last executing test programs: 2m18.20557431s ago: executing program 0 (id=691): inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100029bdbbbcfedbdf250100000004002f0001000000000039000900000008000600", @ANYRES32=r5, @ANYBLOB="0500380001000000000035000500000008003400070000000200320060000000f9fd29000100000008003900ffff0000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r8 = socket(0x2c, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r8}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 2m14.109202742s ago: executing program 0 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r3 = creat(0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000280)=@md5={0x1, "bf5110b0dbe094319d585e800e0e621c"}, 0x11, 0x0) 2m5.854188884s ago: executing program 0 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) rename(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x7, @sdr}) 2m4.046668611s ago: executing program 0 (id=713): shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20140, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0c0583b, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r4, 0x0, 0x0}, 0x10) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x4000) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000002498985cf50d02490403000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x22) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(r6, r6) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) 2m0.611747938s ago: executing program 0 (id=703): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xed49a000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) shmdt(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @private1}, 0x1c) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 1m7.52670165s ago: executing program 0 (id=726): ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg$can_bcm(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000021c0)=""/95, 0x5f}], 0x1}, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) unshare(0x40000) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) 47.062320347s ago: executing program 3 (id=814): syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r0, 0x7}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f0000000080)={0x6}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800b91d81280368749cc15e285a010011ce69280de2722b0200000001000000000000"], 0x1c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r7, r9, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0x16, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @loopback}, {0x307, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, {0x2, 0x4e23, @broadcast}, 'bond_slave_0\x00'}) 44.609493463s ago: executing program 3 (id=819): pipe2$9p(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0xffffffffffffff8e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda={0x66646185, 0x9, 0x2, 0x21}, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 42.41668437s ago: executing program 3 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x23, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/61, 0x2a) getdents(r5, 0xfffffffffffffffd, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 41.322578087s ago: executing program 3 (id=823): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x1000000000000160) pipe2$9p(&(0x7f0000000000), 0x0) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x10}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x2a0, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) io_uring_enter(r2, 0x1377, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) writev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 33.121445727s ago: executing program 3 (id=827): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x9, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xc0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "a01b"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0xf1, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x2, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0x9, 0xc, 0x0, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x7, 0xe841}, @ptm_cap={0x3}]}, 0x4, [{0xb, &(0x7f0000000280)=@string={0xb, 0x3, "5458a22a9ffb4ea153"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x418}}, {0x0, 0x0}]}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) io_setup(0x0, &(0x7f0000000280)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a2ef124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r4, 0xffffffffffffffff}) close_range(r1, r3, 0x0) poll(&(0x7f00000001c0)=[{r5}], 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x4}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 29.337159233s ago: executing program 3 (id=833): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/249, 0x0, 0xf9}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd6317ce22080000fffe80000000000000101000007f0c08fc"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001de000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x2000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000180)='%pB \x00'}, 0x20) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000280)={0x0, 0x0, &(0x7f00004e5000/0x2000)=nil}) unshare(0x6a040000) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 20.141252628s ago: executing program 2 (id=840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x99, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xc2, {{0x9, 0x24, 0x6, 0x0, 0x0, "7ccbc629"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1c, 0x5, 0xb7, 0xe}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4}, @mdlm_detail={0x43, 0x24, 0x13, 0x7f, "c27cbd8c80f3765db6530bb90c034645150172715daa1702ce4d88cc7b0bedcf4980aaa776a38c70400c00d3b37bbd358aa3c2a1118c790aae1f74f276e998"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x4, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0x1, 0x80}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x3, 0x0, 0x7a, 0xff, 0x48}, 0x51, &(0x7f0000000180)={0x5, 0xf, 0x51, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "735ef1f46ffc183654cbbb9b280f0e81"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "87f2c09cd0407d7304af2b2e4777ccde"}, @ssp_cap={0x24, 0x10, 0xa, 0x52, 0x6, 0x7fff001, 0xf00f, 0x80, [0xf, 0x0, 0xc000, 0xf, 0xff3f30, 0xffff00]}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x404}}, {0x0, 0x0}, {0x4f, &(0x7f0000000340)=@string={0x4f, 0x3, "3e29e78c59df396024e17b93afeae2f263c380692ac4b930f0cfcd10f3a857926655c1460592b7004fbd781d6d2e2c47f3878cf8c9ad862dcd5bdc66364dda22a521fdf47ef0f57107323901aa"}}, {0x1f, &(0x7f0000000400)=@string={0x1f, 0x3, "96ebac643e0b63d3bf3656723226977c61758e2518e394fda5e1c5c491"}}]}) syz_usb_control_io(r0, &(0x7f0000001500)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000000100)=0x89fd, 0x4000000009) 15.673005761s ago: executing program 2 (id=844): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/netstat\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003400000000714000000020a01"], 0xa0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002b00)=[{&(0x7f0000002700)}, {&(0x7f0000002780)}], 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "0b6646251e1e2453"}}}}, 0xf) 13.548467847s ago: executing program 2 (id=845): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x82) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="120100003d7cc9101d0660c19a8f0102030109021b00010000000009"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000000100), 0x1, 0x840) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000000140)) 10.528022318s ago: executing program 4 (id=850): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 10.422164118s ago: executing program 1 (id=851): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) socket$inet_tcp(0x2, 0x1, 0x0) r1 = io_uring_setup(0x475, &(0x7f0000000180)) io_uring_enter(r1, 0x0, 0x96a3, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) io_submit(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 8.603911184s ago: executing program 4 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000"/36], 0x24, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000040), 0x4) recvmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0305602, &(0x7f0000000880)={0x0, 0x10}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getpid() r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.972841947s ago: executing program 1 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r2 = epoll_create1(0x0) r3 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000004c0)={0x80000007}) epoll_pwait(r2, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000101060f0000000000000000000000000400000000000840000000000c0019800800020040010000"], 0x2c}}, 0x0) close(r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c1341, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) ftruncate(r8, 0x8001) getsockopt$inet6_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000001040)) 7.598256811s ago: executing program 2 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) 5.905569031s ago: executing program 4 (id=855): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/netstat\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003400000000714000000020a01"], 0xa0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002b00)=[{&(0x7f0000002700)}, {&(0x7f0000002780)}], 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "0b6646251e1e2453"}}}}, 0xf) 5.898727713s ago: executing program 2 (id=863): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRESHEX, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="3bf81b"], 0x20000600}}, 0x20000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001b80)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)="07022efd48c5f104acc8a403c1b87aca9bf92d8f58107c8f45e3fca44c18ec123c4fecae0ba8fb94b941cb57953ebab00bcde76db8d74e59b3f3bd6183565eed8e8a291eec054a22f9d2661b7738611346bded71e6168e8807a7f79b851dc702d75d92a16037f86c07dc33c7aa350519c1986c59b13b400a4def7ab50bf54aad9f380a88cd73bc5126af3e9613c5da135ed3d1a7fa0b63406dcf6fd8baa2765706ad0088088f8e84434fb599ee58bb571a0e4604388f7bdc49982efda2c46bfa71ce26609f5fd3d9e885ac757f87cd21ac7908", 0xd3}, {&(0x7f00000000c0)="5837e5697639f6886bfff7b6c54f75db2f5e00bb202693ee16690b08d9bb32f6", 0x20}, {&(0x7f00000004c0)="f7a8682211a413617be2d034a56cdcd18ca48f2b13864252510b2f3df76227a135ec344d8f13d686f2a903890d9bd56f96202a1b164e5872e8c603b065612908e6341afdce98fb315432c775b35f832ae032fe635a225ec86e6a33b3ba6aaac21bf82c27e2fc47e13e0e", 0x6a}, {&(0x7f0000000540)="456d85e8a37ac0b6a01f9822ece3baa40518f7c0fea2c1d87a5153ade098e760307189f5de6fcd270ed75ec8d279bec6d182051b18d697b0bb92750bb6351686738c75088e14e0cb170b37c0071359bfc00ff8fcf7e465b0f2", 0x59}], 0x4, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x130, 0x8}}, {{&(0x7f0000000f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{0x0}], 0x1, &(0x7f00000010c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8, 0x8000}}, {{&(0x7f0000001880)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001900)="f338152bb11ac398d9d5685f9780ed68d47f4474a7c2b80e", 0x18}, {&(0x7f0000001940)="e4831f6afe03773ae2c267467a60ad7478dfc6da24144006a347f8d715527078c93d2f1e521710c2b25a3d728ea670b696f9bd7901e2c5b5ce1f09cf80bcee431535a6991b2eb344491d2ac5156c0c10eade97829b54c14094f00ca8f4ead9d6fc91220321348323793d7e5c2d89664721ab172457d848857b0acbfee7c1c205851c4a41074631d6585fb5454377af0c2daae62b58330eeabdebf5ee4e760a3a503751c434bd070bf234be710b62", 0xae}, {&(0x7f0000001a00)="a2995a74c8a0394f867ef3d6a55df463df76a3c2fb27a7c59de38a1d572294024002f0af056c9b134104da61dcac0f4f5e60cc50c3e8f3dd84f363c3e3462dc03f4bfacea82f5cba3caf1a4b3c102b0efe736dd138484536f96b2f920c52f8d105c872026e9936659a65dbb9ed21849bf0d2665a5bab950b0fdaa646a44387167e1632a508fd655fb202535b4aeba927a1d19c64f0741a72e2d6fdc20c1a8057e3176694f7b665762c8960a7aca5fa6c5e4fb3d62a232dea1eb7035068abd939b619146ab74416d399cb42157c0fdcf63a4ec01776", 0xd5}], 0x3, &(0x7f0000001b40)=[@cred={{0x1c}}], 0x20, 0x8000}}], 0x3, 0x0) recvmmsg(r4, &(0x7f0000001000)=[{{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000800)=""/17, 0x11}, 0xe2}, {{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f0000000cc0)=""/27, 0x1b}], 0x4, &(0x7f0000000d40)=""/127, 0x7f}, 0x3}], 0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x4030582a, &(0x7f0000000240)) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pread64(r7, &(0x7f0000000340)=""/270, 0x10e, 0x2) 4.339719688s ago: executing program 4 (id=857): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x62) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8953, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x374) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) 3.552953516s ago: executing program 1 (id=858): r0 = open(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpeername(r0, 0x0, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r5, 0x701, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, 0x0, 0x0) 2.966877022s ago: executing program 4 (id=859): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa4840, 0x48) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0x2020) syslog(0x9, &(0x7f00000000c0)=""/92, 0x5c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getpid() syslog(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x101040, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) vmsplice(r1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0xf8, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x5eb}, @in6={0xa, 0x4e23, 0x8, @loopback, 0x9}, @in={0x2, 0xffff, @empty}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x4, @remote, 0x6}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x6, @local, 0x1}]}, &(0x7f0000000380)=0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.81740771s ago: executing program 1 (id=860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) capset(0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x48}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 804.337µs ago: executing program 1 (id=861): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 337.686µs ago: executing program 2 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = socket$inet6(0xa, 0x2, 0x0) flock(r6, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) 0s ago: executing program 4 (id=864): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x100000b, 0x10010, 0xffffffffffffffff, 0xfffff000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0xc9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2000, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000a000000850000008600000018", @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x26e1, 0x2c00) fanotify_init(0x1200, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x6, 0xb, 0x0, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r5 = semget$private(0x0, 0x0, 0x542) semctl$SEM_INFO(r5, 0x2, 0x13, &(0x7f0000000340)=""/116) kernel console output (not intermixed with test programs): 0 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f49d0179e79 code=0x7ffc0000 [ 262.409049][ T29] audit: type=1326 audit(1724433715.824:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d0179e79 code=0x7ffc0000 [ 262.479630][ T29] audit: type=1326 audit(1724433715.824:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f49d0179e79 code=0x7ffc0000 [ 262.586489][ T29] audit: type=1326 audit(1724433715.824:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d0179e79 code=0x7ffc0000 [ 262.610407][ T29] audit: type=1326 audit(1724433715.824:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d0179e79 code=0x7ffc0000 [ 262.640384][ T29] audit: type=1326 audit(1724433715.834:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d0179e79 code=0x7ffc0000 [ 266.611312][ T7116] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 267.664230][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 271.851009][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 271.851028][ T29] audit: type=1400 audit(1724433725.804:504): avc: denied { unmount } for pid=5560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 274.172882][ T29] audit: type=1326 audit(1724433728.154:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.1.