last executing test programs: 11.874984911s ago: executing program 3 (id=1122): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2ec}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5}, 0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12}}) userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f000098b000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000003f000/0xf000)=nil, 0x400000, 0x0, 0x18100}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 8.566322943s ago: executing program 3 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 8.206043171s ago: executing program 3 (id=1141): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) 8.016853405s ago: executing program 3 (id=1143): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x18}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0101000000000000000006241afeef00090581030002007800090401000002"], 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="edf910f9de034eee6c6aa3a9cc83044cbfbb15351b701087b800e632726c3ba3c4153d8744587e6f67c9e6fe9d4b5d9a23c230baf2f5"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r7, @ANYBLOB="92"], 0x20}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbef2, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000870000/0xe000)=nil, 0xe000) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x84f) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 7.586947533s ago: executing program 0 (id=1147): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x48801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 7.509814961s ago: executing program 2 (id=1148): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = open(0x0, 0x0, 0x0) getdents(r5, &(0x7f0000000300)=""/104, 0x68) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./bus\x00') getdents(r5, 0x0, 0x0) 6.390456049s ago: executing program 4 (id=1151): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x42000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) 5.449773379s ago: executing program 2 (id=1153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x2, r0, 0x6000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params, @chandef_params]}, 0x54}}, 0x0) 4.04090061s ago: executing program 4 (id=1154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x200004, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000004, [0x0, 0x80000000]}}) 4.038475428s ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.96868055s ago: executing program 0 (id=1156): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 3.805374811s ago: executing program 1 (id=1157): socket(0x1e, 0x4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x2e, 0x114, 0x1, {{0x0, 0x1}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000880)=""/84, 0x57}], 0x1, 0xe0ffffff, 0x6}}], 0x25, 0x20040004}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 3.804437108s ago: executing program 2 (id=1158): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000610000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) epoll_create(0x3) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_pwait2(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 3.520748105s ago: executing program 4 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8811}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040051}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000680)='workqueue_queue_work\x00', r3, 0x0, 0xfc}, 0x18) mount$tmpfs(0x0, 0x0, 0x0, 0x800444, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) sendfile(r6, r5, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socket(0x27, 0x8000c, 0xffeffffd) 3.39216771s ago: executing program 1 (id=1160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='locks_get_lock_context\x00', r0}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x5c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, 0x0) 3.30972732s ago: executing program 2 (id=1161): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 3.067271517s ago: executing program 4 (id=1162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="e73c", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 2.89069504s ago: executing program 2 (id=1163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000000)={0x20000001}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000b66800dfffffff6c272f72c469b5f81ce4a5ca1925390100247188fd26b8ebbf00"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x24000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0xfffffffffffffffc) 2.825832052s ago: executing program 0 (id=1164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) 2.22295695s ago: executing program 1 (id=1165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000280)={0x24, @long}, 0x9) 1.575222792s ago: executing program 0 (id=1166): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 1.521595107s ago: executing program 4 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xb, 0x0, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0a", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.509024492s ago: executing program 3 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffcf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000340)='0', 0x1, 0x8004, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendfile(r7, r7, 0x0, 0x401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000440)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r9}) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r11 = fcntl$dupfd(r2, 0x406, r10) ioctl$SCSI_IOCTL_GET_PCI(r11, 0x2284, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.450405277s ago: executing program 1 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x2, r0, 0x6000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params, @chandef_params]}, 0x54}}, 0x0) 1.438478794s ago: executing program 2 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 1.353597666s ago: executing program 0 (id=1171): socket(0x1e, 0x4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x2e, 0x114, 0x1, {{0x0, 0x1}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000880)=""/84, 0x57}], 0x1, 0xe0ffffff, 0x6}}], 0x25, 0x20040004}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 435.120252ms ago: executing program 0 (id=1172): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x81) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x0, 0x2, 0x0}) ioctl$TCFLSH(r6, 0x40384708, 0x20000000) 257.873813ms ago: executing program 1 (id=1173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYBLOB='9']) 197.775638ms ago: executing program 4 (id=1174): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80008001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0x1c) 0s ago: executing program 3 (id=1175): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.927499][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.940208][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.947237][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.973329][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.060764][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.082497][ T2934] bridge_slave_1: left allmulticast mode [ 280.088897][ T2934] bridge_slave_1: left promiscuous mode [ 280.095283][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.129717][ T2934] bridge_slave_0: left allmulticast mode [ 280.154123][ T2934] bridge_slave_0: left promiscuous mode [ 280.161424][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.438141][ T6877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.664964][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.685353][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.716796][ T2934] bond0 (unregistering): Released all slaves [ 284.777232][ T6763] hsr_slave_0: entered promiscuous mode [ 284.796974][ T6763] hsr_slave_1: entered promiscuous mode [ 284.827111][ T6763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.845896][ T6763] Cannot create hsr debugfs directory [ 285.537275][ T6528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.547715][ T6528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.588492][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.595673][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.668481][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.675624][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.455079][ T6934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.064257][ T2934] hsr_slave_0: left promiscuous mode [ 289.084596][ T2934] hsr_slave_1: left promiscuous mode [ 289.296037][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.333139][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.350201][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.366549][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.495006][ T2934] veth1_macvtap: left promiscuous mode [ 289.531809][ T2934] veth0_macvtap: left promiscuous mode [ 289.592885][ T2934] veth1_vlan: left promiscuous mode [ 289.677074][ T2934] veth0_vlan: left promiscuous mode [ 292.625854][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 292.713300][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 293.685410][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 293.965680][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.502095][ T6528] veth0_vlan: entered promiscuous mode [ 298.927604][ T6528] veth1_vlan: entered promiscuous mode [ 299.000930][ T6528] veth0_macvtap: entered promiscuous mode [ 299.064313][ T6528] veth1_macvtap: entered promiscuous mode [ 299.133525][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.204971][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.516954][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.695716][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.009860][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.118330][ T7034] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 300.128811][ T7034] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 300.173876][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.214719][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.236908][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.258648][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.296654][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.327268][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.367811][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.562512][ T6528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.201488][ T6528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.211156][ T6528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.220617][ T6528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.343129][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 301.706530][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.714454][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.528971][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.586556][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.783990][ T6763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.889259][ T6763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.932986][ T6763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.991170][ T6763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.949810][ T5223] Bluetooth: hci4: command 0x0406 tx timeout [ 304.957229][ T5223] Bluetooth: hci7: command 0x0406 tx timeout [ 305.112851][ T6763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.194415][ T6763] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.226022][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.233277][ T5766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.310378][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.317591][ T5767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.422197][ T6763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.496503][ T6763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.658233][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.331866][ T6763] veth0_vlan: entered promiscuous mode [ 309.368740][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 309.451724][ T6763] veth1_vlan: entered promiscuous mode [ 309.715661][ T6763] veth0_macvtap: entered promiscuous mode [ 310.125655][ T6763] veth1_macvtap: entered promiscuous mode [ 310.398842][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.522667][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.573990][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.626567][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.664290][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.730066][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.984577][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.266120][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.328933][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.376939][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.436814][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.446924][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.466855][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.486575][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.556519][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.616849][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.671011][ T6763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.722926][ T6763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.860060][ T6763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.896577][ T6763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.912070][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.359'. [ 312.166969][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.204470][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.319510][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.570798][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.043995][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.358'. [ 314.690242][ T7172] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.709806][ T7181] 9p: Unknown access argument 18446744073709551615: -34 [ 318.173461][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.180947][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.737790][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 321.231997][ T7208] could not allocate digest TFM handle hmac(sha256-ce) [ 324.197504][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'. [ 327.709874][ T7308] program syz.1.