last executing test programs: 39.956689698s ago: executing program 2 (id=1736): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) 39.635213791s ago: executing program 2 (id=1738): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000500)={@initdev={0xac, 0x1e, 0xfc, 0x0}, 0x0, 0x0, 0x60, 0x0, [{@initdev}, {@broadcast}, {@remote}, {@broadcast}, {@private}, {@broadcast}]}}) syz_open_dev$mouse(&(0x7f0000000100), 0x25, 0x400) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x1000, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={r4, 0xae, 0x3, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8], [0x0, 0x2], [0x0, 0x0, 0x2, 0x3ff]}) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) r9 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x20000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_FLAGS(r9, 0xab0a, 0x1000001000105) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r9, 0xab04) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) 33.733863709s ago: executing program 2 (id=1741): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r2, 0x0, 0x3, 0x1}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x36, 0x0, &(0x7f0000000380)='GPL\x00', 0xa, 0x95, &(0x7f00000003c0)=""/149}, 0x90) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="043e320d021b"], 0x35) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd6002000b00482f00fe880000000000200000000000000001fe8000000000000000000000000000aa242065580004000097de000000000800000086dd080088be00000000100000000100000000000000085822eb00000000200000000200000000000000000000000800655800000000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1}, {0x0, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x5c, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0xfd87, 0x4) shutdown(0xffffffffffffffff, 0x0) 31.903545423s ago: executing program 2 (id=1749): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xa2f00) r2 = dup3(r1, r0, 0x0) read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) read$watch_queue(r2, 0x0, 0x0) 30.660593421s ago: executing program 2 (id=1759): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r7, @ANYBLOB="08000c00ff"], 0x28}}, 0x0) 30.046646802s ago: executing program 0 (id=1761): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="3813232f84cd26d9005347e794d20f1475699b1145394eb016ca0d073daec7c5ee9aa53c7c6f5fed948bc7f4b15fb8640ee62937d9260b67931adc9c7927181f91f151c534dbdfff9c5b47448f0874d64ca2a27322dd0210d7c2db893992d4fd1576624a69721cbd3266f78bbca6edcdd5145b79786a0003f07405a34c21a4065de82653edb3cda95df89ba4f95955c9b0852e70183288bf005ceae024374fcfbae6d2aa146a885e70443d8ae9ca3387788462f2fab35928f9042b48175cbaa7bf37d7cb7dce287dcc1124a0b9b5a2001808d0f765d880c0481a495b54dc435339ff9a1ed5f9dd7ca2e2e31e6c911b2412a2588849cc3823865da292481fe5f219356a94a3f1f9ef6cad098c2a69d0e67b487035f421da922b79b116c68ce768bc01b042f915e22f6b4b5ea824db801582ddee1f20a238f9f41531394bb4a85babfb032c9b6f5b23d735deec799c4ed109c93422ac30ff6661a16eb8d5652429129ed76dffab96333869d9b3aa48f0d28d7d20f4e47e525f0f53482c1cbdec8a249147f264b5ceb952ca6e61d87fd0aafa24e505efcafd4f41dfbede5ab40c94432a929af6a204182abfb059cb162f39af834ed2a864647e7a312f6fc747893a849409e3ba1aa8333f71088a3195e0e45acd35fd5315e3f7b1570133c64dee9eff0e0c30c4729b2ac5012c8f7c103fc4ae7a55ddcd5126a66ff781723ab68cfa4fe7c61e6d23869d9d3797fd41f483f170301e198c9aa0623e67b1b7da274c0e3ee0b6f3a760232225dc565f3ee080dc5f53e07aa712435238e4849ae9286fc2f566c9a5c2424a94bf104f1bfc3ae8f00484ca2dc98e5db0618f47ced727cc86e42df8b8efd30900baa989038be57a9a92aeaf1da64e5badfe45711761720ede6c33ba9c63446ce7ead647fa8cd421fa704dc82119701c61d32f66e889f19e629b4be919e0cfca99ab88234ee6cf8b5837e69eb577f8b2dcda0649eaeba01444b011cdb845c42196e471bceb16b4155e4fdf0d824dba1d99a7451455abd69b3ecc802022b120be41f04cfbfa8d1c179f232e7f25634c329b87b0e250c7cbdff9ab81246a4856af96eaad826a3d6d3d057eb1dac0d2c74c7fa1c97fae59fb9b432848fb9ce7b5186c7362076a6c7d2765170fd81bcb27216c3d6f37ab3c8234badcf972b673848fe6341c02f12c044d82654dee1271fb66d0f161a3973be22c01256f196d1ec37dca5d6a1b7137a80d47cf5563edd9c96535796bbf4f8f734e379b42f1a932897dc7f95ded95f3e28791bc5b52db3e9c3d61fc1b1093ae342fccf6737a63907493f497b21ce084d8c2a82bcf6e9649e0352c3b1941f9b30bf89ef60e549e600e2ceb45b4b9f432db72a1c2d005b236982330ea2d9ed8a8023e39f096d172371c73706315a7edd47b809562b28510ecae700021af2a56af99b05a"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) iopl(0x3) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r2 = dup(r1) write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x4) 29.660235785s ago: executing program 0 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="022786dd0501100e0300400000006000000601002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 26.721080638s ago: executing program 0 (id=1766): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) 26.624477129s ago: executing program 2 (id=1767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x220}}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 26.598274974s ago: executing program 0 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0x6}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = io_uring_setup(0x69af, &(0x7f0000001240)={0x0, 0x1}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r7 = inotify_init1(0x80000) close_range(0xffffffffffffffff, r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept4$nfc_llcp(r5, &(0x7f0000000380), &(0x7f00000001c0)=0x60, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, 0x0) 25.512727037s ago: executing program 0 (id=1771): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) 25.217229122s ago: executing program 0 (id=1772): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e002176820ecc76c0b0f938f1a2bd6fc37110017f"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 10.839698394s ago: executing program 4 (id=1791): open(&(0x7f00000003c0)='./file0\x00', 0x62040, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 10.396401984s ago: executing program 4 (id=1793): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffdf00f}, {0x80000006}]}, 0x10) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = epoll_create1(0x0) r4 = dup(r3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000100)={0x1, r6}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xffffffffffffffff) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000008c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000380)="62042802590500000000042f1eafbc0700000000000000582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247306af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb", 0x7a}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000002c0)=0x1) lseek(r7, 0x9, 0x4) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000cc0)={0x1, r6}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)='R', 0x1, 0x0, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) 8.428938485s ago: executing program 4 (id=1798): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x100, 0x0, 0x0, 0x1}) 8.105642954s ago: executing program 4 (id=1800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100039a00"/20, @ANYRES32=r3, @ANYBLOB="000020000008000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008000a0000000000e000e218d1ddf6", 0x71, 0x0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000024c0)=@chain) keyctl$link(0x8, r5, r6) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x101) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000003c0)) r8 = socket$inet_dccp(0x2, 0x6, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000100)=0xffffffff, 0x4) setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r8, &(0x7f0000000780)="e0", 0xffc3, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r6) 430.155342ms ago: executing program 3 (id=1802): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 427.637916ms ago: executing program 4 (id=1803): r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, &(0x7f0000000000)=0xff75) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x37d9dbc4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x380}]}, 0x34}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x86000, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdn', @ANYBLOB=',wfdno', @ANYRESHEX]) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 426.442454ms ago: executing program 1 (id=1804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 424.845159ms ago: executing program 3 (id=1805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 422.926246ms ago: executing program 1 (id=1806): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffdf00f}, {0x80000006}]}, 0x10) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = epoll_create1(0x0) r4 = dup(r3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000100)={0x1, r6}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xffffffffffffffff) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000008c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000380)="62042802590500000000042f1eafbc0700000000000000582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247306af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb", 0x7a}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000002c0)=0x1) lseek(r7, 0x9, 0x4) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000cc0)={0x1, r6}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)='R', 0x1, 0x0, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) 418.770291ms ago: executing program 3 (id=1807): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 418.215102ms ago: executing program 3 (id=1808): inotify_init1(0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000000c0), 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000b00)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 414.170876ms ago: executing program 1 (id=1809): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff}, 0x6) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x33) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 407.201747ms ago: executing program 1 (id=1810): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001180)={0x10, 0x0, 0x3}, 0x10) 407.095165ms ago: executing program 3 (id=1811): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000640)={0x18, r1, 0xfffffffffffffffb, 0x7}) 406.769784ms ago: executing program 4 (id=1812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x4, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x70, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x1}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @union={0x10, 0x6, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x3}, {0xa, 0x0, 0x3}, {0xd, 0x1, 0x6bd}, {0x8, 0x5, 0x1}, {0x5, 0x3, 0x5}, {0x8, 0x0, 0xfffffffb}]}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0xffff, [{0x5, 0x0, 0x4}, {0x10, 0x0, 0x2}, {0xc, 0x4, 0x8}, {0xe, 0x1, 0x8}, {0x2, 0x4, 0x3}, {0xb, 0x1, 0x9}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @ptr={0xa}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000400)=""/161, 0x120, 0xa1, 0x1, 0x81}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYRES16=r4, @ANYRES32=r4], 0x90}}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r6, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000001c0), 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x800) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x0, &(0x7f00000005c0)) r8 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x40044160, &(0x7f0000000080)) clock_gettime(0x0, 0x0) 236.541064ms ago: executing program 3 (id=1813): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) 131.028636ms ago: executing program 1 (id=1814): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000021c0)='clear_refs\x00') write$yama_ptrace_scope(r0, 0x0, 0x2b) 0s ago: executing program 1 (id=1815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/68, 0x44}, {0x0}, {&(0x7f0000000240)=""/29, 0x1d}], 0x3, &(0x7f0000008640), 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x82, 0x0, &(0x7f0000000300)) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0/../file0/../file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x210bc2) kernel console output (not intermixed with test programs): sim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.550547][ T1095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.757858][ T8615] veth1_vlan: entered promiscuous mode [ 508.106933][ T1095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.536267][ T1095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.552883][ T53] Bluetooth: hci3: command tx timeout [ 509.927772][ T8615] veth0_macvtap: entered promiscuous mode [ 510.094989][ T8615] veth1_macvtap: entered promiscuous mode [ 510.486066][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.602087][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.633180][ T53] Bluetooth: hci3: command tx timeout [ 510.671715][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.692130][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.711791][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.531663][ T30] audit: type=1400 audit(1720641695.906:513): avc: denied { read } for pid=9017 comm="syz.3.1141" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 512.555644][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.632961][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.730955][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.744751][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.752935][ T53] Bluetooth: hci3: command tx timeout [ 512.780733][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.865435][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.880062][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.923826][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.930899][ T30] audit: type=1400 audit(1720641695.906:514): avc: denied { open } for pid=9017 comm="syz.3.1141" path="/265/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 512.941802][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.981658][ T30] audit: type=1400 audit(1720641695.946:515): avc: denied { ioctl } for pid=9017 comm="syz.3.1141" path="/265/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 513.022456][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.093848][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.118280][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 513.134539][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.505068][ T1095] bridge_slave_1: left allmulticast mode [ 513.546853][ T1095] bridge_slave_1: left promiscuous mode [ 513.568080][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.613201][ T1095] bridge_slave_0: left allmulticast mode [ 513.619307][ T1095] bridge_slave_0: left promiscuous mode [ 513.646818][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.793145][ T5090] Bluetooth: hci3: command tx