last executing test programs: 27.342037129s ago: executing program 4 (id=5): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x112}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.774938863s ago: executing program 4 (id=13): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x75845b31285c6e69) sendto$inet(r1, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), 0x8) 25.976113322s ago: executing program 4 (id=17): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 23.939752903s ago: executing program 4 (id=31): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) set_mempolicy(0x6, &(0x7f0000000980)=0x3, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23.575120412s ago: executing program 4 (id=36): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e316af0574446faa25bc2c489ddc5c11f17163ceb9d04712000000005000000000000", 0x32}], 0x1, 0x0, 0x0) 7.488892288s ago: executing program 3 (id=98): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000300)={0x20, 0x6, 0x37, {0x37, 0x2, "2d27392448550e95c3a8455a4daa306048cc5b537985b9ccb86210bceacbc3ea3805d5cb3d0e358837bc52aa25a4f4ed9744341092"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.107589542s ago: executing program 1 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3a, 0x2, [@TCA_PIE_BYTEMODE, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x0) 5.104527306s ago: executing program 3 (id=101): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x1) listen(r0, 0x0) listen(r0, 0x8) 4.913025532s ago: executing program 3 (id=102): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0xfff}, 0x8) 4.648198048s ago: executing program 1 (id=104): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x44}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.632109614s ago: executing program 3 (id=105): socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x29) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) creat(&(0x7f0000000180)='./file0\x00', 0x180) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x6b, "ec1424476ddccf68648c544844811f69a2d00e38f8b647b180159a721e8f03ce897526dd18586538d60d206f704d014bf50e6bca5cce55ceb4a7831bd3b0ec70fb696b0ecbedd98b517235cb95982eb4914c01c8231b44ae650b6a6137fc4ef094dfa538b509f988070c2e"}, &(0x7f0000000000)=0x73) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r4, 0x3}, 0x0) keyctl$set_timeout(0xf, r2, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x0, 0x0, r5, 0x0}]) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0x0, 0x4, 0xfff, 0x1002, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 4.310095157s ago: executing program 2 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x1}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x3}, 0x0, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 4.194973209s ago: executing program 1 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c40)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}]}, 0x28}}, 0x0) 4.120114886s ago: executing program 0 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff800000c0"]) 3.726622569s ago: executing program 1 (id=109): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0) 3.694178162s ago: executing program 2 (id=110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="85002000000000005464eb24", @ANYRES32, @ANYBLOB="179ff969404df9b3e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.440974675s ago: executing program 2 (id=111): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3.423841458s ago: executing program 0 (id=112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @string={0x0, 0x3, "dea1ad5e27d106e952a1d5ed74e58fa0efb756caf023c222dbe0d8eb236da204b60ea0581e7243d35689e36d67c866499de993fb195f87d34ce6027bbb53e8d5a525f9bbfc6cfa9fd46e8d6a5e31d0464f3f2d761a43a54600de9f59dcdb75578210216663f3b93be20c448ace9439d248b5a4072b36fdbdf6bc83031a5ec5975644387e13390e950777a0336413307412844ed244a9c68cf1ddaf107a046af7b0e234cd40382cc71ed148f9783e8c540e8bf78832c0a45e58195d11536f43aee38b35f898eacb807cf2f5eb3781e882645b272eface"}}, 0x0, 0x0, 0x0}, 0x0) 3.153133859s ago: executing program 2 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) 2.4368943s ago: executing program 2 (id=114): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x8}, 0x0}) 2.093380384s ago: executing program 1 (id=115): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277f0cffeb"}) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xfffb, 0x0, 0x0, 0x82f3, 0x0, "0f2c40d19de1b71e"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7f) 1.510195075s ago: executing program 0 (id=116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) 1.173475965s ago: executing program 0 (id=117): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 723.052729ms ago: executing program 3 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x48}}, 0x0) 681.713893ms ago: executing program 1 (id=119): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, 0x0, 0x0, 0x0}, 0x0) 512.009315ms ago: executing program 3 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 341.81559ms ago: executing program 0 (id=121): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 3.46231ms ago: executing program 0 (id=122): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) 0s ago: executing program 2 (id=123): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000240)=""/84, 0x54) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 72.041225][ T29] audit: type=1400 audit(1728017314.056:88): avc: denied { mounton } for pid=5209 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.047794][ T5209] cgroup: Unknown subsys name 'net' [ 72.069374][ T29] audit: type=1400 audit(1728017314.056:89): avc: denied { mount } for pid=5209 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.095434][ T29] audit: type=1400 audit(1728017314.106:90): avc: denied { unmount } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.310667][ T5209] cgroup: Unknown subsys name 'cpuset' [ 72.319620][ T5209] cgroup: Unknown subsys name 'rlimit' [ 72.514630][ T29] audit: type=1400 audit(1728017314.526:91): avc: denied { setattr } for pid=5209 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.550378][ T29] audit: type=1400 audit(1728017314.526:92): avc: denied { create } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.586750][ T29] audit: type=1400 audit(1728017314.526:93): avc: denied { write } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.607342][ T29] audit: type=1400 audit(1728017314.536:94): avc: denied { read } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.628497][ T29] audit: type=1400 audit(1728017314.546:95): avc: denied { mounton } for pid=5209 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 72.653693][ T29] audit: type=1400 audit(1728017314.546:96): avc: denied { mount } for pid=5209 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.677611][ T29] audit: type=1400 audit(1728017314.576:97): avc: denied { read } for pid=4887 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 72.691690][ T5212] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 74.114473][ T5209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.809770][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.816259][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.730786][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 77.730810][ T29] audit: type=1400 audit(1728017319.746:103): avc: denied { create } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.802556][ T29] audit: type=1400 audit(1728017319.776:104): avc: denied { read write } for pid=5221 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.841688][ T29] audit: type=1400 audit(1728017319.776:105): avc: denied { open } for pid=5221 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.906521][ T29] audit: type=1400 audit(1728017319.796:106): avc: denied { ioctl } for pid=5220 comm="syz-executor" path="socket:[3482]" dev="sockfs" ino=3482 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.919392][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.958112][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.967126][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.968526][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.974969][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.982714][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.998710][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.006396][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.007464][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.014288][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.029200][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.039686][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.039717][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.040142][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.049181][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.055945][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.062783][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.070314][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.076783][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.083909][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.092286][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.111490][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.119468][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.124871][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.127089][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.136044][ T29] audit: type=1400 audit(1728017320.116:107): avc: denied { read } for pid=5230 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.147936][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.161826][ T29] audit: type=1400 audit(1728017320.116:108): avc: denied { open } for pid=5230 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.199170][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.206846][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.215626][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.223071][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.226816][ T29] audit: type=1400 audit(1728017320.116:109): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.576797][ T29] audit: type=1400 audit(1728017320.586:110): avc: denied { module_request } for pid=5237 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.650534][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 78.817771][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 78.850807][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 78.939529][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.946925][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.954384][ T5237] bridge_slave_0: entered allmulticast mode [ 78.965189][ T5237] bridge_slave_0: entered promiscuous mode [ 78.973223][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 79.013114][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.020423][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.028294][ T5237] bridge_slave_1: entered allmulticast mode [ 79.035213][ T5237] bridge_slave_1: entered promiscuous mode [ 79.043155][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 79.149924][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.174503][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.182762][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.190134][ T5225] bridge_slave_0: entered allmulticast mode [ 79.197660][ T5225] bridge_slave_0: entered promiscuous mode [ 79.204868][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.212335][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.220202][ T5220] bridge_slave_0: entered allmulticast mode [ 79.227352][ T5220] bridge_slave_0: entered promiscuous mode [ 79.245101][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.274701][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.282153][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.289886][ T5225] bridge_slave_1: entered allmulticast mode [ 79.296847][ T5225] bridge_slave_1: entered promiscuous mode [ 79.314181][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.321835][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.329225][ T5220] bridge_slave_1: entered allmulticast mode [ 79.336501][ T5220] bridge_slave_1: entered promiscuous mode [ 79.437460][ T5237] team0: Port device team_slave_0 added [ 79.443797][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.451376][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.459455][ T5230] bridge_slave_0: entered allmulticast mode [ 79.466310][ T5230] bridge_slave_0: entered promiscuous mode [ 79.476908][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.488492][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.500730][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.530800][ T5237] team0: Port device team_slave_1 added [ 79.555324][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.563018][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.570633][ T5230] bridge_slave_1: entered allmulticast mode [ 79.578923][ T5230] bridge_slave_1: entered promiscuous mode [ 79.605525][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.622747][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.630048][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.638397][ T5221] bridge_slave_0: entered allmulticast mode [ 79.645288][ T5221] bridge_slave_0: entered promiscuous mode [ 79.654105][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.661433][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.687699][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.711806][ T5220] team0: Port device team_slave_0 added [ 79.720968][ T5220] team0: Port device team_slave_1 added [ 79.744869][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.752479][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.759963][ T5221] bridge_slave_1: entered allmulticast mode [ 79.767535][ T5221] bridge_slave_1: entered promiscuous mode [ 79.784447][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.792394][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.818670][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.848888][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.876089][ T5225] team0: Port device team_slave_0 added [ 79.884584][ T5225] team0: Port device team_slave_1 added [ 79.902806][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.914499][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.979442][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.011985][ T5230] team0: Port device team_slave_0 added [ 80.022970][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.030310][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.056639][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.069116][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.076115][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.102490][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.128744][ T5237] hsr_slave_0: entered promiscuous mode [ 80.135699][ T5237] hsr_slave_1: entered promiscuous mode [ 80.159503][ T5230] team0: Port device team_slave_1 added [ 80.167660][ T55] Bluetooth: hci3: command tx timeout [ 80.174701][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.182079][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.208311][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.221355][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.229236][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.247549][ T55] Bluetooth: hci1: command tx timeout [ 80.255562][ T5239] Bluetooth: hci4: command tx timeout [ 80.267484][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.291650][ T5221] team0: Port device team_slave_0 added [ 80.300259][ T5221] team0: Port device team_slave_1 added [ 80.327275][ T5239] Bluetooth: hci2: command tx timeout [ 80.333131][ T55] Bluetooth: hci0: command tx timeout [ 80.369005][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.375997][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.402575][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.415690][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.422925][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.449059][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.475965][ T5220] hsr_slave_0: entered promiscuous mode [ 80.482730][ T5220] hsr_slave_1: entered promiscuous mode [ 80.489087][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.497096][ T5220] Cannot create hsr debugfs directory [ 80.543132][ T5225] hsr_slave_0: entered promiscuous mode [ 80.549654][ T5225] hsr_slave_1: entered promiscuous mode [ 80.555937][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.563763][ T5225] Cannot create hsr debugfs directory [ 80.575117][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.582617][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.610139][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.622821][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.629924][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.655970][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.738027][ T5230] hsr_slave_0: entered promiscuous mode [ 80.746093][ T5230] hsr_slave_1: entered promiscuous mode [ 80.752479][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.760168][ T5230] Cannot create hsr debugfs directory [ 80.879730][ T5221] hsr_slave_0: entered promiscuous mode [ 80.886199][ T5221] hsr_slave_1: entered promiscuous mode [ 80.893083][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.906659][ T5221] Cannot create hsr debugfs directory [ 81.196039][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.208171][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.218810][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.229316][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.297019][ T5220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.309634][ T5220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.324813][ T5220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.337451][ T5220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.415588][ T5230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.443487][ T5230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.454646][ T5230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.464535][ T5230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.589742][ T5225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.604431][ T5225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.630717][ T5225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.645867][ T5225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.685361][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.718279][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.773314][ T5221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.793856][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.804806][ T5221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.815489][ T5221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.831821][ T5221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.854272][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.861643][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.881654][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.904961][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.912141][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.926027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.933219][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.973035][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980196][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.009157][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.127139][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.181943][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.189166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.208638][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.228672][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.235842][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.247756][ T55] Bluetooth: hci3: command tx timeout [ 82.282503][ T29] audit: type=1400 audit(1728017324.296:111): avc: denied { sys_module } for pid=5237 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.314241][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.331064][ T55] Bluetooth: hci1: command tx timeout [ 82.336555][ T55] Bluetooth: hci4: command tx timeout [ 82.395103][ T5230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.407880][ T5230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.420977][ T55] Bluetooth: hci0: command tx timeout [ 82.421287][ T5239] Bluetooth: hci2: command tx timeout [ 82.439553][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.474041][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.510770][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.518000][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.591075][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.598272][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.625928][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.633209][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.644335][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.651555][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.759249][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.830624][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.919839][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.010782][ T5237] veth0_vlan: entered promiscuous mode [ 83.102781][ T5230] veth0_vlan: entered promiscuous mode [ 83.120971][ T5237] veth1_vlan: entered promiscuous mode [ 83.154079][ T5220] veth0_vlan: entered promiscuous mode [ 83.173554][ T5230] veth1_vlan: entered promiscuous mode [ 83.203715][ T5220] veth1_vlan: entered promiscuous mode [ 83.248813][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.305116][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.322145][ T5237] veth0_macvtap: entered promiscuous mode [ 83.343412][ T5230] veth0_macvtap: entered promiscuous mode [ 83.356302][ T5237] veth1_macvtap: entered promiscuous mode [ 83.381568][ T5230] veth1_macvtap: entered promiscuous mode [ 83.402970][ T5220] veth0_macvtap: entered promiscuous mode [ 83.448828][ T5220] veth1_macvtap: entered promiscuous mode [ 83.465622][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.488670][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.510526][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.522867][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.553851][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.565915][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.584094][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.595113][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.608599][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.629353][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.645639][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.658195][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.669541][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.686396][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.698639][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.708692][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.724761][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.736840][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.752527][ T5230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.761970][ T5230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.772430][ T5230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.781428][ T5230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.799432][ T5220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.808561][ T5220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.818528][ T5220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.827572][ T5220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.849985][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.859066][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.867933][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.876986][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.954452][ T5221] veth0_vlan: entered promiscuous mode [ 83.998272][ T5221] veth1_vlan: entered promiscuous mode [ 84.064474][ T5225] veth0_vlan: entered promiscuous mode [ 84.130882][ T5225] veth1_vlan: entered promiscuous mode [ 84.141907][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.153567][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.179525][ T5221] veth0_macvtap: entered promiscuous mode [ 84.240370][ T5221] veth1_macvtap: entered promiscuous mode [ 84.250738][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.267551][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.290657][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.301077][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.327902][ T5239] Bluetooth: hci3: command tx timeout [ 84.335049][ T5225] veth0_macvtap: entered promiscuous mode [ 84.344273][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.354936][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.365718][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.381345][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.391403][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.402237][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.406891][ T5239] Bluetooth: hci1: command tx timeout [ 84.412817][ T55] Bluetooth: hci4: command tx timeout [ 84.419545][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.453069][ T5225] veth1_macvtap: entered promiscuous mode [ 84.463320][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.475035][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.485214][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.489489][ T55] Bluetooth: hci2: command tx timeout [ 84.501218][ T5239] Bluetooth: hci0: command tx timeout [ 84.506076][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.516906][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.528433][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.540706][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.570441][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.576387][ T5221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.578863][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.594572][ T5221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.604962][ T5221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.614021][ T5221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.652392][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.662464][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.671123][ T29] audit: type=1400 audit(1728017326.676:112): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/root/syzkaller.pvbD72/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.703886][ T4500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.740653][ T4500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.743647][ T29] audit: type=1400 audit(1728017326.696:113): avc: denied { mount } for pid=5220 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.779108][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.790386][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.801175][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.813969][ T29] audit: type=1400 audit(1728017326.696:114): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/root/syzkaller.pvbD72/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.842705][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.853167][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.864205][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.874143][ T29] audit: type=1400 audit(1728017326.696:115): avc: denied { mount } for pid=5220 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.898765][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.909901][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.911730][ T5220] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.920366][ T29] audit: type=1400 