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.986457][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.397'. [ 330.337134][ T29] audit: type=1400 audit(1727485251.544:295): avc: denied { read } for pid=7330 comm="syz.1.402" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.716911][ T29] audit: type=1400 audit(1727485251.544:296): avc: denied { open } for pid=7330 comm="syz.1.402" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.742472][ T29] audit: type=1400 audit(1727485251.954:297): avc: denied { search } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.676779][ T5269] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 332.951293][ T5269] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.979779][ T5269] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.037851][ T5269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.877804][ T5269] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.887021][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.895044][ T5269] usb 5-1: Product: syz [ 333.906564][ T5269] usb 5-1: Manufacturer: syz [ 333.916728][ T5269] usb 5-1: SerialNumber: syz [ 333.963187][ T5269] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 333.971889][ T7365] program syz.3.413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.008271][ T5269] cdc_ncm 5-1:1.0: bind() failure [ 334.150953][ T7347] syz.4.408[7347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.151058][ T7347] syz.4.408[7347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.484570][ T7347] syz.4.408[7347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.140697][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.025404][ T29] audit: type=1400 audit(1727485257.234:298): avc: denied { write } for pid=7392 comm="syz.3.419" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.154569][ T7400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.738521][ T5770] usb 5-1: USB disconnect, device number 3 [ 341.654918][ T7441] 9p: Unknown access argument 18446744073709551615: -34 [ 341.824513][ T7440] program syz.3.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.072390][ T29] audit: type=1400 audit(1727485263.284:299): avc: denied { execute } for pid=7451 comm="syz.3.434" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 342.116557][ T5770] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 342.400317][ T5770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.377714][ T5770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.738498][ T5770] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.759681][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.787478][ T7457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.796703][ T5770] usb 2-1: Product: syz [ 343.807794][ T5770] usb 2-1: Manufacturer: syz [ 343.812435][ T5770] usb 2-1: SerialNumber: syz [ 343.823788][ T5770] usb 2-1: selecting invalid altsetting 1 [ 344.036680][ T7449] syz.1.433[7449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.036815][ T7449] syz.1.433[7449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.203211][ T7449] syz.1.433[7449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.788004][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.116646][ T5770] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 345.122776][ T5770] cdc_ncm 2-1:1.0: bind() failure [ 345.368841][ T7477] netlink: 188 bytes leftover after parsing attributes in process `syz.4.439'. [ 345.400286][ T7477] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 346.259923][ T7485] netlink: 72 bytes leftover after parsing attributes in process `syz.4.441'. [ 346.723809][ T5770] usb 2-1: USB disconnect, device number 9 [ 348.815826][ T29] audit: type=1400 audit(1727485270.004:300): avc: denied { ioctl } for pid=7506 comm="syz.2.448" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 348.857773][ T7511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.450'. [ 350.663692][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.455'. [ 351.009288][ T7535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.703858][ T5770] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 353.869364][ T5770] usb 4-1: device descriptor read/all, error -71 [ 354.478344][ T7559] could not allocate digest TFM handle hmac(sha256-ce) [ 356.316469][ T2636] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 356.487287][ T2636] usb 4-1: Using ep0 maxpacket: 8 [ 356.493685][ T2636] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 357.147095][ T2636] usb 4-1: config 179 has no interface number 0 [ 357.153427][ T2636] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 357.167258][ T2636] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 357.178925][ T2636] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 357.200917][ T2636] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 357.213942][ T2636] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.239456][ T2636] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 357.281806][ T2636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.319235][ T7593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.580601][ T5300] usb 4-1: USB disconnect, device number 5 [ 357.580716][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 357.836824][ T5770] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 358.122065][ T5770] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.196947][ T7598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.214683][ T5770] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.271604][ T5770] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.341920][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.350023][ T5770] usb 5-1: Product: syz [ 358.354218][ T5770] usb 5-1: Manufacturer: syz [ 358.358923][ T5770] usb 5-1: SerialNumber: syz [ 358.428507][ T5770] usb 5-1: selecting invalid altsetting 1 [ 358.729128][ T7609] syz.4.473[7609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.729236][ T7609] syz.4.473[7609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.776715][ T7609] syz.4.473[7609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.843451][ T5770] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 359.875258][ T5770] cdc_ncm 5-1:1.0: bind() failure [ 359.954214][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 361.833101][ T29] audit: type=1400 audit(1727485282.624:301): avc: denied { create } for pid=7638 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 361.890375][ T29] audit: type=1400 audit(1727485282.634:302): avc: denied { setopt } for pid=7638 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 361.988348][ T5300] usb 5-1: USB disconnect, device number 4 [ 362.815145][ T29] audit: type=1400 audit(1727485282.634:303): avc: denied { bind } for pid=7638 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.834886][ T29] audit: type=1400 audit(1727485282.634:304): avc: denied { name_bind } for pid=7638 comm="syz.1.481" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 362.857877][ T29] audit: type=1400 audit(1727485282.634:305): avc: denied { node_bind } for pid=7638 comm="syz.1.481" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 362.879428][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.885763][ T29] audit: type=1400 audit(1727485282.634:306): avc: denied { write } for pid=7638 comm="syz.1.481" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.907436][ T29] audit: type=1400 audit(1727485282.634:307): avc: denied { connect } for pid=7638 comm="syz.1.481" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.928718][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.936263][ T29] audit: type=1400 audit(1727485282.634:308): avc: denied { name_connect } for pid=7638 comm="syz.1.481" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 364.283893][ T29] audit: type=1400 audit(1727485284.714:309): avc: denied { setopt } for pid=7663 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.316266][ T7633] could not allocate digest TFM handle hmac(sha256-ce) [ 364.953274][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'. [ 366.063909][ T5228] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 372.256629][ T7683] raw-gadget.0 gadget.4: fail, usb_ep_queue returned -108 [ 373.087869][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 377.079064][ T5228] usb 5-1: device descriptor read/64, error -110 [ 383.429503][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.435838][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.328936][ T5228] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 405.326612][ T5228] usb 5-1: device descriptor read/64, error -32 [ 406.676478][ T5228] usb usb5-port1: attempt power cycle [ 406.696417][ T5223] Bluetooth: hci1: command 0x0406 tx timeout [ 409.407091][ T5228] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 409.616515][ T5228] usb 5-1: device not accepting address 7, error -71 [ 410.367999][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.389738][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.410298][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.429255][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.443497][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 410.458296][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.541484][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.576791][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.584559][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.596028][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.609863][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.623427][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 410.623845][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.641052][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 410.641189][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 410.662178][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.671835][ T7706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.682609][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.687736][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 410.691402][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.698223][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.706278][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.713452][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.733715][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.746823][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.767419][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 410.776262][ T5223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 410.789752][ T5223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.812294][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 410.825887][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.886769][ T5766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.034745][ T5766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.124254][ T5766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.285650][ T5766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.381359][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 411.581318][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 411.739427][ T7707] chnl_net:caif_netlink_parms(): no params data found [ 411.764326][ T5766] bridge_slave_1: left allmulticast mode [ 411.776486][ T5766] bridge_slave_1: left promiscuous mode [ 411.782250][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.800154][ T5766] bridge_slave_0: left allmulticast mode [ 411.805852][ T5766] bridge_slave_0: left promiscuous mode [ 411.824738][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.467679][ T5766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.479419][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.495648][ T5766] bond0 (unregistering): Released all slaves [ 412.515750][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 412.540357][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.546433][ T54] Bluetooth: hci0: command tx timeout [ 412.556400][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.563645][ T7701] bridge_slave_0: entered allmulticast mode [ 412.577654][ T7701] bridge_slave_0: entered promiscuous mode [ 412.588540][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.601752][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.611857][ T7701] bridge_slave_1: entered allmulticast mode [ 412.624254][ T7701] bridge_slave_1: entered promiscuous mode [ 412.665284][ T7698] chnl_net:caif_netlink_parms(): no params data found [ 412.777082][ T5229] Bluetooth: hci2: command tx timeout [ 412.783252][ T54] Bluetooth: hci1: command tx timeout [ 412.856463][ T54] Bluetooth: hci4: command tx timeout [ 412.909231][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.920669][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.937026][ T54] Bluetooth: hci3: command tx timeout [ 412.991353][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.003383][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.010764][ T7704] bridge_slave_0: entered allmulticast mode [ 413.019005][ T7704] bridge_slave_0: entered promiscuous mode [ 413.100990][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.108446][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.115605][ T7704] bridge_slave_1: entered allmulticast mode [ 413.122574][ T7704] bridge_slave_1: entered promiscuous mode [ 413.148077][ T7701] team0: Port device team_slave_0 added [ 413.164166][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.171458][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.179193][ T7707] bridge_slave_0: entered allmulticast mode [ 413.186470][ T7707] bridge_slave_0: entered promiscuous mode [ 413.195922][ T5766] hsr_slave_0: left promiscuous mode [ 413.202138][ T5766] hsr_slave_1: left promiscuous mode [ 413.214392][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.222604][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.230278][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.245894][ T5766] veth1_macvtap: left promiscuous mode [ 413.251582][ T5766] veth0_macvtap: left promiscuous mode [ 413.257450][ T5766] veth1_vlan: left promiscuous mode [ 413.262749][ T5766] veth0_vlan: left promiscuous mode [ 413.705631][ T5766] team0 (unregistering): Port device team_slave_1 removed [ 413.752981][ T5766] team0 (unregistering): Port device team_slave_0 removed [ 414.195332][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.204179][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.215714][ T7698] bridge_slave_0: entered allmulticast mode [ 414.228922][ T7698] bridge_slave_0: entered promiscuous mode [ 414.267904][ T7701] team0: Port device team_slave_1 added [ 414.273801][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.286478][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.293709][ T7707] bridge_slave_1: entered allmulticast mode [ 414.301762][ T7707] bridge_slave_1: entered promiscuous mode [ 414.315197][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.322692][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.330303][ T7698] bridge_slave_1: entered allmulticast mode [ 414.337842][ T7698] bridge_slave_1: entered promiscuous mode [ 414.365631][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.377322][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.384506][ T7700] bridge_slave_0: entered allmulticast mode [ 414.391470][ T7700] bridge_slave_0: entered promiscuous mode [ 414.411766][ T7704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.463492][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.471474][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.479587][ T7700] bridge_slave_1: entered allmulticast mode [ 414.487084][ T7700] bridge_slave_1: entered promiscuous mode [ 414.516290][ T7704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.553570][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.560803][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.586969][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.603235][ T7707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.614684][ T7698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.635829][ T54] Bluetooth: hci0: command tx timeout [ 414.675067][ T7704] team0: Port device team_slave_0 added [ 414.682351][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.706476][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.732991][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.753052][ T7707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.774665][ T7698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.786202][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.798708][ T7704] team0: Port device team_slave_1 added [ 414.856752][ T5229] Bluetooth: hci2: command tx timeout [ 414.866570][ T54] Bluetooth: hci1: command tx timeout [ 414.936672][ T54] Bluetooth: hci4: command tx timeout [ 414.960893][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.016841][ T54] Bluetooth: hci3: command tx timeout [ 415.035803][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.046442][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.085630][ T7704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.151126][ T7701] hsr_slave_0: entered promiscuous mode [ 415.167670][ T7701] hsr_slave_1: entered promiscuous mode [ 415.174190][ T7701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.195541][ T7701] Cannot create hsr debugfs directory [ 415.210016][ T7707] team0: Port device team_slave_0 added [ 415.253617][ T7698] team0: Port device team_slave_0 added [ 415.308676][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.316288][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.344276][ T7704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.361746][ T7707] team0: Port device team_slave_1 added [ 415.375688][ T7698] team0: Port device team_slave_1 added [ 415.401558][ T7700] team0: Port device team_slave_0 added [ 415.475874][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.486782][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.513001][ T7707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.525640][ T7700] team0: Port device team_slave_1 added [ 415.575503][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.582637][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.609616][ T7707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.652492][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.659538][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.686210][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.698088][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.705078][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.731549][ T7698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.744775][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.753780][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.779790][ T7698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.829632][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.836809][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.864154][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.926202][ T7704] hsr_slave_0: entered promiscuous mode [ 415.932999][ T7704] hsr_slave_1: entered promiscuous mode [ 415.939600][ T7704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.947286][ T7704] Cannot create hsr debugfs directory [ 416.008022][ T5766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.026265][ T7707] hsr_slave_0: entered promiscuous mode [ 416.041218][ T7707] hsr_slave_1: entered promiscuous mode [ 416.053140][ T7707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.061335][ T7707] Cannot create hsr debugfs directory [ 416.089861][ T7700] hsr_slave_0: entered promiscuous mode [ 416.096079][ T7700] hsr_slave_1: entered promiscuous mode [ 416.102422][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.110536][ T7700] Cannot create hsr debugfs directory [ 416.143852][ T5766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.245427][ T7701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.295281][ T7698] hsr_slave_0: entered promiscuous mode [ 416.311272][ T7698] hsr_slave_1: entered promiscuous mode [ 416.319024][ T7698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.327066][ T7698] Cannot create hsr debugfs directory [ 416.381700][ T5766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.459861][ T7701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.607389][ T5766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.657531][ T7701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.697988][ T54] Bluetooth: hci0: command tx timeout [ 416.734440][ T7701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.937259][ T5229] Bluetooth: hci2: command tx timeout [ 416.942779][ T54] Bluetooth: hci1: command tx timeout [ 417.016691][ T54] Bluetooth: hci4: command tx timeout [ 417.097256][ T54] Bluetooth: hci3: command tx timeout [ 417.191788][ T5766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.222461][ T7701] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.233097][ T7701] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.242867][ T7701] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.254306][ T7701] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.298372][ T5766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.370414][ T5766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.459881][ T5766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.502238][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.558268][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.627206][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.634343][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.644482][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.651638][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.771651][ T5766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.876131][ T5766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.979892][ T5766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.136120][ T5766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.203220][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.392306][ T5766] bridge_slave_1: left allmulticast mode [ 418.406573][ T5766] bridge_slave_1: left promiscuous mode [ 418.412392][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.432110][ T5766] bridge_slave_0: left allmulticast mode [ 418.446105][ T5766] bridge_slave_0: left promiscuous mode [ 418.455636][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.487402][ T5766] bridge_slave_1: left allmulticast mode [ 418.493103][ T5766] bridge_slave_1: left promiscuous mode [ 418.509320][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.529294][ T5766] bridge_slave_0: left allmulticast mode [ 418.535080][ T5766] bridge_slave_0: left promiscuous mode [ 418.551380][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.566772][ T5766] bridge_slave_1: left allmulticast mode [ 418.572619][ T5766] bridge_slave_1: left promiscuous mode [ 418.579069][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.590528][ T5766] bridge_slave_0: left allmulticast mode [ 418.596173][ T5766] bridge_slave_0: left promiscuous mode [ 418.602336][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.615340][ T5766] bridge_slave_1: left allmulticast mode [ 418.622058][ T5766] bridge_slave_1: left promiscuous mode [ 418.627960][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.640254][ T5766] bridge_slave_0: left allmulticast mode [ 418.645898][ T5766] bridge_slave_0: left promiscuous mode [ 418.654890][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.776699][ T54] Bluetooth: hci0: command tx timeout [ 419.016687][ T54] Bluetooth: hci1: command tx timeout [ 419.022160][ T54] Bluetooth: hci2: command tx timeout [ 419.096771][ T54] Bluetooth: hci4: command tx timeout [ 419.186857][ T54] Bluetooth: hci3: command tx timeout [ 420.073838][ T5766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.086823][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.098208][ T5766] bond0 (unregistering): Released all slaves [ 420.212746][ T5766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.224981][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.244222][ T5766] bond0 (unregistering): Released all slaves [ 420.359681][ T5766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.370661][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.381806][ T5766] bond0 (unregistering): Released all slaves [ 420.492743][ T5766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.504323][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.515752][ T5766] bond0 (unregistering): Released all slaves [ 420.558954][ T7701] veth0_vlan: entered promiscuous mode [ 420.608864][ T7701] veth1_vlan: entered promiscuous mode [ 420.640021][ T7704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.685471][ T7704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.808855][ T7704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.843578][ T7704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.890689][ T7701] veth0_macvtap: entered promiscuous mode [ 420.945695][ T7701] veth1_macvtap: entered promiscuous mode [ 421.023942][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.056428][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.066296][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.094704][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.117770][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.260959][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.275745][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.294879][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.317143][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.327306][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.338223][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.348280][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.360693][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.372043][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.456031][ T7701] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.476465][ T7701] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.485202][ T7701] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.495533][ T7701] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.717615][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.935656][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.017610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.024724][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.032551][ T6609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.043593][ T6609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.122326][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.129588][ T5767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.162774][ T6609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.172155][ T6609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.262692][ T7704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.371255][ T5766] hsr_slave_0: left promiscuous mode [ 422.407411][ T5766] hsr_slave_1: left promiscuous mode [ 422.413545][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.432551][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.447418][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.465057][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.487655][ T5766] hsr_slave_0: left promiscuous mode [ 422.503584][ T5766] hsr_slave_1: left promiscuous mode [ 422.514906][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.534710][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.550264][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.572098][ T5766] hsr_slave_0: left promiscuous mode [ 422.588295][ T5766] hsr_slave_1: left promiscuous mode [ 