timeout [ 515.191684][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.203005][ T5090] Bluetooth: hci4: command tx timeout [ 515.216595][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.240704][ T1095] bond0 (unregistering): Released all slaves [ 515.492098][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.514555][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.527579][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.539981][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.555682][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.568000][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.580131][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.594544][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.629345][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.657590][ T8615] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.670198][ T8615] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.682885][ T8615] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.695804][ T8615] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.836243][ T8989] chnl_net:caif_netlink_parms(): no params data found [ 517.272926][ T5090] Bluetooth: hci4: command tx timeout [ 518.147587][ T1095] hsr_slave_0: left promiscuous mode [ 518.216027][ T1095] hsr_slave_1: left promiscuous mode [ 518.272081][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.279859][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.292404][ T4725] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 518.340121][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.363862][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.483773][ T1095] veth1_macvtap: left promiscuous mode [ 518.490549][ T1095] veth0_macvtap: left promiscuous mode [ 518.497815][ T1095] veth1_vlan: left promiscuous mode [ 518.504341][ T1095] veth0_vlan: left promiscuous mode [ 518.556693][ T4725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.599624][ T4725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.657842][ T4725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.721798][ T4725] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.735743][ T4725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.780352][ T4725] usb 4-1: config 0 descriptor?? [ 518.885950][ T9106] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 519.057619][ T9106] evm: overlay not supported [ 519.112590][ T5972] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 519.291008][ T4725] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 519.353665][ T5090] Bluetooth: hci4: command tx timeout [ 519.355910][ T4725] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 520.689484][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 521.204211][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 521.432479][ T5090] Bluetooth: hci4: command tx timeout [ 521.455576][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 521.510964][ T30] audit: type=1400 audit(1720641705.276:516): avc: denied { write } for pid=9112 comm="syz.4.1160" path="socket:[25551]" dev="sockfs" ino=25551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 521.680876][ T5186] usb 4-1: USB disconnect, device number 7 [ 524.649357][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 525.118494][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.151283][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.162150][ T8989] bridge_slave_0: entered allmulticast mode [ 525.184435][ T8989] bridge_slave_0: entered promiscuous mode [ 525.208402][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.241659][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.297013][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.333550][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.354359][ T8989] bridge_slave_1: entered allmulticast mode [ 525.395736][ T8989] bridge_slave_1: entered promiscuous mode [ 525.669135][ T9139] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1166'. [ 525.680182][ T9139] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 525.716255][ T8989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.923861][ T8989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.168887][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.215056][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.345659][ T8989] team0: Port device team_slave_0 added [ 526.474189][ T8989] team0: Port device team_slave_1 added [ 526.736615][ T9036] chnl_net:caif_netlink_parms(): no params data found [ 526.794032][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.821659][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.904800][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.011731][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.020075][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.060633][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.732105][ T30] audit: type=1400 audit(1720641711.326:517): avc: denied { create } for pid=9160 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 528.414913][ T30] audit: type=1400 audit(1720641711.366:518): avc: denied { listen } for pid=9160 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 528.482425][ T30] audit: type=1400 audit(1720641711.706:519): avc: denied { connect } for pid=9160 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 529.071106][ T8989] hsr_slave_0: entered promiscuous mode [ 529.192734][ T8989] hsr_slave_1: entered promiscuous mode [ 529.251682][ T8989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.259428][ T8989] Cannot create hsr debugfs directory [ 529.485705][ T9189] Bluetooth: hci0: Frame reassembly failed (-84) [ 529.603294][ T11] Bluetooth: hci0: Frame reassembly failed (-84) [ 530.457470][ T1095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.841511][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.880600][ T30] audit: type=1400 audit(1720641714.646:520): avc: denied { getopt } for pid=9198 comm="syz.1.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 530.911365][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.931950][ T9036] bridge_slave_0: entered allmulticast mode [ 530.951478][ T9036] bridge_slave_0: entered promiscuous mode [ 531.189441][ T1095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.274300][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.334799][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.393944][ T9036] bridge_slave_1: entered allmulticast mode [ 531.417004][ T9036] bridge_slave_1: entered promiscuous mode [ 531.512318][ T4477] Bluetooth: hci0: command 0x1003 tx timeout [ 531.520194][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 532.016442][ T1095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.370225][ T30] audit: type=1400 audit(1720641717.136:521): avc: denied { read } for pid=9210 comm="syz.1.1183" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 533.437310][ T1095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.470530][ T30] audit: type=1400 audit(1720641717.136:522): avc: denied { open } for pid=9210 comm="syz.1.1183" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 533.565088][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.698184][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.223305][ T9036] team0: Port device team_slave_0 added [ 534.276958][ T9036] team0: Port device team_slave_1 added [ 534.839294][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.865962][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.974184][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.033693][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.072135][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.762128][ T9245] fuse: Bad value for 'fd' [ 536.236992][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.331746][ T30] audit: type=1400 audit(1720641720.096:523): avc: denied { sqpoll } for pid=9247 comm="syz.1.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 537.622894][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1194'. [ 537.735367][ T9036] hsr_slave_0: entered promiscuous mode [ 537.804532][ T9036] hsr_slave_1: entered promiscuous mode [ 537.855786][ T9036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.938477][ T9036] Cannot create hsr debugfs directory [ 538.011735][ T30] audit: type=1400 audit(1720641721.776:524): avc: denied { listen } for pid=9262 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 538.212873][ T1095] bridge_slave_1: left allmulticast mode [ 538.256667][ T1095] bridge_slave_1: left promiscuous mode [ 538.289938][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.361217][ T1095] bridge_slave_0: left allmulticast mode [ 538.402639][ T1095] bridge_slave_0: left promiscuous mode [ 538.492193][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.496099][ T30] audit: type=1400 audit(1720641722.256:525): avc: denied { write } for pid=9262 comm="syz.3.1195" path="socket:[28455]" dev="sockfs" ino=28455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 539.457548][ T30] audit: type=1400 audit(1720641723.226:526): avc: denied { create } for pid=9280 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 539.714400][ T30] audit: type=1400 audit(1720641723.226:527): avc: denied { write } for pid=9280 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 539.859783][ T30] audit: type=1400 audit(1720641723.226:528): avc: denied { nlmsg_read } for pid=9280 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 541.110262][ T9289] loop7: detected capacity change from 0 to 16385 [ 541.372279][ T9289] loop7: detected capacity change from 16385 to 16321 [ 541.817975][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.856180][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.905776][ T1095] bond0 (unregistering): Released all slaves [ 542.545685][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'. [ 542.858620][ T30] audit: type=1400 audit(1720641726.616:529): avc: denied { read write } for pid=9303 comm="syz.3.1208" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 542.961425][ T30] audit: type=1400 audit(1720641726.626:530): avc: denied { open } for pid=9303 comm="syz.3.1208" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.010144][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1209'. [ 543.052767][ T30] audit: type=1400 audit(1720641726.666:531): avc: denied { ioctl } for pid=9303 comm="syz.3.1208" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.907867][ T1095] hsr_slave_0: left promiscuous mode [ 543.961957][ T1095] hsr_slave_1: left promiscuous mode [ 543.979629][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.018623][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.054299][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.072709][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.128172][ T1095] veth1_macvtap: left promiscuous mode [ 544.134749][ T1095] veth0_macvtap: left promiscuous mode [ 544.140784][ T1095] veth1_vlan: left promiscuous mode [ 544.147282][ T1095] veth0_vlan: left promiscuous mode [ 545.856990][ T30] audit: type=1400 audit(1720641729.626:532): avc: denied { append } for pid=9334 comm="syz.3.1215" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 546.134773][ T9338] hub 9-0:1.0: USB hub found [ 546.139132][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 546.158905][ T9338] hub 9-0:1.0: 8 ports detected [ 546.427874][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 548.926760][ T8989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 549.230441][ T8989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 549.328651][ T8989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 549.435799][ T8989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 551.114837][ T1095] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 551.329067][ T8989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.859075][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.997146][ T9036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.100828][ T9036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 552.234759][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.242690][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.338439][ T9036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.443377][ T9036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.644146][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.652054][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.851661][ T30] audit: type=1400 audit(1720641736.614:533): avc: denied { accept } for pid=9400 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 552.935572][ T30] audit: type=1400 audit(1720641736.624:534): avc: denied { read } for pid=9400 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 553.398296][ T8989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.777191][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.930054][ T9036] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.993793][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.001168][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.090367][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.097815][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.580339][ T30] audit: type=1400 audit(1720641738.344:535): avc: denied { bind } for pid=9429 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 554.670989][ T30] audit: type=1400 audit(1720641738.374:536): avc: denied { listen } for pid=9429 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 554.755161][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.856075][ T9436] hub 9-0:1.0: USB hub found [ 554.970386][ T9436] hub 9-0:1.0: 8 ports detected [ 555.139319][ T30] audit: type=1400 audit(1720641738.904:537): avc: denied { getopt } for pid=9438 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 555.322684][ T8989] veth0_vlan: entered promiscuous mode [ 555.457121][ T8989] veth1_vlan: entered promiscuous mode [ 555.746429][ T8989] veth0_macvtap: entered promiscuous mode [ 555.839412][ T8989] veth1_macvtap: entered promiscuous mode [ 556.080936][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.228340][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.257803][ T30] audit: type=1400 audit(1720641739.992:538): avc: denied { search } for pid=9451 comm="syz.4.1242" name="/" dev="configfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 556.289654][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.326541][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.351720][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.372496][ T30] audit: type=1400 audit(1720641740.092:539): avc: denied { write } for pid=9451 comm="syz.4.1242" name="/" dev="configfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 