audit(1728017326.696:116): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/root/syzkaller.pvbD72/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.968327][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.981720][ T29] audit: type=1400 audit(1728017326.706:117): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/root/syzkaller.pvbD72/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 85.011639][ T29] audit: type=1400 audit(1728017326.706:118): avc: denied { unmount } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.032084][ T29] audit: type=1400 audit(1728017326.736:119): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.035080][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.068975][ T29] audit: type=1400 audit(1728017326.736:120): avc: denied { mount } for pid=5220 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.079130][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.103453][ T29] audit: type=1400 audit(1728017326.736:121): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.108931][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.139258][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.149476][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.160052][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.170069][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.181508][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.193650][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.221575][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.230852][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.242191][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.251240][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.466980][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.491108][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.533296][ T5313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.615309][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.626671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.740545][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.776670][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.877686][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.885719][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.943963][ T5320] io-wq is not configured for unbound workers [ 86.407176][ T55] Bluetooth: hci3: command tx timeout [ 86.487952][ T55] Bluetooth: hci1: command tx timeout [ 86.497753][ T55] Bluetooth: hci4: command tx timeout [ 86.566922][ T55] Bluetooth: hci2: command tx timeout [ 86.572420][ T55] Bluetooth: hci0: command tx timeout [ 86.788263][ T5336] Zero length message leads to an empty skb [ 87.297011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.367892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.399523][ T5345] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 87.447251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 87.540822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.561281][ T5349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 87.616841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.745501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.837067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.887003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.041311][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.067213][ T5361] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 88.098218][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.105693][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.113923][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.121639][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.129183][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.136647][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.144076][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.151612][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159603][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.168085][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.175513][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.183164][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.190645][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.198125][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.205537][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.213129][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.220642][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.228159][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.235586][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.243044][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.251656][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.260558][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.268551][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.275977][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.283450][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.290948][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.298973][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.306429][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.313993][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.322513][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.330525][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.376124][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 88.460836][ T5361] team0: Port device netdevsim0 added [ 88.497067][ T5274] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.517231][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.675111][ T5274] usb 5-1: config 0 has no interfaces? [ 88.681613][ T5274] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 88.735970][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.789190][ T5274] usb 5-1: config 0 descriptor?? [ 88.848705][ T5366] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET) [ 89.070536][ T938] usb 5-1: USB disconnect, device number 2 [ 89.432635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.441300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.079591][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 90.079615][ T29] audit: type=1400 audit(1728017332.096:171): avc: denied { create } for pid=5393 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.079702][ T5394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.169414][ T29] audit: type=1400 audit(1728017332.186:172): avc: denied { ioctl } for pid=5393 comm="syz.1.33" path="socket:[8381]" dev="sockfs" ino=8381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.300027][ T29] audit: type=1400 audit(1728017332.316:173): avc: denied { relabelfrom } for pid=5398 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.415780][ T29] audit: type=1400 audit(1728017332.316:174): avc: denied { relabelto } for pid=5398 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.505482][ T29] audit: type=1400 audit(1728017332.406:175): avc: denied { setopt } for pid=5400 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.579877][ T29] audit: type=1400 audit(1728017332.496:176): avc: denied { create } for pid=5402 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.636815][ T29] audit: type=1400 audit(1728017332.546:177): avc: denied { connect } for pid=5402 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.723935][ T29] audit: type=1400 audit(1728017332.556:178): avc: denied { write } for pid=5402 comm="syz.1.38" path="socket:[8392]" dev="sockfs" ino=8392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.470992][ T5273] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.493976][ T5423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.517693][ T5423] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 91.666779][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 91.676918][ T5273] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 91.704085][ T5273] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 91.735559][ T29] audit: type=1400 audit(1728017333.746:179): avc: denied { create } for pid=5424 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.764055][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.804348][ T5273] usb 1-1: Product: syz [ 91.816635][ T5273] usb 1-1: Manufacturer: syz [ 91.825390][ T29] audit: type=1400 audit(1728017333.796:180): avc: denied { bind } for pid=5424 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.868547][ T5273] usb 1-1: SerialNumber: syz [ 91.897928][ T5273] usb 1-1: config 0 descriptor?? [ 92.198280][ T9] cfg80211: failed to load regulatory.db [ 92.214725][ T5431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 92.262014][ T5273] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 93.100273][ T5273] gspca_zc3xx: reg_w_i err -71 [ 93.516940][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.562241][ T5274] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.691968][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.712054][ T5273] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 93.720628][ T5273] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 93.730338][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.748439][ T5274] usb 2-1: Using ep0 maxpacket: 8 [ 93.758677][ T5274] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 93.769920][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.783300][ T5273] usb 1-1: USB disconnect, device number 2 [ 93.806690][ T5274] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 93.815300][ T5274] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 93.836667][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.844840][ T8] usb 4-1: SerialNumber: syz [ 93.882179][ T5274] usb 2-1: config 250 has no interface number 0 [ 93.907123][ T5274] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 93.925998][ T5443] syz.2.56[5443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.926123][ T5443] syz.2.56[5443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.936657][ T5274] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 93.979192][ T5443] syz.2.56[5443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.988046][ T5274] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.051801][ T5274] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.069700][ T5274] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 94.111214][ T8] usb 4-1: 0:2 : does not exist [ 94.120269][ T5274] usb 2-1: config 250 interface 228 has no altsetting 0 [ 94.133837][ T5274] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 94.148314][ T8] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 94.156967][ T5445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.164637][ T5445] IPv6: NLM_F_CREATE should be set when creating new route [ 94.172073][ T5445] IPv6: NLM_F_CREATE should be set when creating new route [ 94.180001][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 94.199396][ T5274] usb 2-1: Product: syz [ 94.205347][ T5274] usb 2-1: SerialNumber: syz [ 94.241650][ T5274] hub 2-1:250.228: bad descriptor, ignoring hub [ 94.249513][ T8] usb 4-1: USB disconnect, device number 2 [ 94.261543][ T5274] hub 2-1:250.228: probe with driver hub failed with error -5 [ 94.277966][ T5445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.318928][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.492762][ T5274] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 94.602187][ T5451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 94.658990][ T5451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 94.776895][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.959077][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.999840][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.053136][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.114285][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.162539][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.226048][ T8] usb 1-1: config 0 descriptor?? [ 95.734639][ T8] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 95.790974][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 95.813223][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 95.813247][ T29] audit: type=1400 audit(1728017337.826:191): avc: denied { getopt } for pid=5463 comm="syz.2.63" lport=59254 faddr=::ffff:172.30.0.3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 96.986727][ T5272] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.167211][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 97.186158][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.229559][ T5272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.270557][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.318268][ T5272] usb 3-1: config 0 descriptor?? [ 98.202044][ T5274] usb 2-1: USB disconnect, device number 2 [ 98.227175][ T8] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.260539][ T5272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 98.301242][ T5274] usblp0: removed [ 98.387496][ T5272] usb 3-1: USB disconnect, device number 2 [ 98.425787][ T8] usb 1-1: USB disconnect, device number 3 [ 98.479116][ T5272] iowarrior 3-1:0.0: I/O-Warror #2 now disconnected [ 99.999390][ T29] audit: type=1400 audit(1728017341.996:192): avc: denied { wake_alarm } for pid=5489 comm="syz.1.72" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.338417][ T29] audit: type=1400 audit(1728017342.356:193): avc: denied { create } for pid=5504 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.397092][ T29] audit: type=1400 audit(1728017342.386:194): avc: denied { write } for pid=5504 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.456828][ T5306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.489420][ T29] audit: type=1400 audit(1728017342.446:195): avc: denied { shutdown } for pid=5506 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.566744][ T29] audit: type=1400 audit(1728017342.466:196): avc: denied { getopt } for pid=5506 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.657725][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.690999][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.710254][ T5306] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 100.736812][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.776480][ T5306] usb 4-1: config 0 descriptor?? [ 100.797396][ T29] audit: type=1400 audit(1728017342.816:197): avc: denied { write } for pid=5512 comm="syz.0.83" name="001" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.860430][ T938] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.966451][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.986251][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.005269][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.023819][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.036861][ T938] usb 2-1: Using ep0 maxpacket: 16 [ 101.047571][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.064981][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.081653][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 101.083772][ T938] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 101.099549][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.100470][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.125392][ T938] usb 2-1: config 0 descriptor?? [ 101.159217][ T29] audit: type=1400 audit(1728017343.166:198): avc: denied { mounton } for pid=5516 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 101.189070][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.252093][ T5306] nti 0003:0757:0A00.0003: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0 [ 101.290750][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.339347][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.382484][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.494543][ T5306] usb 4-1: USB disconnect, device number 3 [ 101.494964][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.511711][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 101.528938][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 101.538995][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.550318][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.562136][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.580080][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.600016][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.610501][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.650639][ T5516] chnl_net:caif_netlink_parms(): no params data found [ 101.801341][ T938] razer 0003:1532:011B.0004: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 101.881826][ T8] usb 3-1: usb_control_msg returned -32 [ 101.887748][ T8] usbtmc 3-1:16.0: can't read capabilities [ 101.915621][ T8] usb 3-1: USB disconnect, device number 3 [ 101.983638][ T29] audit: type=1400 audit(1728017343.996:199): avc: denied { create } for pid=5526 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.069856][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.078005][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.085888][ T5516] bridge_slave_0: entered allmulticast mode [ 102.094430][ T29] audit: type=1400 audit(1728017344.026:200): avc: denied { connect } for pid=5526 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.119464][ T5516] bridge_slave_0: entered promiscuous mode [ 102.122755][ T938] usb 2-1: USB disconnect, device number 3 [ 102.127206][ T29] audit: type=1400 audit(1728017344.056:201): avc: denied { write } for pid=5526 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.224428][ T35] bridge_slave_1: left allmulticast mode [ 102.232346][ T35] bridge_slave_1: left promiscuous mode [ 102.240417][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.259902][ T29] audit: type=1400 audit(1728017344.056:202): avc: denied { read } for pid=5526 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.291274][ T29] audit: type=1400 audit(1728017344.296:203): avc: denied { read write } for pid=5529 comm="syz.0.87" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.314983][ T29] audit: type=1400 audit(1728017344.296:204): avc: denied { open } for pid=5529 comm="syz.0.87" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.339471][ T29] audit: type=1400 audit(1728017344.326:205): avc: denied { create } for pid=5530 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.387629][ T35] bridge_slave_0: left allmulticast mode [ 102.597438][ T29] audit: type=1400 audit(1728017344.596:206): avc: denied { create } for pid=5530 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.713490][ T5537] Cannot find add_set index 0 as target [ 102.728422][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'. [ 103.415454][ T35] bridge_slave_0: left promiscuous mode [ 103.446742][ T29] audit: type=1400 audit(1728017344.596:207): avc: denied { connect } for pid=5530 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 103.467087][ T55] Bluetooth: hci2: command tx timeout [ 103.469537][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.212893][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.227940][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.243349][ T35] bond0 (unregistering): Released all slaves [ 104.274401][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.287640][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.294876][ T5516] bridge_slave_1: entered allmulticast mode [ 104.327472][ T5516] bridge_slave_1: entered promiscuous mode [ 104.572273][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.626350][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.780541][ T5546] warning: `syz.0.