last executing test programs: 19.000032329s ago: executing program 4 (id=219): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, 0x0, 0x0) unshare(0x20000400) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) shutdown(r4, 0x1) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/171, 0xab}], 0x2, 0x0, 0x0) 16.657236954s ago: executing program 4 (id=223): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = inotify_init() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000040000000000000000000000002cf00000800120000000010"], 0x1c}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x6) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000200)="7f00000018002507b9409b14ffff0b7a0204be04050714056406040c5c0005003f0006182a0000000d0085a102000000000000003610648d49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf603000000523250b1eae26d992a38f1c42caee28c5aea", 0x7f, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x208) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 14.372198707s ago: executing program 1 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x11c, 0x4, 0x0, 0x74efdfe049b861ab) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80, 0x10}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r5, 0x4) socket(0x40000000015, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0) r7 = io_uring_setup(0xefe, 0x0) r8 = io_uring_setup(0x19ae, &(0x7f0000000100)={0x0, 0x7df5, 0x2, 0x2, 0x0, 0x0, r7}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (fail_nth: 2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 12.466291156s ago: executing program 1 (id=229): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x1000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.805423916s ago: executing program 1 (id=232): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/71, &(0x7f0000000580)=""/61, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x90) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 9.088657978s ago: executing program 1 (id=236): syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9ec0000000000000000040000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x170}}], 0x1, 0x20040800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) init_module(&(0x7f0000000000)='\'{\\\x00', 0x4, &(0x7f0000000080)='\x00') syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff1ec608402000d3a332010203010902120001000000000904000000c5ab390022c3629f3529b52c177bb8c1a0cc45c34e30b29c0c61db36f86a65fba52759a251001be433"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x4044014) ftruncate(r3, 0x8001) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x4b4b, &(0x7f0000001900)={0x2, {0xc}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 9.085536966s ago: executing program 4 (id=237): r0 = syz_usb_connect(0x5, 0x48, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002102e67e63822ad8ea13000000000000", @ANYRES32=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x20900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000080001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x41ea02, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) io_uring_setup(0xfc2, 0x0) socket$inet(0x2, 0xa, 0x8d) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$session_to_parent(0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 8.029448653s ago: executing program 3 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xde, 0x0, 0x6, 0x7fffffff}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) mkdir(&(0x7f0000000540)='./file0\x00', 0x1f) 7.912150414s ago: executing program 2 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xad, 0xb12531df61d0214, 0x0, 0x0}) syz_emit_vhci(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x1000f0000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x14, 0x16, 0x1e40, 0x7f}, 0x48) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 6.751003943s ago: executing program 2 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xffefffff) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0xf}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='task_rename\x00', r3}, 0x10) clock_settime(0xffffffffffffffff, &(0x7f0000000140)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$P9_RREADDIR(r4, 0x0, 0xf00) 6.704047741s ago: executing program 3 (id=243): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7ffffffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) getpriority(0x1, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000080), 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.483846608s ago: executing program 3 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x483, 0x2, 0xc, 0x80}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x46, 0x5b, 0xa0, 0x40, 0xaf0, 0xd058, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x3f, 0x0, 0x1}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB], 0x54}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) geteuid() r8 = syz_open_dev$dri(&(0x7f0000000340), 0x5, 0x408041) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) 5.027635646s ago: executing program 2 (id=245): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x1c, 0x0, &(0x7f0000000640)) 4.865130769s ago: executing program 4 (id=246): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/71, &(0x7f0000000580)=""/61, 0x4000}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x90) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 4.835511667s ago: executing program 0 (id=247): openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000080)={0x41, 0x0, 0xffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0100001a0013070000000000ff0120010000000000000000000000000002fe1900aa00e03f34ae7f26b594cea7d4b6df00134a5d402bf50a879c4e85566100"/75, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400777033383400"/244], 0x13c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x7, 0x5, 0xff, 0x46, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="144f6637cdd7e75291000000000000000000000a140000001000010000000000000000000084000a"], 0x28}}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r6, 0x114, 0x2717, 0x0, 0x20000000) write(r3, &(0x7f0000000000)="3b000200010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) 4.623998707s ago: executing program 2 (id=248): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000001b880)={0x2020}, 0xfeec) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x0, 