422.595230][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.604761][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.612972][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.620939][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.632404][ T5766] hsr_slave_0: left promiscuous mode [ 422.831149][ T5766] hsr_slave_1: left promiscuous mode [ 422.854676][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.912396][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.961305][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.304669][ T5766] veth1_macvtap: left promiscuous mode [ 423.310291][ T5766] veth0_macvtap: left promiscuous mode [ 423.315949][ T5766] veth1_vlan: left promiscuous mode [ 423.321786][ T5766] veth0_vlan: left promiscuous mode [ 423.328330][ T5766] veth1_macvtap: left promiscuous mode [ 423.333835][ T5766] veth0_macvtap: left promiscuous mode [ 423.339651][ T5766] veth1_vlan: left promiscuous mode [ 423.344923][ T5766] veth0_vlan: left promiscuous mode [ 423.350920][ T5766] veth1_macvtap: left promiscuous mode [ 423.357417][ T5766] veth0_macvtap: left promiscuous mode [ 423.363020][ T5766] veth1_vlan: left promiscuous mode [ 423.368607][ T5766] veth0_vlan: left promiscuous mode [ 423.374392][ T5766] veth1_macvtap: left promiscuous mode [ 423.380068][ T5766] veth0_macvtap: left promiscuous mode [ 423.385843][ T5766] veth1_vlan: left promiscuous mode [ 423.391507][ T5766] veth0_vlan: left promiscuous mode [ 424.010678][ T5766] team0 (unregistering): Port device team_slave_1 removed [ 424.055995][ T5766] team0 (unregistering): Port device team_slave_0 removed [ 424.745497][ T5766] team0 (unregistering): Port device team_slave_1 removed [ 424.792503][ T5766] team0 (unregistering): Port device team_slave_0 removed [ 425.526081][ T5766] team0 (unregistering): Port device team_slave_1 removed [ 425.575829][ T5766] team0 (unregistering): Port device team_slave_0 removed [ 426.311183][ T5766] team0 (unregistering): Port device team_slave_1 removed [ 426.364399][ T5766] team0 (unregistering): Port device team_slave_0 removed [ 426.881165][ T7698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.949840][ T7698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.030570][ T7698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.080933][ T7698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.283249][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.182543][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.215367][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.276559][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.283674][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.364882][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.372095][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.560658][ T29] audit: type=1400 audit(1727485349.774:310): avc: denied { listen } for pid=7868 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 428.727895][ T7700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.782853][ T7700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.847580][ T7704] veth0_vlan: entered promiscuous mode [ 428.874312][ T7700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.917866][ T7700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.991986][ T7707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.005765][ T7707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.040964][ T7704] veth1_vlan: entered promiscuous mode [ 429.073691][ T7707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.090327][ T7707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.110251][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.217394][ T7704] veth0_macvtap: entered promiscuous mode [ 429.240660][ T7704] veth1_macvtap: entered promiscuous mode [ 429.349750][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.363676][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.379161][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.440442][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.461798][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.490514][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.542279][ T7698] veth0_vlan: entered promiscuous mode [ 429.569986][ T7704] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.595242][ T7704] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.604894][ T7704] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.615018][ T7704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.643469][ T7698] veth1_vlan: entered promiscuous mode [ 429.691658][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.741887][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.879913][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.922164][ T7698] veth0_macvtap: entered promiscuous mode [ 429.975495][ T7698] veth1_macvtap: entered promiscuous mode [ 429.994279][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.005452][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.015652][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.026182][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.038000][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.050522][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.061704][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.071795][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.082530][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.094261][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.105752][ T7698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.114570][ T7698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.123357][ T7698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.132156][ T7698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.161962][ T7707] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.194995][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.202198][ T5767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.249934][ T7700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.260393][ T7700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.304774][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.503'. [ 430.343962][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.351172][ T5767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.381091][ T5766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.394592][ T5766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.413509][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.420664][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.492813][ T5767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.534350][ T5767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.559500][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.566654][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.762873][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.808559][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.902352][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.018189][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 431.124796][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 431.174372][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.233737][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.380040][ T7700] veth0_vlan: entered promiscuous mode [ 431.476305][ T7700] veth1_vlan: entered promiscuous mode [ 431.673135][ T7700] veth0_macvtap: entered promiscuous mode [ 431.699008][ T7700] veth1_macvtap: entered promiscuous mode [ 432.628883][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.640900][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.659632][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.685258][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.729906][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.868966][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.927907][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.959546][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.241275][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.252645][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.704382][ T7941] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 434.818174][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.854288][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.864708][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.877726][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.899806][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.031522][ T7700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.059721][ T7700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.073780][ T7700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.084417][ T7700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.748228][ T7707] veth0_vlan: entered promiscuous mode [ 436.047693][ T7707] veth1_vlan: entered promiscuous mode [ 436.113982][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.124152][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.186474][ T5301] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 436.257470][ T7707] veth0_macvtap: entered promiscuous mode [ 436.273726][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.311890][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.325013][ T7707] veth1_macvtap: entered promiscuous mode [ 436.400064][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.416775][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.436036][ T5301] usb 1-1: config 0 has no interfaces? [ 436.436867][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.447804][ T5301] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 436.462416][ T5301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.464792][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.485626][ T5301] usb 1-1: Product: syz [ 436.503636][ T5301] usb 1-1: Manufacturer: syz [ 436.506977][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.512171][ T5301] usb 1-1: SerialNumber: syz [ 436.529624][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.546400][ T29] audit: type=1400 audit(1727485357.754:311): avc: denied { append } for pid=7970 comm="syz.1.513" name="userio" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.552112][ T5301] usb 1-1: config 0 descriptor?? [ 436.574720][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.574743][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.581055][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.709216][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.761962][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.793147][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.824166][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.074119][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.137952][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.170060][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.208009][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.234454][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.277220][ T7707] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.301125][ T7707] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.331107][ T7707] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.358399][ T7707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.525305][ T9] usb 1-1: USB disconnect, device number 5 [ 437.806139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.832891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.910690][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.925226][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.302431][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.309017][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.680532][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.528'. [ 442.414548][ T8070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 443.186635][ T8079] tipc: Failed to remove unknown binding: 66,1,1/0:2305473297/2305473299 [ 443.196006][ T8079] tipc: Failed to remove unknown binding: 66,1,1/0:2305473297/2305473299 [ 443.261686][ T29] audit: type=1400 audit(1727485364.394:312): avc: denied { bind } for pid=8078 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 443.280852][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.743170][ T29] audit: type=1400 audit(1727485364.884:313): avc: denied { write } for pid=8078 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 443.763444][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.805950][ T29] audit: type=1400 audit(1727485364.884:314): avc: denied { nlmsg_read } for pid=8078 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 443.924054][ T8093] warning: `syz.4.534' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 443.936898][ T29] audit: type=1400 audit(1727485365.134:315): avc: denied { create } for pid=8087 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 445.760465][ T8112] syz.1.540: attempt to access beyond end of device [ 445.760465][ T8112] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 445.775660][ T8112] syz.1.540: attempt to access beyond end of device [ 445.775660][ T8112] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 445.787196][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 445.788693][ T8112] Mount JFS Failure: -5 [ 445.801520][ T8112] jfs_mount failed w/return code = -5 [ 449.668568][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.555'. [ 450.162714][ T29] audit: type=1400 audit(1727485371.374:316): avc: denied { mount } for pid=8183 comm="syz.4.556" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 450.287250][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 450.315580][ T29] audit: type=1400 audit(1727485371.524:317): avc: denied { unmount } for pid=7704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 450.620139][ T8192] program syz.4.