last executing test programs: 4.732182494s ago: executing program 0 (id=1): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x0, @empty, 0x4e24, 0x2, 'none\x00', 0x15, 0x3, 0x51}, {@local, 0x0, 0x1, 0x3, 0x2, 0xcfe4}}, 0x44) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getpid() ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000) r2 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) 4.007829364s ago: executing program 2 (id=3): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r3, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.77303653s ago: executing program 2 (id=6): unshare(0x40020200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) accept4(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0xe5, 0xc2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xfb, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xc, 0x5, 0x22, 0xff, 0xff}, 0x39, &(0x7f0000000200)={0x5, 0xf, 0x39, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x7, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x7f, 0x54}, @ssp_cap={0x20, 0x10, 0xa, 0xb, 0x5, 0x1, 0x0, 0x5, [0xc0, 0xc00f, 0xff0000, 0xff0000, 0x3f00]}]}, 0x3, [{0x19, &(0x7f0000000240)=@string={0x19, 0x3, "0f26f405c75109b541b8c3147384cf6b5b6562d4a64729"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x380a}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x23, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0xc1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000000000000000000014000500dc0100"/48], 0x30}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x8, 0x8, 0x8, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8000, 0x5, 0xffffffff}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x0, 0x4, @empty, 0xffffffff}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', &(0x7f00000028c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.441483605s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 1.988647564s ago: executing program 3 (id=4): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6060000, r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = epoll_create1(0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r1}) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 1.973188419s ago: executing program 0 (id=7): r0 = mq_open(&(0x7f0000000180)='\xb6\x00', 0x40, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) 1.547827041s ago: executing program 0 (id=8): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) 1.269848963s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) 1.222816198s ago: executing program 2 (id=9): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2}, 0x8) 711.3683ms ago: executing program 0 (id=10): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x2, 0x0, 0x8}) 710.841455ms ago: executing program 3 (id=11): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 455.829881ms ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="38003300c0000000e7ffffffffff080211000000"], 0x54}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) geteuid() r7 = syz_open_dev$dri(&(0x7f0000000340), 0x5, 0x408041) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0xffffffa1, &(0x7f0000000480)={&(0x7f0000000400)=""/51, 0x33, 0x0, &(0x7f0000000740)=""/138, 0x8a}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000000f80)=""/4096, 0x300) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 441.732624ms ago: executing program 2 (id=13): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_io_uring_setup(0x218e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x6) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 259.916217ms ago: executing program 3 (id=14): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000180)) 0s ago: executing program 3 (id=15): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000280)={0x28, 0x2, 0x0, 0xfffffffffffffc43, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 70.710530][ T29] audit: type=1400 audit(1722381109.313:88): avc: denied { mounton } for pid=5207 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 70.718738][ T5207] cgroup: Unknown subsys name 'net' [ 70.733363][ T29] audit: type=1400 audit(1722381109.313:89): avc: denied { mount } for pid=5207 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.763870][ T29] audit: type=1400 audit(1722381109.363:90): avc: denied { unmount } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.948751][ T5207] cgroup: Unknown subsys name 'rlimit' [ 71.105731][ T29] audit: type=1400 audit(1722381109.703:91): avc: denied { setattr } for pid=5207 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.145412][ T29] audit: type=1400 audit(1722381109.713:92): avc: denied { create } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.172949][ T29] audit: type=1400 audit(1722381109.713:93): avc: denied { write } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.208285][ T29] audit: type=1400 audit(1722381109.713:94): avc: denied { read } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.229267][ T29] audit: type=1400 audit(1722381109.723:95): avc: denied { mounton } for pid=5207 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 71.254531][ T29] audit: type=1400 audit(1722381109.723:96): avc: denied { mount } for pid=5207 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 71.255548][ T5209] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 71.278312][ T29] audit: type=1400 audit(1722381109.773:97): avc: denied { read } for pid=4884 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 71.930632][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.937620][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.638960][ T5207] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.667617][ C0] eth0: bad gso: type: 1, size: 1408 [ 75.674005][ C0] eth0: bad gso: type: 1, size: 1408 [ 75.883414][ C0] eth0: bad gso: type: 1, size: 1408 [ 76.536343][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 76.536361][ T29] audit: type=1400 audit(1722381115.133:103): avc: denied { mounton } for pid=5217 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 76.676694][ T29] audit: type=1400 audit(1722381115.133:104): avc: denied { mount } for pid=5217 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.687563][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.716489][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.728980][ T29] audit: type=1400 audit(1722381115.133:105): avc: denied { create } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.764142][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.766425][ T29] audit: type=1400 audit(1722381115.133:106): avc: denied { read write } for pid=5217 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.777837][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.795035][ T29] audit: type=1400 audit(1722381115.173:107): avc: denied { open } for pid=5217 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.826264][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.836069][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.844331][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.852685][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.860510][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.868818][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.877220][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.886972][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.888723][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.894216][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.902333][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.911261][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.916175][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.922902][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.929465][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.937585][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.944801][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.950313][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.957782][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.986582][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.996155][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.006518][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.016580][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.026367][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.034007][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.042002][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.065390][ T29] audit: type=1400 audit(1722381115.193:108): avc: denied { ioctl } for pid=5217 comm="syz-executor" path="socket:[3643]" dev="sockfs" ino=3643 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.090694][ T29] audit: type=1400 audit(1722381115.583:109): avc: denied { read } for pid=5223 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.118557][ T29] audit: type=1400 audit(1722381115.583:110): avc: denied { open } for pid=5223 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.166091][ T29] audit: type=1400 audit(1722381115.583:111): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.664529][ T29] audit: type=1400 audit(1722381116.263:112): avc: denied { module_request } for pid=5217 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.757326][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 77.949038][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 77.966919][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 78.135604][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 78.152532][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 78.163378][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.171526][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.179148][ T5217] bridge_slave_0: entered allmulticast mode [ 78.186569][ T5217] bridge_slave_0: entered promiscuous mode [ 78.244255][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.251709][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.259072][ T5217] bridge_slave_1: entered allmulticast mode [ 78.266534][ T5217] bridge_slave_1: entered promiscuous mode [ 78.372536][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.379817][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.389735][ T5223] bridge_slave_0: entered allmulticast mode [ 78.397048][ T5223] bridge_slave_0: entered promiscuous mode [ 78.475463][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.482723][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.490398][ T5223] bridge_slave_1: entered allmulticast mode [ 78.498810][ T5223] bridge_slave_1: entered promiscuous mode [ 78.543339][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.552883][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.563427][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.570969][ T5230] bridge_slave_0: entered allmulticast mode [ 78.581104][ T5230] bridge_slave_0: entered promiscuous mode [ 78.636794][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.659795][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.670363][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.677577][ T5230] bridge_slave_1: entered allmulticast mode [ 78.684532][ T5230] bridge_slave_1: entered promiscuous mode [ 78.709676][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.716880][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.723993][ T5221] bridge_slave_0: entered allmulticast mode [ 78.731426][ T5221] bridge_slave_0: entered promiscuous mode [ 78.744017][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.753851][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.761460][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.768773][ T5221] bridge_slave_1: entered allmulticast mode [ 78.775768][ T5221] bridge_slave_1: entered promiscuous mode [ 78.833392][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.900917][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.908400][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.915568][ T5222] bridge_slave_0: entered allmulticast mode [ 78.923980][ T5222] bridge_slave_0: entered promiscuous mode [ 78.934497][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.949524][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.975240][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.989570][ T5217] team0: Port device team_slave_0 added [ 78.996045][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.005539][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.014275][ T5222] bridge_slave_1: entered allmulticast mode [ 79.022474][ T5222] bridge_slave_1: entered promiscuous mode [ 79.047944][ T5236] Bluetooth: hci3: command tx timeout [ 79.053931][ T56] Bluetooth: hci0: command tx timeout [ 79.057511][ T5223] team0: Port device team_slave_0 added [ 79.069176][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.083156][ T5217] team0: Port device team_slave_1 added [ 79.124388][ T5230] team0: Port device team_slave_0 added [ 79.130573][ T5236] Bluetooth: hci1: command tx timeout [ 79.130599][ T5237] Bluetooth: hci4: command tx timeout [ 79.133893][ T5223] team0: Port device team_slave_1 added [ 79.136669][ T56] Bluetooth: hci2: command tx timeout [ 79.219309][ T5230] team0: Port device team_slave_1 added [ 79.228535][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.263772][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.271534][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.297826][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.330619][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.340487][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.347823][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.374262][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.389967][ T5221] team0: Port device team_slave_0 added [ 79.397082][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.404049][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.430045][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.442821][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.449971][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.476200][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.527445][ T5221] team0: Port device team_slave_1 added [ 79.539581][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.547088][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.573658][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.605893][ T5222] team0: Port device team_slave_0 added [ 79.615312][ T5222] team0: Port device team_slave_1 added [ 79.649475][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.656942][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.683579][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.752662][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.762963][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.789707][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.803026][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.810440][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.836632][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.876251][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.883292][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.910112][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.957268][ T5223] hsr_slave_0: entered promiscuous mode [ 79.963711][ T5223] hsr_slave_1: entered promiscuous mode [ 79.995154][ T5217] hsr_slave_0: entered promiscuous mode [ 80.001514][ T5217] hsr_slave_1: entered promiscuous mode [ 80.009409][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.017561][ T5217] Cannot create hsr debugfs directory [ 80.023828][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.032146][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.058456][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.094049][ T5230] hsr_slave_0: entered promiscuous mode [ 80.107459][ T5230] hsr_slave_1: entered promiscuous mode [ 80.113615][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.122009][ T5230] Cannot create hsr debugfs directory [ 80.333724][ T5221] hsr_slave_0: entered promiscuous mode [ 80.343283][ T5221] hsr_slave_1: entered promiscuous mode [ 80.351031][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.358976][ T5221] Cannot create hsr debugfs directory [ 80.412400][ T5222] hsr_slave_0: entered promiscuous mode [ 80.420560][ T5222] hsr_slave_1: entered promiscuous mode [ 80.427775][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.435324][ T5222] Cannot create hsr debugfs directory [ 80.889513][ T5223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.905904][ T5223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.939948][ T5223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.985611][ T5223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.099642][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.122314][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.129462][ T5236] Bluetooth: hci3: command tx timeout [ 81.134950][ T56] Bluetooth: hci0: command tx timeout [ 81.147011][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.172693][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.207877][ T5236] Bluetooth: hci1: command tx timeout [ 81.208640][ T5237] Bluetooth: hci4: command tx timeout [ 81.213368][ T56] Bluetooth: hci2: command tx timeout [ 81.288697][ T5217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.322520][ T5217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.333741][ T5217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.349007][ T5217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.479902][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.493862][ T5221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.505861][ T5221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.542695][ T5221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.587498][ T5221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.663800][ T5222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.678737][ T5222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.732273][ T5222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.743763][ T5222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.773586][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.805244][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.853861][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.861372][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.874660][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.881957][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.964180][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.010594][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.017736][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.050465][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.112730][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.119971][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.251071][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.317946][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.325169][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.343459][ T29] audit: type=1400 audit(1722381120.943:113): avc: denied { sys_module } for pid=5223 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.416342][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.423679][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.462617][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.484609][ T5230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.602396][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.665503][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.754042][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.761363][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.906058][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.913310][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.997267][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.026096][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.095485][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.125062][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.132687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.199849][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.207106][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.219761][ T56] Bluetooth: hci0: command tx timeout [ 83.225198][ T56] Bluetooth: hci3: command tx timeout [ 83.286919][ T56] Bluetooth: hci4: command tx timeout [ 83.286966][ T5237] Bluetooth: hci2: command tx timeout [ 83.292340][ T56] Bluetooth: hci1: command tx timeout [ 83.446185][ T5223] veth0_vlan: entered promiscuous mode [ 83.537099][ T5230] veth0_vlan: entered promiscuous mode [ 83.592356][ T5223] veth1_vlan: entered promiscuous mode [ 83.612407][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.630366][ T5230] veth1_vlan: entered promiscuous mode [ 83.729743][ T5223] veth0_macvtap: entered promiscuous mode [ 83.751324][ T5223] veth1_macvtap: entered promiscuous mode [ 83.851592][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.874342][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.952950][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.975026][ T5230] veth0_macvtap: entered promiscuous mode [ 83.995188][ T5223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.005204][ T5223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.020526][ T5223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029414][ T5223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.064553][ T5217] veth0_vlan: entered promiscuous mode [ 84.073183][ T5230] veth1_macvtap: entered promiscuous mode [ 84.119666][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.200937][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.222143][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.235372][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.258665][ T5217] veth1_vlan: entered promiscuous mode [ 84.308816][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.320803][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.334566][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.401820][ T5221] veth0_vlan: entered promiscuous mode [ 84.412949][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.423645][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.432416][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.441295][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.471589][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.490924][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.585349][ T5221] veth1_vlan: entered promiscuous mode [ 84.645618][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.649548][ T5217] veth0_macvtap: entered promiscuous mode [ 84.669770][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.746417][ T29] audit: type=1400 audit(1722381123.343:114): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/root/syzkaller.CJkXSg/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.799001][ T5217] veth1_macvtap: entered promiscuous mode [ 84.810066][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.826918][ T29] audit: type=1400 audit(1722381123.343:115): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.846397][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.863647][ T5222] veth0_vlan: entered promiscuous mode [ 84.871913][ T29] audit: type=1400 audit(1722381123.343:116): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/root/syzkaller.CJkXSg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.919307][ T29] audit: type=1400 audit(1722381123.373:117): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.953896][ T29] audit: type=1400 audit(1722381123.393:118): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.981987][ T29] audit: type=1400 audit(1722381123.403:119): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.011765][ T29] audit: type=1400 audit(1722381123.403:120): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.029437][ T5222] veth1_vlan: entered promiscuous mode [ 85.057321][ T5221] veth0_macvtap: entered promiscuous mode [ 85.094605][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.110078][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.114266][ T29] audit: type=1400 audit(1722381123.713:121): avc: denied { read write } for pid=5223 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.134452][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.162522][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.175480][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.206613][ T29] audit: type=1400 audit(1722381123.753:122): avc: denied { open } for pid=5223 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.221200][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.254048][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.271344][ T5221] veth1_macvtap: entered promiscuous mode [ 85.287128][ T56] Bluetooth: hci0: command tx timeout [ 85.297496][ T56] Bluetooth: hci3: command tx timeout [ 85.341642][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.367004][ T56] Bluetooth: hci2: command tx timeout [ 85.372469][ T56] Bluetooth: hci4: command tx timeout [ 85.379432][ T5236] Bluetooth: hci1: command tx timeout [ 85.386428][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.396268][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.468949][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.518716][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.667061][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.695670][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.710290][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.724178][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.751329][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.779777][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.803050][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.839341][ T5217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.851250][ T5217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.860946][ T5217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.885802][ T5217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.909321][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.921199][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.931974][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.950221][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.962024][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.997880][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.014891][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.028486][ T5222] veth0_macvtap: entered promiscuous mode [ 86.100543][ T5221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.126560][ T5221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.135396][ T5221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.144515][ T5221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.181057][ T5222] veth1_macvtap: entered promiscuous mode [ 86.413281][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.425037][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.435699][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.446828][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.457213][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.468038][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.479479][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.496647][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.516123][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.586874][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 86.604948][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.635781][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.647473][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.658315][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.668501][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.679263][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.689363][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.700235][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.715341][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.784316][ T5222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.796249][ T5222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.805765][ T5222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.817855][ T5222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.843355][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.857976][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.879328][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 86.900537][ T25] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 86.920892][ T25] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.934342][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.943525][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.963708][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 86.987406][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.997205][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.005309][ T25] usb 3-1: Product: 㠊 [ 87.016458][ T25] usb 3-1: Manufacturer: ࠧ [ 87.028690][ T25] usb 3-1: SerialNumber: syz [ 87.070563][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.076120][ T5314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.085337][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.102508][ T5314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.266709][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.278382][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.292759][ T47] cfg80211: failed to load regulatory.db [ 87.352720][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.386686][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 87.386728][ T29] audit: type=1400 audit(1722381125.983:130): avc: denied { prog_load } for pid=5312 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.448255][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.465860][ T5313] netlink: 'syz.2.6': attribute type 5 has an invalid length. [ 87.529029][ T29] audit: type=1400 audit(1722381125.983:131): avc: denied { bpf } for pid=5312 comm="syz.2.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.590651][ T29] audit: type=1400 audit(1722381125.983:132): avc: denied { create } for pid=5312 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.611672][ T5321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.619317][ T29] audit: type=1400 audit(1722381126.023:133): avc: denied { create } for pid=5312 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.660008][ T29] audit: type=1400 audit(1722381126.243:134): avc: denied { map_create } for pid=5312 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.689910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.690009][ T29] audit: type=1400 audit(1722381126.253:135): avc: denied { map_read map_write } for pid=5312 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.729913][ T29] audit: type=1400 audit(1722381126.253:136): avc: denied { perfmon } for pid=5312 comm="syz.2.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.784228][ T29] audit: type=1400 audit(1722381126.383:137): avc: denied { prog_run } for pid=5312 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.867840][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.887703][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.896784][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.897690][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 88.017343][ T25] usb 3-1: USB disconnect, device number 2 [ 88.029864][ T29] audit: type=1400 audit(1722381126.583:138): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/root/syzkaller.94VIkH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.109917][ T25] usblp0: removed [ 88.133979][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.149423][ T29] audit: type=1400 audit(1722381126.703:139): avc: denied { create } for pid=5324 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.178778][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.203189][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.220314][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.287289][ T5320] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 88.420138][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.189299][ T5336] sctp: [Deprecated]: syz.2.9 (pid 5336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.189299][ T5336] Use struct