last executing test programs: 2m19.279917055s ago: executing program 1 (id=1306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000b8a0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f7a80d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001e8c76bbe7ff988a28ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4522bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b9fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabfd50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd1389a0963de85dd2b189774450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f326df86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c39b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa525235da0000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc32a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f8293cf83bceaf6c9eda1f83166aa1e2093d626870510e6cd176d501fe01e4a752fc30134073188e3f826f695e4e14fca6596943467c7df154493023f77c107b3db20ea75b493b4b38dc43986d94748cbfab954edae20982b6d212a44f4b40387876bc9eb73900"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m19.171299789s ago: executing program 1 (id=1307): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x401, 0x9, 0x17, 0x8}, {0x5, 0x3, 0x0, 0x5}, {0x6, 0xb, 0x38, 0xcd80}, {0x200, 0x4, 0x2, 0x8}, {0x0, 0x40, 0xbd, 0x8001}, {0x5, 0x6, 0x4, 0x7}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, 0x78}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x227, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000f7b0b0789785272f138fc20f00"/32, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x80000, 0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) 2m18.278093024s ago: executing program 2 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x5, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0xffffffffffffffde, &(0x7f0000000200)="63ecedb979000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.225795014s ago: executing program 1 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba538a44cc2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.168151397s ago: executing program 2 (id=1313): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 2m17.607201969s ago: executing program 2 (id=1314): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) lchown(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@[]:'}]}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) io_submit(r0, 0x1, &(0x7f0000003e40)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m17.604778368s ago: executing program 3 (id=1315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r4) 2m17.552136372s ago: executing program 1 (id=1317): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/pid\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) 2m17.436403593s ago: executing program 3 (id=1318): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f0000000000), 0x4) 2m17.41624571s ago: executing program 1 (id=1319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000001a40)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7112c0000000000000000000000000000000001"], 0xffdd) 2m16.709117862s ago: executing program 4 (id=1324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m16.627912537s ago: executing program 2 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r4}, 0x10) close(r2) 2m16.405200747s ago: executing program 4 (id=1326): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 2m16.388212138s ago: executing program 2 (id=1327): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2m16.271795845s ago: executing program 4 (id=1328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 2m16.205516876s ago: executing program 4 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x6, [@local, @broadcast, @link_local, @multicast, @remote, @multicast]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000002000018000000180000000200000000000000210000030000000003000000020000000000"], &(0x7f0000000080)=""/159, 0x32, 0x9f, 0x1, 0x0, 0x0, @void, @value}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2m16.047431915s ago: executing program 3 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 2m15.317601667s ago: executing program 4 (id=1331): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0xe5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x58}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x2}, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x0, 0x1c, 0x2, {0x2, 0x0, @loopback}}, 0x24) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 2m15.111623051s ago: executing program 3 (id=1332): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = openat$selinux_status(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64(r1, &(0x7f0000000880)=""/207, 0xcf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000004c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendfile(r6, r3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160420, &(0x7f0000000140)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="110000001c0001"], 0x1c}}, 0xc080) 2m14.743271162s ago: executing program 4 (id=1333): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) 2m13.085665094s ago: executing program 2 (id=1334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 2m13.085000631s ago: executing program 3 (id=1335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_clone(0x4d100011, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.016087088s ago: executing program 1 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {0x3}, {0x0, 0x6}}, {0x10, 0x0, 0x0, 0x6, @tick=0x8, {}, {}, @addr={0x6, 0xb}}, {0x6, 0x2, 0x81, 0x3, @tick=0x75af, {0x6, 0x3c}, {0x5, 0xd}, @connect={{0x1, 0x1}, {0x6, 0x4}}}], 0x54) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) 2m12.913735514s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m23.046041609s ago: executing program 32 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {0x3}, {0x0, 0x6}}, {0x10, 0x0, 0x0, 0x6, @tick=0x8, {}, {}, @addr={0x6, 0xb}}, {0x6, 0x2, 0x81, 0x3, @tick=0x75af, {0x6, 0x3c}, {0x5, 0xd}, @connect={{0x1, 0x1}, {0x6, 0x4}}}], 0x54) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) 1m22.924061819s ago: executing program 33 (id=1334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1m22.853563672s ago: executing program 34 (id=1337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m22.839582781s ago: executing program 35 (id=1333): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) 10.145469089s ago: executing program 6 (id=1802): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 7.040885529s ago: executing program 6 (id=1819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 6.756047117s ago: executing program 6 (id=1823): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.132661134s ago: executing program 6 (id=1840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa000000000000000000000000038000000000000006000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000100000900000000000000000000000010000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x15c}}, 0x0) 2.008639983s ago: executing program 7 (id=1842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003280)={0x18, 0x4, &(0x7f0000002ec0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x10}]}, &(0x7f0000002fc0)='GPL\x00', 0x1, 0xfd, &(0x7f0000003000)=""/253, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.99929715s ago: executing program 6 (id=1843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, &(0x7f0000006840)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.942891241s ago: executing program 5 (id=1844): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201009dec13b2106d04de"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.932812457s ago: executing program 0 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.831892524s ago: executing program 7 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.769668545s ago: executing program 0 (id=1848): mount$9p_fd(0x20100000, 0x0, 0x0, 0x2054010, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bd8000/0x4000)=nil, 0x2000, 0x3}) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x40800) 1.524305967s ago: executing program 7 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) 1.391083133s ago: executing program 8 (id=1850): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x81}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x11, 0x2, 0x300, &(0x7f0000000000)) 1.32012883s ago: executing program 7 (id=1851): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000010000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.259230921s ago: executing program 7 (id=1852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 1.11812134s ago: executing program 8 (id=1853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa000000000000000000000000038000000000000006000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000100000900000000000000000000000010000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x15c}}, 0x0) 1.029600323s ago: executing program 8 (id=1854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 882.885768ms ago: executing program 5 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 882.389597ms ago: executing program 8 (id=1856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 799.977997ms ago: executing program 0 (id=1857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000200000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000050000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000295"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 753.165892ms ago: executing program 8 (id=1858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'macvlan0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x5, [@datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x5, 0xffff, 0x6}], 'A'}, @enum64={0x4, 0x5, 0x0, 0x13, 0x1, 0x7, [{0xe, 0x8001, 0xfffffffa}, {0x6, 0xe, 0xc0a4}, {0xa, 0x6, 0x3}, {0xa, 0x9, 0xffff}, {0x3, 0x10000, 0xfff}]}]}, {0x0, [0x30, 0x0, 0x61]}}, &(0x7f00000005c0)=""/183, 0x81, 0xb7, 0x0, 0x80, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$media(0x0, 0x800, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = dup(r4) socket$kcm(0x11, 0xa, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="dfa76c564c89e3d6fcb2bbe5"], &(0x7f0000000480)='syzkaller\x00', 0x20006, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000003c0)={0x1, &(0x7f0000000340)=[{0x2, 0x0, 0x43, 0xc8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r6}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) ioctl$PPPIOCCONNECT(r5, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001cc0), 0x400000000000026, 0x0) 684.158579ms ago: executing program 0 (id=1859): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000002c0)="e2b3b8c51d71eadd2cf9dda251607cf2ac834ad26f541d5e9aa46cff60ba3d1ba4e90b24a30075ff6423ae78237d68331d7e125b57ef23912b3f43376608d71bd2be176d4f54c54f91176ff4e6ce2d6ad7c2eb", 0x53, 0x8c1, 0x0, 0x0) 628.064183ms ago: executing program 5 (id=1860): bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 612.382999ms ago: executing program 8 (id=1861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 522.396494ms ago: executing program 0 (id=1862): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 440.012394ms ago: executing program 5 (id=1863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r3}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 206.576146ms ago: executing program 5 (id=1864): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa000000000000000000000000038000000000000006000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000100000900000000000000000000000010000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x15c}}, 0x0) 157.04092ms ago: executing program 0 (id=1865): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201009dec13b2106d04de"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 74.753057ms ago: executing program 6 (id=1866): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 50.066598ms ago: executing program 5 (id=1867): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 0s ago: executing program 7 (id=1868): mount$9p_fd(0x20100000, 0x0, 0x0, 0x2054010, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bd8000/0x4000)=nil, 0x2000, 0x3}) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x40800) kernel console output (not intermixed with test programs): 2658][ T5836] plantronics 0003:047F:FFFF.0020: unbalanced collection at end of report description [ 308.075601][ T5836] plantronics 0003:047F:FFFF.0020: parse failed [ 308.081927][ T5836] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22 [ 308.291512][ T969] usb 1-1: USB disconnect, device number 21 [ 308.463778][ T966] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 308.638941][ T966] usb 4-1: Using ep0 maxpacket: 32 [ 308.688799][ T966] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 308.813117][ T966] usb 4-1: config 0 has no interface number 0 [ 308.932412][ T966] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 308.963977][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.985125][ T966] usb 4-1: Product: syz [ 308.991018][ T966] usb 4-1: Manufacturer: syz [ 309.062509][ T966] usb 4-1: SerialNumber: syz [ 309.069584][ T966] usb 4-1: config 0 descriptor?? [ 309.077569][ T966] smsc95xx v2.0.0 [ 309.496371][ T966] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 309.517900][ T966] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.663568][ T5912] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 309.853263][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 309.884605][ T5912] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.915126][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.925845][ T5912] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 309.944136][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.655760][ T5912] usb 2-1: config 0 descriptor?? [ 310.661030][ T966] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 310.672622][ T966] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 310.688190][ T5912] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 310.697090][ T966] usb 4-1: USB disconnect, device number 28 [ 310.915264][ T1079] Bluetooth: hci5: Frame reassembly failed (-84) [ 313.216930][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 