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49d0179e79 code=0x0 [ 274.349688][ T7184] sp0: Synchronizing with TNC [ 274.801935][ T7184] libceph: resolve '0.0' (ret=-3): failed [ 281.924406][ T7213] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.380'. [ 282.317148][ T5268] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 282.567053][ T5268] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 282.584345][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.634349][ T5268] usb 5-1: config 0 descriptor?? [ 290.811514][ T5268] usb 5-1: can't set config #0, error -71 [ 290.864336][ T5268] usb 5-1: USB disconnect, device number 6 [ 292.542502][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.554872][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.563007][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.572637][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.582362][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.597659][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.665229][ T7246] lo speed is unknown, defaulting to 1000 [ 294.193288][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.361181][ T7255] sp0: Synchronizing with TNC [ 294.403089][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.505767][ T7255] libceph: resolve '0.0' (ret=-3): failed [ 294.544074][ T53] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 294.642600][ T29] audit: type=1400 audit(1724433748.614:506): avc: denied { read } for pid=7265 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.644171][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.663378][ T5219] Bluetooth: hci0: command tx timeout [ 294.687314][ T29] audit: type=1400 audit(1724433748.664:507): avc: denied { connect } for pid=7265 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.738161][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 294.760315][ T53] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.816542][ T53] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.837268][ T53] usb 3-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.847937][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.889520][ T53] usb 3-1: config 0 interface 0 has no altsetting 0 [ 294.909901][ T53] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 294.946802][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.001750][ T53] usb 3-1: config 0 descriptor?? [ 295.065740][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 296.724131][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.731309][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.735219][ T5219] Bluetooth: hci0: command tx timeout [ 296.767295][ T7246] bridge_slave_0: entered allmulticast mode [ 296.776098][ T7246] bridge_slave_0: entered promiscuous mode [ 296.796652][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.804676][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.812094][ T7246] bridge_slave_1: entered allmulticast mode [ 296.821137][ T7246] bridge_slave_1: entered promiscuous mode [ 296.829159][ T63] bridge_slave_1: left allmulticast mode [ 296.835091][ T63] bridge_slave_1: left promiscuous mode [ 296.842023][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.856205][ T63] bridge_slave_0: left allmulticast mode [ 296.861918][ T63] bridge_slave_0: left promiscuous mode [ 296.868269][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.264802][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.278176][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.289660][ T63] bond0 (unregistering): Released all slaves [ 297.351276][ T53] usb 3-1: string descriptor 0 read error: -71 [ 297.374328][ T53] usbhid 3-1:0.0: can't add hid device: -71 [ 297.380372][ T53] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 297.432480][ T53] usb 3-1: USB disconnect, device number 5 [ 297.529033][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.551030][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.631656][ T7246] team0: Port device team_slave_0 added [ 297.652056][ T7246] team0: Port device team_slave_1 added [ 297.758433][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.769167][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.798710][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.851975][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.859364][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.888255][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.993586][ T7246] hsr_slave_0: entered promiscuous mode [ 298.005651][ T7246] hsr_slave_1: entered promiscuous mode [ 298.015580][ T7246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.023160][ T7246] Cannot create hsr debugfs directory [ 298.070331][ T63] hsr_slave_0: left promiscuous mode [ 298.077157][ T63] hsr_slave_1: left promiscuous mode [ 298.083426][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.100148][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.111015][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.120274][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.143658][ T63] veth1_macvtap: left promiscuous mode [ 298.149653][ T63] veth0_macvtap: left promiscuous mode [ 298.155572][ T63] veth1_vlan: left promiscuous mode [ 298.160940][ T63] veth0_vlan: left promiscuous mode [ 298.630235][ T63] team0 (unregistering): Port device team_slave_1 removed [ 298.673089][ T63] team0 (unregistering): Port device team_slave_0 removed [ 298.816282][ T5219] Bluetooth: hci0: command tx timeout [ 299.151202][ T5225] lo speed is unknown, defaulting to 1000 [ 299.678205][ T7246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.700456][ T7246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.716018][ T7246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.734848][ T7246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.895587][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.939931][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.955492][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.962658][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.984485][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.991645][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.311882][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.388094][ T7246] veth0_vlan: entered promiscuous mode [ 300.411833][ T7246] veth1_vlan: entered promiscuous mode [ 300.465830][ T7246] veth0_macvtap: entered promiscuous mode [ 300.493625][ T7246] veth1_macvtap: entered promiscuous mode [ 300.550906][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.568404][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.581909][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.603052][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.613428][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.624654][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.643023][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.654168][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.668749][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.708675][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.719233][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.731203][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.745858][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.755809][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.766300][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.776256][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.787178][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.802292][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.828820][ T7246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.846742][ T7246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.859100][ T7246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.868007][ T7246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.904653][ T5219] Bluetooth: hci0: command tx timeout [ 301.044693][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.052598][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.112987][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.122863][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.606751][ T7355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.406'. [ 301.760443][ T7356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.964081][ T29] audit: type=1400 audit(1724433755.724:508): avc: denied { create } for pid=7338 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 303.983389][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.049091][ T29] audit: type=1400 audit(1724433755.734:509): avc: denied { ioctl } for pid=7338 comm="syz.1.404" path="socket:[15725]" dev="sockfs" ino=15725 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 304.093295][ T29] audit: type=1400 audit(1724433755.994:510): avc: denied { read } for pid=7338 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.245076][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 306.018068][ T7380] Cannot find add_set index 0 as target [ 306.408788][ T5270] libceph: connect (1)[c::]:6789 error -101 [ 306.436285][ T5270] libceph: mon0 (1)[c::]:6789 connect error [ 306.871701][ T7398] ceph: No mds server is up or the cluster is laggy [ 306.915955][ T5270] libceph: connect (1)[c::]:6789 error -101 [ 306.954099][ T5270] libceph: mon0 (1)[c::]:6789 connect error [ 309.368885][ T7420] overlayfs: failed to resolve './file1': -2 [ 310.239647][ T29] audit: type=1400 audit(1724433764.214:511): avc: denied { write } for pid=7411 comm="syz.1.403" laddr=fe80::74f5:cdff:fed4:5e44 lport=2 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 310.696353][ T29] audit: type=1400 audit(1724433764.644:512): avc: denied { read } for pid=7411 comm="syz.1.403" laddr=fe80::74f5:cdff:fed4:5e44 lport=2 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 310.842834][ T7426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7426 comm=syz.0.410 [ 310.875857][ T29] audit: type=1400 audit(1724433764.864:513): avc: denied { read } for pid=7422 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 311.127080][ T29] audit: type=1400 audit(1724433765.104:514): avc: denied { ioctl } for pid=7431 comm="syz.4.413" path="socket:[15916]" dev="sockfs" ino=15916 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 312.416636][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.412'. [ 312.787446][ T7460] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 313.994056][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.420'. [ 314.015870][ T29] audit: type=1400 audit(1724433768.004:515): avc: denied { read } for pid=7466 comm="syz.1.420" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.019711][ T7468] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 314.095609][ T29] audit: type=1400 audit(1724433768.034:516): avc: denied { open } for pid=7466 comm="syz.1.420" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.203908][ T29] audit: type=1400 audit(1724433768.044:517): avc: denied { write } for pid=7466 comm="syz.1.420" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 316.126499][ T29] audit: type=1400 audit(1724433769.834:518): avc: denied { ioctl } for pid=7473 comm="syz.3.422" path="/dev/nvram" dev="devtmpfs" ino=625 ioctlcmd=0xaee0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 316.677089][ T29] audit: type=1400 audit(1724433770.564:519): avc: denied { listen } for pid=7482 comm="syz.0.424" lport=35612 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.262482][ T29] audit: type=1400 audit(1724433770.564:520): avc: denied { accept } for pid=7482 comm="syz.0.424" lport=35612 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.317778][ T29] audit: type=1400 audit(1724433771.304:521): avc: denied { view } for pid=7481 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 317.405485][ T5219] Bluetooth: unknown link type 227 [ 317.410911][ T5219] Bluetooth: hci5: connection err: -111 [ 317.886947][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.441731][ T7510] loop7: detected capacity change from 0 to 16384 [ 321.597042][ T29] audit: type=1400 audit(1724433775.584:522): avc: denied { execute } for pid=7523 comm="syz.2.433" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.685508][ T29] audit: type=1400 audit(1724433775.644:523): avc: denied { setopt } for pid=7523 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 321.908842][ T29] audit: type=1400 audit(1724433775.664:524): avc: denied { listen } for pid=7523 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.175145][ T7539] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 322.178055][ T29] audit: type=1400 audit(1724433776.164:525): avc: denied { create } for pid=7530 comm="syz.0.436" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.314218][ T29] audit: type=1400 audit(1724433776.164:526): avc: denied { associate } for pid=7530 comm="syz.0.436" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 322.470539][ T29] audit: type=1400 audit(1724433776.214:527): avc: denied { read write } for pid=7530 comm="syz.0.436" name="file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 322.569251][ T29] audit: type=1400 audit(1724433776.214:528): avc: denied { open } for pid=7530 comm="syz.0.436" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 323.485799][ T29] audit: type=1400 audit(1724433776.994:529): avc: denied { read } for pid=7541 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.280684][ T29] audit: type=1400 audit(1724433778.004:530): avc: denied { mount } for pid=7544 comm="syz.3.439" name="/" dev="rpc_pipefs" ino=15269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 324.950424][ T29] audit: