_work+0x10/0x10 [ 513.364202][ C1] ? assign_work+0x1a0/0x250 [ 513.368984][ C1] worker_thread+0x6c8/0xf20 [ 513.373704][ C1] ? __pfx_worker_thread+0x10/0x10 [ 513.378960][ C1] kthread+0x2c1/0x3a0 [ 513.383062][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.388310][ C1] ? __pfx_kthread+0x10/0x10 [ 513.392935][ C1] ret_from_fork+0x45/0x80 [ 513.397575][ C1] ? __pfx_kthread+0x10/0x10 [ 513.402324][ C1] ret_from_fork_asm+0x1a/0x30 [ 513.407232][ C1] [ 513.410358][ C1] rcu: rcu_preempt kthread starved for 10378 jiffies! g50969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 513.421658][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 513.431897][ C1] rcu: RCU grace-period kthread stack dump: [ 513.437787][ C1] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 513.449552][ C1] Call Trace: [ 513.452839][ C1] [ 513.455775][ C1] __schedule+0xf27/0x5d10 [ 513.460215][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 513.465525][ C1] ? __pfx___schedule+0x10/0x10 [ 513.470495][ C1] ? schedule+0x298/0x350 [ 513.474870][ C1] ? __pfx_lock_release+0x10/0x10 [ 513.479935][ C1] ? __pfx___mod_timer+0x10/0x10 [ 513.484939][ C1] ? lock_acquire+0x1b1/0x560 [ 513.489758][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 513.495354][ C1] schedule+0xe7/0x350 [ 513.499466][ C1] schedule_timeout+0x136/0x2a0 [ 513.504373][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 513.510041][ C1] ? __pfx_process_timeout+0x10/0x10 [ 513.515458][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 513.521389][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 513.527561][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 513.532385][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 513.537789][ C1] ? rcu_gp_init+0xc82/0x1630 [ 513.542522][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 513.547750][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 513.553761][ C1] rcu_gp_kthread+0x271/0x380 [ 513.558555][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 513.564225][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.569462][ C1] ? __kthread_parkme+0x148/0x220 [ 513.574617][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 513.579862][ C1] kthread+0x2c1/0x3a0 [ 513.583966][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.589204][ C1] ? __pfx_kthread+0x10/0x10 [ 513.593917][ C1] ret_from_fork+0x45/0x80 [ 513.598379][ C1] ? __pfx_kthread+0x10/0x10 [ 513.602996][ C1] ret_from_fork_asm+0x1a/0x30 [ 513.607792][ C1] [ 513.610835][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 513.617277][ C1] Sending NMI from CPU 1 to CPUs 0: [ 513.622517][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 513.687770][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.721534][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.732882][ T8843] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 SYZFAIL: failed to send rpc fd=3 want=13640 sent=0 n=-1 (errno 32: Broken pipe) [ 514.645087][ T8854] vhci_hcd: connection reset by peer [ 514.752373][ T2890] vhci_hcd: stop threads [ 514.756820][ T2890] vhci_hcd: release socket [ 514.789375][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.802646][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.816264][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.825400][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.833748][ T56] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 514.841500][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.862290][ T29] audit: type=1400 audit(1721128743.820:503): avc: denied { search } for pid=4518 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.929082][ T2890] vhci_hcd: disconnect device [ 514.942390][ T8] usb 17-1: device descriptor read/64, error -110 [ 515.077122][ T8876] ip6gretap0 speed is unknown, defaulting to 1000 [ 515.163811][ T8] vhci_hcd: vhci_device speed not set [ 516.870312][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.033233][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.084725][ T56] Bluetooth: hci1: command tx timeout [ 517.111135][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.201454][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.451947][ T63] bridge_slave_1: left allmulticast mode [ 517.458102][ T63] bridge_slave_1: left promiscuous mode [ 517.467300][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.481578][ T63] bridge_slave_0: left allmulticast mode [ 517.489363][ T63] bridge_slave_0: left promiscuous mode [ 517.495747][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.038386][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.051607][ T63] bond0 (unregistering): Released all slaves [ 518.406946][ T63] hsr_slave_0: left promiscuous mode [ 518.414353][ T63] hsr_slave_1: left promiscuous mode [ 518.421047][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.428543][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.437198][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.444889][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.470611][ T63] veth1_macvtap: left promiscuous mode [ 518.476466][ T63] veth0_macvtap: left promiscuous mode [ 518.482244][ T63] veth1_vlan: left promiscuous mode [ 518.488562][ T63] veth0_vlan: left promiscuous mode [ 519.174203][ T63] team0 (unregistering): Port device team_slave_1 removed [ 519.230853][ T63] team0 (unregistering): Port device team_slave_0 removed [ 520.201737][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.297237][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.374507][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.451195][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.634982][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.740260][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.826198][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.893863][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.056640][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.146884][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.224814][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.300189][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.536219][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.549224][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.560830][ T63] bond0 (unregistering): Released all slaves