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.161426][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 453.036534][ T8219] can: request_module (can-proto-0) failed. [ 453.790240][ T8234] netlink: 288 bytes leftover after parsing attributes in process `syz.4.565'. [ 456.441656][ T8244] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 457.584948][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 457.605193][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 460.687699][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 461.165191][ T8312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 463.416535][ T5300] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 463.612288][ T5300] usb 2-1: Using ep0 maxpacket: 16 [ 463.832784][ T5300] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 463.842361][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.853248][ T5300] usb 2-1: Product: syz [ 463.857592][ T5300] usb 2-1: Manufacturer: syz [ 463.865445][ T5300] usb 2-1: SerialNumber: syz [ 463.922095][ T5300] usb 2-1: config 0 descriptor?? [ 463.980786][ T5300] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 465.042056][ T2934] usb 2-1: Failed to submit usb control message: -110 [ 465.049416][ T2934] usb 2-1: unable to send the bmi data to the device: -110 [ 465.056744][ T2934] usb 2-1: unable to get target info from device [ 465.063101][ T2934] usb 2-1: could not get target info (-110) [ 465.070230][ T2934] usb 2-1: could not probe fw (-110) [ 465.708753][ T9] usb 2-1: USB disconnect, device number 10 [ 466.108532][ T5270] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 466.290222][ T5270] usb 4-1: config 0 has no interfaces? [ 466.297243][ T5270] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 466.469343][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.123630][ T5270] usb 4-1: config 0 descriptor?? [ 467.471400][ T8367] bond_slave_0: entered promiscuous mode [ 467.477600][ T8367] bond_slave_1: entered promiscuous mode [ 467.484289][ T29] audit: type=1400 audit(1727485388.664:318): avc: denied { write } for pid=8366 comm="syz.3.593" name="sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 467.526655][ T8367] macsec1: entered promiscuous mode [ 467.532107][ T8367] bond0: entered promiscuous mode [ 467.537826][ T8367] macsec1: entered allmulticast mode [ 467.543151][ T8367] bond0: entered allmulticast mode [ 467.548572][ T8367] bond_slave_0: entered allmulticast mode [ 467.554327][ T8367] bond_slave_1: entered allmulticast mode [ 467.582582][ T8367] bond0: left allmulticast mode [ 467.622892][ T8367] bond_slave_0: left allmulticast mode [ 467.635253][ T8367] bond_slave_1: left allmulticast mode [ 467.651955][ T8367] bond0: left promiscuous mode [ 467.667577][ T8367] bond_slave_0: left promiscuous mode [ 467.673040][ T8367] bond_slave_1: left promiscuous mode [ 467.849165][ T9] usb 4-1: USB disconnect, device number 6 [ 468.228002][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 468.370076][ T8401] program syz.4.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.612537][ T8420] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 473.715708][ T8460] program syz.3.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.262476][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 478.704930][ T8498] debugfs: Directory 'netdev:nicvf0' with parent 'phy35' already present! [ 479.171344][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.634'. [ 479.173561][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.633'. [ 479.358618][ T8500] can: request_module (can-proto-0) failed. [ 480.352882][ T29] audit: type=1400 audit(1727485401.194:319): avc: denied { create } for pid=8517 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 480.420189][ T29] audit: type=1400 audit(1727485401.194:320): avc: denied { getopt } for pid=8517 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 482.392543][ T8538] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 482.402222][ T8538] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 483.011567][ T8541] trusted_key: syz.1.642 sent an empty control message without MSG_MORE. [ 486.946665][ T8581] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 486.956261][ T8581] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 492.488530][ T8605] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 492.644417][ T29] audit: type=1400 audit(1727485413.854:321): avc: denied { create } for pid=8612 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 492.719162][ T29] audit: type=1400 audit(1727485413.864:322): avc: denied { bind } for pid=8612 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 493.002979][ T8622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.661'. [ 494.682395][ T8637] tmpfs: Bad value for 'mpol' [ 494.797023][ T8622] can: request_module (can-proto-0) failed. [ 495.706983][ T8654] debugfs: Directory 'netdev:nicvf0' with parent 'phy29' already present! [ 495.718531][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.674'. [ 496.510096][ T29] audit: type=1326 audit(1727485417.724:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.2.676" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f397d17df39 code=0x0 [ 497.125502][ T8665] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 497.275877][ T8671] syz.4.678[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.287068][ T8671] syz.4.678[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.383041][ T8671] syz.4.678[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.985478][ T8685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.682'. [ 498.829920][ T8685] can: request_module (can-proto-0) failed. [ 502.067025][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.073359][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.141653][ T29] audit: type=1326 audit(1727485424.344:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8719 comm="syz.2.691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x0 [ 509.006484][ T29] audit: type=1326 audit(1727485430.224:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8776 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 509.045472][ T29] audit: type=1326 audit(1727485430.264:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8776 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 509.155287][ T29] audit: type=1326 audit(1727485430.344:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8776 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 509.261819][ T29] audit: type=1326 audit(1727485430.344:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8776 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 511.003059][ T29] audit: type=1400 audit(1727485432.214:329): avc: denied { bind } for pid=8803 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 511.151862][ T29] audit: type=1400 audit(1727485432.214:330): avc: denied { name_bind } for pid=8803 comm="syz.3.712" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 511.376085][ T29] audit: type=1400 audit(1727485432.214:331): avc: denied { node_bind } for pid=8803 comm="syz.3.712" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 511.732335][ T29] audit: type=1400 audit(1727485432.264:332): avc: denied { listen } for pid=8803 comm="syz.3.712" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 512.198862][ T29] audit: type=1400 audit(1727485432.264:333): avc: denied { connect } for pid=8803 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 513.497564][ T29] audit: type=1400 audit(1727485432.264:334): avc: denied { name_connect } for pid=8803 comm="syz.3.712" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 516.522334][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 516.522354][ T29] audit: type=1400 audit(1727485437.734:338): avc: denied { relabelfrom } for pid=8848 comm="syz.2.727" name="" dev="pipefs" ino=27230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 516.523000][ T8849] SELinux: Context system_u: is not valid (left unmapped). [ 516.558216][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.856397][ T29] audit: type=1400 audit(1727485437.824:339): avc: denied { relabelto } for pid=8848 comm="syz.2.727" name="" dev="pipefs" ino=27230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 516.880837][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.021224][ T29] audit: type=1326 audit(1727485439.154:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 518.044518][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.229666][ T29] audit: type=1326 audit(1727485439.164:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 518.542878][ T29] audit: type=1326 audit(1727485439.164:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 518.935949][ T8878] netlink: 288 bytes leftover after parsing attributes in process `syz.0.734'. [ 521.218689][ T8902] syz.1.743[8902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.218796][ T8902] syz.1.743[8902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.439370][ T8902] syz.1.743[8902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.062921][ T29] audit: type=1400 audit(1727485443.174:343): avc: denied { ioctl } for pid=8907 comm="syz.4.745" path="/dev/sg0" dev="devtmpfs" ino=694 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 522.099659][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.332454][ T29] audit: type=1400 audit(1727485445.514:344): avc: denied { create } for pid=8933 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 524.363186][ T29] audit: type=1400 audit(1727485445.514:345): avc: denied { getopt } for pid=8933 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 524.388124][ T29] audit: type=1400 audit(1727485445.514:346): avc: denied { append } for pid=8933 comm="syz.3.752" name="sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 524.411597][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.418262][ T29] audit: type=1400 audit(1727485445.554:347): avc: denied { getopt } for pid=8931 comm="syz.4.751" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 528.220903][ T8968] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 529.022966][ T29] audit: type=1400 audit(1727485450.234:348): avc: denied { read } for pid=8973 comm="syz.4.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 530.380510][ T8987] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 530.448108][ T8987] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 530.489916][ T8987] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 531.580928][ T29] audit: type=1400 audit(1727485452.794:349): avc: denied { bind } for pid=9002 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 533.287677][ T9012] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 534.963649][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 534.966477][ T7709] Bluetooth: hci0: command 0x0406 tx timeout [ 534.994388][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 535.505803][ T7709] Bluetooth: hci3: command 0x0406 tx timeout [ 535.516513][ T7709] Bluetooth: hci4: command 0x0406 tx timeout [ 535.887543][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 539.386138][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 542.199747][ T29] audit: type=1400 audit(1727485463.414:350): avc: denied { read } for pid=9079 comm="syz.1.795" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 542.333053][ T29] audit: type=1400 audit(1727485463.544:351): avc: denied { open } for pid=9079 comm="syz.1.795" path="/dev/ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 542.366837][ T29] audit: type=1400 audit(1727485463.574:352): avc: denied { block_suspend } for pid=9079 comm="syz.1.795" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 542.589429][ T29] audit: type=1326 audit(1727485463.694:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 542.612922][ T29] audit: type=1326 audit(1727485463.694:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 542.636458][ T29] audit: type=1326 audit(1727485463.694:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 542.832920][ T29] audit: type=1326 audit(1727485463.694:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 543.323404][ T29] audit: type=1326 audit(1727485463.694:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 543.368484][ T29] audit: type=1326 audit(1727485463.694:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 543.431010][ T9095] 9pnet_fd: Insufficient options for proto=fd [ 543.526573][ T29] audit: type=1400 audit(1727485463.704:359): avc: denied { create } for pid=9096 comm="syz.0.797" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 546.223456][ T9139] deleting an unspecified loop device is not supported. [ 547.720915][ T9143] syz.3.811[9143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.721021][ T9143] syz.3.811[9143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.820637][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 547.820660][ T29] audit: type=1400 audit(1727485469.024:364): avc: denied { append } for pid=9142 comm="syz.3.811" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 547.906510][ T9143] syz.3.811[9143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.002673][ T9149] 9p: Unknown access argument 18446744073709551615: -34 [ 548.621648][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.815'. [ 549.582612][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 549.591583][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 549.602922][ T9161] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 552.802184][ T9194] netlink: 288 bytes leftover after parsing attributes in process `syz.0.824'. [ 553.326694][ T29] audit: type=1400 audit(1727485473.934:365): avc: denied { create } for pid=9192 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 553.968009][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 554.578759][ T9202] 9p: Unknown access argument 18446744073709551615: -34 [ 554.594476][ T29] audit: type=1400 audit(1727485475.654:366): avc: denied { name_connect } for pid=9211 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 554.909882][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 554.919002][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 554.941992][ T9208] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 558.701830][ T9250] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 558.850063][ T9248] netlink: 'syz.1.838': attribute type 3 has an invalid length. [ 558.957804][ T9248] netlink: 'syz.1.838': attribute type 3 has an invalid length. [ 559.140030][ T29] audit: type=1326 audit(1727485480.354:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.163357][ T29] audit: type=1326 audit(1727485480.364:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.186816][ T29] audit: type=1326 audit(1727485480.364:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.210105][ T29] audit: type=1326 audit(1727485480.364:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.233665][ T29] audit: type=1326 audit(1727485480.364:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.257251][ T29] audit: type=1326 audit(1727485480.364:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.281018][ T29] audit: type=1326 audit(1727485480.364:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.304476][ T29] audit: type=1326 audit(1727485480.364:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.328402][ T29] audit: type=1326 audit(1727485480.364:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 559.352193][ T29] audit: type=1326 audit(1727485480.364:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.1.