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.165194][ T5516] team0: Port device team_slave_0 added [ 105.330357][ T5516] team0: Port device team_slave_1 added [ 105.492967][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.520151][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.567988][ T5239] Bluetooth: hci2: command tx timeout [ 105.576254][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.640939][ T35] hsr_slave_0: left promiscuous mode [ 105.657384][ T35] hsr_slave_1: left promiscuous mode [ 105.690676][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.700030][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.713115][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.732333][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.866903][ T35] veth1_macvtap: left promiscuous mode [ 105.952519][ T35] veth0_macvtap: left promiscuous mode [ 105.960871][ T35] veth1_vlan: left promiscuous mode [ 105.968830][ T35] veth0_vlan: left promiscuous mode [ 106.443527][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 106.443551][ T29] audit: type=1400 audit(1728017348.456:225): avc: denied { read } for pid=5582 comm="syz.1.99" name="usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.521375][ T29] audit: type=1400 audit(1728017348.456:226): avc: denied { write } for pid=5562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.623910][ T29] audit: type=1400 audit(1728017348.456:227): avc: denied { add_name } for pid=5562 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.745071][ T5274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.763781][ T29] audit: type=1400 audit(1728017348.456:228): avc: denied { create } for pid=5562 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.806056][ T29] audit: type=1400 audit(1728017348.456:229): avc: denied { write } for pid=5562 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.836652][ T29] audit: type=1400 audit(1728017348.456:230): avc: denied { append } for pid=5562 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.862415][ T29] audit: type=1400 audit(1728017348.486:231): avc: denied { open } for pid=5582 comm="syz.1.99" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.887084][ T29] audit: type=1400 audit(1728017348.516:232): avc: denied { setopt } for pid=5573 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.909576][ T29] audit: type=1400 audit(1728017348.726:233): avc: denied { remove_name } for pid=5586 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.933906][ T29] audit: type=1400 audit(1728017348.726:234): avc: denied { unlink } for pid=5586 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.986838][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 107.010625][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.042228][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.057671][ T5274] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 107.069966][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.096367][ T5274] usb 4-1: config 0 descriptor?? [ 107.542251][ T35] team0 (unregistering): Port device team_slave_1 removed [ 107.576550][ T5274] logitech 0003:046D:C29C.0005: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 107.606983][ T5239] Bluetooth: hci2: command 0x040f tx timeout [ 107.666922][ T35] team0 (unregistering): Port device team_slave_0 removed [ 107.977419][ T5274] logitech 0003:046D:C29C.0005: no inputs found [ 108.038290][ T5274] usb 4-1: USB disconnect, device number 4 [ 108.318971][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.326198][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.359774][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.377611][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 108.801308][ T5565] team0 (unregistering): Port device team_slave_0 removed [ 108.834673][ T5565] team0 (unregistering): Port device team_slave_1 removed [ 108.922502][ T5589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.100'. [ 109.243691][ T5516] hsr_slave_0: entered promiscuous mode [ 109.276464][ T5516] hsr_slave_1: entered promiscuous mode [ 109.302957][ T5516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.311721][ T5516] Cannot create hsr debugfs directory [ 109.331771][ T5598] netlink: 19 bytes leftover after parsing attributes in process `syz.1.104'. [ 109.696865][ T55] Bluetooth: hci2: command 0x040f tx timeout [ 109.757955][ T5608] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 110.366845][ T938] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.528640][ T938] usb 2-1: Using ep0 maxpacket: 16 [ 110.545825][ T938] usb 2-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 110.564049][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.586796][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 110.605214][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 110.634093][ T938] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.659284][ T938] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 110.659894][ T5272] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.678926][ T938] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 110.689411][ T938] usb 2-1: Manufacturer: syz [ 110.787431][ T938] usb 2-1: config 0 descriptor?? [ 110.800341][ T5621] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.879775][ T5272] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 110.919218][ T5272] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 110.965103][ T5272] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.995307][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.111663][ T5516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.186805][ T938] rc_core: IR keymap rc-hauppauge not found [ 111.193901][ T938] Registered IR keymap rc-empty [ 111.199179][ T5516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.213638][ T5516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.217435][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.237307][ T5516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.262612][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.320614][ T938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 111.321825][ T5272] usb 1-1: string descriptor 0 read error: -22 [ 111.415551][ T938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 111.493455][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 111.493474][ T29] audit: type=1400 audit(1728017353.506:239): avc: denied { read } for pid=4658 comm="acpid" name="event4" dev="devtmpfs" ino=2366 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.559223][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.602110][ T5274] usb 1-1: USB disconnect, device number 4 [ 111.619438][ T29] audit: type=1400 audit(1728017353.506:240): avc: denied { open } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2366 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.627341][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.667662][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.704030][ T5516] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.712212][ T5272] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.729001][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.730234][ T29] audit: type=1400 audit(1728017353.506:241): avc: denied { ioctl } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2366 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.767031][ T55] Bluetooth: hci2: command 0x040f tx timeout [ 111.797106][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.802691][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.810933][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.828623][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.857166][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.887929][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.912758][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.912838][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.921179][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 111.925145][ T5272] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 111.925179][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.925205][ T5272] usb 3-1: Product: syz [ 111.925224][ T5272] usb 3-1: Manufacturer: syz [ 111.925243][ T5272] usb 3-1: SerialNumber: syz [ 111.928193][ T5272] usb 3-1: config 0 descriptor?? [ 111.931151][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.932616][ T5272] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 111.948499][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.973205][ T938] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.988576][ T938] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 111.988617][ T938] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 111.998013][ T938] usb 2-1: USB disconnect, device number 4 [ 112.456424][ T29] audit: type=1400 audit(1728017354.456:242): avc: denied { execute } for pid=5657 comm="syz.0.116" path="/22/cgroup.events" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.462512][ T29] audit: type=1400 audit(1728017354.476:243): avc: denied { getopt } for pid=5657 comm="syz.0.116" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.767590][ T29] audit: type=1400 audit(1728017354.756:244): avc: denied { read } for pid=5664 comm="syz.0.117" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.767698][ T29] audit: type=1400 audit(1728017354.776:245): avc: denied { open } for pid=5664 comm="syz.0.117" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.779482][ T29] audit: type=1400 audit(1728017354.796:246): avc: denied { ioctl } for pid=5664 comm="syz.0.117" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.846772][ T5272] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 112.993025][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.005628][ T5272] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 113.101765][ T5272] usb 3-1: USB disconnect, device number 4 [ 113.141486][ T29] audit: type=1400 audit(1728017354.906:247): avc: denied { map } for pid=5664 comm="syz.0.117" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.426698][ T5305] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.599816][ T29] audit: type=1400 audit(1728017355.616:248): avc: denied { write } for pid=5677 comm="syz.3.120" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.679344][ T24] sched: DL replenish lagged too much [ 137.145493][ T5272] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.012937][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.031359][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.700044][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.715675][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 242.376537][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 242.383582][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5673/1:b..l P5678/1:b..l [ 242.393183][ C1] rcu: (detected by 1, t=10503 jiffies, g=13153, q=817690 ncpus=2) [ 242.401227][ C1] task:dhcpcd-run-hook state:R running task stack:25392 pid:5678 tgid:5678 ppid:4887 flags:0x00004002 [ 242.414238][ C1] Call Trace: [ 242.417570][ C1] [ 242.420551][ C1] __schedule+0xef5/0x5750 [ 242.425044][ C1] ? __kernel_text_address+0xd/0x40 [ 242.430303][ C1] ? unwind_get_return_address+0x59/0xa0 [ 242.436010][ C1] ? __pfx_mark_lock+0x10/0x10 [ 242.440840][ C1] ? __pfx___schedule+0x10/0x10 [ 242.445752][ C1] ? stack_trace_save+0x95/0xd0 [ 242.450670][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 242.456129][ C1] ? stack_depot_save_flags+0x28/0x8f0 [ 242.461675][ C1] ? mark_held_locks+0x9f/0xe0 [ 242.466503][ C1] preempt_schedule_irq+0x51/0x90 [ 242.471587][ C1] irqentry_exit+0x36/0x90 [ 242.476060][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.482109][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 242.488305][ C1] Code: cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 c4 52 76 7e <65> 8b 05 c5 52 76 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 [ 242.507995][ C1] RSP: 0018:ffffc9000d187ad0 EFLAGS: 00000206 [ 242.514123][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff81f8c260 [ 242.522150][ C1] RDX: ffff888032388000 RSI: 0000000000000000 RDI: 0000000000000005 [ 242.530173][ C1] RBP: ffff88801e26e710 R08: 0000000000000005 R09: 0000000000000000 [ 242.538199][ C1] R10: 0000000006160342 R11: 0000000000000000 R12: 0000000006160342 [ 242.546255][ C1] R13: 0000000000000008 R14: 0000000000000003 R15: ffff88801e26e718 [ 242.554290][ C1] ? __reset_page_owner+0xe0/0x400 [ 242.559487][ C1] __reset_page_owner+0xed/0x400 [ 242.564489][ C1] free_unref_page+0x5f4/0xdc0 [ 242.569414][ C1] __put_partials+0x14c/0x170 [ 242.574169][ C1] qlist_free_all+0x4e/0x120 [ 242.578905][ C1] kasan_quarantine_reduce+0x192/0x1e0 [ 242.584440][ C1] __kasan_slab_alloc+0x69/0x90 [ 242.589363][ C1] kmem_cache_alloc_noprof+0x121/0x2f0 [ 242.594890][ C1] ? security_file_alloc+0x34/0x2b0 [ 242.600141][ C1] ? rcu_is_watching+0x12/0xc0 [ 242.605027][ C1] security_file_alloc+0x34/0x2b0 [ 242.610135][ C1] init_file+0x93/0x230 [ 242.614356][ C1] alloc_empty_file+0x91/0x1e0 [ 242.619184][ C1] alloc_file_pseudo+0x147/0x210 [ 242.624183][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 242.629716][ C1] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 242.635768][ C1] create_pipe_files+0x364/0x850 [ 242.640759][ C1] ? __pfx_lock_release+0x10/0x10 [ 242.645839][ C1] do_pipe2+0xb0/0x1d0 [ 242.649969][ C1] ? __pfx_do_pipe2+0x10/0x10 [ 242.654707][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 242.660058][ C1] __x64_sys_pipe2+0x54/0x80 [ 242.664705][ C1] do_syscall_64+0xcd/0x250 [ 242.669364][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.675315][ C1] RIP: 0033:0x7f4daed2d19a [ 242.679796][ C1] RSP: 002b:00007fffb41979a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 242.688268][ C1] RAX: ffffffffffffffda RBX: 0000000000000084 RCX: 00007f4daed2d19a [ 242.696291][ C1] RDX: 0000561b38245b78 RSI: 0000000000000000 RDI: 00007fffb4197a20 [ 242.704308][ C1] RBP: 0000561b38243510 R08: 0000561b38245b78 R09: d3f0d0a2a836999e [ 242.712322][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000084 [ 242.720339][ C1] R13: 0000000000000000 R14: 0000561b38243f91 R15: 0000000000000124 [ 242.728375][ C1] [ 242.731430][ C1] task:syz.1.119 state:R running task stack:27824 pid:5673 tgid:5672 ppid:5221 flags:0x00004004 [ 242.743282][ C1] Call Trace: [ 242.746601][ C1] [ 242.749580][ C1] __schedule+0xef5/0x5750 [ 242.754103][ C1] ? hlock_class+0x4e/0x130 [ 242.758675][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 242.763931][ C1] ? __pfx_mark_lock+0x10/0x10 [ 242.768757][ C1] ? __pfx___schedule+0x10/0x10 [ 242.773671][ C1] ? find_held_lock+0x2d/0x110 [ 242.778600][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 242.784032][ C1] preempt_schedule_common+0x44/0xc0 [ 242.789379][ C1] preempt_schedule_thunk+0x1a/0x30 [ 242.794633][ C1] _raw_spin_unlock+0x3e/0x50 [ 242.799361][ C1] unmap_page_range+0xb01/0x3cf0 [ 242.804373][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 242.809798][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 242.814803][ C1] ? uprobe_munmap+0x20/0x5c0 [ 242.819556][ C1] unmap_single_vma+0x194/0x2b0 [ 242.824467][ C1] unmap_vmas+0x22f/0x490 [ 242.828854][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 242.833780][ C1] ? __pfx_lock_release+0x10/0x10 [ 242.838863][ C1] ? lock_acquire+0x2f/0xb0 [ 242.843413][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 242.848506][ C1] exit_mmap+0x1c6/0xb30 [ 242.852793][ C1] ? trace_contention_end+0xea/0x140 [ 242.858120][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 242.862953][ C1] ? __mutex_lock+0x1a6/0x9c0 [ 242.867742][ C1] __mmput+0x12a/0x480 [ 242.871944][ C1] mmput+0x62/0x70 [ 242.875715][ C1] do_exit+0x9bf/0x2d70 [ 242.879932][ C1] ? get_signal+0x8f2/0x2770 [ 242.884582][ C1] ? __pfx_do_exit+0x10/0x10 [ 242.889234][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 242.894316][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.899753][ C1] do_group_exit+0xd3/0x2a0 [ 242.904326][ C1] get_signal+0x25fb/0x2770 [ 242.908979][ C1] ? down_interruptible+0x66/0xa0 [ 242.914177][ C1] ? __pfx_get_signal+0x10/0x10 [ 242.919088][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.924979][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.930332][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 242.935951][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 242.942189][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 242.947367][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 242.953061][ C1] do_syscall_64+0xda/0x250 [ 242.957632][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.963586][ C1] RIP: 0033:0x7eff1ad7dbfb [ 242.968045][ C1] RSP: 002b:00007eff1bbdaf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.976528][ C1] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007eff1ad7dbfb [ 242.984543][ C1] RDX: 00007eff1bbdbfe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 242.992553][ C1] RBP: 00007eff1bbdbfe0 R08: 0000000000000080 R09: 00007eff1bbdafd8 [ 243.000565][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 243.008669][ C1] R13: 0000000800000000 R14: 0000000000000012 R15: 00007eff1adfa273 [ 243.016804][ C1] [ 243.019890][ C1] rcu: rcu_preempt kthread starved for 10205 jiffies! g13153 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 243.031232][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 243.041246][ C1] rcu: RCU grace-period kthread stack dump: [ 243.047180][ C1] task:rcu_preempt state:R running task stack:26992 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 243.059234][ C1] Call Trace: [ 243.062568][ C1] [ 243.065543][ C1] __schedule+0xef5/0x5750 [ 243.070026][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 243.075282][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 243.080723][ C1] ? __pfx___schedule+0x10/0x10 [ 243.085648][ C1] ? schedule+0x298/0x350 [ 243.090066][ C1] ? __pfx_lock_release+0x10/0x10 [ 243.095351][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 243.100626][ C1] ? lock_acquire+0x2f/0xb0 [ 243.105181][ C1] ? schedule+0x1fd/0x350 [ 243.109576][ C1] schedule+0xe7/0x350 [ 243.113706][ C1] schedule_timeout+0x136/0x2a0 [ 243.118620][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 243.124055][ C1] ? __pfx_process_timeout+0x10/0x10 [ 243.129423][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.135287][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 243.140916][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 243.145918][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 243.151260][ C1] ? rcu_gp_init+0xc82/0x1630 [ 243.156092][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 243.161357][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.167221][ C1] rcu_gp_kthread+0x271/0x380 [ 243.171961][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.177259][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.182519][ C1] ? __kthread_parkme+0x148/0x220 [ 243.187608][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.192860][ C1] kthread+0x2c1/0x3a0 [ 243.197015][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.202269][ C1] ? __pfx_kthread+0x10/0x10 [ 243.206935][ C1] ret_from_fork+0x45/0x80 [ 243.211504][ C1] ? __pfx_kthread+0x10/0x10 [ 243.216149][ C1] ret_from_fork_asm+0x1a/0x30 [ 243.221008][ C1] [ 243.224064][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 243.230446][ C1] CPU: 1 UID: 0 PID: 938 Comm: kworker/1:2 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 243.241181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.251289][ C1] Workqueue: events nsim_dev_trap_report_work [ 243.257437][ C1] RIP: 0010:arch_stack_walk+0x9b/0x100 [ 243.262994][ C1] Code: ea 08 00 8b 95 70 ff ff ff 85 d2 75 21 eb 2f 4c 89 ef 41 ff d4 0f 1f 00 84 c0 74 22 48 89 df e8 eb c9 08 00 8b 85 70 ff ff ff <85> c0 74 10 48 89 df e8 29 c4 08 00 48 85 c0 48 89 c6 75 d1 48 8b [ 243.282754][ C1] RSP: 0018:ffffc90000a18038 EFLAGS: 00000296 [ 243.288907][ C1] RAX: 0000000000000002 RBX: ffffc90000a18038 RCX: 0000000000000000 [ 243.297005][ C1] RDX: 0000000000000103 RSI: ffffc90000a18fc8 RDI: 0000000000000001 [ 243.305037][ C1] RBP: ffffc90000a180c8 R08: ffffc90000a1806c R09: ffffffff90f17e40 [ 243.313065][ C1] R10: ffffc90000a18038 R11: 000000000000506f R12: ffffffff81795040 [ 243.321156][ C1] R13: ffffc90000a180f8 R14: 0000000000000000 R15: ffff88802601bc00 [ 243.329193][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 243.338283][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.344940][ C1] CR2: 00007f89e70843b0 CR3: 000000002e184000 CR4: 00000000003526f0 [ 243.352973][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.361004][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.369034][ C1] Call Trace: [ 243.372358][ C1] [ 243.375245][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 243.381649][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 243.386938][ C1] ? rcu_sched_clock_irq+0x23d7/0x32a0 [ 243.392483][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 243.398180][ C1] ? find_held_lock+0x2d/0x110 [ 243.403037][ C1] ? update_process_times+0x178/0x220 [ 243.408471][ C1] ? __pfx_update_process_times+0x10/0x10 [ 243.414249][ C1] ? tick_nohz_handler+0x376/0x530 [ 243.419427][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 243.424953][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 243.430402][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 243.436183][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 243.442334][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 243.447525][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 243.453747][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 243.459623][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.465849][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.472106][ C1] ? arch_stack_walk+0x9b/0x100 [ 243.477026][ C1] ? arch_stack_walk+0x95/0x100 [ 243.481957][ C1] ? nsim_dev_trap_report_work+0x870/0xc80 [ 243.487827][ C1] ? do_softirq+0xb2/0xf0 [ 243.492251][ C1] stack_trace_save+0x95/0xd0 [ 243.497009][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 243.502496][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.508550][ C1] ? __pfx_mark_lock+0x10/0x10 [ 243.513383][ C1] kasan_save_stack+0x33/0x60 [ 243.518123][ C1] ? kasan_save_stack+0x33/0x60 [ 243.523119][ C1] ? kasan_save_track+0x14/0x30 [ 243.528028][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 243.532917][ C1] ? __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 243.539658][ C1] ? kmalloc_reserve+0xef/0x2c0 [ 243.544567][ C1] ? __alloc_skb+0x164/0x380 [ 243.549220][ C1] ? synproxy_send_client_synack+0x1ad/0xcf0 [ 243.555262][ C1] ? nft_synproxy_do_eval+0xa49/0xd60 [ 243.560702][ C1] ? nft_do_chain+0x2e6/0x18f0 [ 243.565518][ C1] ? nft_do_chain_inet+0x18b/0x350 [ 243.570684][ C1] ? nf_hook_slow+0xbb/0x200 [ 243.575340][ C1] ? nf_hook.constprop.0+0x42e/0x750 [ 243.580691][ C1] ? ip_local_deliver+0x169/0x1f0 [ 243.585798][ C1] ? ip_rcv+0x2c3/0x5d0 [ 243.590040][ C1] ? __netif_receive_skb_one_core+0x199/0x1e0 [ 243.596212][ C1] ? __netif_receive_skb+0x1d/0x160 [ 243.601492][ C1] ? process_backlog+0x443/0x15f0 [ 243.606630][ C1] ? __napi_poll.constprop.0+0xb7/0x550 [ 243.612254][ C1] ? net_rx_action+0xa92/0x1010 [ 243.617177][ C1] ? handle_softirqs+0x213/0x8f0 [ 243.622214][ C1] kasan_save_track+0x14/0x30 [ 243.626960][ C1] __kasan_kmalloc+0xaa/0xb0 [ 243.631619][ C1] __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 243.638114][ C1] ? __alloc_skb+0x164/0x380 [ 243.642781][ C1] kmalloc_reserve+0xef/0x2c0 [ 243.647526][ C1] __alloc_skb+0x164/0x380 [ 243.652008][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 243.657017][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 243.662374][ C1] ? find_held_lock+0x2d/0x110 [ 243.667209][ C1] synproxy_send_client_synack+0x1ad/0xcf0 [ 243.673100][ C1] ? kmem_cache_free+0x152/0x4b0 [ 243.678211][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 243.684636][ C1] nft_synproxy_do_eval+0xa49/0xd60 [ 243.689896][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 243.695679][ C1] ? mark_lock+0xb5/0xc60 [ 243.700056][ C1] ? mark_lock+0xb5/0xc60 [ 243.704432][ C1] ? mark_lock+0xb5/0xc60 [ 243.708820][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 243.714345][ C1] nft_do_chain+0x2e6/0x18f0 [ 243.718992][ C1] ? hlock_class+0x4e/0x130 [ 243.723566][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 243.728644][ C1] ? ipt_do_table+0xd4c/0x1aa0 [ 243.733468][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 243.738806][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.744105][ C1] nft_do_chain_inet+0x18b/0x350 [ 243.749095][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 243.754614][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 243.759687][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 243.765127][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 243.770628][ C1] nf_hook_slow+0xbb/0x200 [ 243.775097][ C1] nf_hook.constprop.0+0x42e/0x750 [ 243.780269][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 243.786320][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 243.792020][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 243.797205][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 243.803261][ C1] ip_local_deliver+0x169/0x1f0 [ 243.808177][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 243.813608][ C1] ip_rcv+0x2c3/0x5d0 [ 243.817647][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 243.822275][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 243.828224][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 243.834703][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 243.839952][ C1] ? process_backlog+0x3f1/0x15f0 [ 243.845030][ C1] ? process_backlog+0x3f1/0x15f0 [ 243.850114][ C1] __netif_receive_skb+0x1d/0x160 [ 243.855192][ C1] process_backlog+0x443/0x15f0 [ 243.860101][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 243.865536][ C1] net_rx_action+0xa92/0x1010 [ 243.870281][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 243.875464][ C1] ? __pfx_mark_lock+0x10/0x10 [ 243.880275][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 243.885607][ C1] ? sched_clock+0x38/0x60 [ 243.890092][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 243.895034][ C1] ? mark_held_locks+0x9f/0xe0 [ 243.899872][ C1] handle_softirqs+0x213/0x8f0 [ 243.904702][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 243.910059][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 243.915434][ C1] ? nsim_dev_trap_report_work+0x870/0xc80 [ 243.921396][ C1] do_softirq+0xb2/0xf0 [ 243.925613][ C1] [ 243.928579][ C1] [ 243.931547][ C1] __local_bh_enable_ip+0x100/0x120 [ 243.936804][ C1] nsim_dev_trap_report_work+0x870/0xc80 [ 243.942528][ C1] process_one_work+0x9c5/0x1ba0 [ 243.947531][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 243.953656][ C1] ? __pfx_process_one_work+0x10/0x10 [ 243.959108][ C1] ? assign_work+0x1a0/0x250 [ 243.963778][ C1] worker_thread+0x6c8/0xf00 [ 243.968427][ C1] ? __kthread_parkme+0x148/0x220 [ 243.973525][ C1] ? __pfx_worker_thread+0x10/0x10 [ 243.978685][ C1] kthread+0x2c1/0x3a0 [ 243.982808][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.988241][ C1] ? __pfx_kthread+0x10/0x10 [ 243.992895][ C1] ret_from_fork+0x45/0x80 [ 243.997360][ C1] ? __pfx_kthread+0x10/0x10 [ 244.002186][ C1] ret_from_fork_asm+0x1a/0x30 [ 244.007048][ C1] [ 247.264435][ T5305] usb 2-1: Using ep0 maxpacket: 16