556.410323][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.444763][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.453556][ T30] audit: type=1400 audit(1720641740.162:540): avc: denied { add_name } for pid=9451 comm="syz.4.1242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 556.555204][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.589714][ T30] audit: type=1400 audit(1720641740.192:541): avc: denied { create } for pid=9451 comm="syz.4.1242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 556.617556][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.671664][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.708580][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.757819][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.799382][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.844549][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.848267][ T30] audit: type=1800 audit(1720641740.602:542): pid=9471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1245" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 557.019043][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.078251][ T8989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.159828][ T8989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.201368][ T8989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.240424][ T8989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.322544][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.398400][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.553059][ T53] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 558.565879][ T53] Bluetooth: hci5: Injecting HCI hardware error event [ 558.591337][ T4477] Bluetooth: hci5: hardware error 0x00 [ 558.708909][ T9036] veth0_vlan: entered promiscuous mode [ 558.830991][ T9036] veth1_vlan: entered promiscuous mode [ 559.039587][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.131768][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.336973][ T9036] veth0_macvtap: entered promiscuous mode [ 559.459213][ T9036] veth1_macvtap: entered promiscuous mode [ 559.642400][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.697090][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.757813][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.827420][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.885601][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.967556][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.063731][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.161102][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.246667][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.320859][ T30] audit: type=1326 audit(1720641744.086:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.1.1254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe63e375bd9 code=0x0 [ 560.417462][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.505627][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.567656][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.628801][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.706423][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.792401][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.872424][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.882839][ T4477] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 560.927228][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.945527][ T5137] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 561.111041][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.234698][ T5137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.327152][ T9036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.387012][ T5137] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 561.462488][ T9036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.507568][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.574121][ T9036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.588444][ T9036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.608204][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 561.740860][ T5137] usb 5-1: config 0 descriptor?? [ 562.336490][ T5137] ath6kl: Failed to submit usb control message: -71 [ 562.372109][ T9529] syz.1.1258: attempt to access beyond end of device [ 562.372109][ T9529] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 562.382332][ T5137] ath6kl: unable to send the bmi data to the device: -71 [ 562.440640][ T9529] F2FS-fs (loop3): Unable to read 1th superblock [ 562.470345][ T5137] ath6kl: Unable to send get target info: -71 [ 562.507157][ T9529] syz.1.1258: attempt to access beyond end of device [ 562.507157][ T9529] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 562.535894][ T5137] ath6kl: Failed to init ath6kl core: -71 [ 562.549951][ T5137] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 562.574935][ T9529] F2FS-fs (loop3): Unable to read 2th superblock [ 562.731860][ T5137] usb 5-1: USB disconnect, device number 7 [ 562.816840][ T9530] syz.1.1258: attempt to access beyond end of device [ 562.816840][ T9530] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 562.902798][ T9530] F2FS-fs (loop3): Unable to read 1th superblock [ 562.958752][ T9530] syz.1.1258: attempt to access beyond end of device [ 562.958752][ T9530] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 562.990100][ T9530] F2FS-fs (loop3): Unable to read 2th superblock [ 563.128885][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.202360][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.544519][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.611816][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.769252][ T30] audit: type=1400 audit(1720641748.536:544): avc: denied { setopt } for pid=9555 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 565.394820][ T9564] Bluetooth: hci0: Frame reassembly failed (-84) [ 565.568060][ T5972] Bluetooth: hci0: Frame reassembly failed (-84) [ 566.775546][ T30] audit: type=1400 audit(1720641750.546:545): avc: denied { watch } for pid=9582 comm="syz.3.1274" path="/306" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 566.876951][ T30] audit: type=1400 audit(1720641750.576:546): avc: denied { watch_sb } for pid=9582 comm="syz.3.1274" path="/306" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 568.097242][ T4477] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 569.541412][ T30] audit: type=1326 audit(1720641753.306:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 569.724411][ T30] audit: type=1326 audit(1720641753.306:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 569.908473][ T30] audit: type=1326 audit(1720641753.306:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 570.116057][ T30] audit: type=1400 audit(1720641753.306:550): avc: denied { getattr } for pid=9604 comm="syz.2.1281" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 570.392068][ T30] audit: type=1326 audit(1720641753.306:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 570.563669][ T30] audit: type=1326 audit(1720641753.376:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 570.845403][ T30] audit: type=1400 audit(1720641753.656:553): avc: denied { create } for pid=9607 comm="syz.3.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 571.002468][ T30] audit: type=1400 audit(1720641753.676:554): avc: denied { write } for pid=9607 comm="syz.3.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 571.822556][ T30] audit: type=1400 audit(1720641755.576:555): avc: denied { setopt } for pid=9633 comm="syz.3.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 572.343633][ T9638] syz.2.1289: attempt to access beyond end of device [ 572.343633][ T9638] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 572.400592][ T9638] F2FS-fs (loop5): Unable to read 1th superblock [ 572.403620][ T5135] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 572.469924][ T9638] syz.2.1289: attempt to access beyond end of device [ 572.469924][ T9638] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 572.694626][ T9638] F2FS-fs (loop5): Unable to read 2th superblock [ 572.847145][ T9640] syz.2.1289: attempt to access beyond end of device [ 572.847145][ T9640] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 572.993682][ T5135] usb 4-1: string descriptor 0 read error: -22 [ 573.045485][ T5135] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 573.130185][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.205445][ T9640] F2FS-fs (loop5): Unable to read 1th superblock [ 573.224939][ T5135] usb 4-1: config 0 descriptor?? [ 573.283721][ T9640] syz.2.1289: attempt to access beyond end of device [ 573.283721][ T9640] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 573.354085][ T9640] F2FS-fs (loop5): Unable to read 2th superblock [ 573.397367][ T5135] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 573.467436][ T5135] usb 4-1: No valid video chain found. [ 573.926293][ T30] audit: type=1326 audit(1720641757.696:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9652 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 574.112124][ T30] audit: type=1326 audit(1720641757.746:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9652 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 574.162931][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.174380][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.242530][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1288'. [ 574.392233][ T30] audit: type=1326 audit(1720641757.786:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9652 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 574.632231][ T30] audit: type=1326 audit(1720641757.816:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9652 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 575.205318][ T30] audit: type=1400 audit(1720641757.846:560): avc: denied { watch watch_reads } for pid=9657 comm="syz.1.1297" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 575.300456][ T9672] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1299'. [ 575.642824][ T5137] usb 4-1: USB disconnect, device number 8 [ 578.849178][ T9718] ubi1: attaching mtd0 [ 578.860449][ T30] audit: type=1400 audit(1720641762.626:561): avc: denied { setopt } for pid=9705 comm="syz.3.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 579.204606][ T30] audit: type=1400 audit(1720641762.976:562): avc: denied { create } for pid=9723 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 579.304797][ T4477] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 579.315850][ T4477] Bluetooth: hci4: Injecting HCI hardware error event [ 579.328215][ T53] Bluetooth: hci4: hardware error 0x00 [ 579.702164][ T30] audit: type=1400 audit(1720641763.046:563): avc: denied { connect } for pid=9723 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 581.233376][ T5135] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 581.471731][ T5135] usb 2-1: Using ep0 maxpacket: 16 [ 581.478499][ T30] audit: type=1400 audit(1720641765.236:564): avc: denied { read } for pid=9745 comm="syz.2.1320" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 581.500251][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 54, changing to 9 [ 581.504705][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.595457][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57395, setting to 1024 [ 581.595559][ T5135] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 581.595603][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.616776][ T5135] usb 2-1: config 0 descriptor?? [ 581.643430][ T9747] autofs4:pid:9747:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 581.643468][ T9747] autofs4:pid:9747:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 581.692121][ T30] audit: type=1400 audit(1720641765.236:565): avc: denied { open } for pid=9745 comm="syz.2.1320" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 581.692224][ T30] audit: type=1400 audit(1720641765.416:566): avc: denied { ioctl } for pid=9745 comm="syz.2.1320" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 581.989190][ T53] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 582.407837][ T5135] usbhid 2-1:0.0: can't add hid device: -71 [ 582.408007][ T5135] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 582.445582][ T5135] usb 2-1: USB disconnect, device number 8 [ 582.594706][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.122991][ T1095] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.283103][ T9752] tty tty20: ldisc open failed (-12), clearing slot 19 [ 585.428309][ T30] audit: type=1400 audit(1720641769.196:567): avc: denied { map } for pid=9781 comm="syz.0.1329" path="socket:[36163]" dev="sockfs" ino=36163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 585.807219][ T30] audit: type=1400 audit(1720641769.196:568): avc: denied { read accept } for pid=9781 comm="syz.0.1329" path="socket:[36163]" dev="sockfs" ino=36163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 588.250989][ T9806] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 588.787324][ T9806] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 590.071821][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 590.631749][ T30] audit: type=1400 audit(1720641774.396:569): avc: denied { read append } for pid=9820 comm="syz.2.1341" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 590.828775][ T30] audit: type=1400 audit(1720641774.406:570): avc: denied { open } for pid=9820 comm="syz.2.1341" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 591.675127][ T53] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 592.219392][ T9837] pim6reg: entered allmulticast mode [ 593.726047][ T9853] kvm: emulating exchange as write [ 596.329021][ T30] audit: type=1400 audit(1720641780.096:571): avc: denied { relabelfrom } for pid=9883 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 596.430088][ T9890] Illegal XDP return value 4294967294 on prog (id 214) dev N/A, expect packet loss! [ 596.501776][ T30] audit: type=1400 audit(1720641780.146:572): avc: denied { relabelto } for pid=9883 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 596.794694][ T5137] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 596.892756][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1369'. [ 597.022125][ T5137] usb 4-1: Using ep0 maxpacket: 32 [ 597.057212][ T5137] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 597.105763][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.208432][ T5137] usb 4-1: config 0 descriptor?? [ 597.278643][ T5137] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 597.344716][ T5137] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 597.417652][ T5137] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 597.498336][ T5137] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 597.595120][ T5137] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 597.650346][ T5137] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 597.662009][ T30] audit: type=1400 audit(1720641781.416:573): avc: denied { setopt } for pid=9892 comm="syz.3.