sctp_sack_info instead [ 89.221799][ T8] usb 2-1: USB disconnect, device number 2 [ 89.386552][ T5275] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.629345][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.651712][ T4670] udevd[4670]: worker [5269] terminated by signal 33 (Unknown signal 33) [ 89.678069][ T5275] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.706138][ T4670] udevd[4670]: worker [5269] failed while handling '/devices/platform/dummy_udc.1/gadget.1' [ 89.729998][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.774669][ T5275] usb 5-1: config 0 descriptor?? [ 89.798614][ T5350] udevd[5350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.801578][ T5275] pwc: Askey VC010 type 2 USB webcam detected. [ 91.196296][ C1] sched: RT throttling activated [ 91.426431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.527204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 91.629659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.731997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.766641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.936727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 91.946552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.007116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.087262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 197.266292][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 197.273338][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5333/1:b..l P35/1:b..l [ 197.282744][ C0] rcu: (detected by 0, t=10502 jiffies, g=9173, q=869 ncpus=2) [ 197.290389][ C0] task:kworker/u8:2 state:R running task stack:22640 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 197.302838][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 197.310719][ C0] Call Trace: [ 197.314102][ C0] [ 197.317040][ C0] __schedule+0xe37/0x5490 [ 197.321495][ C0] ? __pfx_mark_lock+0x10/0x10 [ 197.326284][ C0] ? __pfx_mark_lock+0x10/0x10 [ 197.331073][ C0] ? __pfx___schedule+0x10/0x10 [ 197.335952][ C0] ? hlock_class+0x4e/0x130 [ 197.340481][ C0] ? mark_held_locks+0x9f/0xe0 [ 197.345261][ C0] preempt_schedule_irq+0x51/0x90 [ 197.350311][ C0] irqentry_exit+0x36/0x90 [ 197.354738][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.360741][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 197.366046][ C0] Code: c1 05 5a 14 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 197.385689][ C0] RSP: 0018:ffffc90000ab7a70 EFLAGS: 00000206 [ 197.391776][ C0] RAX: dffffc0000000000 RBX: 1ffff92000156f50 RCX: 0000000000000001 [ 197.399763][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc880 RDI: ffffffff8bb08240 [ 197.407836][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c50d8 [ 197.415822][ C0] R10: ffffffff946286c7 R11: 0000000000000000 R12: 0000000000000000 [ 197.423805][ C0] R13: 0000000000000000 R14: ffffffff8ddb53a0 R15: 0000000000000000 [ 197.431796][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 197.436845][ C0] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 197.442934][ C0] ? __pfx_lock_release+0x10/0x10 [ 197.447979][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 197.453888][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 197.459980][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 197.466329][ C0] ? batadv_send_skb_packet+0x56e/0x6b0 [ 197.471898][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 197.478948][ C0] process_one_work+0x9c5/0x1b40 [ 197.483912][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 197.491482][ C0] ? __pfx_process_one_work+0x10/0x10 [ 197.496878][ C0] ? assign_work+0x1a0/0x250 [ 197.501486][ C0] worker_thread+0x6c8/0xf20 [ 197.506098][ C0] ? __kthread_parkme+0x148/0x220 [ 197.511150][ C0] ? __pfx_worker_thread+0x10/0x10 [ 197.516283][ C0] kthread+0x2c1/0x3a0 [ 197.520366][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.525587][ C0] ? __pfx_kthread+0x10/0x10 [ 197.530191][ C0] ret_from_fork+0x45/0x80 [ 197.534638][ C0] ? __pfx_kthread+0x10/0x10 [ 197.539240][ C0] ret_from_fork_asm+0x1a/0x30 [ 197.544027][ C0] [ 197.547064][ C0] task:syz.4.5 state:R running task stack:27024 pid:5333 tgid:5333 ppid:5222 flags:0x00004004 [ 197.558818][ C0] Call Trace: [ 197.562103][ C0] [ 197.565046][ C0] __schedule+0xe37/0x5490 [ 197.569499][ C0] ? hlock_class+0x4e/0x130 [ 197.574035][ C0] ? __pfx___schedule+0x10/0x10 [ 197.578914][ C0] ? find_held_lock+0x2d/0x110 [ 197.583709][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 197.589101][ C0] preempt_schedule_common+0x44/0xc0 [ 197.594413][ C0] preempt_schedule_thunk+0x1a/0x30 [ 197.599627][ C0] _raw_spin_unlock+0x3e/0x50 [ 197.604330][ C0] unmap_page_range+0xbb8/0x3c10 [ 197.609294][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 197.614863][ C0] ? uprobe_munmap+0x20/0x5d0 [ 197.619567][ C0] unmap_single_vma+0x194/0x2b0 [ 197.624440][ C0] unmap_vmas+0x22f/0x490 [ 197.628789][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 197.633658][ C0] ? __pfx_lock_release+0x10/0x10 [ 197.638703][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 197.643845][ C0] exit_mmap+0x1b8/0xb20 [ 197.648108][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 197.652897][ C0] __mmput+0x12a/0x480 [ 197.656990][ C0] mmput+0x62/0x70 [ 197.660737][ C0] do_exit+0x9bf/0x2bb0 [ 197.664908][ C0] ? get_signal+0x8f2/0x2770 [ 197.669532][ C0] ? __pfx_do_exit+0x10/0x10 [ 197.674136][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 197.679186][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 197.684584][ C0] do_group_exit+0xd3/0x2a0 [ 197.689104][ C0] get_signal+0x25fd/0x2770 [ 197.693634][ C0] ? __pfx_get_signal+0x10/0x10 [ 197.698512][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 197.704079][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 197.710259][ C0] ? trace_irq_enable.constprop.0+0x36/0x130 [ 197.716263][ C0] irqentry_exit_to_user_mode+0x13f/0x280 [ 197.722004][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.728011][ C0] RIP: 0033:0x7fb08f055e61 [ 197.732450][ C0] RSP: 002b:00007fff53e48220 EFLAGS: 00000246 [ 197.738534][ C0] RAX: 000000000000db62 RBX: 00007fb08fe35720 RCX: ffffffff813cdeac [ 197.746517][ C0] RDX: ffffffff813cd750 RSI: ffffffff813cd750 RDI: 0000000000000000 [ 197.754498][ C0] RBP: 0000000000000000 R08: 00007fb08f2f0000 R09: ffffffff813cd441 [ 197.762479][ C0] R10: 00000000813cdeb0 R11: 0000000000000000 R12: ffffffff813cd441 [ 197.770463][ C0] R13: 00007fb08f306018 R14: 0000000000000008 R15: 000000000000ed94 [ 197.778447][ C0] ? __orc_find+0xe1/0x130 [ 197.782880][ C0] ? __orc_find+0xe1/0x130 [ 197.787306][ C0] ? stack_access_ok+0x22c/0x270 [ 197.792258][ C0] ? orc_sort_cmp+0x80/0x150 [ 197.796862][ C0] ? orc_sort_cmp+0x80/0x150 [ 197.801464][ C0] [ 197.804498][ C0] rcu: rcu_preempt kthread starved for 10551 jiffies! g9173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 197.815616][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 197.825595][ C0] rcu: RCU grace-period kthread stack dump: [ 197.831487][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 197.843239][ C0] Call Trace: [ 197.846525][ C0] [ 197.849464][ C0] __schedule+0xe37/0x5490 [ 197.853910][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 197.859133][ C0] ? __pfx___schedule+0x10/0x10 [ 197.864012][ C0] ? schedule+0x298/0x350 [ 197.868365][ C0] ? __pfx_lock_release+0x10/0x10 [ 197.873406][ C0] ? __pfx___mod_timer+0x10/0x10 [ 197.878363][ C0] ? lock_acquire+0x1b1/0x560 [ 197.883057][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 197.888535][ C0] schedule+0xe7/0x350 [ 197.892627][ C0] schedule_timeout+0x136/0x2a0 [ 197.897499][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 197.902893][ C0] ? __pfx_process_timeout+0x10/0x10 [ 197.908190][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.914029][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 197.919508][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 197.924285][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 197.929586][ C0] ? rcu_gp_init+0xc82/0x1630 [ 197.934280][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 197.939512][ C0] rcu_gp_kthread+0x271/0x380 [ 197.944218][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 197.949431][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.954655][ C0] ? __kthread_parkme+0x148/0x220 [ 197.959705][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 197.964915][ C0] kthread+0x2c1/0x3a0 [ 197.969002][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.974222][ C0] ? __pfx_kthread+0x10/0x10 [ 197.978828][ C0] ret_from_fork+0x45/0x80 [ 197.983270][ C0] ? __pfx_kthread+0x10/0x10 [ 197.987872][ C0] ret_from_fork_asm+0x1a/0x30 [ 197.992664][ C0] [ 197.995689][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 198.002031][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 198.012802][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 198.022866][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 198.028175][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 f8 38 f2 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d a8 48 aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 198.047799][ C0] RSP: 0018:ffffffff8da07d70 EFLAGS: 00000246 [ 198.053894][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b118529 [ 198.061895][ C0] RDX: 0000000000000001 RSI: ffff8880196ff800 RDI: ffff8880196ff864 [ 198.069883][ C0] RBP: ffff8880196ff864 R08: 0000000000000001 R09: ffffed1017246fd9 [ 198.077885][ C0] R10: ffff8880b9237ecb R11: 0000000000000000 R12: ffff888016be7000 [ 198.085874][ C0] R13: ffffffff8e94fb60 R14: 0000000000000000 R15: 0000000000000000 [ 198.093856][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 198.102800][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.109399][ C0] CR2: 00000000201b1000 CR3: 000000002f9a4000 CR4: 00000000003506f0 [ 198.117394][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.125387][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.133376][ C0] Call Trace: [ 198.136668][ C0] [ 198.139522][ C0] ? show_regs+0x8c/0xa0 [ 198.143796][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 198.150143][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 198.155363][ C0] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 198.160849][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 198.166501][ C0] ? tmigr_requires_handle_remote+0x141/0x480 [ 198.172589][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 198.179031][ C0] ? hrtimer_run_queues+0x97/0x450 [ 198.184268][ C0] ? update_process_times+0x175/0x220 [ 198.189682][ C0] ? __pfx_update_process_times+0x10/0x10 [ 198.195435][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 198.200929][ C0] ? update_wall_time+0x1c/0x40 [ 198.206149][ C0] ? tick_nohz_handler+0x376/0x530 [ 198.211295][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 198.216780][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 198.222179][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 198.227922][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 198.234020][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 198.239159][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 198.245341][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 198.251191][ C0] [ 198.254135][ C0] [ 198.257077][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.263259][ C0] ? ct_kernel_exit+0x139/0x190 [ 198.268126][ C0] ? acpi_safe_halt+0x1a/0x20 [ 198.272818][ C0] acpi_idle_enter+0xc5/0x160 [ 198.277511][ C0] cpuidle_enter_state+0x85/0x500 [ 198.282551][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 198.288385][ C0] cpuidle_enter+0x4e/0xa0 [ 198.292819][ C0] do_idle+0x313/0x3f0 [ 198.296918][ C0] ? __pfx_do_idle+0x10/0x10 [ 198.301527][ C0] ? do_idle+0x4/0x3f0 [ 198.305614][ C0] cpu_startup_entry+0x4f/0x60 [ 198.310395][ C0] rest_init+0x16b/0x2b0 [ 198.314659][ C0] ? acpi_subsystem_init+0x133/0x180 [ 198.319983][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 198.325560][ C0] start_kernel+0x3df/0x4c0 [ 198.330096][ C0] x86_64_start_reservations+0x18/0x30 [ 198.335587][ C0] x86_64_start_kernel+0xb2/0xc0 [ 198.337389][ T5275] pwc: send_video_command error -110 [ 198.340624][ C0] common_startup_64+0x13e/0x148 [ 198.345903][ T5275] pwc: Failed to set video mode CIF@30 fps; return code = -110 [ 198.350831][ C0] [ 199.021388][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.027803][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.037422][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.043839][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.207221][ T5275] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -110 [ 204.209685][ T4608] Bluetooth: hci0: command 0x0406 tx timeout [ 204.215832][ T4608] Bluetooth: hci4: command 0x0406 tx timeout [ 204.222000][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 204.236404][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 204.242461][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 205.208220][ T5275] usb 5-1: USB disconnect, device number 2