type=1400 audit(1724433778.934:531): avc: denied { getopt } for pid=7543 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.046040][ T7563] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 325.218321][ T7543] block nbd2: shutting down sockets [ 326.840042][ T7585] Bluetooth: MGMT ver 1.23 [ 326.870135][ T7578] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 327.040642][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 327.040660][ T29] audit: type=1400 audit(1724433781.024:533): avc: denied { execute } for pid=7586 comm="syz.3.449" path="/dev/audio1" dev="devtmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 327.393039][ T29] audit: type=1400 audit(1724433781.374:534): avc: denied { write } for pid=7592 comm="syz.4.451" name="renderD128" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 327.498829][ T7580] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 327.651390][ T29] audit: type=1400 audit(1724433781.504:535): avc: denied { module_request } for pid=7592 comm="syz.4.451" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 328.136891][ T7606] cannot load conntrack support for proto=3 [ 328.834083][ T29] audit: type=1400 audit(1724433782.154:536): avc: denied { ioctl } for pid=7603 comm="syz.4.454" path="socket:[16175]" dev="sockfs" ino=16175 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.858584][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.644126][ T5219] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 330.568175][ T29] audit: type=1400 audit(1724433784.354:537): avc: denied { ioctl } for pid=7612 comm="syz.3.456" path="socket:[16189]" dev="sockfs" ino=16189 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.316450][ T5219] Bluetooth: hci5: link tx timeout [ 331.322423][ T5219] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 331.403980][ T5225] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 331.849431][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 331.965814][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.998949][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 332.030922][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.058323][ T5225] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 332.233924][ T5225] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 333.156944][ T5225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.385586][ T5219] Bluetooth: hci5: command 0x0406 tx timeout [ 333.548133][ T5225] usb 5-1: config 0 descriptor?? [ 333.584066][ T5225] usb 5-1: can't set config #0, error -71 [ 333.607141][ T5225] usb 5-1: USB disconnect, device number 7 [ 333.732168][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.463'. [ 333.768424][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.463'. [ 333.853740][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.463'. [ 333.930142][ T7651] tipc: Started in network mode [ 333.965745][ T7651] tipc: Node identity 2007ff, cluster identity 4711 [ 333.985549][ T7651] tipc: Node number set to 2099199 [ 334.521131][ T53] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 334.693958][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 334.817431][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 334.832098][ T53] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 334.849997][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.890855][ T53] usb 5-1: Product: syz [ 334.904380][ T53] usb 5-1: Manufacturer: syz [ 335.143332][ T53] usb 5-1: SerialNumber: syz [ 335.165960][ T53] usb 5-1: config 0 descriptor?? [ 335.206509][ T53] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 336.180466][ T5225] usb 5-1: USB disconnect, device number 8 [ 336.186895][ T1302] usb 5-1: Failed to submit usb control message: -71 [ 336.214026][ T1302] usb 5-1: unable to send the bmi data to the device: -71 [ 336.261186][ T1302] usb 5-1: unable to get target info from device [ 336.298132][ T1302] usb 5-1: could not get target info (-71) [ 336.308334][ T1302] usb 5-1: could not probe fw (-71) [ 338.851906][ T7690] NILFS (nullb0): couldn't find nilfs on the device [ 339.631299][ T29] audit: type=1400 audit(1724433793.614:538): avc: denied { write } for pid=7692 comm="syz.3.477" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 341.046159][ T29] audit: type=1400 audit(1724433794.984:539): avc: denied { shutdown } for pid=7692 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 341.942780][ T29] audit: type=1400 audit(1724433795.024:540): avc: denied { read } for pid=7692 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 342.140141][ T5231] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 342.486094][ T7718] ptrace attach of "./syz-executor exec"[5223] was attempted by "./syz-executor exec"[7718] [ 343.269965][ T5225] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 343.470670][ T5225] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.554397][ T5225] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.577796][ T5225] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.633929][ T5225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.663711][ T7710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.675579][ T5225] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.715986][ T7722] Unknown options in mask 2474 [ 345.170586][ T29] audit: type=1400 audit(1724433798.424:541): avc: denied { create } for pid=7727 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 345.293965][ T5219] Bluetooth: hci5: command 0x0406 tx timeout [ 345.882845][ T29] audit: type=1400 audit(1724433799.864:542): avc: denied { write } for pid=7737 comm="syz.4.497" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 345.954404][ T5270] usb 1-1: USB disconnect, device number 6 [ 346.705056][ T29] audit: type=1400 audit(1724433800.684:543): avc: denied { append } for pid=7745 comm="syz.0.499" name="media7" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 348.019435][ T7755] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 348.808004][ T29] audit: type=1400 audit(1724433802.794:544): avc: denied { watch watch_reads } for pid=7757 comm="syz.3.492" path="/36/file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 348.964335][ T7766] netlink: 'syz.2.491': attribute type 2 has an invalid length. [ 348.972070][ T7766] netlink: 244 bytes leftover after parsing attributes in process `syz.2.491'. [ 351.891981][ T7851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'. [ 351.970634][ T7851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'. [ 352.010530][ T7851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'. [ 354.408703][ T7874] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 358.290973][ T7899] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.508'. [ 359.598381][ T7908] syz.2.512 (7908) used greatest stack depth: 20336 bytes left [ 359.896158][ T29] audit: type=1400 audit(1724433813.884:545): avc: denied { block_suspend } for pid=7914 comm="syz.2.514" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.413889][ T29] audit: type=1400 audit(1724433815.384:546): avc: denied { bind } for pid=7912 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 361.813925][ T29] audit: type=1400 audit(1724433815.794:547): avc: denied { write } for pid=7918 comm="syz.1.516" path="socket:[16790]" dev="sockfs" ino=16790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 361.813997][ T29] audit: type=1400 audit(1724433815.794:548): avc: denied { nlmsg_read } for pid=7918 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 362.092806][ T5270] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 364.318998][ T29] audit: type=1400 audit(1724433818.304:549): avc: denied { open } for pid=7945 comm="syz.0.522" path="/dev/ttyq5" dev="devtmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 364.544182][ T7948] xt_limit: Overflow, try lower: 1207959552/384 [ 364.646539][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 364.783258][ T29] audit: type=1400 audit(1724433818.764:550): avc: denied { read } for pid=7952 comm="syz.2.524" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 364.875663][ T29] audit: type=1400 audit(1724433818.764:551): avc: denied { open } for pid=7952 comm="syz.2.524" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 366.815397][ T7977] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 366.993396][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 367.593929][ T29] audit: type=1400 audit(1724433820.814:552): avc: denied { write } for pid=7972 comm="syz.4.531" path="socket:[16851]" dev="sockfs" ino=16851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 367.876446][ T29] audit: type=1400 audit(1724433820.854:553): avc: denied { read } for pid=7973 comm="syz.2.532" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 368.006439][ T29] audit: type=1400 audit(1724433820.854:554): avc: denied { open } for pid=7973 comm="syz.2.532" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 368.664190][ T29] audit: type=1400 audit(1724433822.614:555): avc: denied { create } for pid=7989 comm="syz.4.534" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.982178][ T29] audit: type=1400 audit(1724433822.624:556): avc: denied { link } for pid=7989 comm="syz.4.534" name="#b" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 369.004684][ T29] audit: type=1400 audit(1724433822.624:557): avc: denied { rename } for pid=7989 comm="syz.4.534" name="#c" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 369.157121][ T29] audit: type=1400 audit(1724433823.144:558): avc: denied { bind } for pid=7990 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.187988][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 369.736394][ T8005] netlink: 'syz.4.537': attribute type 12 has an invalid length. [ 369.766869][ T8005] netlink: 'syz.4.537': attribute type 11 has an invalid length. [ 369.795182][ T8005] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.537'. [ 369.816039][ T8010] KVM: debugfs: duplicate directory 8010-7 [ 371.075795][ T5270] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 371.263975][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 371.334972][ T5270] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 371.399785][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.458883][ T5270] usb 5-1: Product: syz [ 371.478738][ T5270] usb 5-1: Manufacturer: syz [ 371.494734][ T5270] usb 5-1: SerialNumber: syz [ 371.521777][ T5270] usb 5-1: config 0 descriptor?? [ 371.887882][ T5270] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 009 [ 372.284500][ T5270] usb 5-1: USB disconnect, device number 9 [ 372.728704][ T8035] vivid-000: disconnect [ 372.791444][ T8032] vivid-000: reconnect [ 372.931844][ T29] audit: type=1400 audit(1724433826.914:559): avc: denied { write } for pid=8041 comm="syz.0.546" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 372.956294][ T8042] random: crng reseeded on system resumption [ 373.385668][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 373.448162][ T8051] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 373.489370][ T8051] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 373.713592][ T8042] netlink: 256 bytes leftover after parsing attributes in process `syz.0.546'. [ 373.795908][ T29] audit: type=1400 audit(1724433827.774:560): avc: denied { mount } for pid=8055 comm="syz.4.551" name="/" dev="ramfs" ino=17021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 375.636693][ T8073] dlm: no locking on control device [ 375.761794][ T29] audit: type=1400 audit(1724433829.744:561): avc: denied { append } for pid=8067 comm="syz.1.555" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 375.899637][ T8076] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 376.239092][ T29] audit: type=1400 audit(1724433829.834:562): avc: denied { ioctl } for pid=8067 comm="syz.1.555" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.536347][ T8082] ip6t_rpfilter: unknown options [ 376.603972][ T29] audit: type=1400 audit(1724433830.524:563): avc: denied { setopt } for pid=8081 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 378.955453][ T7832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.074528][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.223181][ T29] audit: type=1400 audit(1724433833.204:564): avc: denied { mount } for pid=8103 comm="syz.1.565" name="/" dev="hugetlbfs" ino=17962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 379.311993][ T7832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.546179][ T7832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.709705][ T7832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.704808][ T29] audit: type=1400 audit(1724433834.684:565): avc: denied { unmount } for pid=6019 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 380.775688][ T29] audit: type=1400 audit(1724433834.734:566): avc: denied { ioctl } for pid=8115 comm="syz.2.568" path="socket:[17148]" dev="sockfs" ino=17148 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 381.071755][ T7832] bridge_slave_1: left allmulticast mode [ 381.100865][ T7832] bridge_slave_1: left promiscuous mode [ 381.130397][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.164224][ T29] audit: type=1326 audit(1724433835.144:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 381.210581][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 381.223115][ T7832] bridge_slave_0: left allmulticast mode [ 381.244511][ T7832] bridge_slave_0: left promiscuous mode [ 381.251118][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.273943][ T29] audit: type=1326 audit(1724433835.144:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 381.329760][ T29] audit: type=1326 audit(1724433835.144:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 381.416359][ T29] audit: type=1326 audit(1724433835.144:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 381.443731][ T8128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.480979][ T8128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.491172][ T8128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.500092][ T8128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.511711][ T8128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 381.521582][ T8128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.592870][ T29] audit: type=1326 audit(1724433835.144:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 381.651269][ T29] audit: type=1326 audit(1724433835.144:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 381.674974][ T29] audit: type=1326 audit(1724433835.154:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 382.125952][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021ed7400: rx timeout, send abort [ 382.635334][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021ed7400: abort rx timeout. Force session deactivation [ 383.341453][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 384.045534][ T5219] Bluetooth: hci2: command tx