313.303354][ T5912] usb 2-1: USB disconnect, device number 29 [ 313.478984][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 313.479000][ T29] audit: type=1326 audit(313.406:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 313.508462][ T29] audit: type=1326 audit(313.406:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 313.531840][ T29] audit: type=1326 audit(313.406:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 313.554903][ T29] audit: type=1326 audit(313.406:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 314.659191][ T5912] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 315.116091][ T29] audit: type=1326 audit(315.076:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12a57e719 code=0x7ffc0000 [ 315.183611][ T29] audit: type=1326 audit(315.076:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12a57e719 code=0x7ffc0000 [ 315.244529][ T29] audit: type=1326 audit(315.076:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff12a57e719 code=0x7ffc0000 [ 315.271077][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 315.279357][ T29] audit: type=1326 audit(315.076:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12a57e719 code=0x7ffc0000 [ 315.305828][ T29] audit: type=1326 audit(315.076:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12a57e719 code=0x7ffc0000 [ 315.328725][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.341428][ T5912] usb 2-1: config 0 has no interfaces? [ 315.352413][ T29] audit: type=1326 audit(315.076:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff12a57e719 code=0x7ffc0000 [ 315.375120][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.387199][ T5912] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.397398][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.409944][ T5912] usb 2-1: Product: syz [ 315.417554][ T5912] usb 2-1: Manufacturer: syz [ 315.422279][ T5912] usb 2-1: SerialNumber: syz [ 315.432200][ T5912] usb 2-1: config 0 descriptor?? [ 316.721925][ T966] usb 2-1: USB disconnect, device number 30 [ 316.815446][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.821840][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.097619][ T966] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 318.244006][ T5912] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 318.273617][ T966] usb 2-1: Using ep0 maxpacket: 16 [ 318.280624][ T966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.290920][ T966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.295135][ T9612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 318.315602][ T966] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.332568][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.341999][ T966] usb 2-1: Product: syz [ 318.346416][ T966] usb 2-1: Manufacturer: syz [ 318.351108][ T966] usb 2-1: SerialNumber: syz [ 318.417512][ T5912] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 318.439045][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.464445][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.480212][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 318.498084][ T5912] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 318.508120][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.526671][ T5912] usb 1-1: config 0 descriptor?? [ 319.069739][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.104195][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.136978][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 319.136994][ T29] audit: type=1326 audit(319.096:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 319.167021][ T29] audit: type=1326 audit(319.096:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 319.190535][ T5912] usbhid 1-1:0.0: can't add hid device: -71 [ 319.196738][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 319.209207][ T5912] usb 1-1: USB disconnect, device number 22 [ 319.230257][ T29] audit: type=1326 audit(319.096:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 319.254169][ T29] audit: type=1326 audit(319.096:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 319.277781][ T29] audit: type=1326 audit(319.106:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 319.307180][ T966] usb 2-1: cannot find UAC_HEADER [ 319.313939][ T5877] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 319.340363][ T966] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 319.352837][ T966] usb 2-1: USB disconnect, device number 31 [ 319.417820][ T7008] udevd[7008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.577579][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.588541][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.598341][ T5877] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 319.607429][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.617260][ T5877] usb 3-1: config 0 descriptor?? [ 320.113500][ C0] hrtimer: interrupt took 61780 ns [ 320.539231][ T5877] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0021/input/input16 [ 320.558542][ T9639] vlan0: entered promiscuous mode [ 320.583839][ T9639] bridge0: entered promiscuous mode [ 320.628063][ T5877] sony 0003:054C:03D5.0021: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 320.732339][ T5877] usb 3-1: USB disconnect, device number 23 [ 320.739897][ T5828] Bluetooth: hci5: sending frame failed (-49) [ 320.750276][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 320.759671][ T9647] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 320.760392][ T29] audit: type=1326 audit(320.706:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 320.793118][ T29] audit: type=1326 audit(320.706:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 320.816005][ T29] audit: type=1326 audit(320.706:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 320.838965][ T29] audit: type=1326 audit(320.706:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 320.862004][ T29] audit: type=1326 audit(320.736:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3477e719 code=0x7ffc0000 [ 324.095143][ T9697] syz.3.1157[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.095222][ T9697] syz.3.1157[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.122332][ T9697] syz.3.1157[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.144865][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 324.144881][ T29] audit: type=1400 audit(324.106:1086): avc: denied { create } for pid=9695 comm="syz.3.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 324.185420][ T9697] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 324.200871][ T29] audit: type=1400 audit(324.116:1087): avc: denied { block_suspend } for pid=9696 comm="syz.4.1158" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.260594][ T29] audit: type=1400 audit(324.146:1088): avc: denied { relabelfrom } for pid=9695 comm="syz.3.1157" name="XDP" dev="sockfs" ino=21852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 324.373515][ T5877] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 324.394022][ T29] audit: type=1400 audit(324.146:1089): avc: denied { mac_admin } for pid=9695 comm="syz.3.1157" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.470077][ T29] audit: type=1400 audit(324.156:1090): avc: denied { relabelto } for pid=9695 comm="syz.3.1157" name="XDP" dev="sockfs" ino=21852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 324.502553][ T29] audit: type=1400 audit(324.156:1091): avc: denied { create } for pid=9692 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.524030][ T29] audit: type=1326 audit(324.206:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3150b7e31b code=0x7ffc0000 [ 324.524065][ T29] audit: type=1400 audit(324.216:1093): avc: denied { ioctl } for pid=9692 comm="syz.0.1156" path="socket:[21854]" dev="sockfs" ino=21854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.524094][ T29] audit: type=1400 audit(324.216:1094): avc: denied { bind } for pid=9692 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.524120][ T29] audit: type=1400 audit(324.216:1095): avc: denied { setopt } for pid=9692 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.533549][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 324.535606][ T5877] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.535635][ T5877] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.537998][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 324.538024][ T5877] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 324.538044][ T5877] usb 2-1: Product: syz [ 324.538059][ T5877] usb 2-1: Manufacturer: syz [ 324.648095][ T5877] hub 2-1:4.0: USB hub found [ 326.741462][ T5877] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 326.774075][ T5877] usb 2-1: USB disconnect, device number 32 [ 327.509708][ T9752] vcan0: entered promiscuous mode [ 327.526491][ T9752] vlan2: entered promiscuous mode [ 327.746846][ T9752] vcan0: left promiscuous mode [ 329.538491][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 329.538507][ T29] audit: type=1400 audit(329.046:1164): avc: denied { read } for pid=9771 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.673918][ T5877] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 329.735905][ T29] audit: type=1326 audit(329.636:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12a57e31b code=0x7ffc0000 [ 329.765768][ T29] audit: type=1326 audit(329.716:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12a57e31b code=0x7ffc0000 [ 329.874009][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 330.162820][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.546344][ T29] audit: type=1326 audit(329.846:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12a57e31b code=0x7ffc0000 [ 330.612659][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.625651][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 330.630849][ T5877] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 330.640258][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.649873][ T9] usb 4-1: config index 0 descriptor too short (expected 48676, got 36) [ 330.658466][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.671204][ T5877] usb 1-1: config 0 descriptor?? [ 330.676216][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.686158][ T9] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 330.699783][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.714124][ T5877] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 330.752781][ T29] audit: type=1326 audit(329.846:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12a57e31b code=0x7ffc0000 [ 330.782767][ T9] usb 4-1: config 0 descriptor?? [ 330.813836][ T29] audit: type=1326 audit(329.846:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12a57e31b code=0x7ffc0000 [ 330.836568][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.877225][ T29] audit: type=1326 audit(330.096:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12a57e31b code=0x7ffc0000 [ 330.917468][ T29] audit: type=1400 audit(330.206:1171): avc: denied { create } for pid=9777 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.936786][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.969626][ T29] audit: type=1400 audit(330.216:1172): avc: denied { read } for pid=9777 comm="syz.1.1184" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 331.042745][ T5907] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 331.062885][ T29] audit: type=1400 audit(330.216:1173): avc: denied { open } for pid=9777 comm="syz.1.1184" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 331.086056][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.257878][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.300003][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.336063][ T5907] usb 3-1: config 1 has no interface number 0 [ 331.355405][ T5907] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.381667][ T5907] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 331.400129][ T5907] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.429726][ T5907] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.451107][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.468001][ T5907] usb 3-1: Product: syz [ 331.477776][ T5907] usb 3-1: Manufacturer: syz [ 331.486832][ T5907] usb 3-1: SerialNumber: syz [ 332.723534][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 332.730526][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 332.739822][ T5907] cdc_ncm 3-1:1.1: bind() failure [ 332.750211][ T9] usb 4-1: USB disconnect, device number 29 [ 332.760734][ T80] usb 1-1: USB disconnect, device number 23 [ 332.865703][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 332.942200][ T5836] usb 3-1: USB disconnect, device number 24 [ 333.283819][ T80] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 333.514832][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 333.526535][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 333.561897][ T80] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 334.063754][ T80] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.072377][ T80] usb 1-1: Product: syz [ 334.080477][ T80] usb 1-1: Manufacturer: syz [ 334.086671][ T80] usb 1-1: SerialNumber: syz [ 334.094449][ T80] usb 1-1: config 0 descriptor?? [ 334.105156][ T9814] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.114770][ T80] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.525261][ T80] usb 1-1: USB disconnect, device number 24 [ 334.938249][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 334.951243][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 335.275778][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.344918][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 335.505753][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 335.537552][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.559692][ T969] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 335.573818][ T9851] pim6reg1: entered promiscuous mode [ 335.579142][ T9851] pim6reg1: entered allmulticast mode [ 335.587302][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.122930][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 336.136241][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 336.145575][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.155141][ T9] usb 2-1: config 