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 560.737681][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 560.756954][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 560.766077][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 561.115295][ T9273] wireguard0: entered promiscuous mode [ 561.121461][ T9273] wireguard0: entered allmulticast mode [ 561.136608][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 561.666614][ T9278] can: request_module (can-proto-0) failed. [ 563.185913][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.842064][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.636784][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 565.636803][ T29] audit: type=1400 audit(1727485486.854:383): avc: denied { accept } for pid=9325 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 565.870096][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 565.967457][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 565.976379][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 566.035837][ T9338] wireguard0: entered promiscuous mode [ 566.041885][ T9338] wireguard0: entered allmulticast mode [ 567.045321][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 567.552972][ T9360] can: request_module (can-proto-0) failed. [ 568.994152][ T9384] debugfs: Directory 'netdev:nicvf0' with parent 'phy35' already present! [ 569.083863][ T9384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.866'. [ 569.401527][ T9389] 9pnet_fd: Insufficient options for proto=fd [ 571.335110][ T9410] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 571.500561][ T9414] program syz.3.871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.704937][ T29] audit: type=1326 audit(1727485492.914:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 571.772894][ T29] audit: type=1326 audit(1727485492.944:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 571.909290][ T29] audit: type=1326 audit(1727485492.944:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f397d1198a9 code=0x7ffc0000 [ 572.186647][ T29] audit: type=1326 audit(1727485492.944:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 572.786540][ T29] audit: type=1326 audit(1727485492.944:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 572.926401][ T29] audit: type=1326 audit(1727485492.944:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 573.152895][ T29] audit: type=1326 audit(1727485492.944:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 573.176703][ T29] audit: type=1326 audit(1727485492.954:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 573.202821][ T29] audit: type=1326 audit(1727485492.954:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 573.226793][ T29] audit: type=1326 audit(1727485492.954:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 573.833868][ T9444] Cannot find set identified by id 0 to match [ 575.196580][ T9463] debugfs: Directory 'netdev:nicvf0' with parent 'phy29' already present! [ 575.269631][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.888'. [ 577.918313][ T9494] program syz.4.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.213410][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 579.213430][ T29] audit: type=1326 audit(1727485500.424:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 579.380022][ T29] audit: type=1326 audit(1727485500.584:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 579.486483][ T29] audit: type=1326 audit(1727485500.584:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 579.513487][ T29] audit: type=1326 audit(1727485500.584:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 580.166493][ T29] audit: type=1326 audit(1727485501.354:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 580.227766][ T29] audit: type=1326 audit(1727485501.354:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 580.251489][ T29] audit: type=1326 audit(1727485501.354:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 580.356396][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 580.509269][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.553734][ T9526] binder: 9523:9526 ioctl c0306201 0 returned -14 [ 580.560713][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.612400][ T9526] binder: 9523:9526 ioctl c0306201 0 returned -14 [ 580.636525][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.595514][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.604404][ T9] usb 1-1: Product: syz [ 581.608650][ T9] usb 1-1: Manufacturer: syz [ 581.613262][ T9] usb 1-1: SerialNumber: syz [ 581.624031][ T9] usb 1-1: selecting invalid altsetting 1 [ 581.983223][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.081939][ T9538] pim6reg: entered allmulticast mode [ 582.095464][ T9538] pim6reg: left allmulticast mode [ 582.274436][ T9] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 582.286576][ T9] cdc_ncm 1-1:1.0: bind() failure [ 582.561747][ T29] audit: type=1326 audit(1727485503.774:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 582.632712][ T29] audit: type=1326 audit(1727485503.774:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 583.610074][ T29] audit: type=1326 audit(1727485503.804:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 583.852390][ T5269] usb 1-1: USB disconnect, device number 6 [ 583.922738][ T9555] pim6reg: entered allmulticast mode [ 584.001060][ T9555] pim6reg: left allmulticast mode [ 584.063696][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.923'. [ 584.075430][ T9562] openvswitch: netlink: Flow key attr not present in new flow. [ 584.231008][ T9565] can: request_module (can-proto-0) failed. [ 586.548594][ T9573] binder: 9572:9573 ioctl c0306201 0 returned -14 [ 586.587503][ T9573] binder: 9572:9573 ioctl c0306201 0 returned -14 [ 586.690728][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'. [ 586.754259][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 586.763461][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 586.827076][ T9582] wireguard0: entered promiscuous mode [ 586.832615][ T9582] wireguard0: entered allmulticast mode [ 586.962228][ T9592] syz.2.932[9592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.962317][ T9592] syz.2.932[9592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.962425][ T9592] syz.2.932[9592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.103954][ T9598] tipc: Started in network mode [ 587.125350][ T9598] tipc: Node identity ac1414aa, cluster identity 4711 [ 587.137843][ T9598] tipc: Enabled bearer , priority 10 [ 587.150888][ T9598] tipc: Disabling bearer [ 588.498314][ T9608] netlink: 112 bytes leftover after parsing attributes in process `syz.1.938'. [ 588.519295][ T9610] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 588.519295][ T9610] program syz.0.939 not setting count and/or reply_len properly [ 588.527885][ T9608] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 588.552926][ T9613] binder: 9612:9613 ioctl c0306201 0 returned -14 [ 588.567687][ T9613] binder: 9612:9613 ioctl c0306201 0 returned -14 [ 588.582919][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 588.582946][ T29] audit: type=1400 audit(1727485509.794:425): avc: denied { write } for pid=9607 comm="syz.1.938" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.654517][ T29] audit: type=1400 audit(1727485509.864:426): avc: denied { shutdown } for pid=9614 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 588.779232][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.943'. [ 590.966072][ T9638] kvm: kvm [9637]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 591.524522][ T9671] lo speed is unknown, defaulting to 1000 [ 591.531129][ T9671] lo speed is unknown, defaulting to 1000 [ 591.537771][ T9671] lo speed is unknown, defaulting to 1000 [ 591.539427][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.962'. [ 591.551357][ T9671] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 591.612086][ T9672] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 591.633783][ T9671] lo speed is unknown, defaulting to 1000 [ 591.665605][ T9671] lo speed is unknown, defaulting to 1000 [ 591.686980][ T9671] lo speed is unknown, defaulting to 1000 [ 591.713544][ T9671] lo speed is unknown, defaulting to 1000 [ 591.741174][ T9671] lo speed is unknown, defaulting to 1000 [ 594.715263][ T29] audit: type=1326 audit(1727485515.924:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.751978][ T29] audit: type=1326 audit(1727485515.954:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.775624][ T29] audit: type=1326 audit(1727485515.954:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.799423][ T29] audit: type=1326 audit(1727485515.964:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.823089][ T29] audit: type=1326 audit(1727485515.964:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.846578][ T29] audit: type=1326 audit(1727485515.964:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.870535][ T29] audit: type=1326 audit(1727485515.994:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.894323][ T29] audit: type=1326 audit(1727485515.994:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 594.917803][ T29] audit: type=1326 audit(1727485515.994:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9720 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f66203b0025 code=0x7ffc0000 [ 594.941317][ T29] audit: type=1326 audit(1727485515.994:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f662037df39 code=0x7ffc0000 [ 596.558110][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.987'. [ 596.585243][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 596.594188][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 596.753535][ T9749] wireguard1: entered promiscuous mode [ 596.759210][ T9749] wireguard1: entered allmulticast mode [ 597.738153][ T5303] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 598.727043][ T5303] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 598.734779][ T5303] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 598.748164][ T5303] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 599.345739][ T9779] can: request_module (can-proto-0) failed. [ 600.563926][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 600.870797][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 600.879761][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 600.902241][ T9804] wireguard0: entered promiscuous mode [ 600.909321][ T9804] wireguard0: entered allmulticast mode [ 601.142939][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 601.142957][ T29] audit: type=1326 audit(1727485522.324:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 601.453534][ T29] audit: type=1326 audit(1727485522.324:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 601.483771][ T29] audit: type=1326 audit(1727485522.344:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 601.529326][ T29] audit: type=1326 audit(1727485522.344:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 601.584125][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 601.617788][ T29] audit: type=1326 audit(1727485522.344:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 601.743573][ T9819] kvm: kvm [9818]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 601.824986][ T29] audit: type=1326 audit(1727485522.344:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 601.868859][ T29] audit: type=1326 audit(1727485522.354:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 601.893029][ T29] audit: type=1326 audit(1727485522.354:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 602.578555][ T9834] can: request_module (can-proto-0) failed. [ 602.617640][ T29] audit: type=1326 audit(1727485522.354:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 602.729327][ T29] audit: type=1326 audit(1727485522.354:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f103877c8d0 code=0x7ffc0000 [ 605.726882][ T9875] can: request_module (can-proto-0) failed. [ 606.025982][ T9890] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1028'. [ 606.068254][ T9890] 0ªX¹¦À: renamed from caif0 [ 606.112745][ T9890] 0ªX¹¦À: entered allmulticast mode [ 606.126422][ T9890] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 607.512968][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 607.562047][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1036'. [ 607.880102][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 607.880122][ T29] audit: type=1400 audit(1727485529.094:539): avc: denied { write } for pid=9912 comm="syz.4.1037" name="file0" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 608.046092][ T29] audit: type=1400 audit(1727485529.124:540): avc: denied { open } for pid=9912 comm="syz.4.1037" path="/126/file0" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 608.096539][ T29] audit: type=1400 audit(1727485529.154:541): avc: denied { ioctl } for pid=9912 comm="syz.4.1037" path="/126/file0" dev="tmpfs" ino=683 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 608.642687][ T29] audit: type=1326 audit(1727485529.854:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.1.