timeout [ 386.135888][ T5219] Bluetooth: hci2: command tx timeout [ 387.897800][ T7832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.921900][ T7832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.937556][ T7832] bond0 (unregistering): Released all slaves [ 387.962349][ T8124] : renamed from bond0 (while UP) [ 388.106076][ T7832] tipc: Left network mode [ 388.174557][ T5219] Bluetooth: hci2: command tx timeout [ 390.340862][ T5219] Bluetooth: hci2: command tx timeout [ 391.013612][ T8126] chnl_net:caif_netlink_parms(): no params data found [ 391.534762][ T5268] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 391.708295][ T7832] hsr_slave_0: left promiscuous mode [ 391.742694][ T5268] usb 2-1: Using ep0 maxpacket: 32 [ 391.768353][ T5268] usb 2-1: config 155 has an invalid interface number: 49 but max is 0 [ 391.783694][ T7832] hsr_slave_1: left promiscuous mode [ 391.799414][ T5268] usb 2-1: config 155 has no interface number 0 [ 391.829050][ T5268] usb 2-1: config 155 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.880699][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.934065][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.952436][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.953860][ T5268] usb 2-1: config 155 interface 49 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 392.011354][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.052804][ T5268] usb 2-1: config 155 interface 49 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 392.074424][ T5268] usb 2-1: config 155 interface 49 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 392.105520][ T5268] usb 2-1: config 155 interface 49 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 392.134103][ T5268] usb 2-1: config 155 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.153996][ T5268] usb 2-1: config 155 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.190901][ T5268] usb 2-1: New USB device found, idVendor=19d2, idProduct=0141, bcdDevice=95.92 [ 392.203937][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.218982][ T5268] usb 2-1: Product: ఄ [ 392.223291][ T5268] usb 2-1: Manufacturer: Ќ [ 392.228392][ T5268] usb 2-1: SerialNumber: Ⰹ [ 392.248705][ T7832] veth1_macvtap: left promiscuous mode [ 392.303963][ T7832] veth0_macvtap: left promiscuous mode [ 392.326580][ T7832] veth1_vlan: left promiscuous mode [ 392.332809][ T7832] veth0_vlan: left promiscuous mode [ 392.508771][ T5268] option 2-1:155.49: GSM modem (1-port) converter detected [ 392.508857][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 392.615841][ T29] audit: type=1400 audit(1724433846.494:598): avc: denied { create } for pid=8226 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 392.671076][ T5268] usb 2-1: USB disconnect, device number 7 [ 392.696817][ T5268] option 2-1:155.49: device disconnected [ 394.962286][ T7832] team0 (unregistering): Port device team_slave_1 removed [ 395.052137][ T7832] team0 (unregistering): Port device team_slave_0 removed [ 395.380194][ T7846] wlan1: Trigger new scan to find an IBSS to join [ 398.745223][ T29] audit: type=1400 audit(1724433852.714:599): avc: denied { create } for pid=8250 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 399.019079][ T53] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 399.028963][ T8251] batadv0: entered promiscuous mode [ 399.038693][ T8251] macvlan2: entered allmulticast mode [ 399.044179][ T8251] batadv0: entered allmulticast mode [ 399.054306][ T8251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.069786][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.124798][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.288319][ T8126] bridge_slave_0: entered allmulticast mode [ 399.481806][ T8126] bridge_slave_0: entered promiscuous mode [ 399.638923][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.676957][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.727687][ T8126] bridge_slave_1: entered allmulticast mode [ 399.785889][ T8126] bridge_slave_1: entered promiscuous mode [ 399.933403][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.961719][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.992213][ T53] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.064472][ T53] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.097300][ T8126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.129988][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.175778][ T8126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.209023][ T53] usb 2-1: config 0 descriptor?? [ 400.397778][ T8126] team0: Port device team_slave_0 added [ 400.453608][ T8126] team0: Port device team_slave_1 added [ 400.727407][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.772715][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.906930][ T8126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.054955][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.098595][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.236305][ T8126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.305575][ T11] wlan1: Trigger new scan to find an IBSS to join [ 401.313402][ T53] usbhid 2-1:0.0: can't add hid device: -71 [ 401.375301][ T53] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 401.450859][ T53] usb 2-1: USB disconnect, device number 8 [ 401.663372][ T8126] hsr_slave_0: entered promiscuous mode [ 401.688183][ T8126] hsr_slave_1: entered promiscuous mode [ 404.402748][ T64] wlan1: Trigger new scan to find an IBSS to join [ 404.679564][ T8316] CIFS: Unable to determine destination address [ 406.994134][ T942] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 407.545411][ T7798] wlan1: Creating new IBSS network, BSSID 42:1d:fe:53:9b:99 [ 407.624723][ T942] usb 2-1: Using ep0 maxpacket: 8 [ 407.688142][ T942] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 407.707976][ T942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.751547][ T942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.768151][ T942] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.795545][ T942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.817800][ T942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.837559][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.858844][ T942] usb 2-1: can't set config #16, error -71 [ 407.873200][ T942] usb 2-1: USB disconnect, device number 9 [ 408.096067][ T8126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.108179][ T8126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.126133][ T8126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.146240][ T8126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.287700][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.331111][ T8126] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.357546][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.364758][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.412644][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.419863][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.505745][ T8126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.726492][ T8126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.112519][ T8126] veth0_vlan: entered promiscuous mode [ 409.138402][ T8126] veth1_vlan: entered promiscuous mode [ 409.189505][ T8126] veth0_macvtap: entered promiscuous mode [ 409.209726][ T8126] veth1_macvtap: entered promiscuous mode [ 409.242814][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.259208][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.270223][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.284264][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.295899][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.307339][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.317476][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.328384][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.340519][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.356623][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.367156][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.381036][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.392419][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.402618][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.419382][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.429447][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.447018][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.475035][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.513377][ T8126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.553186][ T8126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.568102][ T8126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.579282][ T8126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.726292][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.737053][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.793211][ T7798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.803070][ T7798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.105996][ T29] audit: type=1400 audit(1724433864.094:600): avc: denied { listen } for pid=8388 comm="syz.1.621" laddr=ff01::1 lport=42179 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 410.963720][ T29] audit: type=1400 audit(1724433864.934:601): avc: denied { write } for pid=8389 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.152752][ T29] audit: type=1400 audit(1724433865.134:602): avc: denied { connect } for pid=8390 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 413.494801][ T29] audit: type=1400 audit(1724433867.474:603): avc: denied { write } for pid=8437 comm="syz.0.614" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 413.627660][ T29] audit: type=1400 audit(1724433867.504:604): avc: denied { map } for pid=8437 comm="syz.0.614" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 413.674674][ T29] audit: type=1400 audit(1724433867.504:605): avc: denied { execute } for pid=8437 comm="syz.0.614" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 415.334540][ T29] audit: type=1400 audit(1724433869.314:606): avc: denied { read write } for pid=8452 comm="syz.3.618" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 415.404043][ T8456] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 415.418711][ T29] audit: type=1400 audit(1724433869.314:607): avc: denied { open } for pid=8452 comm="syz.3.618" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 420.143954][ T53] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 420.740701][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 420.883722][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.930605][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 421.014161][ T53] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 421.040827][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.151694][ T53] usb 4-1: config 0 descriptor?? [ 421.406826][ T53] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.474011][ T53] usb 4-1: MIDIStreaming interface descriptor not found [ 422.717661][ T9] usb 4-1: USB disconnect, device number 4 [ 425.610119][ T29] audit: type=1400 audit(1724433879.594:608): avc: denied { bind } for pid=8510 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.810138][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.062726][ T8536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.549976][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.625036][ T29] audit: type=1400 audit(1724433887.614:609): avc: denied { mounton } for pid=8538 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 433.715272][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.726981][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.755447][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.772732][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.794113][ T5219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.801700][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.241031][ T29] audit: type=1400 audit(1724433888.214:610): avc: denied { name_bind } for pid=8543 comm="syz.1.645" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 434.961312][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.163023][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.564594][ T54] bridge_slave_1: left allmulticast mode [ 435.570283][ T54] bridge_slave_1: left promiscuous mode [ 435.592404][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.615602][ T54] bridge_slave_0: left allmulticast mode [ 435.621282][ T54] bridge_slave_0: left promiscuous mode [ 435.634105][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.854846][ T5219] Bluetooth: hci2: command tx timeout [ 436.229522][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.242017][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.253016][ T54] bond0 (unregistering): Released all slaves [ 436.293681][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 436.500184][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.511121][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.520924][ T8538] bridge_slave_0: entered allmulticast mode [ 436.530992][ T8538] bridge_slave_0: entered promiscuous mode [ 436.541675][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.548924][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.556417][ T8538] bridge_slave_1: entered allmulticast mode [ 436.564485][ T8538] bridge_slave_1: entered promiscuous mode [ 436.699629][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.716982][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.805262][ T8538] team0: Port device team_slave_0 added [ 436.823458][ T54] hsr_slave_0: left promiscuous mode [ 436.839190][ T54] hsr_slave_1: left promiscuous mode [ 436.848444][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.858318][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.867853][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.884884][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.913743][ T54] veth1_macvtap: left promiscuous mode [ 436.919437][ T54] veth0_macvtap: left promiscuous mode [ 436.926825][ T54] veth1_vlan: left promiscuous mode [ 436.932207][ T54] veth0_vlan: left promiscuous mode [ 437.468216][ T54] team0 (unregistering): Port device team_slave_1 removed [ 437.510242][ T54] team0 (unregistering): Port device team_slave_0 removed [ 437.642661][ T7832] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.934466][ T5219] Bluetooth: hci2: command tx timeout [ 437.963334][ T8538] team0: Port device team_slave_1 added [ 438.048539][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.056519][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.088712][ T8538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.102355][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.109394][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.145335][ T8538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.228186][ T8538] hsr_slave_0: entered promiscuous mode [ 438.235960][ T8538] hsr_slave_1: entered promiscuous mode [ 438.995400][ T8538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.013603][ T8538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 439.032044][ T8538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 439.043084][ T8538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.241540][ T8538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.290104][ T8538] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.311609][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.318853][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.345962][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.353135][ T7832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.701886][ T8538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.014533][ T5219] Bluetooth: hci2: command tx timeout [ 440.073000][ T8538] veth0_vlan: entered promiscuous mode [ 440.121715][ T8538] veth1_vlan: entered promiscuous mode [ 440.204454][ T8538] veth0_macvtap: entered promiscuous mode [ 440.231250][ T8538] veth1_macvtap: entered promiscuous mode [ 440.281646][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.301697][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.313784][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.331641][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.351768][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.362875][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.373368][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.391430][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.415650][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.453558][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.468476][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.484674][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.508753][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.528111][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.543697][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.554835][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.570646][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.584401][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.603409][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.650208][ T8538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.666178][ T8538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.679406][ T8538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.692155][ T8538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.880886][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.892243][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.965845][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.973713][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.210182][ T8661] serio: Serial port pts0 [ 442.363248][ T5219] Bluetooth: hci2: command tx timeout [ 442.855721][ T29] audit: type=1326 audit(1724433896.754:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 442.988397][ T29] audit: type=1326 audit(1724433896.754:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 443.730329][ T8683] x_tables: ip_tables: osf match: only valid for protocol 6 [ 443.754059][ T29] audit: type=1326 audit(1724433896.964:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 443.805791][ T8684] xt_TPROXY: Can be used only with -p tcp or -p udp [ 443.880163][ T29] audit: type=1326 audit(1724433896.964:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 444.013676][ T29] audit: type=1326 audit(1724433896.964:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 444.152424][ T29] audit: type=1326 audit(1724433897.714:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 444.200987][ T8702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.442444][ T29] audit: type=1326 audit(1724433897.714:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 444.545154][ T29] audit: type=1326 audit(1724433897.714:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 444.640598][ T29] audit: type=1326 audit(1724433897.734:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 444.679464][ T29] audit: type=1326 audit(1724433897.734:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f8f79e79 code=0x7ffc0000 [ 448.052228][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 448.074341][ T29] audit: type=1400 audit(1724433901.994:644): avc: denied { write } for pid=8721 comm="syz.3.662" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 448.179696][ T8725] Invalid ELF header len 5 [ 449.605746][ T29] audit: type=1400 audit(1724433902.164:645): avc: denied { module_load } for pid=8719 comm="syz.1.660" path=2F6D656D66643A791035FBF77583253A72C2B978A471C1EA5F8C5A37E7619B11780EA1CF1A985337C9202864656C6574656429 dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 449.944835][ T29] audit: type=1326 audit(1724433903.924:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 450.016741][ T29] audit: type=1326 audit(1724433903.954:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 450.500160][ T29] audit: type=1326 audit(1724433904.484:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 450.664020][ T29] audit: type=1326 audit(1724433904.544:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 450.724668][ T8736] ipvlan1: entered promiscuous mode [ 450.729910][ T8736] ipvlan1: entered allmulticast mode [ 450.730058][ T29] audit: type=1326 audit(1724433904.544:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 450.799291][ T8736] veth0_vlan: entered allmulticast mode [ 450.848313][ T8736] SELinux: Context I is not valid (left unmapped). [ 450.868153][ T29] audit: type=1326 audit(1724433904.544:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 451.014089][ T29] audit: type=1326 audit(1724433904.544:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 451.623130][ T29] audit: type=1326 audit(1724433904.544:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9782979e79 code=0x7ffc0000 [ 452.206832][ T8759] /dev/nullb0: Can't open blockdev [ 454.977792][ T8772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.791954][ T8786] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 458.020506][ T8786] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 459.056355][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 459.056373][ T29] audit: type=1400 audit(1724433913.044:686): avc: denied { getopt } for pid=8795 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.438225][ T29] audit: type=1400 audit(1724433914.424:687): avc: denied { unmount } for pid=8538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 460.446200][ T8786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 460.465129][ T8786] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 460.694637][ T8786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 460.734880][ T8786] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 463.902826][ T8832] program syz.0.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.142729][ T29] audit: type=1400 audit(1724433918.434:688): avc: denied { map } for pid=8833 comm="syz.1.697" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 465.364952][ T5269] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 465.719757][ T5269] usb 4-1: Using ep0 maxpacket: 16 [ 466.087913][ T5269] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 466.097561][ T29] audit: type=1400 audit(1724433918.444:689): avc: denied { call } for pid=8833 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 466.300032][ T5269] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.402076][ T8848] syz.1.687: attempt to access beyond end of device [ 466.402076][ T8848] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 466.415435][ T8848] (syz.1.687,8848,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 466.422997][ T8848] (syz.1.687,8848,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 466.430448][ T8848] (syz.1.687,8848,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 466.445785][ T8849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 466.453494][ T8848] (syz.1.687,8848,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 466.676940][ T5269] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 466.685982][ T5269] usb 4-1: config 1 has no interface number 1 [ 466.692173][ T5269] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 466.713918][ T5269] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.831997][ T5269] usb 4-1: config 1 interface 2 has no altsetting 0 [ 466.868360][ T5269] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.910100][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.930393][ T5269] usb 4-1: Product: syz [ 466.947053][ T5269] usb 4-1: Manufacturer: syz [ 466.969922][ T5269] usb 4-1: SerialNumber: syz [ 470.785361][ T5269] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 470.793228][ T5269] usb 4-1: 2:1 : format type 39 is not supported yet [ 470.815663][ T5269] usb 4-1: selecting invalid altsetting 0 [ 470.840661][ T5269] usb 4-1: USB disconnect, device number 5 [ 470.926737][ T7726] udevd[7726]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.104872][ T8866] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 471.111409][ T8866] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 471.126174][ T8866] vhci_hcd vhci_hcd.0: Device attached [ 472.168058][ T5269] vhci_hcd: vhci_device speed not set [ 472.264258][ T5269] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 472.801730][ T8870] input: syz0 as /devices/virtual/input/input12 [ 473.029416][ T8867] vhci_hcd: connection reset by peer [ 473.067557][ T7836] vhci_hcd: stop threads [ 473.071833][ T7836] vhci_hcd: release socket [ 473.094804][ T7836] vhci_hcd: disconnect device [ 473.547293][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.568147][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.583223][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.593643][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.602550][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 473.613376][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.641775][ T5219] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.649487][ T5219] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.664735][ T5219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.673128][ T5219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.681467][ T5219] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 473.689004][ T5219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.947848][ T7836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.061924][ T7836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.175150][ T7836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.242342][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 474.320977][ T7836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.438889][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.446374][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.453559][ T8881] bridge_slave_0: entered allmulticast mode [ 474.461493][ T8881] bridge_slave_0: entered promiscuous mode [ 474.471240][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.478573][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.487051][ T8881] bridge_slave_1: entered allmulticast mode [ 474.494584][ T8881] bridge_slave_1: entered promiscuous mode [ 474.539683][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.553132][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.613121][ T8881] team0: Port device team_slave_0 added [ 474.631638][ T8881] team0: Port device team_slave_1 added [ 474.719894][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.727747][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.759160][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.772077][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.779147][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.805253][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.820512][ T7836] bridge_slave_1: left allmulticast mode [ 474.826217][ T7836] bridge_slave_1: left promiscuous mode [ 474.833022][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.843698][ T7836] bridge_slave_0: left allmulticast mode [ 474.849449][ T7836] bridge_slave_0: left promiscuous mode [ 474.855625][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.247838][ T7836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.259574][ T7836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.271660][ T7836] bond0 (unregistering): Released all slaves [ 475.400330][ T8881] hsr_slave_0: entered promiscuous mode [ 475.407047][ T8881] hsr_slave_1: entered promiscuous mode [ 475.413245][ T8881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.425191][ T8881] Cannot create hsr debugfs directory [ 475.779806][ T5231] Bluetooth: hci3: command tx timeout [ 475.806488][ T7836] hsr_slave_0: left promiscuous mode [ 475.812718][ T7836] hsr_slave_1: left promiscuous mode [ 475.839371][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.863096][ T7836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.880170][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.889477][ T7836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.943307][ T7836] veth1_macvtap: left promiscuous mode [ 475.949238][ T7836] veth0_macvtap: left promiscuous mode [ 475.962894][ T7836] veth1_vlan: left promiscuous mode [ 475.968479][ T7836] veth0_vlan: left promiscuous mode [ 476.517080][ T7836] team0 (unregistering): Port device team_slave_1 removed [ 476.560933][ T7836] team0 (unregistering): Port device team_slave_0 removed [ 477.454459][ T5269] vhci_hcd: vhci_device speed not set [ 477.467706][ T8881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.488178][ T8881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.501498][ T8881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.527736][ T8881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.721519][ T8881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.751264][ T8881] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.769775][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.776890][ T7836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.794856][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.802030][ T7836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.855727][ T5231] Bluetooth: hci3: command tx timeout [ 478.146051][ T8881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.503284][ T8881] veth0_vlan: entered promiscuous mode [ 478.532115][ T8881] veth1_vlan: entered promiscuous mode [ 478.579539][ T8881] veth0_macvtap: entered promiscuous mode [ 478.617847][ T8881] veth1_macvtap: entered promiscuous mode [ 