0 descriptor?? [ 336.236103][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 336.320449][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.332251][ T969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.353537][ T969] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 336.362646][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.373991][ T969] usb 4-1: config 0 descriptor?? [ 337.476105][ T9] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 337.483310][ T9] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 337.494213][ T9] nintendo 0003:057E:2009.0022: item fetching failed at offset 2/5 [ 337.502679][ T9] nintendo 0003:057E:2009.0022: HID parse failed [ 337.584807][ T9] nintendo 0003:057E:2009.0022: probe - fail = -22 [ 337.612355][ T9] nintendo 0003:057E:2009.0022: probe with driver nintendo failed with error -22 [ 337.651583][ T9] usb 2-1: USB disconnect, device number 33 [ 337.655131][ T9872] x_tables: duplicate underflow at hook 1 [ 337.674060][ T969] wacom 0003:056A:0045.0023: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 337.690248][ T969] wacom 0003:056A:0045.0023: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.3-1/input0 [ 337.703922][ T969] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0045.0023/input/input17 [ 337.726874][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 337.726887][ T29] audit: type=1400 audit(337.686:1232): avc: denied { read } for pid=5185 comm="acpid" name="mouse1" dev="devtmpfs" ino=3102 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.825964][ T29] audit: type=1400 audit(337.686:1233): avc: denied { open } for pid=5185 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3102 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.892166][ T80] usb 4-1: USB disconnect, device number 30 [ 337.938448][ T29] audit: type=1400 audit(337.746:1234): avc: denied { ioctl } for pid=5185 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3102 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.373636][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 339.042747][ T9899] pim6reg1: entered promiscuous mode [ 339.043539][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 339.048447][ T9899] pim6reg1: entered allmulticast mode [ 339.054893][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.071962][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 339.083111][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.091689][ T9] usb 3-1: Product: syz [ 339.165699][ T9] usb 3-1: Manufacturer: syz [ 339.195463][ T9] usb 3-1: SerialNumber: syz [ 339.214763][ T9] usb 3-1: config 0 descriptor?? [ 339.222335][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 339.301792][ T29] audit: type=1400 audit(339.246:1235): avc: denied { name_bind } for pid=9906 comm="syz.4.1225" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 339.506288][ T29] audit: type=1400 audit(339.246:1236): avc: denied { node_bind } for pid=9906 comm="syz.4.1225" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 339.825123][ T9918] capability: warning: `syz.4.1225' uses 32-bit capabilities (legacy support in use) [ 341.022621][ T9939] tipc: Enabling of bearer rejected, already enabled [ 341.874629][ T9955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=9955 comm=syz.4.1237 [ 342.326588][ T9] gspca_sunplus: reg_r err -32 [ 342.331444][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 342.353904][ T9] usb 3-1: USB disconnect, device number 25 [ 342.562316][ T9961] pim6reg1: entered promiscuous mode [ 342.579050][ T9961] pim6reg1: entered allmulticast mode [ 343.448609][ T29] audit: type=1400 audit(343.406:1237): avc: denied { create } for pid=9979 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 343.800303][ T29] audit: type=1400 audit(343.626:1238): avc: denied { bind } for pid=9977 comm="syz.3.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.132253][T10043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1270'. [ 347.169060][ T29] audit: type=1400 audit(347.126:1239): avc: denied { write } for pid=10044 comm="syz.2.1271" name="ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 347.217867][T10047] pim6reg1: entered promiscuous mode [ 347.223311][T10047] pim6reg1: entered allmulticast mode [ 347.390634][ T29] audit: type=1400 audit(347.346:1240): avc: denied { relabelfrom } for pid=10051 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 347.433957][ T29] audit: type=1400 audit(347.346:1241): avc: denied { relabelto } for pid=10051 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 347.778308][T10074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1285'. [ 349.596278][T10128] overlayfs: missing 'lowerdir' [ 349.611277][ T29] audit: type=1400 audit(349.566:1242): avc: denied { create } for pid=10127 comm="syz.1.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.632063][ T29] audit: type=1400 audit(349.566:1243): avc: denied { write } for pid=10127 comm="syz.1.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 350.444700][ T29] audit: type=1326 audit(350.396:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 350.471076][ T29] audit: type=1326 audit(350.396:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 350.494634][ T29] audit: type=1326 audit(350.396:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 350.518772][ T29] audit: type=1326 audit(350.406:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 350.545861][ T29] audit: type=1326 audit(350.426:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 350.580799][ T29] audit: type=1326 audit(350.426:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 350.604630][ T29] audit: type=1326 audit(350.536:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 350.627852][ T29] audit: type=1326 audit(350.536:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3150b7e719 code=0x7ffc0000 [ 351.095285][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1302'. [ 351.244133][T10145] pim6reg1: entered promiscuous mode [ 351.260903][T10145] pim6reg1: entered allmulticast mode [ 351.923730][T10158] overlayfs: missing 'lowerdir' [ 354.170236][T10201] overlayfs: missing 'lowerdir' [ 356.431935][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 356.431951][ T29] audit: type=1400 audit(356.386:1270): avc: denied { ioctl } for pid=10218 comm="syz.1.1336" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22856 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 378.713944][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.720261][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.661228][ T29] audit: type=1400 audit(406.566:1271): avc: denied { read write } for pid=10234 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.703944][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.720700][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.737752][ T29] audit: type=1400 audit(406.566:1272): avc: denied { open } for pid=10234 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.738895][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.769926][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.777424][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 406.785709][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.842490][T10238] overlayfs: missing 'lowerdir' [ 406.854459][ T29] audit: type=1400 audit(406.806:1273): avc: denied { mounton } for pid=10234 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 407.346638][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.411724][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.432475][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.440960][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.449747][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.450458][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.457216][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 407.465225][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.471219][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.494589][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.505015][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.512226][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.592483][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 407.624037][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 407.633870][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 407.649080][ T53] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 407.650253][ T29] audit: type=1400 audit(407.606:1274): avc: denied { setopt } for pid=10250 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.659814][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 407.684599][ T29] audit: type=1400 audit(407.606:1275): avc: denied { create } for pid=10250 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 407.707634][ T29] audit: type=1400 audit(407.606:1276): avc: denied { create } for pid=10250 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 407.727092][ T29] audit: type=1400 audit(407.606:1277): avc: denied { read } for pid=10250 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.746594][ T29] audit: type=1400 audit(407.606:1278): avc: denied { bind } for pid=10250 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 407.772703][ T5831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 407.785026][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.876865][ T7417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.989529][ T7417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.068762][ T7417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.302823][ T7417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.325688][T10244] chnl_net:caif_netlink_parms(): no params data found [ 408.434986][T10234] chnl_net:caif_netlink_parms(): no params data found [ 408.473342][ T29] audit: type=1400 audit(408.426:1279): avc: denied { read } for pid=5494 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 408.597720][ T29] audit: type=1400 audit(408.556:1280): avc: denied { search } for pid=5494 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.735777][T10244] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.743093][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.751619][T10244] bridge_slave_0: entered allmulticast mode [ 408.758778][T10244] bridge_slave_0: entered promiscuous mode [ 408.766838][ T7417] bridge_slave_1: left allmulticast mode [ 408.781630][ T7417] bridge_slave_1: left promiscuous mode [ 408.800579][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.836825][ T7417] bridge_slave_0: left allmulticast mode [ 408.842500][ T7417] bridge_slave_0: left promiscuous mode [ 408.859212][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.974348][ T5833] Bluetooth: hci5: command tx timeout [ 409.556805][ T7417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.597055][ T7417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.605708][ T5833] Bluetooth: hci1: command tx timeout [ 409.611812][ T5833] Bluetooth: hci3: command tx timeout [ 409.630302][ T7417] bond0 (unregistering): Released all slaves [ 409.659865][T10244] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.667937][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.675525][T10244] bridge_slave_1: entered allmulticast mode [ 409.682047][T10244] bridge_slave_1: entered promiscuous mode [ 409.753757][T10246] chnl_net:caif_netlink_parms(): no params data found [ 409.824584][T10249] chnl_net:caif_netlink_parms(): no params data found [ 409.837854][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.845740][ T5833] Bluetooth: hci6: command tx timeout [ 409.858092][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.865395][T10234] bridge_slave_0: entered allmulticast mode [ 409.872175][T10234] bridge_slave_0: entered promiscuous mode [ 409.880135][T10234] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.887320][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.894553][T10234] bridge_slave_1: entered allmulticast mode [ 409.901366][T10234] bridge_slave_1: entered promiscuous mode [ 410.012901][T10244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.025086][T10244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.101367][T10244] team0: Port device team_slave_0 added [ 410.152181][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.183697][T10244] team0: Port device team_slave_1 added [ 410.202504][T10246] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.209747][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.223823][T10246] bridge_slave_0: entered allmulticast mode [ 410.230430][T10246] bridge_slave_0: entered promiscuous mode [ 410.238442][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.245744][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.252923][T10246] bridge_slave_1: entered allmulticast mode [ 410.263080][T10246] bridge_slave_1: entered promiscuous mode [ 410.293075][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.330540][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.342403][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.353607][T10249] bridge_slave_0: entered allmulticast mode [ 410.360513][T10249] bridge_slave_0: entered promiscuous mode [ 410.415959][T10244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.423023][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.449886][T10244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.470442][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.478913][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.487166][T10249] bridge_slave_1: entered allmulticast mode [ 410.494159][T10249] bridge_slave_1: entered promiscuous mode [ 410.517829][ T7417] hsr_slave_0: left promiscuous mode [ 410.537621][ T7417] hsr_slave_1: left promiscuous mode [ 410.557600][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.573599][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.591963][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.613601][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.636919][ T7417] veth1_macvtap: left promiscuous mode [ 410.642807][ T7417] veth0_macvtap: left promiscuous mode [ 410.662238][ T7417] veth1_vlan: left promiscuous mode [ 411.046849][ T5833] Bluetooth: hci5: command tx timeout [ 411.168655][ T7417] team0 (unregistering): Port device team_slave_1 removed [ 411.223777][ T7417] team0 (unregistering): Port device team_slave_0 removed [ 411.237652][T10326] overlayfs: missing 'lowerdir' [ 411.684288][ T5833] Bluetooth: hci3: command tx timeout [ 411.689733][ T5833] Bluetooth: hci1: command tx timeout [ 411.695841][ T5833] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 411.704401][ T5833] Bluetooth: hci4: Injecting HCI hardware error event [ 411.712295][ T5833] Bluetooth: hci4: hardware error 0x00 [ 411.949593][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 411.949626][ T29] audit: type=1400 audit(411.886:1325): avc: denied { remount } for pid=10330 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 412.027628][ T5831] Bluetooth: hci6: command tx timeout [ 412.475776][T10246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.487101][T10246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.505225][T10244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.512167][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.539537][T10244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.615475][T10234] team0: Port device team_slave_0 added [ 412.629587][T10234] team0: Port device team_slave_1 added [ 412.671800][ T29] audit: type=1400 audit(412.626:1326): avc: denied { read write } for pid=10334 comm="syz.0.1352" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 412.696366][ T29] audit: type=1400 audit(412.626:1327): avc: denied { open } for pid=10334 comm="syz.0.1352" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 412.745722][ T29] audit: type=1400 audit(412.626:1328): avc: denied { ioctl } for pid=10334 comm="syz.0.1352" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 412.772142][ T29] audit: type=1400 audit(412.626:1329): avc: denied { setopt } for pid=10334 comm="syz.0.