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 608.743987][ T29] audit: type=1326 audit(1727485529.854:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.1.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 608.800602][ T29] audit: type=1326 audit(1727485529.854:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.1.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 610.542033][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 610.882766][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 611.350348][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'. [ 611.420085][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 611.430317][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 611.450856][ T9957] wireguard2: entered promiscuous mode [ 611.457158][ T9957] wireguard2: entered allmulticast mode [ 612.100953][ T29] audit: type=1400 audit(1727485533.314:545): avc: denied { create } for pid=9958 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 612.234454][ T29] audit: type=1400 audit(1727485533.314:546): avc: denied { bind } for pid=9958 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 612.296622][ T29] audit: type=1400 audit(1727485533.314:547): avc: denied { write } for pid=9958 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 612.658949][ T9974] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1056'. [ 612.926574][ T9974] unsupported nla_type 65024 [ 613.384636][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1058'. [ 613.490723][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1059'. [ 613.673665][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1061'. [ 613.746016][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 614.506553][ T29] audit: type=1400 audit(1727485535.684:548): avc: denied { connect } for pid=9986 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 614.564317][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 614.918388][T10005] program syz.0.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.982093][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1066'. [ 615.618740][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 615.628065][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 615.669392][T10020] wireguard1: entered promiscuous mode [ 615.674906][T10020] wireguard1: entered allmulticast mode [ 616.022044][T10026] kvm: kvm [10025]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 616.098471][T10033] syz.0.1069[10033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.098579][T10033] syz.0.1069[10033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.133210][T10033] syz.0.1069[10033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.316420][ T29] audit: type=1326 audit(1727485537.524:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 616.373528][ T29] audit: type=1326 audit(1727485537.524:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 616.400495][ T29] audit: type=1326 audit(1727485537.574:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 616.446531][ T29] audit: type=1326 audit(1727485537.584:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103877df39 code=0x7ffc0000 [ 616.516485][T10043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1073'. [ 616.808804][ T29] audit: type=1400 audit(1727485537.994:553): avc: denied { bind } for pid=10048 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 619.187156][ T29] audit: type=1326 audit(1727485540.384:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 619.212453][ T29] audit: type=1326 audit(1727485540.384:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 619.284177][ T29] audit: type=1326 audit(1727485540.394:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 619.319950][ T29] audit: type=1326 audit(1727485540.394:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 619.455676][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 619.516695][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 619.516715][ T29] audit: type=1326 audit(1727485540.724:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 619.547421][ T29] audit: type=1326 audit(1727485540.734:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f397d174ee7 code=0x7ffc0000 [ 619.570879][ T29] audit: type=1326 audit(1727485540.734:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f397d1198a9 code=0x7ffc0000 [ 619.594526][ T29] audit: type=1326 audit(1727485540.734:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 619.618280][ T29] audit: type=1326 audit(1727485540.734:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f397d174ee7 code=0x7ffc0000 [ 619.647930][ T29] audit: type=1326 audit(1727485540.734:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f397d1198a9 code=0x7ffc0000 [ 619.682735][ T29] audit: type=1326 audit(1727485540.734:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 619.711846][ T29] audit: type=1326 audit(1727485540.734:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f397d174ee7 code=0x7ffc0000 [ 619.735427][ T29] audit: type=1326 audit(1727485540.734:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f397d1198a9 code=0x7ffc0000 [ 619.759431][ T29] audit: type=1326 audit(1727485540.734:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 620.776485][ T5270] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 620.947964][ T5270] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.958763][ T5270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.981922][ T5270] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.992248][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.000474][ T5270] usb 3-1: Product: syz [ 621.004936][ T5270] usb 3-1: Manufacturer: syz [ 621.009725][ T5270] usb 3-1: SerialNumber: syz [ 621.038016][ T5270] usb 3-1: selecting invalid altsetting 1 [ 621.111935][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1082'. [ 621.132278][T10078] debugfs: Directory 'netdev:nicvf0' with parent 'phy27' already present! [ 621.267994][T10089] sctp: [Deprecated]: syz.4.1089 (pid 10089) Use of int in max_burst socket option. [ 621.267994][T10089] Use struct sctp_assoc_value instead [ 621.272177][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.700775][ T5270] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 621.945794][ T5270] cdc_ncm 3-1:1.0: bind() failure [ 622.700214][T10112] program syz.4.1096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.657655][ T9] usb 3-1: USB disconnect, device number 6 [ 623.807957][T10126] debugfs: Directory 'netdev:nicvf0' with parent 'phy29' already present! [ 623.859841][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1101'. [ 623.916670][T10130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10130 comm=syz.1.1102 [ 624.658848][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.047401][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.173338][T10166] program syz.1.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.547479][T10176] lo speed is unknown, defaulting to 1000 [ 627.627144][T10183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10183 comm=syz.1.1118 [ 628.464544][ T5770] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 628.976504][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 628.976528][ T29] audit: type=1400 audit(1727485550.144:838): avc: denied { connect } for pid=10197 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 629.145582][ T29] audit: type=1400 audit(1727485550.144:839): avc: denied { ioctl } for pid=10197 comm="syz.0.1125" path="socket:[32423]" dev="sockfs" ino=32423 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 629.148508][ T5770] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.181381][ T5770] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.702808][ T29] audit: type=1400 audit(1727485550.144:840): avc: denied { write } for pid=10197 comm="syz.0.1125" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 630.134049][ T29] audit: type=1326 audit(1727485550.744:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 630.243408][ T29] audit: type=1326 audit(1727485550.754:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 630.287805][ T5770] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.299123][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.310302][ T29] audit: type=1326 audit(1727485550.754:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 630.334019][ T5770] usb 3-1: Product: syz [ 630.338636][ T5770] usb 3-1: Manufacturer: syz [ 630.344088][T10212] program syz.4.1128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.353622][ T5770] usb 3-1: SerialNumber: syz [ 630.359672][ T29] audit: type=1326 audit(1727485550.754:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 630.395307][ T5770] usb 3-1: selecting invalid altsetting 1 [ 630.440882][ T29] audit: type=1326 audit(1727485550.754:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 630.535211][ T29] audit: type=1326 audit(1727485550.784:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 630.609100][ T29] audit: type=1326 audit(1727485550.784:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514f7df39 code=0x7ffc0000 [ 630.609731][ T5770] cdc_ncm 3-1:1.0: bind() failure [ 630.690587][ T5770] usb 3-1: USB disconnect, device number 7 [ 630.892863][T10229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1134'. [ 631.648702][T10229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1134'. [ 631.976576][T10246] debugfs: Directory 'netdev:nicvf0' with parent 'phy27' already present! [ 633.136819][ T2636] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 633.319343][ T2636] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.353356][ T2636] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.377035][ T2636] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.991947][T10280] syz.4.1150[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.103175][ T2636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.114681][T10280] syz.4.1150[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.122744][ T2636] usb 4-1: Product: syz [ 634.122771][ T2636] usb 4-1: Manufacturer: syz [ 634.122792][ T2636] usb 4-1: SerialNumber: syz [ 634.154220][T10280] syz.4.1150[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.202175][ T2636] usb 4-1: selecting invalid altsetting 1 [ 635.478858][ T2636] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 635.485560][ T2636] cdc_ncm 4-1:1.0: bind() failure [ 636.546348][T10285] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1152'. [ 636.557624][T10288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.688850][T10296] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 636.699576][T10296] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 636.913041][ T2636] usb 4-1: USB disconnect, device number 7 [ 636.934593][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 636.934612][ T29] audit: type=1326 audit(1727485558.144:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 637.072389][ T29] audit: type=1326 audit(1727485558.144:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 637.098438][ T29] audit: type=1326 audit(1727485558.314:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 637.448107][ T29] audit: type=1326 audit(1727485558.314:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 637.477390][ T29] audit: type=1326 audit(1727485558.314:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 637.526613][ T29] audit: type=1326 audit(1727485558.334:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 637.596549][ T29] audit: type=1326 audit(1727485558.334:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 637.865907][ T29] audit: type=1326 audit(1727485558.334:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 638.190963][ T29] audit: type=1326 audit(1727485558.344:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 638.214520][ T29] audit: type=1326 audit(1727485558.344:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d17df39 code=0x7ffc0000 [ 639.599500][T10348] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 639.609206][T10348] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 640.725341][T10359] [ 640.727706][T10359] ===================================================== [ 640.734641][T10359] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 640.742988][T10359] 6.11.0-syzkaller-11624-ge477dba5442c #0 Not tainted [ 640.749842][T10359] ----------------------------------------------------- [ 640.756778][T10359] syz.3.1175/10359 [HC0[0]:SC0[8]:HE1:SE0] is trying to acquire: [ 640.764512][T10359] ffff8880293261e0 (&pch->downl){+.+.}-{2:2}, at: ppp_ioctl+0x1955/0x2590 [ 640.773098][T10359] [ 640.773098][T10359] and this task is already holding: [ 640.780462][T10359] ffff88806b8b4e10 (&ppp->rlock){+...}-{2:2}, at: ppp_ioctl+0x1942/0x2590 [ 640.789047][T10359] which would create a new lock dependency: [ 640.794933][T10359] (&ppp->rlock){+...}-{2:2} -> (&pch->downl){+.+.}-{2:2} [ 640.802115][T10359] [ 640.802115][T10359] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 640.812001][T10359] (&pch->upl){++.-}-{2:2} [ 640.812038][T10359] [ 640.812038][T10359] ... which became SOFTIRQ-READ-irq-safe at: [ 640.824584][T10359] lock_acquire+0x1b1/0x560 [ 640.829202][T10359] _raw_read_lock_bh+0x3f/0x70 [ 640.834079][T10359] ppp_input+0x40c/0xbb0 [ 640.838444][T10359] ppp_sync_process+0xa3/0x160 [ 640.843326][T10359] tasklet_action_common+0x24c/0x3e0 [ 640.848720][T10359] handle_softirqs+0x213/0x8f0 [ 640.853585][T10359] run_ksoftirqd+0x3a/0x60 [ 640.858102][T10359] smpboot_thread_fn+0x661/0xa10 [ 640.863231][T10359] kthread+0x2c1/0x3a0 [ 640.867401][T10359] ret_from_fork+0x45/0x80 [ 640.871928][T10359] ret_from_fork_asm+0x1a/0x30 [ 640.876823][T10359] [ 640.876823][T10359] to a SOFTIRQ-READ-irq-unsafe lock: [ 640.884277][T10359] (&pch->downl){+.+.