478.650467][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.661043][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.672037][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.682866][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.700485][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.711463][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.728827][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.741445][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.761131][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.788643][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.807384][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.822446][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.840874][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.852434][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.865298][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.875585][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.886413][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.898638][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.919622][ T8881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.928777][ T8881] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.943532][ T8881] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.961912][ T8881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.123361][ T7836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.140373][ T7836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.182260][ T7836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.195219][ T7836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.371976][ T29] audit: type=1400 audit(1724433933.354:690): avc: denied { ioctl } for pid=8965 comm="syz.2.710" path="socket:[22041]" dev="sockfs" ino=22041 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 479.882919][ T8977] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 479.901608][ T8977] qnx6: wrong signature (magic) in superblock #1. [ 479.908086][ T8977] qnx6: unable to read the first superblock [ 480.893935][ T5231] Bluetooth: hci3: command tx timeout [ 481.806961][ T29] audit: type=1400 audit(1724433935.794:691): avc: denied { create } for pid=8991 comm="syz.0.713" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 483.364106][ T5231] Bluetooth: hci3: command tx timeout [ 483.426386][ T29] audit: type=1400 audit(1724433937.334:692): avc: denied { write } for pid=8991 comm="syz.0.713" name="file0" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 484.628679][ T29] audit: type=1400 audit(1724433937.334:693): avc: denied { open } for pid=8991 comm="syz.0.713" path="/68/file0" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 484.743981][ T29] audit: type=1400 audit(1724433937.414:694): avc: denied { ioctl } for pid=8991 comm="syz.0.713" path="/68/file0" dev="tmpfs" ino=391 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 484.849908][ T29] audit: type=1400 audit(1724433937.704:695): avc: denied { watch } for pid=9001 comm="syz.1.702" path="/115/file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 484.936649][ T29] audit: type=1400 audit(1724433937.714:696): avc: denied { watch_sb } for pid=9001 comm="syz.1.702" path="/115/file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 485.076712][ T29] audit: type=1400 audit(1724433938.494:697): avc: denied { unlink } for pid=7246 comm="syz-executor" name="file0" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 485.453653][ T9017] gfs2: not a GFS2 filesystem [ 489.202621][ T9033] block nbd3: shutting down sockets [ 489.251265][ T29] audit: type=1400 audit(1724433943.234:698): avc: denied { create } for pid=9036 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 490.372115][ T9043] ntfs3: loop1: try to read out of volume at offset 0x0 [ 490.536130][ T29] audit: type=1400 audit(1724433944.514:699): avc: denied { open } for pid=9044 comm="syz.4.718" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 491.639644][ T9065] kvm: emulating exchange as write [ 493.268322][ T9078] futex_wake_op: syz.2.724 tries to shift op by 36; fix this program [ 495.824025][ T9084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.727'. [ 499.609241][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.621160][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.629539][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.659727][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.670801][ T5219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 499.678697][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.868530][ T5267] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 500.191977][ T5267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.338746][ T29] audit: type=1400 audit(1724433954.274:700): avc: denied { write } for pid=9115 comm="syz.1.732" path="socket:[22593]" dev="sockfs" ino=22593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 500.393948][ T5267] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 500.408773][ T5267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.432422][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.476795][ T5267] usb 5-1: SerialNumber: syz [ 500.651369][ T9111] chnl_net:caif_netlink_parms(): no params data found [ 500.720477][ T8732] usb 5-1: USB disconnect, device number 10 [ 501.485735][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.492850][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.544118][ T9111] bridge_slave_0: entered allmulticast mode [ 501.642438][ T9111] bridge_slave_0: entered promiscuous mode [ 501.674867][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.699654][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.754914][ T9111] bridge_slave_1: entered allmulticast mode [ 501.782507][ T9111] bridge_slave_1: entered promiscuous mode [ 501.782556][ T5219] Bluetooth: hci2: command tx timeout [ 501.946547][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.141046][ T9111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.172493][ T9111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.498039][ T9111] team0: Port device team_slave_0 added [ 502.557309][ T9111] team0: Port device team_slave_1 added [ 502.864750][ T29] audit: type=1400 audit(1724433956.854:701): avc: denied { execute } for pid=9149 comm="syz.3.740" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 502.939160][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.972786][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.098282][ T9111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.158305][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.192173][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.283339][ T9111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.867566][ T5231] Bluetooth: hci2: command tx timeout [ 504.303992][ T29] audit: type=1400 audit(1724433957.824:702): avc: denied { shutdown } for pid=9154 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.691191][ T9111] hsr_slave_0: entered promiscuous mode [ 504.730873][ T9111] hsr_slave_1: entered promiscuous mode [ 505.213977][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 505.455170][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 505.486195][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.563794][ T9] usb 3-1: config 0 has no interfaces? [ 505.600106][ T9] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 505.690492][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.725916][ T9] usb 3-1: Product: syz [ 505.730165][ T9] usb 3-1: Manufacturer: syz [ 505.792424][ T9] usb 3-1: SerialNumber: syz [ 505.862471][ T9] usb 3-1: config 0 descriptor?? [ 505.932109][ T9111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.944286][ T5231] Bluetooth: hci2: command 0x040f tx timeout [ 506.042624][ T9179] team_slave_0: entered promiscuous mode [ 506.049093][ T9179] team_slave_1: entered promiscuous mode [ 506.265375][ T9111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.616113][ T9111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.722729][ T53] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 506.994394][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.052060][ T53] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 507.080331][ T9111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.127316][ T53] usb 5-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 507.148866][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.203479][ T53] usb 5-1: Product: syz [ 507.235771][ T53] usb 5-1: Manufacturer: syz [ 507.272003][ T53] usb 5-1: SerialNumber: syz [ 507.309986][ T53] usb 5-1: config 0 descriptor?? [ 507.351648][ T53] pl2303 5-1:0.0: required endpoints missing [ 508.015167][ T9179] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 508.022980][ T5219] Bluetooth: hci2: command 0x040f tx timeout [ 508.125535][ T9179] team_slave_0: left promiscuous mode [ 508.131181][ T9179] team_slave_1: left promiscuous mode [ 508.523283][ T9179] team_slave_0: entered promiscuous mode [ 508.528975][ T9179] team_slave_1: entered promiscuous mode [ 508.543104][ T9179] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.161166][ T9179] bond0: (slave team0): Enslaving as an active interface with an up link [ 509.325398][ T9183] usb 3-1: USB disconnect, device number 6 [ 509.397856][ T5269] usb 5-1: USB disconnect, device number 11 [ 509.414752][ T9111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 510.094343][ T5219] Bluetooth: hci2: command 0x040f tx timeout [ 512.998135][ T9179] team_slave_0: left promiscuous mode [ 513.003786][ T9179] team_slave_1: left promiscuous mode [ 513.025196][ T9111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.988056][ T9111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 514.124064][ T9111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.450217][ T9209] input: syz0 as /devices/virtual/input/input13 [ 514.780914][ T9111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.894776][ T9111] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.014677][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.021802][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.058409][ T29] audit: type=1400 audit(1724433969.024:703): avc: denied { getopt } for pid=9212 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 515.108033][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.115265][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.200458][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 515.213772][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 515.284423][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 515.318787][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 515.336450][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 515.346556][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 515.582166][ T9111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.899956][ T9234] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 516.907028][ T9234] PKCS7: Only support pkcs7_signedData type [ 517.455682][ T5219] Bluetooth: hci6: command tx timeout [ 517.728801][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.942622][ T9215] chnl_net:caif_netlink_parms(): no params data found [ 519.742194][ T5219] Bluetooth: hci6: command tx timeout [ 521.774648][ T5219] Bluetooth: hci6: command tx timeout [ 522.074315][ T9111] veth0_vlan: entered promiscuous mode [ 522.237920][ T9111] veth1_vlan: entered promiscuous mode [ 523.863993][ T5219] Bluetooth: hci6: command tx timeout [ 524.718991][ T29] audit: type=1400 audit(1724433978.694:704): avc: denied { accept } for pid=9262 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 526.230005][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.280663][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.316075][ T9215] bridge_slave_0: entered allmulticast mode [ 526.356194][ T9215] bridge_slave_0: entered promiscuous mode [ 526.367232][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.402841][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.241853][ T9215] bridge_slave_1: entered allmulticast mode [ 527.317065][ T9215] bridge_slave_1: entered promiscuous mode [ 528.680690][ T9111] veth0_macvtap: entered promiscuous mode [ 528.693051][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.780954][ T9111] veth1_macvtap: entered promiscuous mode [ 528.835498][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.314253][ T9215] team0: Port device team_slave_0 added [ 529.343250][ T9283] Non-string source [ 529.365458][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.467568][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.535620][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.591721][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.670322][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.763922][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.846189][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.915633][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.948631][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.981519][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.045609][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.082784][ T9215] team0: Port device team_slave_1 added [ 530.395746][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.432095][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.555755][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.660434][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.660454][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.660484][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.732990][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.733014][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.733027][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.733053][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.733066][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.733083][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.733095][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.733112][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.733125][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.733141][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.768897][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.996324][ T9111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.348222][ T9111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.372442][ T29] audit: type=1400 audit(1724433985.354:705): avc: denied { mount } for pid=9297 comm="syz.3.772" name="/" dev="autofs" ino=23231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 531.428156][ T9111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.521288][ T9111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.676510][ T9215] hsr_slave_0: entered promiscuous mode [ 531.719769][ T9215] hsr_slave_1: entered promiscuous mode [ 531.803106][ T9215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.844673][ T9215] Cannot create hsr debugfs directory [ 533.598088][ T29] audit: type=1400 audit(1724433987.564:706): avc: denied { unmount } for pid=6681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 534.093067][ T9319] 9pnet: p9_errstr2errno: server reported unknown error [ 534.100994][ T7846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.161482][ T7846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.452034][ T9215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.769398][ T9215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.097832][ T7832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.097901][ T7832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.255808][ T9215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.392069][ T9215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.024771][ T9339] Process accounting resumed [ 538.156420][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 538.223897][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 538.246353][ T9215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 538.249597][ T9343] Bluetooth: MGMT ver 1.23 [ 538.389525][ T9215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 538.490389][ T9215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 538.645673][ T9215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.360699][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.467782][ T9215] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.561600][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.568816][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.639874][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.647008][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.374093][ T29] audit: type=1400 audit(1724433996.354:707): avc: denied { create } for pid=9370 comm="syz.2.790" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 542.394827][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 542.541935][ T9215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.541865][ T9215] veth0_vlan: entered promiscuous mode [ 543.559673][ T9215] veth1_vlan: entered promiscuous mode [ 543.802152][ T9215] veth0_macvtap: entered promiscuous mode [ 544.802652][ T9215] veth1_macvtap: entered promiscuous mode [ 545.035355][ T9394] program syz.4.