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.795161][ T29] audit: type=1400 audit(412.626:1330): avc: denied { accept } for pid=10334 comm="syz.0.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.840475][ T29] audit: type=1400 audit(412.626:1331): avc: denied { write } for pid=10334 comm="syz.0.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.859524][ T29] audit: type=1400 audit(412.716:1332): avc: denied { create } for pid=10336 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.862610][T10249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.881310][ T29] audit: type=1400 audit(412.726:1333): avc: denied { setopt } for pid=10336 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.899386][T10246] team0: Port device team_slave_0 added [ 412.907505][ T29] audit: type=1400 audit(412.726:1334): avc: denied { bind } for pid=10336 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.966821][T10249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.977200][T10246] team0: Port device team_slave_1 added [ 412.989059][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.996663][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.022894][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.035916][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.042870][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.069056][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.083527][ T80] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 413.093399][T10244] hsr_slave_0: entered promiscuous mode [ 413.099913][T10244] hsr_slave_1: entered promiscuous mode [ 413.123610][ T5831] Bluetooth: hci5: command tx timeout [ 413.174281][T10234] hsr_slave_0: entered promiscuous mode [ 413.180321][T10234] hsr_slave_1: entered promiscuous mode [ 413.187049][T10234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.194860][T10234] Cannot create hsr debugfs directory [ 413.207470][T10246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.214559][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.240697][T10246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.258236][T10249] team0: Port device team_slave_0 added [ 413.265787][T10249] team0: Port device team_slave_1 added [ 413.281002][T10246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.284664][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.288878][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.324078][ T80] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.332965][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.337561][T10246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.354801][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.366266][ T80] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 413.375641][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.388185][ T80] hub 1-1:1.0: bad descriptor, ignoring hub [ 413.394365][ T80] hub 1-1:1.0: probe with driver hub failed with error -5 [ 413.404113][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 413.409334][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 413.417720][ T80] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 413.424094][ T80] cdc_wdm 1-1:1.0: Unknown control protocol [ 413.447283][T10246] hsr_slave_0: entered promiscuous mode [ 413.453548][T10246] hsr_slave_1: entered promiscuous mode [ 413.463051][T10246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.470984][T10246] Cannot create hsr debugfs directory [ 413.479681][T10249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.486679][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.512784][T10249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.525058][T10249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.532003][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.558193][T10249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.763605][ T5831] Bluetooth: hci1: command tx timeout [ 413.763747][ T53] Bluetooth: hci3: command tx timeout [ 413.776421][ T5833] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 413.819383][T10249] hsr_slave_0: entered promiscuous mode [ 413.826965][T10249] hsr_slave_1: entered promiscuous mode [ 413.833007][T10249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.846120][T10249] Cannot create hsr debugfs directory [ 413.893298][ T7417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.988556][ T7417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.048849][ T7417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.083591][ T53] Bluetooth: hci6: command tx timeout [ 414.114336][T10244] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 414.134293][ T7417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.151095][T10244] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 414.161286][T10244] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 414.175118][T10244] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 414.235287][T10339] usb 1-1: reset low-speed USB device number 25 using dummy_hcd [ 414.261540][T10234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.311462][T10234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.343048][T10234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 414.372417][T10234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.399138][ T7417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.486742][T10246] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.526466][ T7417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.545955][T10339] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 414.561429][T10244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.571254][T10246] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.583266][T10246] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 414.609217][ T7417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.629342][T10246] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.689485][ T7417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.721833][T10244] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.775669][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.782761][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.793215][T10249] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 414.808149][T10249] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 414.822748][T10249] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 414.846513][T10249] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 414.862918][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.863994][ T5912] usb 1-1: USB disconnect, device number 25 [ 414.870046][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.021273][T10234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.066676][ T7417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.174573][ T7417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.208016][ T53] Bluetooth: hci5: command tx timeout [ 415.218435][T10234] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.245836][T10246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.264517][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.271595][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.346992][ T7417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.398945][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.406046][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.445430][ T7417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.460474][T10246] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.484950][T10249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.505699][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.512784][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.522546][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.529620][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.541787][T10244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.558859][T10249] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.645721][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.652808][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.691226][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.698375][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.733353][T10246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.746595][T10246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.839487][ T7417] bridge_slave_1: left allmulticast mode [ 415.845485][ T53] Bluetooth: hci3: command tx timeout [ 415.857113][ T53] Bluetooth: hci1: command tx timeout [ 415.868993][ T7417] bridge_slave_1: left promiscuous mode [ 415.882740][T10404] overlayfs: missing 'lowerdir' [ 415.890064][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.911581][ T7417] bridge_slave_0: left allmulticast mode [ 415.923542][ T7417] bridge_slave_0: left promiscuous mode [ 415.929743][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.990641][ T7417] bridge_slave_1: left allmulticast mode [ 416.031113][ T7417] bridge_slave_1: left promiscuous mode [ 416.066838][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.128777][ T7417] bridge_slave_0: left allmulticast mode [ 416.136686][ T7417] bridge_slave_0: left promiscuous mode [ 416.149322][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.166697][ T53] Bluetooth: hci6: command tx timeout [ 416.243010][ T7417] bridge_slave_1: left allmulticast mode [ 416.298244][ T7417] bridge_slave_1: left promiscuous mode [ 416.304685][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.315338][ T7417] bridge_slave_0: left allmulticast mode [ 416.337081][ T7417] bridge_slave_0: left promiscuous mode [ 416.342795][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.421196][ T7417] bridge0: left promiscuous mode [ 416.997343][ T7417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.007625][ T7417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.018187][ T7417] bond0 (unregistering): Released all slaves [ 417.098164][ T7417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.108530][ T7417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.119888][ T7417] bond0 (unregistering): Released all slaves [ 417.203797][ T7417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.217215][ T7417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.227651][ T7417] bond0 (unregistering): Released all slaves [ 417.246856][T10234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.388294][ T7417] tipc: Disabling bearer [ 417.416106][ T7417] tipc: Left network mode [ 417.447074][T10244] veth0_vlan: entered promiscuous mode [ 417.458037][T10244] veth1_vlan: entered promiscuous mode [ 417.475664][T10244] veth0_macvtap: entered promiscuous mode [ 417.485188][T10244] veth1_macvtap: entered promiscuous mode [ 417.488223][T10421] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1360'. [ 417.496407][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.510423][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.520594][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.531130][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.541186][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.551861][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.561739][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.572219][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.588485][T10244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.598600][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.609052][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.619002][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.629588][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.639821][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.650455][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.660384][T10244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.670840][T10244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.683596][T10244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.745398][ T7417] tipc: Disabling bearer [ 417.752769][ T7417] tipc: Left network mode [ 417.755160][T10244] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.766517][T10244] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.786035][T10244] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.806980][T10244] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.074247][T10234] veth0_vlan: entered promiscuous mode [ 418.107807][T10246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.226961][T10234] veth1_vlan: entered promiscuous mode [ 418.317102][ T6726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.335892][ T6726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.347476][T10249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.393337][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.434363][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.480841][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 418.480855][ T29] audit: type=1400 audit(418.436:1358): avc: denied { mounton } for pid=10244 comm="syz-executor" path="/root/syzkaller.M6Znyn/syz-tmp" dev="sda1" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 418.557366][ T29] audit: type=1400 audit(418.476:1359): avc: denied { mount } for pid=10244 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.584966][T10234] veth0_macvtap: entered promiscuous mode [ 418.622796][ T29] audit: type=1400 audit(418.476:1360): avc: denied { mount } for pid=10244 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 418.646585][ T29] audit: type=1400 audit(418.476:1361): avc: denied { mounton } for pid=10244 comm="syz-executor" path="/root/syzkaller.M6Znyn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 418.677947][ T29] audit: type=1400 audit(418.476:1362): avc: denied { mounton } for pid=10244 comm="syz-executor" path="/root/syzkaller.M6Znyn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 418.711651][ T29] audit: type=1400 audit(418.476:1363): avc: denied { unmount } for pid=10244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 418.725020][T10246] veth0_vlan: entered promiscuous mode [ 418.739291][T10234] veth1_macvtap: entered promiscuous mode [ 418.750734][T10465] netlink: 368 bytes leftover after parsing attributes in process `syz.8.1342'. [ 418.778229][ T29] audit: type=1400 audit(418.486:1364): avc: denied { mounton } for pid=10244 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 418.829408][ T29] audit: type=1400 audit(418.486:1365): avc: denied { mounton } for pid=10244 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 418.881212][T10246] veth1_vlan: entered promiscuous mode [ 418.904106][T10469] overlayfs: missing 'lowerdir' [ 418.910807][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.923141][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.934075][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.945158][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.955415][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.969015][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.979057][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.990967][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.001927][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.012914][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.326734][T10234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.388279][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.399305][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.410548][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.432221][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.462242][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.480537][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.490801][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.494286][T10479] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1367'. [ 419.501665][T10477] overlayfs: missing 'lowerdir' [ 419.510877][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.526271][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.536851][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.547693][T10234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.656309][T10234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.672392][T10234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.684782][T10234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.693784][T10234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.762704][T10249] veth0_vlan: entered promiscuous mode [ 419.818109][ T7417] hsr_slave_0: left promiscuous mode [ 419.831623][ T7417] hsr_slave_1: left promiscuous mode [ 419.837584][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.846124][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.854301][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.861804][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.874167][ T7417] hsr_slave_0: left promiscuous mode [ 419.880023][ T7417] hsr_slave_1: left promiscuous mode [ 419.890837][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.900655][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.910534][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.918512][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.929374][ T7417] hsr_slave_0: left promiscuous mode [ 419.945468][ T7417] hsr_slave_1: left promiscuous mode [ 419.951260][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.959023][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.967105][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.975587][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.008926][ T7417] veth1_macvtap: left promiscuous mode [ 420.014757][ T7417] veth0_macvtap: left promiscuous mode [ 420.020386][ T7417] veth1_vlan: left promiscuous mode [ 420.026803][ T7417] veth0_vlan: left promiscuous mode [ 420.033748][ T7417] veth0_macvtap: left promiscuous mode [ 420.040469][ T7417] veth1_vlan: left promiscuous mode [ 420.050103][ T7417] veth1_macvtap: left promiscuous mode [ 420.056685][ T7417] veth0_macvtap: left promiscuous mode [ 420.073614][ T7417] veth1_vlan: left promiscuous mode [ 420.323845][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 420.345618][T10495] overlayfs: missing 'lowerdir' [ 420.487920][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 420.652383][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 420.674673][ T5907] usb 1-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 420.690461][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.729316][ T5907] usb 1-1: Product: syz [ 420.734544][ T5907] usb 1-1: Manufacturer: syz [ 420.739197][ T5907] usb 1-1: SerialNumber: syz [ 420.749706][ T5907] appletouch 1-1:1.0: Could not find int-in endpoint [ 420.758174][ T5907] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 420.774048][ T5907] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 420.985215][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1374'. [ 421.006984][T10500] nbd: socks must be embedded in a SOCK_ITEM attr [ 421.033775][ T7417] team0 (unregistering): Port device team_slave_1 removed [ 421.092601][T10503] overlayfs: missing 'lowerdir' [ 421.099715][ T7417] team0 (unregistering): Port device team_slave_0 removed [ 421.659740][ T7417] team0 (unregistering): Port device team_slave_1 removed [ 421.693609][ T7417] team0 (unregistering): Port device team_slave_0 removed [ 422.238734][ T7417] team0 (unregistering): Port device team_slave_1 removed [ 422.271537][ T7417] team0 (unregistering): Port device team_slave_0 removed [ 422.576287][T10249] veth1_vlan: entered promiscuous mode [ 422.588929][T10246] veth0_macvtap: entered promiscuous mode [ 422.601003][T10493] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1372'. [ 422.610458][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1376'. [ 422.611492][ T5907] usb 1-1: USB disconnect, device number 26 [ 422.622946][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1376'. [ 422.647179][T10505] erspan0: entered promiscuous mode [ 422.653056][T10505] batadv_slave_1: entered promiscuous mode [ 422.668188][T10246] veth1_macvtap: entered promiscuous mode [ 422.761232][T10249] veth0_macvtap: entered promiscuous mode [ 422.830142][T10249] veth1_macvtap: entered promiscuous mode [ 422.865893][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.889734][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.906206][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.930310][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.948815][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.960933][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.001234][T10246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.035487][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.051127][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.064792][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.082873][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.094596][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.145717][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.162073][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.176138][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.193322][T10529] overlayfs: missing 'lowerdir' [ 423.201742][T10246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.276993][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.344876][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.396717][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.442574][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.487505][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.594792][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.621355][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.633000][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.654077][T10249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.688836][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.718814][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.733474][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.752984][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.765513][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.782877][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.793384][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.804049][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.849260][T10249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.868965][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.882633][T10246] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.889454][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.900889][T10246] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.909921][T10246] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.918764][T10246] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.045266][T10249] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.061343][T10249] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.078037][T10249] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.087585][T10249] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.105105][ T7413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.119076][ T7413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.129911][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 424.139034][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 424.176183][T10543] erspan0: entered promiscuous mode [ 424.195961][T10543] batadv_slave_1: entered promiscuous mode [ 424.203016][T10543] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 424.217398][T10543] Cannot create hsr debugfs directory [ 424.360399][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.407266][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.580736][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 424.611044][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.653018][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.747465][ T7409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.784813][ T7409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.813014][T10566] overlayfs: missing 'lowerdir' [ 425.651275][T10587] xt_hashlimit: size too large, truncated to 1048576 [ 425.693722][ T29] audit: type=1400 audit(425.606:1366): avc: denied { setopt } for pid=10586 comm="syz.8.1395" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 425.749183][ T29] audit: type=1400 audit(425.646:1367): avc: denied { create } for pid=10593 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 425.830783][ T29] audit: type=1400 audit(425.646:1368): avc: denied { ioctl } for pid=10593 comm="syz.5.1392" path="socket:[27095]" dev="sockfs" ino=27095 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 425.903304][ T29] audit: type=1400 audit(425.646:1369): avc: denied { write } for pid=10593 comm="syz.5.1392" path="socket:[27095]" dev="sockfs" ino=27095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 425.976099][ T29] audit: type=1400 audit(425.916:1370): avc: denied { connect } for pid=10603 comm="syz.6.