}-{2:2} [ 640.884314][T10359] [ 640.884314][T10359] ... which became SOFTIRQ-READ-irq-unsafe at: [ 640.897198][T10359] ... [ 640.897204][T10359] lock_acquire+0x1b1/0x560 [ 640.904345][T10359] _raw_spin_lock+0x2e/0x40 [ 640.908941][T10359] ppp_input+0x104/0xbb0 [ 640.913286][T10359] pppoe_rcv_core+0x22c/0x320 [ 640.918037][T10359] __release_sock+0x35f/0x400 [ 640.922786][T10359] release_sock+0x5a/0x220 [ 640.927287][T10359] pppoe_sendmsg+0x5e6/0x770 [ 640.931985][T10359] ____sys_sendmsg+0xaaf/0xc90 [ 640.936852][T10359] ___sys_sendmsg+0x135/0x1e0 [ 640.941630][T10359] __sys_sendmmsg+0x1a1/0x450 [ 640.946396][T10359] __x64_sys_sendmmsg+0x9c/0x100 [ 640.951420][T10359] do_syscall_64+0xcd/0x250 [ 640.955995][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.961968][T10359] [ 640.961968][T10359] other info that might help us debug this: [ 640.961968][T10359] [ 640.972200][T10359] Chain exists of: [ 640.972200][T10359] &pch->upl --> &ppp->rlock --> &pch->downl [ 640.972200][T10359] [ 640.984101][T10359] Possible interrupt unsafe locking scenario: [ 640.984101][T10359] [ 640.992408][T10359] CPU0 CPU1 [ 640.997758][T10359] ---- ---- [ 641.003132][T10359] lock(&pch->downl); [ 641.007190][T10359] local_irq_disable(); [ 641.013929][T10359] lock(&pch->upl); [ 641.020337][T10359] lock(&ppp->rlock); [ 641.026909][T10359] [ 641.030344][T10359] lock(&pch->upl); [ 641.034397][T10359] [ 641.034397][T10359] *** DEADLOCK *** [ 641.034397][T10359] [ 641.042527][T10359] 5 locks held by syz.3.1175/10359: [ 641.047707][T10359] #0: ffffffff8f32bc68 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0xc3/0x2590 [ 641.056322][T10359] #1: ffff888055f264c0 (&pn->all_ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0xa5c/0x2590 [ 641.065798][T10359] #2: ffff888029326248 (&pch->upl){++.-}-{2:2}, at: ppp_ioctl+0xa8e/0x2590 [ 641.074488][T10359] #3: ffff88806b8b4e50 (&ppp->wlock){+...}-{2:2}, at: ppp_ioctl+0x192d/0x2590 [ 641.083438][T10359] #4: ffff88806b8b4e10 (&ppp->rlock){+...}-{2:2}, at: ppp_ioctl+0x1942/0x2590 [ 641.092396][T10359] [ 641.092396][T10359] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 641.103242][T10359] -> (&pch->upl){++.-}-{2:2} { [ 641.108196][T10359] HARDIRQ-ON-W at: [ 641.112338][T10359] lock_acquire+0x1b1/0x560 [ 641.118833][T10359] _raw_write_lock_bh+0x33/0x40 [ 641.125676][T10359] ppp_ioctl+0xeae/0x2590 [ 641.131993][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.138751][T10359] do_syscall_64+0xcd/0x250 [ 641.145251][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.153147][T10359] HARDIRQ-ON-R at: [ 641.157295][T10359] lock_acquire+0x1b1/0x560 [ 641.163790][T10359] _raw_read_lock_bh+0x3f/0x70 [ 641.170555][T10359] ppp_channel_push+0x28/0x250 [ 641.177318][T10359] ppp_write+0x2d1/0x3e0 [ 641.183551][T10359] vfs_writev+0x6da/0xdd0 [ 641.189870][T10359] do_writev+0x137/0x370 [ 641.196184][T10359] do_syscall_64+0xcd/0x250 [ 641.202676][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.210565][T10359] IN-SOFTIRQ-R at: [ 641.214710][T10359] lock_acquire+0x1b1/0x560 [ 641.221208][T10359] _raw_read_lock_bh+0x3f/0x70 [ 641.227989][T10359] ppp_input+0x40c/0xbb0 [ 641.234229][T10359] ppp_sync_process+0xa3/0x160 [ 641.240984][T10359] tasklet_action_common+0x24c/0x3e0 [ 641.248265][T10359] handle_softirqs+0x213/0x8f0 [ 641.255106][T10359] run_ksoftirqd+0x3a/0x60 [ 641.261512][T10359] smpboot_thread_fn+0x661/0xa10 [ 641.268446][T10359] kthread+0x2c1/0x3a0 [ 641.274526][T10359] ret_from_fork+0x45/0x80 [ 641.280940][T10359] ret_from_fork_asm+0x1a/0x30 [ 641.287697][T10359] INITIAL USE at: [ 641.291752][T10359] lock_acquire+0x1b1/0x560 [ 641.298161][T10359] _raw_write_lock_bh+0x33/0x40 [ 641.304920][T10359] ppp_ioctl+0xeae/0x2590 [ 641.311155][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.317816][T10359] do_syscall_64+0xcd/0x250 [ 641.324232][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.332037][T10359] INITIAL READ USE at: [ 641.336525][T10359] lock_acquire+0x1b1/0x560 [ 641.343369][T10359] _raw_read_lock_bh+0x3f/0x70 [ 641.350473][T10359] ppp_channel_push+0x28/0x250 [ 641.357580][T10359] ppp_write+0x2d1/0x3e0 [ 641.364168][T10359] vfs_writev+0x6da/0xdd0 [ 641.370840][T10359] do_writev+0x137/0x370 [ 641.377423][T10359] do_syscall_64+0xcd/0x250 [ 641.384262][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.392498][T10359] } [ 641.395151][T10359] ... key at: [] __key.10+0x0/0x40 [ 641.402520][T10359] -> (&ppp->wlock){+...}-{2:2} { [ 641.407546][T10359] HARDIRQ-ON-W at: [ 641.411615][T10359] lock_acquire+0x1b1/0x560 [ 641.417941][T10359] _raw_spin_lock_bh+0x33/0x40 [ 641.424526][T10359] ppp_get_stats64+0xcf/0x3a0 [ 641.431018][T10359] dev_get_stats+0xae/0x9e0 [ 641.437337][T10359] rtnl_fill_stats+0x48/0xa90 [ 641.443825][T10359] rtnl_fill_ifinfo.constprop.0+0x1622/0x4b50 [ 641.451715][T10359] rtmsg_ifinfo_build_skb+0x151/0x280 [ 641.458909][T10359] rtmsg_ifinfo+0x9f/0x1a0 [ 641.465144][T10359] register_netdevice+0x18b5/0x1e90 [ 641.472161][T10359] ppp_dev_configure+0x9aa/0xc90 [ 641.478911][T10359] ppp_ioctl+0x17eb/0x2590 [ 641.485142][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.491719][T10359] do_syscall_64+0xcd/0x250 [ 641.498033][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.505744][T10359] INITIAL USE at: [ 641.509709][T10359] lock_acquire+0x1b1/0x560 [ 641.515960][T10359] _raw_spin_lock_bh+0x33/0x40 [ 641.522452][T10359] ppp_get_stats64+0xcf/0x3a0 [ 641.528873][T10359] dev_get_stats+0xae/0x9e0 [ 641.535112][T10359] rtnl_fill_stats+0x48/0xa90 [ 641.541515][T10359] rtnl_fill_ifinfo.constprop.0+0x1622/0x4b50 [ 641.549314][T10359] rtmsg_ifinfo_build_skb+0x151/0x280 [ 641.556417][T10359] rtmsg_ifinfo+0x9f/0x1a0 [ 641.562566][T10359] register_netdevice+0x18b5/0x1e90 [ 641.569498][T10359] ppp_dev_configure+0x9aa/0xc90 [ 641.576165][T10359] ppp_ioctl+0x17eb/0x2590 [ 641.582320][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.588828][T10359] do_syscall_64+0xcd/0x250 [ 641.595072][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.602718][T10359] } [ 641.605293][T10359] ... key at: [] __key.0+0x0/0x40 [ 641.612494][T10359] ... acquired at: [ 641.616387][T10359] _raw_spin_lock_bh+0x33/0x40 [ 641.621332][T10359] ppp_ioctl+0x192d/0x2590 [ 641.625926][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.630861][T10359] do_syscall_64+0xcd/0x250 [ 641.635715][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.641792][T10359] [ 641.644104][T10359] -> (&ppp->rlock){+...}-{2:2} { [ 641.649058][T10359] HARDIRQ-ON-W at: [ 641.653031][T10359] lock_acquire+0x1b1/0x560 [ 641.659190][T10359] _raw_spin_lock_bh+0x33/0x40 [ 641.665617][T10359] ppp_get_stats64+0x24/0x3a0 [ 641.671946][T10359] dev_get_stats+0xae/0x9e0 [ 641.678109][T10359] rtnl_fill_stats+0x48/0xa90 [ 641.684456][T10359] rtnl_fill_ifinfo.constprop.0+0x1622/0x4b50 [ 641.692179][T10359] rtmsg_ifinfo_build_skb+0x151/0x280 [ 641.699207][T10359] rtmsg_ifinfo+0x9f/0x1a0 [ 641.705289][T10359] register_netdevice+0x18b5/0x1e90 [ 641.712142][T10359] ppp_dev_configure+0x9aa/0xc90 [ 641.718740][T10359] ppp_ioctl+0x17eb/0x2590 [ 641.724809][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.731222][T10359] do_syscall_64+0xcd/0x250 [ 641.737380][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.744956][T10359] INITIAL USE at: [ 641.748846][T10359] lock_acquire+0x1b1/0x560 [ 641.755005][T10359] _raw_spin_lock_bh+0x33/0x40 [ 641.761345][T10359] ppp_get_stats64+0x24/0x3a0 [ 641.767586][T10359] dev_get_stats+0xae/0x9e0 [ 641.773656][T10359] rtnl_fill_stats+0x48/0xa90 [ 641.779895][T10359] rtnl_fill_ifinfo.constprop.0+0x1622/0x4b50 [ 641.787536][T10359] rtmsg_ifinfo_build_skb+0x151/0x280 [ 641.794473][T10359] rtmsg_ifinfo+0x9f/0x1a0 [ 641.800456][T10359] register_netdevice+0x18b5/0x1e90 [ 641.807222][T10359] ppp_dev_configure+0x9aa/0xc90 [ 641.813730][T10359] ppp_ioctl+0x17eb/0x2590 [ 641.819711][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.826039][T10359] do_syscall_64+0xcd/0x250 [ 641.832103][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.839569][T10359] } [ 641.842058][T10359] ... key at: [] __key.1+0x0/0x40 [ 641.849175][T10359] ... acquired at: [ 641.852964][T10359] _raw_spin_lock_bh+0x33/0x40 [ 641.857905][T10359] ppp_ioctl+0x44a/0x2590 [ 641.862411][T10359] __x64_sys_ioctl+0x18f/0x220 [ 641.867350][T10359] do_syscall_64+0xcd/0x250 [ 641.872031][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.878104][T10359] [ 641.880415][T10359] [ 641.880415][T10359] the dependencies between the lock to be acquired [ 641.880425][T10359] and SOFTIRQ-READ-irq-unsafe lock: [ 641.894346][T10359] -> (&pch->downl){+.+.}-{2:2} { [ 641.899306][T10359] HARDIRQ-ON-W at: [ 641.903278][T10359] lock_acquire+0x1b1/0x560 [ 641.909439][T10359] _raw_spin_lock+0x2e/0x40 [ 641.915603][T10359] ppp_input+0x104/0xbb0 [ 641.921497][T10359] pppoe_rcv_core+0x22c/0x320 [ 641.927823][T10359] __release_sock+0x35f/0x400 [ 641.934155][T10359] release_sock+0x5a/0x220 [ 641.940228][T10359] pppoe_sendmsg+0x5e6/0x770 [ 641.946468][T10359] ____sys_sendmsg+0xaaf/0xc90 [ 641.952907][T10359] ___sys_sendmsg+0x135/0x1e0 [ 641.959240][T10359] __sys_sendmmsg+0x1a1/0x450 [ 641.965571][T10359] __x64_sys_sendmmsg+0x9c/0x100 [ 641.972161][T10359] do_syscall_64+0xcd/0x250 [ 641.978318][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.985869][T10359] SOFTIRQ-ON-W at: [ 641.989998][T10359] lock_acquire+0x1b1/0x560 [ 641.996172][T10359] _raw_spin_lock+0x2e/0x40 [ 642.002334][T10359] ppp_input+0x104/0xbb0 [ 642.008318][T10359] pppoe_rcv_core+0x22c/0x320 [ 642.014644][T10359] __release_sock+0x35f/0x400 [ 642.020978][T10359] release_sock+0x5a/0x220 [ 642.027056][T10359] pppoe_sendmsg+0x5e6/0x770 [ 642.033293][T10359] ____sys_sendmsg+0xaaf/0xc90 [ 642.039723][T10359] ___sys_sendmsg+0x135/0x1e0 [ 642.046053][T10359] __sys_sendmmsg+0x1a1/0x450 [ 642.052387][T10359] __x64_sys_sendmmsg+0x9c/0x100 [ 642.058978][T10359] do_syscall_64+0xcd/0x250 [ 642.065129][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.072683][T10359] INITIAL USE at: [ 642.076571][T10359] lock_acquire+0x1b1/0x560 [ 642.082641][T10359] _raw_spin_lock+0x2e/0x40 [ 642.088717][T10359] ppp_input+0x104/0xbb0 [ 642.094611][T10359] pppoe_rcv_core+0x22c/0x320 [ 642.100849][T10359] __release_sock+0x35f/0x400 [ 642.107091][T10359] release_sock+0x5a/0x220 [ 642.113072][T10359] pppoe_sendmsg+0x5e6/0x770 [ 642.119230][T10359] ____sys_sendmsg+0xaaf/0xc90 [ 642.125551][T10359] ___sys_sendmsg+0x135/0x1e0 [ 642.131791][T10359] __sys_sendmmsg+0x1a1/0x450 [ 642.138041][T10359] __x64_sys_sendmmsg+0x9c/0x100 [ 642.144544][T10359] do_syscall_64+0xcd/0x250 [ 642.150610][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.158071][T10359] } [ 642.160557][T10359] ... key at: [] __key.11+0x0/0x40 [ 642.167755][T10359] ... acquired at: [ 642.171547][T10359] lock_acquire+0x1b1/0x560 [ 642.176235][T10359] _raw_spin_lock_bh+0x33/0x40 [ 642.181183][T10359] ppp_ioctl+0x1955/0x2590 [ 642.185780][T10359] __x64_sys_ioctl+0x18f/0x220 [ 642.190735][T10359] do_syscall_64+0xcd/0x250 [ 642.195449][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.201622][T10359] [ 642.204022][T10359] [ 642.204022][T10359] stack backtrace: [ 642.209917][T10359] CPU: 0 UID: 0 PID: 10359 Comm: syz.3.1175 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 642.220332][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 642.230393][T10359] Call Trace: [ 642.233667][T10359] [ 642.236592][T10359] dump_stack_lvl+0x116/0x1f0 [ 642.241281][T10359] check_irq_usage+0xe41/0x14a0 [ 642.246147][T10359] ? __pfx_check_irq_usage+0x10/0x10 [ 642.251454][T10359] ? hlock_conflict+0x58/0x200 [ 642.256223][T10359] ? __bfs+0x2fa/0x670 [ 642.260298][T10359] ? __pfx_hlock_conflict+0x10/0x10 [ 642.265509][T10359] ? lockdep_lock+0xc6/0x200 [ 642.270100][T10359] ? __pfx_lockdep_lock+0x10/0x10 [ 642.275131][T10359] ? __lock_acquire+0x2521/0x3ce0 [ 642.280172][T10359] __lock_acquire+0x2521/0x3ce0 [ 642.285034][T10359] ? __pfx___lock_acquire+0x10/0x10 [ 642.290245][T10359] ? rcu_is_watching+0x12/0xc0 [ 642.295017][T10359] ? trace_contention_end+0xea/0x140 [ 642.300299][T10359] lock_acquire+0x1b1/0x560 [ 642.304808][T10359] ? ppp_ioctl+0x1955/0x2590 [ 642.309406][T10359] ? __pfx_lock_acquire+0x10/0x10 [ 642.314436][T10359] ? __pfx_lock_release+0x10/0x10 [ 642.319471][T10359] ? do_raw_spin_lock+0x12d/0x2c0 [ 642.324497][T10359] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 642.329866][T10359] ? __radix_tree_lookup+0x21f/0x2c0 [ 642.335156][T10359] _raw_spin_lock_bh+0x33/0x40 [ 642.339925][T10359] ? ppp_ioctl+0x1955/0x2590 [ 642.344608][T10359] ppp_ioctl+0x1955/0x2590 [ 642.349032][T10359] ? __pfx_ppp_ioctl+0x10/0x10 [ 642.353802][T10359] ? selinux_file_ioctl+0x180/0x270 [ 642.359002][T10359] ? selinux_file_ioctl+0xb4/0x270 [ 642.364204][T10359] ? __pfx_ppp_ioctl+0x10/0x10 [ 642.369148][T10359] __x64_sys_ioctl+0x18f/0x220 [ 642.373916][T10359] do_syscall_64+0xcd/0x250 [ 642.378422][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.384345][T10359] RIP: 0033:0x7f662037df39 [ 642.388784][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.408485][T10359] RSP: 002b:00007f662119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.416904][T10359] RAX: ffffffffffffffda RBX: 00007f6620535f80 RCX: 00007f662037df39 [ 642.424891][T10359] RDX: 0000000020000300 RSI: 000000004004743a RDI: 0000000000000005 [ 642.432953][T10359] RBP: 00007f66203f0216 R08: 0000000000000000 R09: 0000000000000000 [ 642.440927][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.448896][T10359] R13: 0000000000000000 R14: 00007f6620535f80 R15: 00007ffdff9d3d18 [ 642.456880][T10359] [ 642.527392][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 642.919630][T10364] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 643.006323][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 643.022185][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.032335][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 643.042959][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 643.052092][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.060137][ T9] usb 5-1: Product: syz [ 643.064278][ T9] usb 5-1: Manufacturer: syz [ 643.068907][ T9] usb 5-1: SerialNumber: syz [ 643.074354][ T9] usb 5-1: config 0 descriptor?? [ 644.765999][ T9] usb 5-1: USB disconnect, device number 9