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.085499][ T29] audit: type=1400 audit(1724433999.074:708): avc: denied { ioctl } for pid=9389 comm="syz.2.795" path="socket:[24736]" dev="sockfs" ino=24736 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 545.247592][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.299075][ T29] audit: type=1400 audit(1724433999.284:709): avc: denied { setopt } for pid=9389 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 545.324548][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.348238][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.373662][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.402747][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.424980][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.447235][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.485740][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.511629][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.561320][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.595076][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.638938][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.686516][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.724964][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.778001][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.842325][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.871408][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.911318][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.932949][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.153659][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.421249][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.431346][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.442419][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.453917][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.471460][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.021266][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.185924][ T9215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.269003][ T9215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.634464][ T9215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.712843][ T9215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.031819][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 550.083424][ T9414] hfs: invalid gid -1 [ 550.118030][ T9414] hfs: unable to parse mount options [ 552.008002][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.113891][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.354446][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.355550][ T5231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.362269][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.388257][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.396384][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.409616][ T5231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.423376][ T5231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 553.435833][ T5231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 554.358163][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 555.277457][ T29] audit: type=1400 audit(1724434009.264:710): avc: denied { ioctl } for pid=9461 comm="syz.4.809" path="socket:[25040]" dev="sockfs" ino=25040 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 555.544062][ T5219] Bluetooth: hci7: command tx timeout [ 556.229846][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 556.421944][ T7836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.667235][ T9474] ptrace attach of "./syz-executor exec"[5221] was attempted by "./syz-executor exec"[9474] [ 556.896981][ T7836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.674225][ T5219] Bluetooth: hci7: command tx timeout [ 558.387442][ T7836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.518346][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.604054][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.622980][ T9435] bridge_slave_0: entered allmulticast mode [ 558.662998][ T9435] bridge_slave_0: entered promiscuous mode [ 558.704979][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.741466][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.769727][ T9435] bridge_slave_1: entered allmulticast mode [ 558.828385][ T9435] bridge_slave_1: entered promiscuous mode [ 559.758547][ T5219] Bluetooth: hci7: command tx timeout [ 560.071485][ T7836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.485379][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.564945][ T9505] Bluetooth: MGMT ver 1.23 [ 561.252425][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.659573][ T9435] team0: Port device team_slave_0 added [ 561.759883][ T9435] team0: Port device team_slave_1 added [ 561.773948][ T5231] Bluetooth: hci7: command tx timeout [ 562.167085][ T9518] binder: 9513:9518 ioctl c0306201 200003c0 returned -14 [ 562.183028][ T29] audit: type=1400 audit(1724434016.164:711): avc: denied { transfer } for pid=9513 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 563.028256][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.036912][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.794811][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.923890][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.987206][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.011998][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.174081][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.022993][ T9435] hsr_slave_0: entered promiscuous mode [ 565.206022][ T9435] hsr_slave_1: entered promiscuous mode [ 565.292876][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.550432][ T9435] Cannot create hsr debugfs directory [ 565.637617][ T7836] bridge_slave_1: left allmulticast mode [ 570.031810][ T7836] bridge_slave_1: left promiscuous mode [ 570.144193][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.365009][ T7836] bridge_slave_0: left allmulticast mode [ 570.370749][ T7836] bridge_slave_0: left promiscuous mode [ 570.563252][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.505039][ T5301] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 572.591420][ T7836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.620230][ T7836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.654433][ T7836] bond0 (unregistering): Released all slaves [ 572.724126][ T5301] usb 4-1: Using ep0 maxpacket: 16 [ 572.746626][ T5301] usb 4-1: config 1 interface 0 altsetting 192 bulk endpoint 0x82 has invalid maxpacket 64 [ 572.794528][ T5301] usb 4-1: config 1 interface 0 altsetting 192 bulk endpoint 0x3 has invalid maxpacket 32 [ 572.843977][ T5301] usb 4-1: config 1 interface 0 has no altsetting 0 [ 572.885218][ T5301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.997444][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.056368][ T5301] usb 4-1: Product: И [ 573.082494][ T5301] usb 4-1: Manufacturer: ࠁ [ 573.365067][ T9575] ucma_write: process 674 (syz.2.829) changed security contexts after opening file descriptor, this is not allowed. [ 574.024480][ T9565] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.044122][ T9565] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.919028][ T5301] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 575.023989][ T5301] usb 4-1: USB disconnect, device number 6 [ 575.064463][ T5267] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 575.273754][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 575.307291][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 575.339219][ T5267] usb 5-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 575.381187][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.404367][ T29] audit: type=1400 audit(1724434029.394:712): avc: denied { accept } for pid=9583 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.452740][ T5267] usb 5-1: Product: syz [ 575.510805][ T5267] usb 5-1: Manufacturer: syz [ 575.556366][ T5267] usb 5-1: SerialNumber: syz [ 575.590073][ T5267] usb 5-1: config 0 descriptor?? [ 575.632181][ T5267] usb-storage 5-1:0.0: USB Mass Storage device detected [ 575.794120][ T5225] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 576.006985][ T5225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.134606][ T5225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.282333][ T5225] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.350444][ T9] usb 5-1: USB disconnect, device number 12 [ 576.414051][ T5225] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 576.459889][ T5225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.556797][ T5225] usb 2-1: config 0 descriptor?? [ 577.126402][ T5225] holtek_mouse 0003:04D9:A070.0003: item fetching failed at offset 2/5 [ 577.242167][ T5225] holtek_mouse 0003:04D9:A070.0003: hid parse failed: -22 [ 577.277740][ T7836] hsr_slave_0: left promiscuous mode [ 577.364836][ T7836] hsr_slave_1: left promiscuous mode [ 577.384464][ T5225] holtek_mouse 0003:04D9:A070.0003: probe with driver holtek_mouse failed with error -22 [ 577.420749][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.450319][ T7836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.482497][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.534965][ T7836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.554145][ T5225] usb 2-1: USB disconnect, device number 10 [ 577.789388][ T7836] veth1_macvtap: left promiscuous mode [ 577.795495][ T7836] veth0_macvtap: left promiscuous mode [ 577.801515][ T7836] veth1_vlan: left promiscuous mode [ 577.807263][ T7836] veth0_vlan: left promiscuous mode [ 578.924474][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 579.145267][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 579.238829][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.259193][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.279073][ T9] usb 5-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.00 [ 579.298911][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.328477][ T9] usb 5-1: config 0 descriptor?? [ 584.799559][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 585.084895][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 585.109638][ T9] usb 5-1: USB disconnect, device number 13 [ 585.700104][ T53] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 586.394964][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.484602][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.536967][ T53] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 586.574189][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.617292][ T53] usb 3-1: config 0 descriptor?? [ 586.866641][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.900369][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.173255][ T7836] team0 (unregistering): Port device team_slave_1 removed [ 588.467771][ T7836] team0 (unregistering): Port device team_slave_0 removed [ 588.660194][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 588.671677][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 588.709924][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.721026][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.729826][ T5219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 588.737990][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.427211][ T53] usbhid 3-1:0.0: can't add hid device: -71 [ 589.433653][ T53] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 589.467531][ T53] usb 3-1: USB disconnect, device number 7 [ 590.814062][ T5219] Bluetooth: hci2: command tx timeout [ 593.033898][ T5219] Bluetooth: hci2: command tx timeout [ 593.435988][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 593.674487][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 593.732549][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.774523][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.842982][ T8] usb 3-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 593.887791][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.914345][ T8] usb 3-1: Product: syz [ 593.928433][ T8] usb 3-1: Manufacturer: syz [ 594.003889][ T8] usb 3-1: SerialNumber: syz [ 594.054284][ T8] usb 3-1: config 0 descriptor?? [ 595.118226][ T5231] Bluetooth: hci2: command tx timeout [ 596.236423][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 596.800420][ T29] audit: type=1400 audit(1724434050.734:713): avc: denied { connect } for pid=9698 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 597.135185][ T5219] Bluetooth: hci2: command tx timeout [ 597.448825][ T5267] usb 3-1: USB disconnect, device number 8 [ 597.514908][ T9435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 597.801971][ T9435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 597.903620][ T9727] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 598.841009][ T9655] chnl_net:caif_netlink_parms(): no params data found [ 598.973065][ T9435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 599.298121][ T9435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 601.503438][ T7832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.806461][ T9655] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.834114][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.879335][ T9655] bridge_slave_0: entered allmulticast mode [ 601.935423][ T9655] bridge_slave_0: entered promiscuous mode [ 602.172654][ T7832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.281250][ T9655] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.313696][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.367111][ T9655] bridge_slave_1: entered allmulticast mode [ 602.392475][ T9655] bridge_slave_1: entered promiscuous mode [ 603.487325][ T7832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.530690][ T9655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.569091][ T9655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.743723][ T7832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.021418][ T9655] team0: Port device team_slave_0 added [ 604.038194][ T9655] team0: Port device team_slave_1 added [ 604.159083][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.171260][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.244395][ T9655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.266038][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.279645][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.311992][ T9655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.369299][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.633002][ T9655] hsr_slave_0: entered promiscuous mode [ 604.679810][ T9655] hsr_slave_1: entered promiscuous mode [ 604.864834][ T7832] bridge_slave_1: left allmulticast mode [ 604.872230][ T7832] bridge_slave_1: left promiscuous mode [ 604.888361][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.935914][ T7832] bridge_slave_0: left allmulticast mode [ 604.962805][ T7832] bridge_slave_0: left promiscuous mode [ 604.982530][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.353531][ T29] audit: type=1400 audit(1724434059.334:714): avc: denied { lock } for pid=9764 comm="syz.2.862" path="socket:[25756]" dev="sockfs" ino=25756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 710.353824][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 710.360803][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9010/1:b..l P9768/1:b..l [ 710.370385][ C0] rcu: (detected by 0, t=10502 jiffies, g=43757, q=283 ncpus=2) [ 710.378083][ C0] task:syz.4.864 state:R running task stack:27696 pid:9768 tgid:9766 ppid:8881 flags:0x00004000 [ 710.390717][ C0] Call Trace: [ 710.393987][ C0] [ 710.396901][ C0] __schedule+0xe37/0x5490 [ 710.401309][ C0] ? __pfx___schedule+0x10/0x10 [ 710.406150][ C0] ? mark_held_locks+0x9f/0xe0 [ 710.410912][ C0] preempt_schedule_irq+0x51/0x90 [ 710.415924][ C0] irqentry_exit+0x36/0x90 [ 710.420326][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 710.426378][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 710.431682][ C0] Code: c1 05 0a 10 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 710.451299][ C0] RSP: 0018:ffffc900034f7678 EFLAGS: 00000206 [ 710.457357][ C0] RAX: dffffc0000000000 RBX: 1ffff9200069eed1 RCX: 0000000000000001 [ 710.465314][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc7c0 RDI: ffffffff8bb09880 [ 710.473267][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c56e0 [ 710.481239][ C0] R10: ffffffff9462b707 R11: 0000000000000000 R12: 0000000000000000 [ 710.489194][ C0] R13: 0000000000000000 R14: ffffffff8ddb5be0 R15: 0000000000000000 [ 710.497156][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 710.502172][ C0] count_memcg_event_mm.part.0+0x37/0x340 [ 710.507876][ C0] ? count_memcg_event_mm.part.0+0x31/0x340 [ 710.513752][ C0] handle_mm_fault+0x1b5/0x7b0 [ 710.518843][ C0] __get_user_pages+0x475/0x15c0 [ 710.523788][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 710.529157][ C0] __gup_longterm_locked+0x22e/0x1b30 [ 710.534517][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 710.539551][ C0] ? __pfx___gup_longterm_locked+0x10/0x10 [ 710.545348][ C0] ? rwsem_read_trylock+0x12d/0x250 [ 710.550534][ C0] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 710.556066][ C0] pin_user_pages_remote+0xee/0x150 [ 710.561254][ C0] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 710.567051][ C0] ? down_read+0xc9/0x330 [ 710.571372][ C0] process_vm_rw_core.constprop.0+0x439/0x9f0 [ 710.577441][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.582632][ C0] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 710.589221][ C0] ? copy_iovec_from_user+0x77/0x170 [ 710.594504][ C0] process_vm_rw+0x301/0x360 [ 710.599083][ C0] ? __pfx_process_vm_rw+0x10/0x10 [ 710.604204][ C0] ? xfd_validate_state+0x5d/0x180 [ 710.609318][ C0] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 710.614940][ C0] ? do_syscall_64+0x91/0x250 [ 710.619614][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.624806][ C0] do_syscall_64+0xcd/0x250 [ 710.629304][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.635193][ C0] RIP: 0033:0x7f6707379e79 [ 710.639603][ C0] RSP: 002b:00007f670815d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 710.648025][ C0] RAX: ffffffffffffffda RBX: 00007f6707515f80 RCX: 00007f6707379e79 [ 710.655987][ C0] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 00000000000000b8 [ 710.663945][ C0] RBP: 00007f67073e793e R08: 0000000000000286 R09: 0000000000000000 [ 710.671901][ C0] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 710.679854][ C0] R13: 0000000000000000 R14: 00007f6707515f80 R15: 00007fff9b1b23b8 [ 710.687810][ C0] [ 710.690813][ C0] task:syz.0.703 state:R running task stack:24672 pid:9010 tgid:9006 ppid:7246 flags:0x00004006 [ 710.702522][ C0] Call Trace: [ 710.705784][ C0] [ 710.708699][ C0] __schedule+0xe37/0x5490 [ 710.713104][ C0] ? __pfx_mark_lock+0x10/0x10 [ 710.718204][ C0] ? __pfx___schedule+0x10/0x10 [ 710.723043][ C0] ? mark_held_locks+0x9f/0xe0 [ 710.727792][ C0] preempt_schedule_irq+0x51/0x90 [ 710.732803][ C0] irqentry_exit+0x36/0x90 [ 710.737207][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 710.742653][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20 [ 710.749407][ C0] Code: 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd [ 710.768999][ C0] RSP: 0018:ffffc900030f6fe8 EFLAGS: 00000246 [ 710.775049][ C0] RAX: 0000000000040000 RBX: ffffc900030f7090 RCX: ffffc900099f2000 [ 710.783003][ C0] RDX: 0000000000040000 RSI: 0000000000000003 RDI: 0000000000000002 [ 710.790965][ C0] RBP: 0000000000000003 R08: 0000000000000007 R09: 0000000000000000 [ 710.798921][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 710.806881][ C0] R13: ffffc900030f70a8 R14: ffff88807bb9af80 R15: 00000000000001c4 [ 710.814844][ C0] xas_start+0x5e/0x790 [ 710.818988][ C0] xas_load+0x22/0x5b0 [ 710.823040][ C0] filemap_get_entry+0x10a/0x3c0 [ 710.827966][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 710.833412][ C0] ? hlock_class+0x4e/0x130 [ 710.837905][ C0] shmem_get_folio_gfp+0x226/0x15e0 [ 710.843101][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 710.848731][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 710.853743][ C0] shmem_fault+0x205/0xaf0 [ 710.858156][ C0] ? hlock_class+0x4e/0x130 [ 710.862649][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 710.867571][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 710.872325][ C0] ? __pfx_lock_release+0x10/0x10 [ 710.877335][ C0] ? pte_offset_map_nolock+0xfe/0x1c0 [ 710.882693][ C0] __do_fault+0x10a/0x490 [ 710.887007][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 710.892457][ C0] __handle_mm_fault+0x3cc8/0x55b0 [ 710.897559][ C0] ? __pfx_mt_find+0x10/0x10 [ 710.902139][ C0] ? find_held_lock+0x2d/0x110 [ 710.906897][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 710.912350][ C0] ? find_vma+0xc0/0x140 [ 710.916578][ C0] ? __pfx_find_vma+0x10/0x10 [ 710.921243][ C0] handle_mm_fault+0x44e/0x7b0 [ 710.926002][ C0] ? __pkru_allows_pkey+0x52/0xb0 [ 710.931014][ C0] do_user_addr_fault+0x7a3/0x13f0 [ 710.936116][ C0] exc_page_fault+0x5c/0xc0 [ 710.940615][ C0] asm_exc_page_fault+0x26/0x30 [ 710.945450][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 710.951252][ C0] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 710.970847][ C0] RSP: 0018:ffffc900030f76a0 EFLAGS: 00050206 [ 710.976900][ C0] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 710.984876][ C0] RDX: 0000000000000000 RSI: ffff88806be9e000 RDI: 00000000201c4000 [ 710.992829][ C0] RBP: 00000000201c4000 R08: 0000000000000000 R09: ffffed100d7d3dff [ 711.000784][ C0] R10: ffff88806be9efff R11: 0000000000000000 R12: ffffc900030f7b38 [ 711.008741][ C0] R13: 00000000201c5000 R14: ffff88806be9e000 R15: 0000000000000000 [ 711.016703][ C0] _copy_to_iter+0x37e/0x1150 [ 711.021373][ C0] ? __pfx__copy_to_iter+0x10/0x10 [ 711.026472][ C0] ? kasan_check_range+0x1b/0x1a0 [ 711.031486][ C0] ? const_folio_flags+0x71/0x1f0 [ 711.036496][ C0] ? folio_flags.constprop.0+0x56/0x150 [ 711.042044][ C0] ? folio_mark_accessed+0x1ff/0xb20 [ 711.047316][ C0] ? __pfx_folio_mark_accessed+0x10/0x10 [ 711.052940][ C0] copy_page_to_iter+0xf1/0x180 [ 711.057786][ C0] filemap_read+0x69f/0xd10 [ 711.062301][ C0] ? __pfx_filemap_read+0x10/0x10 [ 711.067319][ C0] ? mark_lock+0xb5/0xc60 [ 711.071634][ C0] ? inode_security+0x101/0x130 [ 711.076467][ C0] ? avc_policy_seqno+0x9/0x20 [ 711.081217][ C0] ? selinux_file_permission+0x125/0x590 [ 711.086833][ C0] blkdev_read_iter+0x18d/0x490 [ 711.091671][ C0] aio_read+0x31c/0x4e0 [ 711.095812][ C0] ? __pfx_aio_read+0x10/0x10 [ 711.100472][ C0] ? find_held_lock+0x2d/0x110 [ 711.105226][ C0] ? __pfx___might_resched+0x10/0x10 [ 711.110500][ C0] ? io_submit_one+0x1586/0x1db0 [ 711.115436][ C0] io_submit_one+0x1586/0x1db0 [ 711.120192][ C0] ? __pfx_io_submit_one+0x10/0x10 [ 711.125290][ C0] ? __might_fault+0x13b/0x190 [ 711.130035][ C0] ? __pfx_lock_release+0x10/0x10 [ 711.135050][ C0] ? __might_fault+0xe3/0x190 [ 711.139709][ C0] ? __x64_sys_io_submit+0x19d/0x330 [ 711.144982][ C0] __x64_sys_io_submit+0x19d/0x330 [ 711.150081][ C0] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 711.155708][ C0] do_syscall_64+0xcd/0x250 [ 711.160207][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.166094][ C0] RIP: 0033:0x7f165e579e79 [ 711.170492][ C0] RSP: 002b:00007f165f2aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 711.178890][ C0] RAX: ffffffffffffffda RBX: 00007f165e716058 RCX: 00007f165e579e79 [ 711.186846][ C0] RDX: 00000000200000c0 RSI: 00000000000000ca RDI: 00007f165f289000 [ 711.194803][ C0] RBP: 00007f165e5e793e R08: 0000000000000000 R09: 0000000000000000 [ 711.202756][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.210712][ C0] R13: 0000000000000000 R14: 00007f165e716058 R15: 00007ffe043e6158 [ 711.218670][ C0] [ 711.221681][ C0] rcu: rcu_preempt kthread starved for 10585 jiffies! g43757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 711.232855][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 711.242823][ C0] rcu: RCU grace-period kthread stack dump: [ 711.248691][ C0] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 711.260402][ C0] Call Trace: [ 711.263663][ C0] [ 711.266583][ C0] __schedule+0xe37/0x5490 [ 711.270989][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 711.276176][ C0] ? __pfx___schedule+0x10/0x10 [ 711.281011][ C0] ? schedule+0x298/0x350 [ 711.285327][ C0] ? __pfx_lock_release+0x10/0x10 [ 711.290336][ C0] ? __pfx___mod_timer+0x10/0x10 [ 711.295270][ C0] ? lock_acquire+0x1b1/0x560 [ 711.299941][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 711.305387][ C0] schedule+0xe7/0x350 [ 711.309445][ C0] schedule_timeout+0x136/0x2a0 [ 711.314281][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 711.319637][ C0] ? __pfx_process_timeout+0x10/0x10 [ 711.324908][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 711.330699][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 711.336147][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 711.340896][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 711.346167][ C0] ? rcu_gp_init+0xc82/0x1630 [ 711.350847][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 711.356045][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 711.361874][ C0] rcu_gp_kthread+0x271/0x380 [ 711.366538][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 711.371723][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.376912][ C0] ? __kthread_parkme+0x148/0x220 [ 711.381929][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 711.387113][ C0] kthread+0x2c1/0x3a0 [ 711.391164][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.396348][ C0] ? __pfx_kthread+0x10/0x10 [ 711.400917][ C0] ret_from_fork+0x45/0x80 [ 711.405326][ C0] ? __pfx_kthread+0x10/0x10 [ 711.409898][ C0] ret_from_fork_asm+0x1a/0x30 [ 711.414656][ C0] [ 711.417657][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 711.423969][ C0] Sending NMI from CPU 0 to CPUs 1: [ 711.429169][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 711.443439][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P9010 } 10607 jiffies s: 16837 root: 0x0/T [ 711.457131][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.466643][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.843122][ T19] rcu: blocking rcu_node structures (internal RCU debug): SYZFAIL: failed to send rpc fd=3 want=142984 sent=0 n=-1 (errno 32: Broken pipe) [ 713.553871][ T9773] Bluetooth: hci7: command 0x0406 tx timeout [ 713.560013][ T9773] Bluetooth: hci6: command 0x0406 tx timeout [ 714.662188][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 715.326191][ T7832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.411218][ T7832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.446569][ T7832] bond0 (unregistering): Released all slaves [ 715.519927][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.954253][ T7832] hsr_slave_0: left promiscuous mode [ 717.031810][ T7832] hsr_slave_1: left promiscuous mode [ 717.134502][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.141959][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.204658][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.212068][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.338822][ T7832] veth1_macvtap: left promiscuous mode [ 717.344625][ T7832] veth0_macvtap: left promiscuous mode [ 717.350627][ T7832] veth1_vlan: left promiscuous mode [ 717.365448][ T7832] veth0_vlan: left promiscuous mode [ 719.178030][ T7832] team0 (unregistering): Port device team_slave_1 removed [ 719.274840][ T7832] team0 (unregistering): Port device team_slave_0 removed