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.207062][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 426.254246][T10623] overlayfs: missing 'lowerdir' [ 426.746976][ T29] audit: type=1400 audit(426.696:1371): avc: denied { name_bind } for pid=10631 comm="syz.0.1405" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 426.884156][ T29] audit: type=1400 audit(426.706:1372): avc: denied { read } for pid=10631 comm="syz.0.1405" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.577995][ T29] audit: type=1400 audit(428.536:1373): avc: denied { execute_no_trans } for pid=10659 comm="syz.0.1413" path="/325/file0" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.846913][ T29] audit: type=1400 audit(428.786:1374): avc: denied { mount } for pid=10659 comm="syz.0.1413" name="/" dev="hugetlbfs" ino=27224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 429.070377][ T29] audit: type=1400 audit(429.026:1375): avc: denied { read } for pid=10670 comm="syz.7.1416" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=45170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 429.125541][T10670] dccp_close: ABORT with 32 bytes unread [ 429.161862][T10676] overlayfs: missing 'lowerdir' [ 430.070127][T10705] ======================================================= [ 430.070127][T10705] WARNING: The mand mount option has been deprecated and [ 430.070127][T10705] and is ignored by this kernel. Remove the mand [ 430.070127][T10705] option from the mount to silence this warning. [ 430.070127][T10705] ======================================================= [ 430.152104][T10705] devtmpfs: Bad value for 'mpol' [ 430.671943][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'. [ 430.868691][T10728] nbd: socks must be embedded in a SOCK_ITEM attr [ 430.958326][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1432'. [ 430.997902][T10736] overlayfs: missing 'lowerdir' [ 431.179160][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 431.179176][ T29] audit: type=1400 audit(431.116:1383): avc: denied { mount } for pid=10747 comm="syz.8.1434" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 431.958939][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1441'. [ 432.300982][ T25] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 432.331864][T10793] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 432.341102][T10793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 432.400619][T10795] tipc: Started in network mode [ 432.405653][T10795] tipc: Node identity ac14140f, cluster identity 4711 [ 432.414077][T10795] tipc: Enabled bearer , priority 10 [ 432.814161][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.824471][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 432.854293][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 432.881349][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.365066][ T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 433.382822][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.416347][ T25] hub 7-1:1.0: bad descriptor, ignoring hub [ 433.430802][ T25] hub 7-1:1.0: probe with driver hub failed with error -5 [ 433.469376][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 433.480780][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 433.505493][ T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 433.538543][T10356] tipc: Node number set to 2886997007 [ 433.572143][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 433.733721][ T25] usb 7-1: USB disconnect, device number 2 [ 433.877156][ T29] audit: type=1326 audit(433.836:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 433.942397][ T29] audit: type=1326 audit(433.896:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 434.014396][ T29] audit: type=1326 audit(433.946:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 434.041552][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1451'. [ 434.068350][ T29] audit: type=1326 audit(433.946:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 434.082327][T10839] nbd: socks must be embedded in a SOCK_ITEM attr [ 434.291186][T10851] overlayfs: missing 'lowerdir' [ 435.181338][ T29] audit: type=1400 audit(435.136:1388): avc: denied { ioctl } for pid=10875 comm="syz.7.1463" path="socket:[27623]" dev="sockfs" ino=27623 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 435.262752][ T29] audit: type=1400 audit(435.176:1389): avc: denied { write } for pid=10875 comm="syz.7.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 435.294628][ T29] audit: type=1400 audit(435.186:1390): avc: denied { name_bind } for pid=10877 comm="syz.8.1465" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 435.532016][ T29] audit: type=1400 audit(435.486:1391): avc: denied { read } for pid=10898 comm="syz.6.1468" name="sg0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 435.570449][ T29] audit: type=1400 audit(435.486:1392): avc: denied { open } for pid=10898 comm="syz.6.1468" path="/dev/sg0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 435.663720][T10356] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 435.944858][T10356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.958274][T10356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 435.971021][T10356] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 435.982525][T10356] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.992875][T10356] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 436.023090][T10356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.047462][T10356] hub 6-1:1.0: bad descriptor, ignoring hub [ 436.051657][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1471'. [ 436.059234][T10356] hub 6-1:1.0: probe with driver hub failed with error -5 [ 436.101729][T10925] nbd: socks must be embedded in a SOCK_ITEM attr [ 436.151653][T10356] cdc_wdm 6-1:1.0: skipping garbage [ 436.175683][T10356] cdc_wdm 6-1:1.0: skipping garbage [ 436.195068][T10356] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 436.212918][T10356] cdc_wdm 6-1:1.0: Unknown control protocol [ 436.383653][T10356] usb 6-1: USB disconnect, device number 2 [ 436.433527][ T5875] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 436.468714][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1478'. [ 436.593476][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 436.602305][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 436.635143][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 436.654122][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.668049][ T5875] usb 1-1: Product: syz [ 436.672242][ T5875] usb 1-1: Manufacturer: syz [ 436.697950][ T5875] usb 1-1: SerialNumber: syz [ 436.718079][ T5875] appletouch 1-1:1.0: Could not find int-in endpoint [ 436.732274][ T5875] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 436.762199][ T5875] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 436.932300][ T5875] usb 1-1: USB disconnect, device number 27 [ 437.062237][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 437.062267][ T29] audit: type=1400 audit(436.996:1394): avc: denied { read } for pid=10953 comm="syz.8.1482" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 437.521645][ T29] audit: type=1400 audit(436.996:1395): avc: denied { open } for pid=10953 comm="syz.8.1482" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 437.563284][ T29] audit: type=1400 audit(437.006:1396): avc: denied { ioctl } for pid=10953 comm="syz.8.1482" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 438.387711][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1493'. [ 438.553366][ T29] audit: type=1400 audit(438.506:1397): avc: denied { write } for pid=10988 comm="syz.0.1491" path="socket:[28775]" dev="sockfs" ino=28775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 438.562014][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1493'. [ 438.883654][T10361] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 439.150565][T10361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.160950][T10361] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 439.170085][T10361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.183465][T10361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.193376][T10361] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 439.205782][T10361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.253649][ T5875] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 439.267006][T10361] hub 1-1:1.0: bad descriptor, ignoring hub [ 439.292210][T10361] hub 1-1:1.0: probe with driver hub failed with error -5 [ 439.414672][ T5875] usb 9-1: Using ep0 maxpacket: 8 [ 439.478538][ T5875] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 439.661603][ T5875] usb 9-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 439.681776][T10361] cdc_wdm 1-1:1.0: skipping garbage [ 439.701188][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.703689][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.722587][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.732247][T10361] cdc_wdm 1-1:1.0: skipping garbage [ 439.778733][ T5875] usb 9-1: Product: syz [ 439.789802][T10361] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 439.799070][ T5875] usb 9-1: Manufacturer: syz [ 439.809217][T10361] cdc_wdm 1-1:1.0: Unknown control protocol [ 439.818437][ T5875] usb 9-1: SerialNumber: syz [ 439.849221][ T5875] appletouch 9-1:1.0: Could not find int-in endpoint [ 439.864353][T10361] usb 1-1: USB disconnect, device number 28 [ 439.872092][ T5875] appletouch 9-1:1.0: probe with driver appletouch failed with error -5 [ 439.897379][ T5875] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 440.261570][ T29] audit: type=1326 audit(440.216:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 440.284927][ T29] audit: type=1326 audit(440.216:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 440.327887][T11050] warning: `syz.0.1507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 440.343273][ T29] audit: type=1326 audit(440.296:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 440.366927][ T29] audit: type=1326 audit(440.296:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 440.394234][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'. [ 440.394456][ T5912] usb 9-1: USB disconnect, device number 2 [ 440.428196][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'. [ 440.458976][T11057] erspan0: entered promiscuous mode [ 440.470107][T11057] batadv_slave_1: entered promiscuous mode [ 440.479644][T11057] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 440.487607][T11057] Cannot create hsr debugfs directory [ 440.543759][ T5874] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 440.706509][ T5874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.726995][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 440.767753][ T5874] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.789899][ T5874] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.799893][ T5874] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 440.809142][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.822154][ T5874] hub 7-1:1.0: bad descriptor, ignoring hub [ 440.833155][ T5874] hub 7-1:1.0: probe with driver hub failed with error -5 [ 440.841477][ T5874] cdc_wdm 7-1:1.0: skipping garbage [ 440.852329][ T5874] cdc_wdm 7-1:1.0: skipping garbage [ 440.880465][ T5874] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 440.887014][ T5874] cdc_wdm 7-1:1.0: Unknown control protocol [ 441.951451][T11041] cdc_wdm 7-1:1.0: Error autopm - -16 [ 441.958371][T10361] usb 7-1: USB disconnect, device number 3 [ 442.371620][ T29] audit: type=1400 audit(442.296:1402): avc: denied { audit_control } for pid=11117 comm="syz.0.1521" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 442.509775][ T29] audit: type=1326 audit(442.466:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.5.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d397e719 code=0x7ffc0000 [ 442.558448][ T29] audit: type=1326 audit(442.466:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.5.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d397e719 code=0x7ffc0000 [ 442.654090][ T29] audit: type=1326 audit(442.466:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.5.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d397e719 code=0x7ffc0000 [ 442.693050][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1527'. [ 442.728016][T11139] netlink: 'syz.6.1527': attribute type 7 has an invalid length. [ 442.743684][ T966] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 442.751420][T11139] netlink: 'syz.6.1527': attribute type 8 has an invalid length. [ 442.763832][ T29] audit: type=1326 audit(442.546:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.5.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d397e719 code=0x7ffc0000 [ 442.797069][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1527'. [ 442.831833][ T29] audit: type=1326 audit(442.546:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.5.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d397e719 code=0x7ffc0000 [ 442.903560][ T966] usb 8-1: Using ep0 maxpacket: 8 [ 442.916241][ T966] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 442.941243][ T966] usb 8-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 442.951151][ T966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.968843][ T966] usb 8-1: Product: syz [ 442.983384][ T966] usb 8-1: Manufacturer: syz [ 443.008315][ T966] usb 8-1: SerialNumber: syz [ 443.036815][ T966] appletouch 8-1:1.0: Could not find int-in endpoint [ 443.049552][ T966] appletouch 8-1:1.0: probe with driver appletouch failed with error -5 [ 443.234870][ T966] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 443.251639][ T966] usb 8-1: USB disconnect, device number 2 [ 443.903614][T10361] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 444.124402][T10361] usb 1-1: Using ep0 maxpacket: 8 [ 444.130815][T10361] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.145654][T10361] usb 1-1: config 0 has no interface number 0 [ 444.151774][T10361] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.210828][T10361] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 444.237831][ T29] audit: type=1326 audit(444.196:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.7.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 444.712408][ T29] audit: type=1326 audit(444.416:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.7.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 444.721822][T10361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.750093][T10361] usb 1-1: config 0 descriptor?? [ 444.757861][ T29] audit: type=1326 audit(444.426:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.7.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 444.781370][ T29] audit: type=1326 audit(444.546:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.7.