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 597.711219][ T5137] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 597.817785][ T5137] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 597.884954][ T30] audit: type=1400 audit(1720641781.546:574): avc: denied { connect } for pid=9907 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 597.915261][ T5137] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 598.035815][ T5137] usb 4-1: USB disconnect, device number 9 [ 598.072330][ T30] audit: type=1400 audit(1720641781.546:575): avc: denied { write } for pid=9907 comm="syz.1.1372" laddr=fe80::a lport=1 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 598.195256][ T5137] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 598.225311][ T5137] keyspan 4-1:0.0: device disconnected [ 598.334241][ T9915] (syz.0.1374,9915,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 598.417390][ T9915] (syz.0.1374,9915,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 599.510482][ T9934] futex_wake_op: syz.4.1379 tries to shift op by -1; fix this program [ 600.207073][ T9942] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 600.361426][ T30] audit: type=1400 audit(1720641784.086:576): avc: denied { mount } for pid=9944 comm="syz.0.1386" name="/" dev="hugetlbfs" ino=37805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 600.378865][ T9950] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 600.392455][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.005390][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 601.052933][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 601.184746][ T9955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1388'. [ 601.356937][ T9957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.753451][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 602.142128][ T30] audit: type=1400 audit(1720641785.866:577): avc: denied { open } for pid=9961 comm="syz.4.1391" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 602.188821][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 602.517324][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 602.560196][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 602.621466][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.703406][ T8] usb 2-1: config 0 descriptor?? [ 602.770705][ T8] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 602.825262][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 602.880246][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 602.982949][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 603.050249][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 603.129019][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 603.227615][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 603.315760][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 603.417708][ T8] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 603.591480][ T8] usb 2-1: USB disconnect, device number 9 [ 603.667231][ T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 603.729106][ T8] keyspan 2-1:0.0: device disconnected [ 606.388573][ T30] audit: type=1400 audit(1720641790.156:578): avc: denied { accept } for pid=9987 comm="syz.1.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 606.833642][ T9990] bridge0: port 3(gretap0) entered blocking state [ 606.845735][ T9990] bridge0: port 3(gretap0) entered disabled state [ 606.864693][ T9990] gretap0: entered allmulticast mode [ 606.929669][ T9990] gretap0: entered promiscuous mode [ 607.078915][ T9990] bridge0: port 3(gretap0) entered blocking state [ 607.091377][ T9990] bridge0: port 3(gretap0) entered forwarding state [ 607.626506][T10000] 9pnet_fd: Insufficient options for proto=fd [ 607.660283][ T30] audit: type=1400 audit(1720641791.426:579): avc: denied { mount } for pid=9998 comm="syz.2.1402" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 607.899578][T10003] netlink: 'syz.3.1403': attribute type 39 has an invalid length. [ 607.963033][T10003] macvtap0: entered promiscuous mode [ 608.476572][ T30] audit: type=1400 audit(1720641792.246:580): avc: denied { unlink } for pid=10004 comm="syz.4.1404" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 610.003196][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 610.341724][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 610.419322][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 54, changing to 9 [ 610.492815][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57395, setting to 1024 [ 610.551941][ T30] audit: type=1400 audit(1720641794.316:581): avc: denied { unmount } for pid=8989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 610.615365][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 610.720871][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.779337][ T8] usb 1-1: config 0 descriptor?? [ 611.475913][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.559496][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.587765][T10039] ubi1: attaching mtd0 [ 613.565872][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.653904][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.953287][ T8] hid (null): unknown global tag 0xd [ 613.980749][ T8] hid (null): invalid report_count 25008 [ 614.002956][ T8] hid (null): unknown global tag 0xe [ 614.034168][ T8] hid (null): global environment stack underflow [ 614.090555][ T8] hid (null): unknown global tag 0xe [ 614.128660][ T8] hid (null): unknown global tag 0xd [ 614.320201][ T8] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 614.362969][ T8] hid-generic 0003:0158:0100.0008: unexpected long global item [ 614.434476][ T8] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 614.612048][ T8] usb 1-1: USB disconnect, device number 12 [ 615.511731][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 621.176867][T10076] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 621.668510][ T30] audit: type=1400 audit(1720641805.436:582): avc: denied { setopt } for pid=10071 comm="syz.0.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 621.875748][ T30] audit: type=1400 audit(1720641805.586:583): avc: denied { watch watch_reads } for pid=10073 comm="syz.2.1426" path="/proc/101/net/unix" dev="proc" ino=4026533793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 622.453167][ T30] audit: type=1326 audit(1720641806.216:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 622.629145][ T30] audit: type=1326 audit(1720641806.216:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 622.791453][ T30] audit: type=1326 audit(1720641806.256:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 622.970897][ T30] audit: type=1326 audit(1720641806.256:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 623.152655][ T30] audit: type=1326 audit(1720641806.266:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 623.280359][ T30] audit: type=1326 audit(1720641806.276:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 623.391072][ T30] audit: type=1326 audit(1720641806.286:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 623.548293][ T30] audit: type=1326 audit(1720641806.306:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72b6d6cc27 code=0x7ffc0000 [ 623.624120][ T53] Bluetooth: hci1: SCO packet for unknown connection handle 3861 [ 624.079976][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1439'. [ 624.311039][T10112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10112 comm=syz.4.1439 [ 624.434574][T10112] bridge0: entered allmulticast mode [ 624.484101][T10112] bridge_slave_1: left allmulticast mode [ 624.564849][T10112] bridge_slave_1: left promiscuous mode [ 624.612050][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.694936][T10112] bridge_slave_0: left allmulticast mode [ 624.729384][T10112] bridge_slave_0: left promiscuous mode [ 624.771239][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.104612][T10112] bridge0 (unregistering): left allmulticast mode [ 625.171074][T10126] futex_wake_op: syz.0.1443 tries to shift op by -1; fix this program [ 627.528872][T10165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'. [ 627.655815][T10165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10165 comm=syz.0.1458 [ 627.852956][T10165] bridge0: entered allmulticast mode [ 627.928291][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 627.928316][ T30] audit: type=1400 audit(1720641811.696:706): avc: denied { ioctl } for pid=10167 comm="syz.1.1459" path="socket:[40433]" dev="sockfs" ino=40433 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 627.980176][T10165] gretap0: left allmulticast mode [ 628.031931][T10165] gretap0: left promiscuous mode [ 628.058814][T10165] bridge0: port 3(gretap0) entered disabled state [ 628.173592][T10165] bridge_slave_1: left allmulticast mode [ 628.217543][T10165] bridge_slave_1: left promiscuous mode [ 628.272445][T10165] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.444731][T10165] bridge_slave_0: left allmulticast mode [ 628.465037][T10165] bridge_slave_0: left promiscuous mode [ 628.512933][T10165] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.787497][T10165] bridge0 (unregistering): left allmulticast mode [ 629.674653][T10182] xt_l2tp: v2 sid > 0xffff: 536870912 [ 630.547997][ T4477] Bluetooth: hci3: SCO packet for unknown connection handle 3861 [ 631.232359][T10203] 9pnet_fd: Insufficient options for proto=fd [ 632.553356][ T4477] Bluetooth: hci3: command 0x0406 tx timeout [ 633.031877][ T63] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 636.105168][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.115004][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.815277][T10221] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 636.824066][T10221] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 636.868046][T10221] vhci_hcd vhci_hcd.0: Device attached [ 637.214481][T10228] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 637.222920][T10228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.252980][ T1161] vhci_hcd: vhci_device speed not set [ 637.351752][ T1161] usb 15-1: new full-speed USB device number 3 using vhci_hcd [ 637.383473][T10228] vhci_hcd vhci_hcd.0: Device attached [ 637.424150][ T30] audit: type=1400 audit(1720641821.196:707): avc: denied { create } for pid=10220 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 637.651793][T10239] xt_l2tp: v2 sid > 0xffff: 536870912 [ 637.765352][T10234] vhci_hcd: connection closed [ 637.768371][ T11] vhci_hcd: stop threads [ 637.788322][T10225] vhci_hcd: connection reset by peer [ 637.833232][ T11] vhci_hcd: release socket [ 637.893322][ T11] vhci_hcd: disconnect device [ 637.905945][ T11] vhci_hcd: stop threads [ 637.910916][ T11] vhci_hcd: release socket [ 637.936757][ T11] vhci_hcd: disconnect device [ 638.301575][T10252] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 641.902579][ T30] audit: type=1326 audit(1720641825.176:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.3.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d97775bd9 code=0x0 [ 642.381728][ T30] audit: type=1400 audit(1720641826.146:709): avc: denied { setattr } for pid=10269 comm="syz.4.1489" path="/dev/mixer" dev="devtmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 642.476532][ T30] audit: type=1400 audit(1720641826.206:710): avc: denied { read write } for pid=10269 comm="syz.4.1489" name="btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 642.527867][ T1161] vhci_hcd: vhci_device speed not set [ 642.568632][ T30] audit: type=1400 audit(1720641826.216:711): avc: denied { open } for pid=10269 comm="syz.4.1489" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 642.776395][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 643.004564][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 643.106226][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 643.151672][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 643.238842][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.332776][ T25] usb 5-1: config 0 descriptor?? [ 643.373125][T10271] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 643.403635][ T30] audit: type=1400 audit(1720641827.166:712): avc: denied { write } for pid=10283 comm="syz.2.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 643.581642][ T30] audit: type=1401 audit(1720641827.166:713): op=fscreate invalid_context=DC [ 644.282330][T10302] xt_l2tp: v2 sid > 0xffff: 536870912 [ 644.307908][ T30] audit: type=1400 audit(1720641828.076:714): avc: denied { ioctl } for pid=10269 comm="syz.4.1489" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 644.437551][T10304] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 644.555215][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 644.564029][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 644.595388][ T25] usb 5-1: USB disconnect, device number 8 [ 645.485052][T10326] netlink: 'syz.1.1510': attribute type 11 has an invalid length. [ 646.548597][T10339] 9pnet_fd: Insufficient options for proto=fd [ 646.900355][T10344] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 646.927036][T10344] CIFS: Unable to determine destination address [ 647.762423][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 651.016437][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 651.064130][T10365] netlink: 'syz.2.1521': attribute type 6 has an invalid length. [ 651.201843][T10365] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.216668][T10365] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.228547][T10365] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.243032][T10365] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.326175][T10365] vxlan0: entered promiscuous mode [ 651.588782][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 651.751691][ T5139] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 651.882420][ T929] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 652.020673][ T5139] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 652.079030][ T5139] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 652.098243][ T5139] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 652.118043][ T929] usb 5-1: Using ep0 maxpacket: 16 [ 652.124582][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.149130][ T929] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 652.183587][ T929] usb 5-1: config 1 interface 0 has no altsetting 0 [ 652.216229][T10376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 652.269232][ T929] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 652.353077][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.445646][ T929] usb 5-1: Manufacturer: 《 [ 652.466035][ T929] usb 5-1: SerialNumber: 糿妼牫칐뒑浾⬬븽゗䭐﬙ﻡ噇撧ᄒ봴傍狃䖩洽鲭廔䀊␎⿈哈쁏䞔颶韔韤°䱂⭏禍N灡閏풯煫⩃㆑㷾黁ଊㅅ噉突鬏౯ퟃ離뫙Θ㢲乪瀜淄豿툅ⶸ㫤矉썫﹫辗摭㑃鿌몀逊啢抁욿岱룻읥開癄蹽ታ廣皡ꊓȎ疅鿨⶚⤁疅훊곱길迭䜽 [ 653.243167][ T929] usbhid 5-1:1.0: can't add hid device: -71 [ 653.251002][ T929] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 653.384324][ T929] usb 5-1: USB disconnect, device number 9 [ 654.390419][T10400] 9pnet_fd: Insufficient options for proto=fd [ 654.426127][T10402] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1534'. [ 654.574155][ T929] usb 1-1: USB disconnect, device number 13 [ 655.017940][ T30] audit: type=1400 audit(1720641838.766:715): avc: denied { accept } for pid=10408 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 655.289775][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1538'. [ 656.588214][ T30] audit: type=1400 audit(1720641840.356:716): avc: denied { watch_sb } for pid=10415 comm="syz.3.1541" path="/355/net_prio.prioidx" dev="tmpfs" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 656.758865][ T30] audit: type=1400 audit(1720641840.516:717): avc: denied { mounton } for pid=10415 comm="syz.3.1541" path="/355/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 658.348851][ T30] audit: type=1400 audit(1720641842.116:718): avc: denied { unmount } for pid=5083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 658.763054][T10451] random: crng reseeded on system resumption [ 658.771008][ T30] audit: type=1400 audit(1720641842.536:719): avc: denied { write } for pid=10450 comm="syz.3.1554" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 659.253204][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1558'. [ 659.876909][ T30] audit: type=1400 audit(1720641843.636:720): avc: denied { write } for pid=10461 comm="syz.1.1559" path="socket:[44166]" dev="sockfs" ino=44166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.021772][ T30] audit: type=1400 audit(1720641843.696:721): avc: denied { ioctl } for pid=10461 comm="syz.1.1559" path="socket:[44166]" dev="sockfs" ino=44166 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.341707][ T30] audit: type=1400 audit(1720641844.076:722): avc: denied { ioctl } for pid=10467 comm="syz.2.1561" path="socket:[43585]" dev="sockfs" ino=43585 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 660.421347][ T30] audit: type=1400 audit(1720641844.106:723): avc: denied { append } for pid=10467 comm="syz.2.1561" name="nbd2" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.621805][ T30] audit: type=1326 audit(1720641844.276:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 661.967995][ T30] audit: type=1326 audit(1720641844.276:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 662.080460][T10473] input: syz0 as /devices/virtual/input/input15 [ 662.113993][ T30] audit: type=1326 audit(1720641844.286:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 662.134428][T10482] netlink: 'syz.1.1565': attribute type 3 has an invalid length. [ 662.232301][T10482] netlink: 'syz.1.1565': attribute type 3 has an invalid length. [ 662.277544][ T30] audit: type=1326 audit(1720641844.286:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 662.634369][T10488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1567'. [ 662.681987][ T30] audit: type=1326 audit(1720641844.296:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 662.804032][ T30] audit: type=1326 audit(1720641844.346:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 662.833817][ T30] audit: type=1326 audit(1720641844.366:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4b375bd9 code=0x7ffc0000 [ 665.911988][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 667.113144][T10509] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1575'. [ 667.214093][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 667.214120][ T30] audit: type=1400 audit(1720641850.976:748): avc: denied { mount } for pid=10511 comm="syz.2.1576" name="/" dev="autofs" ino=44947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 668.040450][T10529] x_tables: duplicate underflow at hook 3 [ 668.709911][ T143] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 668.877956][T10526] 9pnet_fd: Insufficient options for proto=fd [ 669.127582][ T30] audit: type=1326 audit(1720641852.896:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 669.261913][ T30] audit: type=1326 audit(1720641852.896:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 669.386690][T10534] input: syz0 as /devices/virtual/input/input16 [ 669.604857][ T30] audit: type=1326 audit(1720641852.926:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 669.715024][ T30] audit: type=1326 audit(1720641852.926:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 669.811696][ T30] audit: type=1326 audit(1720641852.926:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 669.943825][ T30] audit: type=1326 audit(1720641852.946:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 670.021779][T10542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 670.028815][T10542] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 670.069952][ T30] audit: type=1326 audit(1720641852.946:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 670.102784][T10542] vhci_hcd vhci_hcd.0: Device attached [ 670.132466][T10543] vhci_hcd: connection closed [ 670.153836][ T2449] vhci_hcd: stop threads [ 670.199538][ T2449] vhci_hcd: release socket [ 670.231639][ T2449] vhci_hcd: disconnect device [ 670.246717][ T30] audit: type=1326 audit(1720641852.966:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 670.429191][ T30] audit: type=1326 audit(1720641852.986:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa004775bd9 code=0x7ffc0000 [ 670.626420][T10547] random: crng reseeded on system resumption [ 672.184197][T10565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1591'. [ 672.520932][T10575] tmpfs: Bad value for 'mpol' [ 672.678660][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1595'. [ 672.714058][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 672.714084][ T30] audit: type=1400 audit(1720641856.486:775): avc: denied { write } for pid=10572 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 673.687969][ T30] audit: type=1326 audit(1720641857.456:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 673.813389][ T30] audit: type=1326 audit(1720641857.516:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 673.869405][T10601] input: syz0 as /devices/virtual/input/input17 [ 673.915747][ T30] audit: type=1326 audit(1720641857.516:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 674.128386][ T30] audit: type=1326 audit(1720641857.516:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 674.229980][ T30] audit: type=1326 audit(1720641857.526:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 674.353540][ T30] audit: type=1326 audit(1720641857.526:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 674.452179][ T30] audit: type=1326 audit(1720641857.526:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 674.622293][ T30] audit: type=1326 audit(1720641857.556:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 674.759556][ T30] audit: type=1326 audit(1720641857.556:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b6d75bd9 code=0x7ffc0000 [ 684.601752][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 684.601777][ T30] audit: type=1400 audit(1720641868.366:800): avc: denied { mounton } for pid=10660 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 684.653852][ T4477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.702346][ T4477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.718251][ T4477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.759671][ T4477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.794056][ T4477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 684.824655][ T4477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.701221][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 685.719781][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 685.731573][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 685.752704][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 685.765923][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 685.789081][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 686.961897][ T4477] Bluetooth: hci0: command tx timeout [ 687.076876][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 687.097774][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 687.133087][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 687.154367][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 687.213019][T10674] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 687.226811][ T5090] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 687.229451][T10674] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 687.246227][T10674] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 687.246387][ T5090] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 687.269130][ T5090] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 687.281727][ T5090] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 687.290197][ T5090] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 687.941684][ T53] Bluetooth: hci6: command tx timeout [ 689.031864][ T53] Bluetooth: hci0: command tx timeout [ 689.040927][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.305014][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 689.346580][T10686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10686 comm=syz.1.1629 [ 689.365496][ T53] Bluetooth: hci7: command tx timeout [ 689.379586][T10681] vxcan3: entered promiscuous mode [ 689.395217][ T30] audit: type=1400 audit(1720641873.156:801): avc: denied { read } for pid=10680 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 689.430965][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 689.441184][ T53] Bluetooth: hci8: command tx timeout [ 689.722746][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1629'. [ 689.760329][T10685] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1629'. [ 689.870030][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.991871][ T53] Bluetooth: hci6: command tx timeout [ 690.280317][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.512030][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.624294][ T30] audit: type=1800 audit(1720641874.386:802): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1630" name="bus" dev="overlay" ino=696 res=0 errno=0 [ 691.112382][ T53] Bluetooth: hci0: command tx timeout [ 691.365908][T10673] chnl_net:caif_netlink_parms(): no params data found [ 691.441979][ T53] Bluetooth: hci7: command tx timeout [ 691.523071][ T53] Bluetooth: hci8: command tx timeout [ 692.081858][ T53] Bluetooth: hci6: command tx timeout [ 693.202058][ T53] Bluetooth: hci0: command tx timeout [ 693.291299][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.308593][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.330056][ T51] bond0 (unregistering): Released all slaves [ 693.359041][ T51] bond1 (unregistering): Released all slaves [ 693.511724][ T53] Bluetooth: hci7: command tx timeout [ 693.593542][ T53] Bluetooth: hci8: command tx timeout [ 693.756238][T10660] chnl_net:caif_netlink_parms(): no params data found [ 693.795173][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.803151][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.822316][T10673] bridge_slave_0: entered allmulticast mode [ 693.835607][T10673] bridge_slave_0: entered promiscuous mode [ 693.937400][T10666] chnl_net:caif_netlink_parms(): no params data found [ 694.001880][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.009837][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.039161][T10673] bridge_slave_1: entered allmulticast mode [ 694.054281][T10673] bridge_slave_1: entered promiscuous mode [ 694.081351][T10671] chnl_net:caif_netlink_parms(): no params data found [ 694.162006][ T53] Bluetooth: hci6: command tx timeout [ 694.464962][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.506232][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.787735][ T51] hsr_slave_0: left promiscuous mode [ 694.801777][ T51] hsr_slave_1: left promiscuous mode [ 694.809416][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.817612][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.829627][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.837595][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.878836][ T51] veth1_macvtap: left promiscuous mode [ 694.884957][ T51] veth0_macvtap: left promiscuous mode [ 694.891815][ T51] veth1_vlan: left promiscuous mode [ 694.897833][ T51] veth0_vlan: left promiscuous mode [ 695.592093][ T53] Bluetooth: hci7: command tx timeout [ 695.682210][ T53] Bluetooth: hci8: command tx timeout [ 696.214662][ T51] team0 (unregistering): Port device team_slave_1 removed [ 696.310981][ T51] team0 (unregistering): Port device team_slave_0 removed [ 697.067832][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 697.074723][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.558285][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.590940][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.627783][T10660] bridge_slave_0: entered allmulticast mode [ 697.642075][T10660] bridge_slave_0: entered promiscuous mode [ 697.655155][T10660] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.668100][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.707296][T10660] bridge_slave_1: entered allmulticast mode [ 697.727820][T10660] bridge_slave_1: entered promiscuous mode [ 697.983222][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.330529][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.804628][T10666] bridge_slave_0: entered allmulticast mode [ 698.971643][T10666] bridge_slave_0: entered promiscuous mode [ 698.998094][T10673] team0: Port device team_slave_0 added [ 699.014416][T10673] team0: Port device team_slave_1 added [ 699.315159][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.331960][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.473972][T10666] bridge_slave_1: entered allmulticast mode [ 699.654796][T10666] bridge_slave_1: entered promiscuous mode [ 699.764916][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.785982][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.809293][T10671] bridge_slave_0: entered allmulticast mode [ 699.839649][T10671] bridge_slave_0: entered promiscuous mode [ 699.916347][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.958112][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.005895][T10666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.065766][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.075630][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.111724][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.130801][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.138094][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.146342][T10671] bridge_slave_1: entered allmulticast mode [ 700.156808][T10671] bridge_slave_1: entered promiscuous mode [ 700.210736][T10666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.232651][ T1095] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 700.271239][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.278776][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.310130][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.500959][T10660] team0: Port device team_slave_0 added [ 700.517557][T10666] team0: Port device team_slave_0 added [ 700.550785][T10666] team0: Port device team_slave_1 added [ 700.573443][T10671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.592858][T10671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.606757][T10660] team0: Port device team_slave_1 added [ 700.837015][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.861340][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.920134][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.979543][T10673] hsr_slave_0: entered promiscuous mode [ 700.989574][T10673] hsr_slave_1: entered promiscuous mode [ 701.002836][T10673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.051565][T10673] Cannot create hsr debugfs directory [ 701.084435][T10666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.132072][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.177180][T10666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.195104][T10666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.218682][T10745] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 701.229294][T10745] PKCS7: Only support pkcs7_signedData type [ 701.230759][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.269419][T10666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.331867][T10671] team0: Port device team_slave_0 added [ 701.354961][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.362812][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.389771][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.482332][T10671] team0: Port device team_slave_1 added [ 701.649267][T10671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.658506][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.686259][T10671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.799998][T10671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.807638][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.837251][T10671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.902700][T10666] hsr_slave_0: entered promiscuous mode [ 701.910403][T10666] hsr_slave_1: entered promiscuous mode [ 701.920406][T10666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.928469][T10666] Cannot create hsr debugfs directory [ 702.089929][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.139262][T10660] hsr_slave_0: entered promiscuous mode [ 702.147489][T10660] hsr_slave_1: entered promiscuous mode [ 702.167541][T10660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.175340][T10660] Cannot create hsr debugfs directory [ 702.256526][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.361367][T10671] hsr_slave_0: entered promiscuous mode [ 702.371008][T10671] hsr_slave_1: entered promiscuous mode [ 702.379149][T10671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.387504][T10671] Cannot create hsr debugfs directory [ 702.455336][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.686788][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.708302][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 703.601196][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.612863][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.796907][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.825215][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.958260][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.971255][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.080021][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.100009][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.559721][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.748049][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.920247][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.180893][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.278685][T10771] ======================================================= [ 705.278685][T10771] WARNING: The mand mount option has been deprecated and [ 705.278685][T10771] and is ignored by this kernel. Remove the mand [ 705.278685][T10771] option from the mount to silence this warning. [ 705.278685][T10771] ======================================================= [ 705.357427][ T30] audit: type=1400 audit(1720641889.116:803): avc: denied { execute } for pid=10770 comm="syz.1.1650" name="file0" dev="ramfs" ino=49793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 705.428105][T10666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 705.452103][T10666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 705.584407][T10666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 705.653860][T10666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 705.867587][ T51] bridge_slave_1: left allmulticast mode [ 705.874061][ T51] bridge_slave_1: left promiscuous mode [ 705.880015][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.890638][ T51] bridge_slave_0: left allmulticast mode [ 705.907940][ T51] bridge_slave_0: left promiscuous mode [ 705.917202][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.943943][ T51] bridge_slave_1: left allmulticast mode [ 705.949863][ T51] bridge_slave_1: left promiscuous mode [ 705.957681][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.970870][ T51] bridge_slave_0: left allmulticast mode [ 705.980093][ T51] bridge_slave_0: left promiscuous mode [ 705.987069][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.092887][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.105412][ T51] bond0 (unregistering): Released all slaves [ 708.124746][ T51] bond1 (unregistering): Released all slaves [ 708.145417][ T51] bond2 (unregistering): Released all slaves [ 708.185718][ T51] bond3 (unregistering): Released all slaves [ 708.450451][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.470794][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.493329][ T51] bond0 (unregistering): Released all slaves [ 708.748355][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.775186][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.789327][ T51] bond0 (unregistering): Released all slaves [ 709.226210][ T51] IPVS: stopping master sync thread 6795 ... [ 710.003316][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.266674][T10666] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.318133][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.325759][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.505817][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.513659][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.967556][T10673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 710.981092][T10673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 711.060400][T10673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 711.158488][ T51] hsr_slave_0: left promiscuous mode [ 711.169082][ T51] hsr_slave_1: left promiscuous mode [ 711.185714][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.206304][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.225453][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.240384][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.283154][ T51] hsr_slave_0: left promiscuous mode [ 711.305357][ T51] hsr_slave_1: left promiscuous mode [ 711.320926][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.344158][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.369387][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.383295][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.458688][ T51] hsr_slave_0: left promiscuous mode [ 711.475642][ T51] hsr_slave_1: left promiscuous mode [ 711.492747][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.507386][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.544806][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.568397][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.721410][ T51] veth1_macvtap: left promiscuous mode [ 711.731303][ T51] veth0_macvtap: left promiscuous mode [ 711.741201][ T51] veth1_vlan: left promiscuous mode [ 711.770205][ T51] veth0_vlan: left promiscuous mode [ 711.790011][ T51] veth1_macvtap: left promiscuous mode [ 711.806888][ T51] veth0_macvtap: left promiscuous mode [ 711.820873][ T51] veth1_vlan: left promiscuous mode [ 711.827880][ T51] veth0_vlan: left promiscuous mode [ 711.855415][ T51] veth1_macvtap: left promiscuous mode [ 711.871856][ T51] veth0_macvtap: left promiscuous mode [ 711.879736][ T51] veth1_vlan: left promiscuous mode [ 711.889833][ T51] veth0_vlan: left promiscuous mode [ 711.980978][T10797] Mount JFS Failure: -22 [ 713.958316][ T51] team0 (unregistering): Port device team_slave_1 removed [ 714.068272][ T51] team0 (unregistering): Port device team_slave_0 removed [ 716.356788][ T51] team0 (unregistering): Port device team_slave_1 removed [ 716.464827][ T51] team0 (unregistering): Port device team_slave_0 removed [ 717.807157][ T51] pim6reg (unregistering): left allmulticast mode [ 719.007829][ T51] team0 (unregistering): Port device team_slave_1 removed [ 719.128587][ T51] team0 (unregistering): Port device team_slave_0 removed [ 720.336433][T10673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 720.558372][ T30] audit: type=1400 audit(1720641904.326:804): avc: denied { getopt } for pid=10806 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 720.770682][T10660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 720.976220][T10660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 721.198404][T10660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 721.334299][T10660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 721.936763][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.174053][T10671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 722.281127][T10671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 722.355479][T10671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 722.733217][T10671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 722.991871][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.090090][T10666] veth0_vlan: entered promiscuous mode [ 723.269821][T10666] veth1_vlan: entered promiscuous mode [ 723.333299][T10820] syzkaller0: entered promiscuous mode [ 723.389065][T10819] syzkaller0: left promiscuous mode [ 723.435324][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.560905][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.569373][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.692971][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.710614][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.723982][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.915276][T10666] veth0_macvtap: entered promiscuous mode [ 723.971445][T10666] veth1_macvtap: entered promiscuous mode [ 723.998287][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.082749][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.091061][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.158711][T10823] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.166620][T10823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.228826][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.251383][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.264169][T10666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.313264][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.336889][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.353514][T10666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.452054][T10671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.480164][T10666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.511762][T10666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.524202][T10666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.533482][T10666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.678531][T10671] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.793596][ T30] audit: type=1400 audit(1720641908.566:805): avc: denied { read } for pid=10829 comm="syz.1.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 724.848702][T10823] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.857648][T10823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.984610][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.992891][T10678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.574724][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.897895][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.923666][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.198778][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.242609][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.547085][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.834478][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'. [ 726.850630][T10859] syzkaller0: entered promiscuous mode [ 726.910125][T10858] syzkaller0: left promiscuous mode [ 726.962641][T10671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.064875][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 727.096734][T10673] veth0_vlan: entered promiscuous mode [ 727.170542][T10660] veth0_vlan: entered promiscuous mode [ 727.280166][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.369330][T10860] team0: entered promiscuous mode [ 727.393010][T10860] team_slave_0: entered promiscuous mode [ 727.401990][T10860] team_slave_1: entered promiscuous mode [ 727.430050][T10860] team0: left promiscuous mode [ 727.451759][T10860] team_slave_0: left promiscuous mode [ 727.459308][T10860] team_slave_1: left promiscuous mode [ 727.539730][T10673] veth1_vlan: entered promiscuous mode [ 727.593540][T10660] veth1_vlan: entered promiscuous mode [ 727.831154][T10671] veth0_vlan: entered promiscuous mode [ 727.867565][T10671] veth1_vlan: entered promiscuous mode [ 728.160329][T10660] veth0_macvtap: entered promiscuous mode [ 728.772661][T10673] veth0_macvtap: entered promiscuous mode [ 728.837736][T10660] veth1_macvtap: entered promiscuous mode [ 728.922136][T10673] veth1_macvtap: entered promiscuous mode [ 729.205824][T10671] veth0_macvtap: entered promiscuous mode [ 729.314396][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.342722][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.368019][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.380332][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.479901][ T30] audit: type=1400 audit(1720641913.246:806): avc: denied { watch watch_reads } for pid=10878 comm="syz.2.1680" path="pipe:[48040]" dev="pipefs" ino=48040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 729.494494][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.562495][T10671] veth1_macvtap: entered promiscuous mode [ 729.587647][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.604019][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.628433][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.645258][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.659889][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.683940][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.741138][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.901720][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.937081][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.969543][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.992970][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.025164][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.153923][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.180782][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.462484][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.623638][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.635987][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.661781][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.687034][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.708700][T10660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.719930][T10660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.742778][T10660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.796512][T10660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.937254][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.011915][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.046055][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.072072][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.109800][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.126323][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.137105][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.160502][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.192369][T10671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.219631][T10673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.252975][T10673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.300056][T10673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.311532][T10673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.360885][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.382521][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.394194][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.405255][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.416562][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.427342][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.452309][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.471598][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.503519][T10671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.696500][T10671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.732676][T10671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.733624][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 731.754021][T10671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.754082][T10671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.047244][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 732.188023][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.232368][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.366645][T10896] team0: entered promiscuous mode [ 732.384618][T10896] team_slave_0: entered promiscuous mode [ 732.397537][T10896] team_slave_1: entered promiscuous mode [ 732.409195][T10896] team0: left promiscuous mode [ 732.414338][T10896] team_slave_0: left promiscuous mode [ 732.422212][T10896] team_slave_1: left promiscuous mode [ 732.557371][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.591070][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.703680][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.747896][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.878210][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.921507][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.046490][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.091671][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.358584][ T2449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.381602][ T2449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.294513][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'. [ 740.383885][ T30] audit: type=1400 audit(1720641924.146:807): avc: denied { ioctl } for pid=10933 comm="syz.2.1692" path="socket:[52799]" dev="sockfs" ino=52799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 740.432898][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 740.470960][T10934] team_slave_0: entered promiscuous mode [ 740.482868][T10934] team_slave_0: entered allmulticast mode [ 740.584476][T10934] team0: Port device team_slave_0 removed [ 741.014876][ T30] audit: type=1400 audit(1720641924.776:808): avc: denied { read } for pid=10945 comm="syz.2.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 741.040495][T10948] overlay: ./bus is not a directory [ 741.196616][T10678] kernel write not supported for file [eventfd] (pid: 10678 comm: kworker/0:5) [ 742.136405][T10975] delete_channel: no stack [ 742.952791][ T30] audit: type=1400 audit(1720641926.646:809): avc: denied { bind } for pid=10972 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 743.713197][ T4725] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 744.794621][ T4725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.848900][ T4725] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.880859][ T4725] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.942603][ T4725] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 744.954867][ T4725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.965020][ T4725] usb 4-1: Product: syz [ 744.969767][ T4725] usb 4-1: Manufacturer: syz [ 744.979331][ T4725] usb 4-1: SerialNumber: syz [ 745.008267][ T4725] usb 4-1: selecting invalid altsetting 1 [ 745.356847][ T30] audit: type=1326 audit(1720641929.126:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.0.1722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b2f75bd9 code=0x0 [ 746.662005][ T4725] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 746.705819][ T4725] cdc_ncm 4-1:1.0: bind() failure [ 746.778462][T11021] delete_channel: no stack [ 746.797704][ T4725] usb 4-1: USB disconnect, device number 10 [ 747.217654][T11031] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 747.217654][T11031] The task syz.2.1726 (11031) triggered the difference, watch for misbehavior. [ 748.316044][ T30] audit: type=1326 audit(1720641932.076:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bfbb75bd9 code=0x0 [ 748.591766][ T4725] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 749.262536][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 750.952247][ T53] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 750.962207][ T53] Bluetooth: hci6: Injecting HCI hardware error event [ 750.978953][ T53] Bluetooth: hci6: hardware error 0x00 [ 754.548700][ T4725] usb 1-1: device descriptor read/all, error -71 [ 756.553951][ T53] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 756.657313][ T30] audit: type=1400 audit(1720641940.426:812): avc: denied { map } for pid=11105 comm="syz.0.1750" path="/proc/42/task" dev="proc" ino=53065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 756.717680][ T30] audit: type=1400 audit(1720641940.456:813): avc: denied { execute } for pid=11105 comm="syz.0.1750" path="/proc/42/task" dev="proc" ino=53065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 757.301793][ T4725] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 757.514474][ T4725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.548740][ T4725] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.562268][ T4725] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.616427][ T4725] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.649617][ T4725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.665391][ T4725] usb 2-1: Product: syz [ 757.670232][ T4725] usb 2-1: Manufacturer: syz [ 757.677954][ T4725] usb 2-1: SerialNumber: syz [ 757.697662][ T4725] usb 2-1: selecting invalid altsetting 1 [ 757.771675][ T5139] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 757.996724][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.030481][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.076282][ T5139] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 758.131758][ T5139] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.178909][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.275548][ T5139] usb 4-1: config 0 descriptor?? [ 758.479358][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.487262][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.828585][ T5139] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 760.874827][ T5139] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 760.926118][ T5139] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 761.056321][ T4725] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 761.067542][ T5139] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 761.080010][ T4725] cdc_ncm 2-1:1.0: bind() failure [ 761.124444][ T4725] usb 2-1: USB disconnect, device number 10 [ 761.673785][ T4725] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 762.046041][T11156] overlayfs: missing 'lowerdir' [ 762.286587][T10687] usb 4-1: USB disconnect, device number 11 [ 762.296761][ T30] audit: type=1400 audit(1720641945.716:814): avc: denied { listen } for pid=11150 comm="syz.0.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 762.363531][ T4725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.460102][ T4725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 762.585090][ T4725] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.679575][ T4725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.726995][T11149] syzkaller0: entered promiscuous mode [ 762.733887][T11149] syzkaller0: entered allmulticast mode [ 762.765795][ T4725] usb 5-1: config 0 descriptor?? [ 763.608952][ T4725] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 763.623276][ T4725] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 763.648428][ T4725] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 768.042663][ T4725] usb 5-1: USB disconnect, device number 10 [ 773.120415][T11209] xt_connbytes: Forcing CT accounting to be enabled [ 773.719983][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 773.768743][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 773.784986][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 773.840613][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 773.860780][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 773.882136][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 774.153834][ T30] audit: type=1326 audit(1720641957.926:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.4.1788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47df175bd9 code=0x0 [ 774.286112][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.346129][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.362544][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.375775][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.387780][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 774.400884][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 776.003682][ T5090] Bluetooth: hci1: command tx timeout [ 776.560808][ T5090] Bluetooth: hci2: command tx timeout [ 778.071763][ T5090] Bluetooth: hci1: command tx timeout [ 778.779178][ T5090] Bluetooth: hci2: command tx timeout [ 779.525650][ T929] kernel write not supported for file [eventfd] (pid: 929 comm: kworker/1:2) [ 780.161264][ T5090] Bluetooth: hci1: command tx timeout [ 780.351584][T11259] dccp_xmit_packet: Payload too large (65475) for featneg. [ 780.468617][ T143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.729047][ T30] audit: type=1400 audit(1720641964.476:816): avc: denied { getopt } for pid=11266 comm="syz.4.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 780.791694][ T5090] Bluetooth: hci2: command tx timeout [ 781.976038][ T143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.190457][T11281] 9pnet_fd: Insufficient options for proto=fd [ 782.250089][ T5090] Bluetooth: hci1: command tx timeout [ 782.264751][ T143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.300831][T11213] chnl_net:caif_netlink_parms(): no params data found [ 782.417387][T10678] kernel write not supported for file [eventfd] (pid: 10678 comm: kworker/0:5) [ 782.605429][ T143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.871855][ T5090] Bluetooth: hci2: command tx timeout [ 783.934104][T11219] chnl_net:caif_netlink_parms(): no params data found [ 784.261634][T10687] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 784.419267][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.419453][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.419695][T11213] bridge_slave_0: entered allmulticast mode [ 784.427316][T11213] bridge_slave_0: entered promiscuous mode [ 784.434476][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.434655][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.435307][T11213] bridge_slave_1: entered allmulticast mode [ 784.451033][T11213] bridge_slave_1: entered promiscuous mode [ 784.456888][T10687] usb 2-1: Using ep0 maxpacket: 16 [ 784.460253][T10687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.460295][T10687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.460370][T10687] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 784.460400][T10687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.463838][T10687] usb 2-1: config 0 descriptor?? [ 785.147994][T10687] usbhid 2-1:0.0: can't add hid device: -71 [ 785.162036][T10687] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 785.174993][T11219] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.216625][T11219] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.226949][T10687] usb 2-1: USB disconnect, device number 11 [ 785.240634][T11219] bridge_slave_0: entered allmulticast mode [ 785.252198][T11219] bridge_slave_0: entered promiscuous mode [ 785.287123][T11213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.323666][ T143] bridge_slave_1: left allmulticast mode [ 785.330378][ T143] bridge_slave_1: left promiscuous mode [ 785.339040][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.360281][ T143] bridge_slave_0: left allmulticast mode [ 785.371670][ T143] bridge_slave_0: left promiscuous mode [ 785.384002][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.363972][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.388449][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.410684][ T143] bond0 (unregistering): Released all slaves [ 786.451977][T11213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.470205][T11219] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.483310][T11219] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.495297][T11219] bridge_slave_1: entered allmulticast mode [ 786.521271][T11219] bridge_slave_1: entered promiscuous mode [ 786.848174][T11213] team0: Port device team_slave_0 added [ 786.883751][T11219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.905330][T11213] team0: Port device team_slave_1 added [ 786.966419][T11219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.200560][T11219] team0: Port device team_slave_0 added [ 787.222713][T11213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.230169][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.271181][T11213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.303354][T11219] team0: Port device team_slave_1 added [ 787.349377][T11213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.360896][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.408821][T11213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.468810][T11219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.481093][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.516493][T11219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.551042][ T143] hsr_slave_0: left promiscuous mode [ 787.560925][ T143] hsr_slave_1: left promiscuous mode [ 787.572231][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.583055][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.600773][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.612086][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.669877][ T143] veth1_macvtap: left promiscuous mode [ 787.679830][ T143] veth0_macvtap: left promiscuous mode [ 787.691756][ T143] veth1_vlan: left promiscuous mode [ 787.697576][ T143] veth0_vlan: left promiscuous mode [ 787.931977][ T30] audit: type=1400 audit(1720641971.696:817): avc: denied { read write } for pid=11302 comm="syz.4.1812" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 788.023142][ T30] audit: type=1400 audit(1720641971.696:818): avc: denied { open } for pid=11302 comm="syz.4.1812" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 788.224066][ T4725] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 788.422797][ T4725] usb 5-1: Using ep0 maxpacket: 16 [ 788.450964][ T4725] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 788.474752][ T4725] usb 5-1: config 0 has no interface number 0 [ 788.489478][ T4725] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 788.517357][ T4725] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 788.603233][ T4725] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 788.631515][ T4725] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 788.659063][ T4725] usb 5-1: Product: syz [ 788.664296][ T4725] usb 5-1: SerialNumber: syz [ 788.673711][ T4725] usb 5-1: config 0 descriptor?? [ 788.687297][ T4725] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 788.735771][ T4725] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input18 [ 788.925914][ T4725] ------------[ cut here ]------------ [ 788.936440][ T4725] URB ffff88802f0fa200 submitted while active [ 789.072464][ T4725] WARNING: CPU: 0 PID: 4725 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 789.072574][ T4725] Modules linked in: [ 789.072604][ T4725] CPU: 0 PID: 4725 Comm: kworker/0:3 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 789.072645][ T4725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 789.072671][ T4725] Workqueue: usb_hub_wq hub_event [ 789.072762][ T4725] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 789.072819][ T4725] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 6e 36 d1 fa c6 05 ae 11 11 09 01 90 48 c7 c7 80 df e8 8b 48 89 de e8 97 50 93 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 789.072886][ T4725] RSP: 0018:ffffc900032fef10 EFLAGS: 00010286 [ 789.072924][ T4725] RAX: 0000000000000000 RBX: ffff88802f0fa200 RCX: ffffc90011f67000 [ 789.072953][ T4725] RDX: 0000000000040000 RSI: ffffffff81500076 RDI: 0000000000000001 [ 789.072980][ T4725] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 789.073044][ T4725] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888060f17010 [ 789.073071][ T4725] R13: ffff888060f170a0 R14: ffff888060f17050 R15: ffff8880245422e8 [ 789.073099][ T4725] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 789.073136][ T4725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.073196][ T4725] CR2: 00000000203ff000 CR3: 0000000025044000 CR4: 00000000003506f0 [ 789.073224][ T4725] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 789.073250][ T4725] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 789.073276][ T4725] Call Trace: [ 789.073291][ T4725] [ 789.073341][ T4725] ? show_regs+0x8c/0xa0 [ 789.073398][ T4725] ? __warn+0xe5/0x3c0 [ 789.073484][ T4725] ? usb_submit_urb+0x14da/0x1730 [ 789.073535][ T4725] ? report_bug+0x3c0/0x580 [ 789.073578][ T4725] ? handle_bug+0x3d/0x70 [ 789.073658][ T4725] ? exc_invalid_op+0x17/0x50 [ 789.073713][ T4725] ? asm_exc_invalid_op+0x1a/0x20 [ 789.073802][ T4725] ? __warn_printk+0x1a6/0x350 [ 789.073860][ T4725] ? usb_submit_urb+0x14da/0x1730 [ 789.073941][ T4725] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 789.073989][ T4725] cm109_input_open+0x271/0x460 [ 789.074041][ T4725] input_open_device+0x1c9/0x320 [ 789.074110][ T4725] ? __pfx_cm109_input_open+0x10/0x10 [ 789.074152][ T4725] kbd_connect+0x103/0x160 [ 789.074196][ T4725] input_attach_handler.isra.0+0x181/0x260 [ 789.074282][ T4725] input_register_device+0xb22/0x1140 [ 789.074351][ T4725] cm109_usb_probe+0x122f/0x17c0 [ 789.074436][ T4725] usb_probe_interface+0x309/0x9d0 [ 789.074484][ T4725] ? __pfx_usb_probe_interface+0x10/0x10 [ 789.074530][ T4725] really_probe+0x23e/0xa90 [ 789.074617][ T4725] __driver_probe_device+0x1de/0x440 [ 789.074673][ T4725] driver_probe_device+0x4c/0x1b0 [ 789.074756][ T4725] __device_attach_driver+0x1df/0x310 [ 789.074812][ T4725] ? __pfx___device_attach_driver+0x10/0x10 [ 789.074894][ T4725] bus_for_each_drv+0x157/0x1e0 [ 789.074941][ T4725] ? __pfx_bus_for_each_drv+0x10/0x10 [ 789.074985][ T4725] ? lockdep_hardirqs_on+0x7c/0x110 [ 789.075058][ T4725] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.075102][ T4725] __device_attach+0x1e8/0x4b0 [ 789.075156][ T4725] ? __pfx___device_attach+0x10/0x10 [ 789.075241][ T4725] ? do_raw_spin_unlock+0x172/0x230 [ 789.075289][ T4725] bus_probe_device+0x17f/0x1c0 [ 789.075373][ T4725] device_add+0x114b/0x1a70 [ 789.075435][ T4725] ? __pfx_device_add+0x10/0x10 [ 789.075520][ T4725] ? preempt_schedule_thunk+0x1a/0x30 [ 789.075564][ T4725] usb_set_configuration+0x10cb/0x1c50 [ 789.075663][ T4725] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 789.075720][ T4725] usb_generic_driver_probe+0xb1/0x110 [ 789.075801][ T4725] usb_probe_device+0xec/0x3e0 [ 789.075839][ T4725] ? __pfx_usb_probe_device+0x10/0x10 [ 789.075877][ T4725] really_probe+0x23e/0xa90 [ 789.075957][ T4725] __driver_probe_device+0x1de/0x440 [ 789.076010][ T4725] ? usb_driver_applicable+0x1c7/0x220 [ 789.076055][ T4725] driver_probe_device+0x4c/0x1b0 [ 789.076137][ T4725] __device_attach_driver+0x1df/0x310 [ 789.076192][ T4725] ? __pfx___device_attach_driver+0x10/0x10 [ 789.076292][ T4725] bus_for_each_drv+0x157/0x1e0 [ 789.076344][ T4725] ? __pfx_bus_for_each_drv+0x10/0x10 [ 789.076388][ T4725] ? lockdep_hardirqs_on+0x7c/0x110 [ 789.076464][ T4725] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.076511][ T4725] __device_attach+0x1e8/0x4b0 [ 789.076563][ T4725] ? __pfx___device_attach+0x10/0x10 [ 789.076645][ T4725] ? do_raw_spin_unlock+0x172/0x230 [ 789.076693][ T4725] bus_probe_device+0x17f/0x1c0 [ 789.076742][ T4725] device_add+0x114b/0x1a70 [ 789.076834][ T4725] ? __pfx_device_add+0x10/0x10 [ 789.076894][ T4725] ? add_device_randomness+0xb8/0xf0 [ 789.076975][ T4725] usb_new_device+0xd90/0x1a10 [ 789.077041][ T4725] ? __pfx_usb_new_device+0x10/0x10 [ 789.077133][ T4725] hub_event+0x2db0/0x4e20 [ 789.077204][ T4725] ? __pfx_hub_event+0x10/0x10 [ 789.077293][ T4725] ? __pfx_lock_acquire+0x10/0x10 [ 789.077357][ T4725] ? __pfx_lock_release+0x10/0x10 [ 789.077448][ T4725] process_one_work+0x9c5/0x1b40 [ 789.077495][ T4725] ? __pfx_hcd_resume_work+0x10/0x10 [ 789.077535][ T4725] ? __pfx_process_one_work+0x10/0x10 [ 789.077603][ T4725] ? assign_work+0x1a0/0x250 [ 789.881703][ T4725] worker_thread+0x6c8/0xf30 [ 789.891105][ T4725] ? __pfx_worker_thread+0x10/0x10 [ 789.900560][ T4725] kthread+0x2c1/0x3a0 [ 789.905761][ T4725] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.913309][ T4725] ? __pfx_kthread+0x10/0x10 [ 789.922160][ T4725] ret_from_fork+0x45/0x80 [ 789.927890][ T4725] ? __pfx_kthread+0x10/0x10 [ 789.939257][ T4725] ret_from_fork_asm+0x1a/0x30 [ 789.946450][ T4725] [ 789.952543][ T4725] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 789.965264][ T4725] CPU: 0 PID: 4725 Comm: kworker/0:3 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 789.982852][ T4725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 789.996977][ T4725] Workqueue: usb_hub_wq hub_event [ 790.002290][ T4725] Call Trace: [ 790.007364][ T4725] [ 790.011726][ T4725] dump_stack_lvl+0x3d/0x1f0 [ 790.018029][ T4725] panic+0x6f5/0x7a0 [ 790.022395][ T4725] ? __pfx_panic+0x10/0x10 [ 790.028997][ T4725] ? show_trace_log_lvl+0x363/0x500 [ 790.036555][ T4725] ? usb_submit_urb+0x14da/0x1730 [ 790.046437][ T4725] check_panic_on_warn+0xab/0xb0 [ 790.051715][ T4725] __warn+0xf1/0x3c0 [ 790.058436][ T4725] ? usb_submit_urb+0x14da/0x1730 [ 790.064736][ T4725] report_bug+0x3c0/0x580 [ 790.070354][ T4725] handle_bug+0x3d/0x70 [ 790.075338][ T4725] exc_invalid_op+0x17/0x50 [ 790.082078][ T4725] asm_exc_invalid_op+0x1a/0x20 [ 790.091997][ T4725] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 790.103999][ T4725] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 6e 36 d1 fa c6 05 ae 11 11 09 01 90 48 c7 c7 80 df e8 8b 48 89 de e8 97 50 93 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 790.130471][ T4725] RSP: 0018:ffffc900032fef10 EFLAGS: 00010286 [ 790.139899][ T4725] RAX: 0000000000000000 RBX: ffff88802f0fa200 RCX: ffffc90011f67000 [ 790.151758][ T4725] RDX: 0000000000040000 RSI: ffffffff81500076 RDI: 0000000000000001 [ 790.166218][ T4725] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 790.177207][ T4725] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888060f17010 [ 790.191399][ T4725] R13: ffff888060f170a0 R14: ffff888060f17050 R15: ffff8880245422e8 [ 790.207302][ T4725] ? __warn_printk+0x1a6/0x350 [ 790.212439][ T4725] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 790.218994][ T4725] cm109_input_open+0x271/0x460 [ 790.223919][ T4725] input_open_device+0x1c9/0x320 [ 790.229605][ T4725] ? __pfx_cm109_input_open+0x10/0x10 [ 790.236394][ T4725] kbd_connect+0x103/0x160 [ 790.245769][ T4725] input_attach_handler.isra.0+0x181/0x260 [ 790.252178][ T4725] input_register_device+0xb22/0x1140 [ 790.259297][ T4725] cm109_usb_probe+0x122f/0x17c0 [ 790.265482][ T4725] usb_probe_interface+0x309/0x9d0 [ 790.271393][ T4725] ? __pfx_usb_probe_interface+0x10/0x10 [ 790.279702][ T4725] really_probe+0x23e/0xa90 [ 790.285857][ T4725] __driver_probe_device+0x1de/0x440 [ 790.291386][ T4725] driver_probe_device+0x4c/0x1b0 [ 790.297616][ T4725] __device_attach_driver+0x1df/0x310 [ 790.304206][ T4725] ? __pfx___device_attach_driver+0x10/0x10 [ 790.313702][ T4725] bus_for_each_drv+0x157/0x1e0 [ 790.321004][ T4725] ? __pfx_bus_for_each_drv+0x10/0x10 [ 790.330531][ T4725] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.341400][ T4725] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 790.347968][ T4725] __device_attach+0x1e8/0x4b0 [ 790.355475][ T4725] ? __pfx___device_attach+0x10/0x10 [ 790.361661][ T4725] ? do_raw_spin_unlock+0x172/0x230 [ 790.372387][ T4725] bus_probe_device+0x17f/0x1c0 [ 790.378366][ T4725] device_add+0x114b/0x1a70 [ 790.386013][ T4725] ? __pfx_device_add+0x10/0x10 [ 790.391627][ T4725] ? preempt_schedule_thunk+0x1a/0x30 [ 790.397769][ T4725] usb_set_configuration+0x10cb/0x1c50 [ 790.404263][ T4725] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 790.415263][ T4725] usb_generic_driver_probe+0xb1/0x110 [ 790.421700][ T4725] usb_probe_device+0xec/0x3e0 [ 790.429405][ T4725] ? __pfx_usb_probe_device+0x10/0x10 [ 790.439106][ T4725] really_probe+0x23e/0xa90 [ 790.446493][ T4725] __driver_probe_device+0x1de/0x440 [ 790.455933][ T4725] ? usb_driver_applicable+0x1c7/0x220 [ 790.463113][ T4725] driver_probe_device+0x4c/0x1b0 [ 790.470259][ T4725] __device_attach_driver+0x1df/0x310 [ 790.476260][ T4725] ? __pfx___device_attach_driver+0x10/0x10 [ 790.485812][ T4725] bus_for_each_drv+0x157/0x1e0 [ 790.493169][ T4725] ? __pfx_bus_for_each_drv+0x10/0x10 [ 790.501766][ T4725] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.509526][ T4725] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 790.519168][ T4725] __device_attach+0x1e8/0x4b0 [ 790.524270][ T4725] ? __pfx___device_attach+0x10/0x10 [ 790.532086][ T4725] ? do_raw_spin_unlock+0x172/0x230 [ 790.538418][ T4725] bus_probe_device+0x17f/0x1c0 [ 790.546387][ T4725] device_add+0x114b/0x1a70 [ 790.552054][ T4725] ? __pfx_device_add+0x10/0x10 [ 790.558291][ T4725] ? add_device_randomness+0xb8/0xf0 [ 790.565122][ T4725] usb_new_device+0xd90/0x1a10 [ 790.571603][ T4725] ? __pfx_usb_new_device+0x10/0x10 [ 790.580398][ T4725] hub_event+0x2db0/0x4e20 [ 790.587350][ T4725] ? __pfx_hub_event+0x10/0x10 [ 790.597835][ T4725] ? __pfx_lock_acquire+0x10/0x10 [ 790.613345][ T4725] ? __pfx_lock_release+0x10/0x10 [ 790.619250][ T4725] process_one_work+0x9c5/0x1b40 [ 790.626734][ T4725] ? __pfx_hcd_resume_work+0x10/0x10 [ 790.633903][ T4725] ? __pfx_process_one_work+0x10/0x10 [ 790.642449][ T4725] ? assign_work+0x1a0/0x250 [ 790.649049][ T4725] worker_thread+0x6c8/0xf30 [ 790.654477][ T4725] ? __pfx_worker_thread+0x10/0x10 [ 790.662279][ T4725] kthread+0x2c1/0x3a0 [ 790.668780][ T4725] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.676356][ T4725] ? __pfx_kthread+0x10/0x10 [ 790.682644][ T4725] ret_from_fork+0x45/0x80 [ 790.693538][ T4725] ? __pfx_kthread+0x10/0x10 [ 790.700279][ T4725] ret_from_fork_asm+0x1a/0x30 [ 790.706872][ T4725] [ 790.710457][ T4725] Kernel Offset: disabled [ 790.717885][ T4725] Rebooting in 86400 seconds..