0x21, 0x0, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x1010, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r4) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x7ff, 0x1, 0xffffffffffffffff, 0x7ff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18", &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x24, r6}, 0x38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.615139175s ago: executing program 0 (id=249): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000380)={0xd49b, 0xb, [{0x1}, {0x9}, {0xe}, {0x1, 0x1}, {0x5, 0x1}, {0xc, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0xc, 0x1}, {0xf}, {0x1, 0x1}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x408080, 0x1c6) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet(0x2, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, 0x0, 0x0) bind$rxrpc(r7, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x444341, 0x0) socketpair$tipc(0x1e, 0x56705a7a48c2909a, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r8, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10) read$FUSE(r6, &(0x7f0000003000)={0x2020}, 0x2020) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x107, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4.513484536s ago: executing program 1 (id=250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003d00)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xfff7fc, 0x1, {}, {}, 0x9, 0x8100000000000009}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/wireless\x00') open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 3.776317647s ago: executing program 0 (id=251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f000001aa80)=""/102387, 0x18ff3}], 0x1, 0x0, 0x0) (async) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mmap(&(0x7f00000cb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x0, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) (async, rerun: 32) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) fanotify_mark(r2, 0x0, 0x40001002, 0xffffffffffffffff, 0x0) (async) dup2(r2, r1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020601019e460a0000000000000000000000000918020073797a3e00000000050001000700000010000300596173683a69702c6d616300050005000a0000000c00078008000640000000000500040000000000b1394c31f9eb5e2258dfca9061da611c510f4d23ed3db7efecf1449e2452ba5ce78bbc6745343f8f187c31607acc6e5451cb6dc38ad117265ed3fbdd248d3cda8aea5a2e42baf86df12fe6b0c16db98f78d0bcdb1b5ea87db96ebd6702a4561525cc1349c43c9f33fe7628fec68428412157d05e11d384009a035c62489f4fdca309ebb6281c2aa0f7e26aea1dd668fb3fea20662ac7f37f9a63a82de5c85fec45c4c44ee2f7797f"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sched_setscheduler(0x0, 0x0, 0x0) (async) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r4, &(0x7f0000000080), 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYBLOB="a5c02abd7000fbdbdf25030007000000020001bbdc93"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) (async) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x5, @vbi}) (async) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$video(&(0x7f0000000180), 0x0, 0x0) 3.735919079s ago: executing program 4 (id=252): openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x90000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x90, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x45}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x14, 0x1a, '-}}@&+##@.!-{{%\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x90}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000340)='l', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r5, &(0x7f0000000000)='X', 0x1, 0x0, 0x0, 0x0) 3.324346892s ago: executing program 0 (id=253): openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x90000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x90, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x45}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x14, 0x1a, '-}}@&+##@.!-{{%\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x90}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000340)='l', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r6, &(0x7f0000000000)='X', 0x1, 0x0, 0x0, 0x0) 3.268045227s ago: executing program 2 (id=254): pipe(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x14b500, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) io_uring_setup(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000001c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 2.618620067s ago: executing program 4 (id=255): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/70, 0x46}], 0x5, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') r3 = syz_open_dev$loop(0x0, 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744223a3bf7b1ce1f566ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d978bbbaf836770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad63b499c7a25e1b181ac9ebf", "9fef7affaecac6ed08f4c36330801327cabc8491b2a7e8063de5ae1f02b8cb3a", [0x0, 0x3]}}) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendfile(r3, r4, 0x0, 0x1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f0000000080)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="32fa5e9f", @ANYRES16=0x0, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040801) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000002c0), 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000340)={0x5, "5a5417f116c80b0b4ded299700f23e9e237927be315cc87cea4a25402077dd5f", 0x3}) bind$can_raw(r8, &(0x7f0000000000), 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/261], 0x0) 1.378978583s ago: executing program 0 (id=256): r0 = socket$kcm(0x2, 0x200000000000004, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000400)="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", 0x1d7}], 0x1) sendto$inet6(r3, &(0x7f00000008c0)="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", 0x167, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r5}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000015ff4305b73c8b30f9a60f885068e297bc2b8364cb9a0b28800d3ad22fcf9f4abd808a1a7614414b597afc6a4b74b67514e3eca85b8cb2794b603c557eff52c14769cc18047a31d0f7d5a867e96f5fd21482334e0bf668da248e82059d0d24db007b7225bee814398f319797dcf946fde8e2f"], 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) 794.690583ms ago: executing program 3 (id=257): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x894b, &(0x7f0000000000)) 