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 444.821864][T10361] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 445.208152][T10361] usb 1-1: USB disconnect, device number 29 [ 445.215579][T10361] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 446.084611][T10361] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 446.253895][T10361] usb 1-1: Using ep0 maxpacket: 8 [ 446.268762][T10361] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 446.312522][T10361] usb 1-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 446.332267][T10361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.349861][T10361] usb 1-1: Product: syz [ 446.354527][T10361] usb 1-1: Manufacturer: syz [ 446.362410][T10361] usb 1-1: SerialNumber: syz [ 446.392672][T10361] appletouch 1-1:1.0: Could not find int-in endpoint [ 446.421114][T10361] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 446.430915][T10361] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 446.563954][T11272] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1553'. [ 446.607050][T10356] usb 1-1: USB disconnect, device number 30 [ 447.495362][T11276] dccp_close: ABORT with 1128 bytes unread [ 447.708521][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 447.708537][ T29] audit: type=1326 audit(447.666:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 447.766857][ T29] audit: type=1326 audit(447.716:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 447.815835][ T29] audit: type=1326 audit(447.776:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 447.840611][ T29] audit: type=1326 audit(447.776:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x7ffc0000 [ 448.037354][T11335] overlayfs: failed to resolve './file1': -2 [ 448.966910][T10356] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 449.019554][T11355] netlink: 'syz.5.1572': attribute type 10 has an invalid length. [ 449.023876][ T29] audit: type=1400 audit(448.976:1424): avc: denied { ioctl } for pid=11353 comm="syz.5.1572" path="socket:[29170]" dev="sockfs" ino=29170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 449.063188][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.071693][T11355] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.087656][T11355] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.096071][T11355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.104276][T11355] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.111376][T11355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.120830][T11355] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 449.141265][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1572'. [ 449.150518][T11358] bridge_slave_1: left allmulticast mode [ 449.151672][ T29] audit: type=1400 audit(448.976:1425): avc: denied { create } for pid=11353 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 449.156331][T11358] bridge_slave_1: left promiscuous mode [ 449.156460][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.233656][ T29] audit: type=1400 audit(448.976:1426): avc: denied { ioctl } for pid=11353 comm="syz.5.1572" path="socket:[29174]" dev="sockfs" ino=29174 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 449.303475][T11358] bridge_slave_0: left allmulticast mode [ 449.309480][T11358] bridge_slave_0: left promiscuous mode [ 449.329688][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.406553][T11358] bond0: (slave bridge0): Releasing backup interface [ 449.424443][T10356] usb 1-1: Using ep0 maxpacket: 8 [ 449.901671][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 449.911753][T11364] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.920337][T10356] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 449.940176][T10356] usb 1-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 449.957286][T10356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.118761][T10356] usb 1-1: Product: syz [ 450.122962][T10356] usb 1-1: Manufacturer: syz [ 450.127629][T10356] usb 1-1: SerialNumber: syz [ 450.135808][T10356] appletouch 1-1:1.0: Could not find int-in endpoint [ 450.142518][T10356] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 450.163643][T10356] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 450.280568][ T29] audit: type=1326 audit(450.236:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.6.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31d7e719 code=0x7ffc0000 [ 450.293556][T11369] netlink: 'syz.8.1575': attribute type 1 has an invalid length. [ 450.318062][ T29] audit: type=1326 audit(450.236:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.6.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31d7e719 code=0x7ffc0000 [ 450.341248][T11369] netlink: 'syz.8.1575': attribute type 2 has an invalid length. [ 450.372038][T11346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1569'. [ 450.464817][ T5874] usb 1-1: USB disconnect, device number 31 [ 450.478260][ T29] audit: type=1326 audit(450.276:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.6.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31d7e719 code=0x7ffc0000 [ 451.204850][ T5875] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 451.594393][ T80] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 451.829510][ T80] usb 7-1: Using ep0 maxpacket: 8 [ 451.908132][ T80] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 451.913511][ T5875] usb 8-1: Using ep0 maxpacket: 16 [ 451.946908][ T80] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.963349][ T5875] usb 8-1: unable to get BOS descriptor or descriptor too short [ 451.971486][ T5875] usb 8-1: no configurations [ 451.989787][ T5875] usb 8-1: can't read configurations, error -22 [ 451.996244][ T80] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.021734][ T80] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.058351][ T80] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.091634][T11427] netlink: 'syz.8.1590': attribute type 10 has an invalid length. [ 452.138160][ T80] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.161620][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.168681][ T80] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.178262][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.252670][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.259838][T11427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.267260][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.274401][T11427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.295527][T11427] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 452.375738][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1590'. [ 452.399564][ T80] usb 7-1: GET_CAPABILITIES returned 0 [ 452.405648][ T80] usbtmc 7-1:16.0: can't read capabilities [ 452.418748][T11434] bridge_slave_1: left allmulticast mode [ 452.424834][T11434] bridge_slave_1: left promiscuous mode [ 452.430572][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.444587][T11434] bridge_slave_0: left allmulticast mode [ 452.450541][T11434] bridge_slave_0: left promiscuous mode [ 452.543754][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.630559][T11434] bond0: (slave bridge0): Releasing backup interface [ 452.642288][ T966] usb 7-1: USB disconnect, device number 4 [ 453.465506][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1598'. [ 455.117347][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 456.094364][ T966] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 457.008015][T11540] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 457.335602][ T966] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.359111][ T966] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.369004][ T966] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.380394][ T966] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.390336][ T966] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 457.399670][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.409981][ T966] hub 1-1:1.0: bad descriptor, ignoring hub [ 458.419449][ T966] hub 1-1:1.0: probe with driver hub failed with error -5 [ 458.830350][ T966] cdc_wdm 1-1:1.0: skipping garbage [ 458.835778][ T966] cdc_wdm 1-1:1.0: skipping garbage [ 459.030892][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.039541][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.080584][ T966] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 459.086680][ T966] cdc_wdm 1-1:1.0: Unknown control protocol [ 459.292882][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1627'. [ 459.315220][T11574] netlink: 'syz.8.1628': attribute type 10 has an invalid length. [ 459.329255][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1628'. [ 459.373678][ T5875] usb 1-1: USB disconnect, device number 32 [ 460.108697][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 460.108712][ T29] audit: type=1326 audit(460.066:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.0.1637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f222d17e719 code=0x0 [ 460.367484][T11625] netlink: 'syz.7.1640': attribute type 10 has an invalid length. [ 460.383917][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.391286][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.414739][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.421939][T11625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.430287][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.437423][T11625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.499541][T11625] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 460.550824][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1640'. [ 460.565862][T11625] bridge_slave_1: left allmulticast mode [ 460.576008][T11625] bridge_slave_1: left promiscuous mode [ 460.582344][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.592054][T11625] bridge_slave_0: left allmulticast mode [ 460.600126][T11625] bridge_slave_0: left promiscuous mode [ 460.610850][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.648205][T11625] bond0: (slave bridge0): Releasing backup interface [ 461.007555][T11652] overlayfs: missing 'lowerdir' [ 461.360348][T10361] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 461.533705][T10361] usb 1-1: device descriptor read/64, error -71 [ 461.964421][T10361] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 462.176507][ T29] audit: type=1326 audit(462.136:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11685 comm="syz.5.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5d397e719 code=0x0 [ 462.198883][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.270653][T10361] usb 1-1: device descriptor read/64, error -71 [ 462.383973][T10361] usb usb1-port1: attempt power cycle [ 462.419756][T11710] overlayfs: missing 'lowerdir' [ 462.723697][T10361] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 462.763778][T10361] usb 1-1: device descriptor read/8, error -71 [ 463.003737][T10361] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 463.045320][T10361] usb 1-1: device descriptor read/8, error -71 [ 463.137680][T11752] netlink: 'syz.8.1669': attribute type 10 has an invalid length. [ 463.150598][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1669'. [ 463.174164][T10361] usb usb1-port1: unable to enumerate USB device [ 463.795966][T11774] overlayfs: missing 'lowerdir' [ 463.807593][T11776] tipc: Started in network mode [ 463.812664][T11776] tipc: Node identity ac14140f, cluster identity 4711 [ 463.821693][T11776] tipc: Enabled bearer , priority 10 [ 464.361967][ T29] audit: type=1400 audit(464.216:1439): avc: denied { write } for pid=5182 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.580548][ T29] audit: type=1400 audit(464.216:1440): avc: denied { remove_name } for pid=5182 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.694745][ T29] audit: type=1400 audit(464.216:1441): avc: denied { rename } for pid=5182 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 464.819215][ T29] audit: type=1400 audit(464.216:1442): avc: denied { add_name } for pid=5182 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.949304][ T29] audit: type=1400 audit(464.216:1443): avc: denied { unlink } for pid=5182 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 465.060711][ T29] audit: type=1400 audit(464.216:1444): avc: denied { create } for pid=5182 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 465.089580][T11807] fuse: Bad value for 'fd' [ 465.180590][T10356] tipc: Node number set to 2886997007 [ 465.386679][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 466.796247][T11857] netlink: 'syz.6.1691': attribute type 10 has an invalid length. [ 466.862834][T11857] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.870254][T11857] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.968295][T11857] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.975433][T11857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.982780][T11857] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.989908][T11857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.438678][T11857] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 467.453976][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1691'. [ 467.463760][T11866] bridge_slave_1: left allmulticast mode [ 467.469547][T11866] bridge_slave_1: left promiscuous mode [ 467.499051][T11866] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.525616][T11866] bridge_slave_0: left allmulticast mode [ 467.547550][T11866] bridge_slave_0: left promiscuous mode [ 467.563628][T11866] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.810801][T11866] bond0: (slave bridge0): Releasing backup interface [ 468.333583][ T966] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 468.492222][ T29] audit: type=1326 audit(468.446:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 468.525794][ T966] usb 7-1: Using ep0 maxpacket: 8 [ 468.535298][ T29] audit: type=1326 audit(468.446:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 468.536328][ T966] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 468.586502][ T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.613181][ T966] usb 7-1: Product: syz [ 468.622291][ T29] audit: type=1326 audit(468.446:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 468.625006][ T966] usb 7-1: Manufacturer: syz [ 468.645705][ T29] audit: type=1326 audit(468.446:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 468.673649][ T966] usb 7-1: SerialNumber: syz [ 468.694358][ T966] usb 7-1: config 0 descriptor?? [ 468.705845][ T29] audit: type=1326 audit(468.446:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 468.802129][ T29] audit: type=1326 audit(468.446:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 468.850400][ T29] audit: type=1326 audit(468.446:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 468.880082][ T29] audit: type=1326 audit(468.446:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x7ffc0000 [ 469.007275][ T966] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 470.513485][ T5875] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 470.713492][ T5875] usb 9-1: Using ep0 maxpacket: 16 [ 470.734525][ T5875] usb 9-1: unable to get BOS descriptor or descriptor too short [ 470.743176][ T5875] usb 9-1: no configurations [ 470.754336][ T5875] usb 9-1: can't read configurations, error -22 [ 471.552992][T12041] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1739'. [ 471.579088][T12041] netlink: 'syz.8.1739': attribute type 7 has an invalid length. [ 471.589899][T12041] netlink: 'syz.8.1739': attribute type 8 has an invalid length. [ 471.606885][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1739'. [ 471.715794][ T966] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 471.734815][ T966] usb 7-1: USB disconnect, device number 5 [ 472.328127][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 472.367404][T12050] nbd: socks must be embedded in a SOCK_ITEM attr [ 472.834099][ T5836] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 473.030575][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 473.055423][ T5836] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 473.083481][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.101772][ T5836] usb 6-1: Product: syz [ 473.113378][ T5836] usb 6-1: Manufacturer: syz [ 473.123039][ T5836] usb 6-1: SerialNumber: syz [ 473.152617][ T5836] usb 6-1: config 0 descriptor?? [ 473.393039][ T5836] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 473.523657][ T5874] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 473.729686][ T5874] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.741021][ T5874] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 473.782017][ T5874] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.817235][ T5874] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.840986][ T5874] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 473.861653][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.892426][ T5874] hub 9-1:1.0: bad descriptor, ignoring hub [ 473.899089][ T5874] hub 9-1:1.0: probe with driver hub failed with error -5 [ 473.927811][ T5874] cdc_wdm 9-1:1.0: skipping garbage [ 473.949619][ T5874] cdc_wdm 9-1:1.0: skipping garbage [ 474.050201][ T5874] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 474.074182][ T5874] cdc_wdm 9-1:1.0: Unknown control protocol [ 474.099460][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1766'. [ 474.119708][ T5874] usb 9-1: USB disconnect, device number 5 [ 474.128267][T12135] netlink: 'syz.0.1766': attribute type 5 has an invalid length. [ 474.147223][T12135] netlink: 'syz.0.1766': attribute type 7 has an invalid length. [ 474.160289][T12135] netlink: 'syz.0.1766': attribute type 8 has an invalid length. [ 474.177277][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 475.343518][ T5874] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 475.754744][ T5874] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.765085][ T5874] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 475.781003][ T5874] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.800628][ T5874] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.911002][ T5874] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 475.920496][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.932053][ T5874] hub 9-1:1.0: bad descriptor, ignoring hub [ 475.938309][ T5874] hub 9-1:1.0: probe with driver hub failed with error -5 [ 475.948993][ T5874] cdc_wdm 9-1:1.0: skipping garbage [ 475.982484][ T5874] cdc_wdm 9-1:1.0: skipping garbage [ 476.065263][ T5874] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 476.085412][ T5874] cdc_wdm 9-1:1.0: Unknown control protocol [ 476.167833][ T5874] usb 9-1: USB disconnect, device number 6 [ 477.201217][ T29] audit: type=1326 audit(477.156:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12179 comm="syz.7.1775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff50637e719 code=0x0 [ 477.273590][ T5836] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 477.303261][T12189] dccp_close: ABORT with 32 bytes unread [ 477.623262][T10361] usb 6-1: USB disconnect, device number 3 [ 478.957620][ T29] audit: type=1400 audit(478.916:1454): avc: denied { setopt } for pid=12256 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.059204][T12271] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1799'. [ 479.089298][ T29] audit: type=1400 audit(479.046:1455): avc: denied { bind } for pid=12256 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.127669][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 479.257616][ T29] audit: type=1400 audit(479.196:1456): avc: denied { write } for pid=12256 comm="syz.0.1793" path="socket:[32535]" dev="sockfs" ino=32535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 479.282999][ T29] audit: type=1400 audit(479.206:1457): avc: denied { nlmsg_read } for pid=12256 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 479.389849][T12287] syz.7.1801[12287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.389929][T12287] syz.7.1801[12287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.403373][ T29] audit: type=1326 audit(479.356:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.8.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb7e719 code=0x0 [ 479.459049][T12287] syz.7.1801[12287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.654197][T11845] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 480.327411][T11845] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.338051][T11845] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 480.350026][T11845] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.579445][T11845] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.633622][T11845] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 480.642700][T11845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.690160][T11845] hub 7-1:1.0: bad descriptor, ignoring hub [ 480.696322][T11845] hub 7-1:1.0: probe with driver hub failed with error -5 [ 480.704483][T11845] cdc_wdm 7-1:1.0: skipping garbage [ 480.709719][T11845] cdc_wdm 7-1:1.0: skipping garbage [ 480.741634][T11845] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 480.747826][T11845] cdc_wdm 7-1:1.0: Unknown control protocol [ 480.755770][T12320] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1810'. [ 481.826310][ T5836] usb 7-1: USB disconnect, device number 6 [ 481.833113][T12284] cdc_wdm 7-1:1.0: Error autopm - -16 [ 481.902489][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1817'. [ 481.911722][T12372] nbd: socks must be embedded in a SOCK_ITEM attr [ 482.729206][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1821'. [ 483.303688][ T29] audit: type=1326 audit(482.736:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.8.1818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb7e719 code=0x0 [ 484.326562][T12396] syzkaller0: entered promiscuous mode [ 484.368158][T12396] syzkaller0: entered allmulticast mode [ 484.623638][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 484.783537][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 484.801650][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 484.809905][ T9] usb 1-1: no configurations [ 484.823739][ T9] usb 1-1: can't read configurations, error -22 [ 485.204810][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1832'. [ 485.213905][T12440] nbd: socks must be embedded in a SOCK_ITEM attr [ 485.982175][T12451] dccp_close: ABORT with 32 bytes unread [ 487.833578][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 488.004436][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 488.018959][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 488.042923][T12512] tipc: Started in network mode [ 488.049877][ T25] usb 6-1: no configurations [ 488.065352][T12512] tipc: Node identity ac14140f, cluster identity 4711 [ 488.075745][ T25] usb 6-1: can't read configurations, error -22 [ 488.088234][T12512] tipc: Enabled bearer , priority 10 [ 489.203616][T10361] tipc: Node number set to 2886997007 [ 489.505769][ C1] [ 489.508119][ C1] ============================================ [ 489.514236][ C1] WARNING: possible recursive locking detected [ 489.520351][ C1] 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 Not tainted [ 489.527432][ C1] -------------------------------------------- [ 489.533543][ C1] ksoftirqd/1/24 is trying to acquire lock: [ 489.539406][ C1] ffff8881417749e0 (&qs->lock){..-.}-{2:2}, at: __stack_map_get+0x2a8/0x350 [ 489.548154][ C1] [ 489.548154][ C1] but task is already holding lock: [ 489.555570][ C1] ffff8881417749e0 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x353/0x420 [ 489.565095][ C1] [ 489.565095][ C1] other info that might help us debug this: [ 489.573117][ C1] Possible unsafe locking scenario: [ 489.573117][ C1] [ 489.580540][ C1] CPU0 [ 489.583787][ C1] ---- [ 489.587038][ C1] lock(&qs->lock); [ 489.590899][ C1] lock(&qs->lock); [ 489.594759][ C1] [ 489.594759][ C1] *** DEADLOCK *** [ 489.594759][ C1] [ 489.602868][ C1] May be due to missing lock nesting notation [ 489.602868][ C1] [ 489.611158][ C1] 7 locks held by ksoftirqd/1/24: [ 489.616152][ C1] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: ieee80211_rx_napi+0xa6/0x400 [ 489.625680][ C1] #1: ffff8880492496f0 (&local->rx_path_lock){+.-.}-{2:2}, at: ieee80211_rx_handlers+0xdd/0x9ab0 [ 489.636254][ C1] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: __queue_work+0xf2/0x1080 [ 489.645438][ C1] #3: ffff88801b098018 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x26b/0x1080 [ 489.654542][ C1] #4: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run1+0x1ba/0x580 [ 489.663897][ C1] #5: ffff8881417749e0 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x353/0x420 [ 489.673873][ C1] #6: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 489.683252][ C1] [ 489.683252][ C1] stack backtrace: [ 489.689112][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 489.699670][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 489.709703][ C1] Call Trace: [ 489.712955][ C1] [ 489.715858][ C1] dump_stack_lvl+0x116/0x1f0 [ 489.720511][ C1] print_deadlock_bug+0x2e3/0x410 [ 489.725517][ C1] __lock_acquire+0x2185/0x3ce0 [ 489.730339][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 489.735519][ C1] lock_acquire.part.0+0x11b/0x380 [ 489.740598][ C1] ? __stack_map_get+0x2a8/0x350 [ 489.745504][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 489.751104][ C1] ? rcu_is_watching+0x12/0xc0 [ 489.755839][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 489.761006][ C1] ? __stack_map_get+0x2a8/0x350 [ 489.765912][ C1] ? lock_acquire+0x2f/0xb0 [ 489.770392][ C1] ? __stack_map_get+0x2a8/0x350 [ 489.775297][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 489.780467][ C1] ? __stack_map_get+0x2a8/0x350 [ 489.785372][ C1] __stack_map_get+0x2a8/0x350 [ 489.790106][ C1] bpf_prog_94b194d4ebfffdd5+0x46/0x4a [ 489.795543][ C1] bpf_trace_run2+0x231/0x590 [ 489.800192][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 489.805362][ C1] ? mark_lock+0xb5/0xc60 [ 489.809659][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 489.814912][ C1] __bpf_trace_contention_end+0xca/0x110 [ 489.820512][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 489.826720][ C1] ? __lock_acquire+0x163e/0x3ce0 [ 489.831720][ C1] trace_contention_end.constprop.0+0xea/0x170 [ 489.837842][ C1] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 489.843878][ C1] ? lockdep_hardirqs_on_prepare+0x3a0/0x420 [ 489.849824][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 489.856389][ C1] do_raw_spin_lock+0x210/0x2c0 [ 489.861208][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.866550][ C1] ? lock_acquire+0x2f/0xb0 [ 489.871284][ C1] ? queue_stack_map_push_elem+0x353/0x420 [ 489.877059][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 489.882226][ C1] ? queue_stack_map_push_elem+0x353/0x420 [ 489.887999][ C1] queue_stack_map_push_elem+0x353/0x420 [ 489.893600][ C1] bpf_prog_80daba7f9ca62790+0x43/0x47 [ 489.899022][ C1] bpf_trace_run1+0x229/0x580 [ 489.903672][ C1] ? __pfx_bpf_trace_run1+0x10/0x10 [ 489.908839][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 489.915407][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 489.920660][ C1] __bpf_trace_workqueue_activate_work+0x98/0xd0 [ 489.926958][ C1] ? __pfx___bpf_trace_workqueue_activate_work+0x10/0x10 [ 489.933949][ C1] ? pwq_tryinc_nr_active+0x212/0x850 [ 489.939292][ C1] trace_workqueue_activate_work+0x125/0x1e0 [ 489.945241][ C1] __queue_work+0x96d/0x1080 [ 489.949798][ C1] ? rcu_is_watching+0x12/0xc0 [ 489.954531][ C1] queue_work_on+0x11a/0x140 [ 489.959088][ C1] ieee80211_rx_handlers+0x6a17/0x9ab0 [ 489.964518][ C1] ? __pfx_mark_lock+0x10/0x10 [ 489.969253][ C1] ? __pfx_mark_lock+0x10/0x10 [ 489.973984][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 489.979762][ C1] ? hlock_class+0x4e/0x130 [ 489.984237][ C1] ? __lock_acquire+0xbdd/0x3ce0 [ 489.989143][ C1] ieee80211_prepare_and_rx_handle+0x2b6a/0x6ec0 [ 489.995438][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 490.000603][ C1] ? lockdep_print_held_locks+0x180/0x220 [ 490.006295][ C1] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 490.012938][ C1] ? sta_info_get_bss+0x18b/0x3a0 [ 490.017947][ C1] ? sta_info_get_bss+0x64/0x3a0 [ 490.022864][ C1] ? sta_info_get_bss+0x19a/0x3a0 [ 490.027856][ C1] ieee80211_rx_for_interface+0x10a/0x1f0 [ 490.033544][ C1] ieee80211_rx_list+0x10e4/0x2e90 [ 490.038625][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 490.044052][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 490.049311][ C1] ? lock_acquire+0x2f/0xb0 [ 490.053792][ C1] ? ieee80211_rx_napi+0xa6/0x400 [ 490.058788][ C1] ieee80211_rx_napi+0xdd/0x400 [ 490.063608][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 490.069036][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.074210][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 490.079999][ C1] ieee80211_handle_queued_frames+0xd5/0x130 [ 490.085951][ C1] tasklet_action_common+0x24c/0x3e0 [ 490.091207][ C1] handle_softirqs+0x213/0x8f0 [ 490.095939][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 490.101192][ C1] ? rcu_is_watching+0x12/0xc0 [ 490.105925][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 490.111005][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 490.116083][ C1] run_ksoftirqd+0x3a/0x60 [ 490.120465][ C1] smpboot_thread_fn+0x661/0xa30 [ 490.125373][ C1] ? __kthread_parkme+0x148/0x220 [ 490.130367][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 490.135796][ C1] kthread+0x2c1/0x3a0 [ 490.139834][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.145016][ C1] ? __pfx_kthread+0x10/0x10 [ 490.149576][ C1] ret_from_fork+0x45/0x80 [ 490.153969][ C1] ? __pfx_kthread+0x10/0x10 [ 490.158528][ C1] ret_from_fork_asm+0x1a/0x30 [ 490.163266][ C1]