372.655628ms ago: executing program 3 (id=258): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x1c, 0x0, &(0x7f0000000640)) 193.918594ms ago: executing program 1 (id=259): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@dev, @in6=@mcast1}, {@in=@remote, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "b0b0e7f3dc5f121624ca7e8d6c8299f420"}}]}, 0x150}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="400ec100000010b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchdir(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x2c, 0x2c, &(0x7f0000000000)="6967ba7616b43b5fc2ab2e00fda9bc830f91cc0c95fb1afafaee8eec5f5b7ffff966f42f392cae0862b4f206") 174.369737ms ago: executing program 2 (id=260): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x2, 0x5, 0x226, r0, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x4}, 0x48) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x4000000805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) syz_emit_ethernet(0xd4, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8e37f3", 0x9e, 0x2c, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x8, "d35ee1b65e5e"}, @timestamp={0x8, 0xa, 0x1, 0x4}, @mptcp=@ack={0x1e, 0xc, 0x9, 0x4, "4dbec212bac50df2"}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x6, 0xf989, 'TF'}, @eol, @mss={0x2, 0x4, 0x1}, @eol, @exp_smc={0xfe, 0x6}]}}, {"37ab8167b81beb821e93b84bdd50cb740d1ab6ad9b17b59c82a6a8ed2eedec8ed5f3928a7d0f4e79a9c0cecfa207d79c5b975d4af088c46bfbf2273c59bdd731d2fb4abb46f38829586699dae2d311960470c4002453"}}}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12008058f267a6553ee8667c39704c63d0e209040000000e010000"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x1e, &(0x7f0000000580)=ANY=[@ANYBLOB="1e036d61a1866c2d9fe7e099c30b14112bebc05b9468e732d7e06d22ecd39ae849247b43f487854fa8ee9d0a7c3d4b344bba0527d8e6b03e19cca3d11ab72dae5c108e6c27e6ff59d968e50d01f6b26e5ee7c76793c7d0337a2bb9f7c1f28e73ed647b4d885f6490a1cff70deb8625484acbf1508040d05111d8e7cf310d3548750b166cecdcfc2e9fe9b710c858ba89703b803efd8c7140e146be3322c4d51b1ec8788c9bfe76ed9f40ac7468d35ff43d196f054683228a90b070b89f699874c7e00820e06dcff2ab0942e7fce7d93a1965ff3d9025643cc9f0193524bdbb0a0a87cd7d3fde50f1d9e6de56633ebc7acb33773726a694ea31b67772c7518b011f0011bd6c93a5a9a68834de9be50d3000f1ed3ebbc2c646edc2422c1925de5453b6ee557d625de6c216c67e221e2307b093dfd8744d83da78551484e1fd78c26b1f359905adf59d23ee88f305a6bbdca305dd468a1b6758bf8d0c9703f15afbe74f19207cf4415a8502a7df4f2f0018cdf392651081fc00437b9995f7c33bef42892935664eaa3e2617e9"]}]}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast1}, 0x4}}, 0x2e) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) socketpair(0x3d, 0x6, 0x6, &(0x7f0000000140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0103025700"/14], 0x14}}, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x20000000}, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfc}}, 0x1c}}, 0x0) 167.710103ms ago: executing program 0 (id=261): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3f}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000340)=0x5, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[]) chroot(&(0x7f00000000c0)='./file0\x00') syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000240)={&(0x7f0000000100)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000150600000ffff0ff6706000020000000620209000ee60000bf250000000000003d350800000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3817bcf00c3eebc52267b042d19d6e31e25e589d5f2692c"], &(0x7f0000000100)='GPL\x00'}, 0x48) stat(&(0x7f0000000980)='./file0\x00', 0x0) 0s ago: executing program 3 (id=262): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/71, &(0x7f0000000580)=""/61, 0x4000}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x90) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ank timer overrun [ 145.912695][ T5536] chnl_net:caif_netlink_parms(): no params data found [ 147.175625][ T5617] syz.2.68 (5617) used greatest stack depth: 21488 bytes left [ 147.837122][ T5632] rdma_rxe: rxe_newlink: failed to add vcan0 [ 148.126555][ T5536] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.162867][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.211684][ T5536] bridge_slave_0: entered allmulticast mode [ 148.241347][ T5536] bridge_slave_0: entered promiscuous mode [ 148.410535][ T11] hsr_slave_0: left promiscuous mode [ 148.448052][ T11] hsr_slave_1: left promiscuous mode [ 148.472630][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.480127][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.528435][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.547792][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.597617][ T11] veth1_macvtap: left promiscuous mode [ 148.607549][ T11] veth0_macvtap: left promiscuous mode [ 148.617888][ T11] veth1_vlan: left promiscuous mode [ 148.626877][ T11] veth0_vlan: left promiscuous mode [ 148.837811][ T5635] overlayfs: failed to resolve './file0': -2 [ 148.881438][ T11] infiniband syz1: set down [ 149.336059][ T11] team0 (unregistering): Port device team_slave_1 removed [ 149.375346][ T11] team0 (unregistering): Port device team_slave_0 removed [ 149.987237][ T12] smc: removing ib device syz1 [ 150.026680][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 150.026698][ T29] audit: type=1400 audit(1723538498.859:263): avc: denied { map } for pid=5641 comm="syz.2.74" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 150.076816][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.097792][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.121062][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.173636][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.185750][ T29] audit: type=1400 audit(1723538498.859:264): avc: denied { execute } for pid=5641 comm="syz.2.74" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 150.216959][ T29] audit: type=1400 audit(1723538498.899:265): avc: denied { setopt } for pid=5641 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.271070][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.282477][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.337589][ T5536] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.363935][ T5536] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.413132][ T5536] bridge_slave_1: entered allmulticast mode [ 150.481942][ T5536] bridge_slave_1: entered promiscuous mode [ 150.607046][ T5282] vcan0 speed is unknown, defaulting to 1000 [ 150.831044][ T5269] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 150.988745][ T5536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.080657][ T5269] usb 3-1: Using ep0 maxpacket: 8 [ 151.137624][ T5269] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 151.216933][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.219658][ T5536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.244473][ T5269] usb 3-1: Product: syz [ 151.248687][ T5269] usb 3-1: Manufacturer: syz [ 151.261605][ T5269] usb 3-1: SerialNumber: syz [ 151.368705][ T5269] usb 3-1: config 0 descriptor?? [ 151.903228][ T5269] msi2500 3-1:0.0: Registered as swradio16 [ 151.913264][ T5269] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 151.959450][ T5269] usb 3-1: USB disconnect, device number 2 [ 151.985500][ T5536] team0: Port device team_slave_0 added [ 152.115595][ T5560] chnl_net:caif_netlink_parms(): no params data found [ 152.221542][ T5536] team0: Port device team_slave_1 added [ 152.241101][ T5557] chnl_net:caif_netlink_parms(): no params data found [ 152.343461][ T54] Bluetooth: hci4: command tx timeout [ 152.882080][ T29] audit: type=1400 audit(1723538501.719:266): avc: denied { setopt } for pid=5667 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.162694][ T5674] omfs: Invalid superblock (0) [ 154.022390][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 154.031617][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 154.040578][ T54] Bluetooth: hci2: hardware error 0x00 [ 154.252404][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.259398][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.320293][ T5536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.420758][ T5235] Bluetooth: hci4: command tx timeout [ 154.449922][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.460844][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.500667][ T5536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.816830][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.828116][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.839167][ T5560] bridge_slave_0: entered allmulticast mode [ 154.848537][ T5560] bridge_slave_0: entered promiscuous mode [ 155.039237][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.062579][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.100507][ T5560] bridge_slave_1: entered allmulticast mode [ 155.111763][ T5560] bridge_slave_1: entered promiscuous mode [ 155.133711][ T5536] hsr_slave_0: entered promiscuous mode [ 155.176135][ T5536] hsr_slave_1: entered promiscuous mode [ 155.186390][ T5536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.202215][ T5536] Cannot create hsr debugfs directory [ 155.729648][ T29] audit: type=1400 audit(1723538504.549:267): avc: denied { bind } for pid=5687 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.781190][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.790150][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.805536][ T29] audit: type=1400 audit(1723538504.549:268): avc: denied { name_bind } for pid=5687 comm="syz.2.79" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 155.826692][ T5557] bridge_slave_0: entered allmulticast mode [ 155.838232][ T5557] bridge_slave_0: entered promiscuous mode [ 155.851203][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.857729][ T29] audit: type=1400 audit(1723538504.549:269): avc: denied { node_bind } for pid=5687 comm="syz.2.79" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 155.858408][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.885516][ T29] audit: type=1400 audit(1723538504.549:270): avc: denied { connect } for pid=5687 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.891949][ T5557] bridge_slave_1: entered allmulticast mode [ 155.919577][ T5557] bridge_slave_1: entered promiscuous mode [ 155.942195][ T29] audit: type=1400 audit(1723538504.549:271): avc: denied { name_connect } for pid=5687 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 155.978757][ T29] audit: type=1400 audit(1723538504.629:272): avc: denied { accept } for pid=5687 comm="syz.2.79" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 156.014035][ T5560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.226871][ T5560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.266849][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 156.329702][ T5557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.368628][ T5557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.502712][ T54] Bluetooth: hci4: command tx timeout [ 156.668034][ T5645] chnl_net:caif_netlink_parms(): no params data found [ 156.807347][ T5560] team0: Port device team_slave_0 added [ 156.988681][ T5557] team0: Port device team_slave_0 added [ 157.057691][ T5557] team0: Port device team_slave_1 added [ 157.084463][ T5560] team0: Port device team_slave_1 added [ 157.471451][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.479240][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.514909][ T5557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.529450][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.540862][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.576840][ T5560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.602475][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.620945][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.650401][ T5560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.861089][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.869308][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.920269][ T5557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.977561][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.063126][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.083210][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.110564][ T5645] bridge_slave_0: entered allmulticast mode [ 158.138419][ T5645] bridge_slave_0: entered promiscuous mode [ 158.152847][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.174304][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.190709][ T5645] bridge_slave_1: entered allmulticast mode [ 158.209704][ T5645] bridge_slave_1: entered promiscuous mode [ 158.300001][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.412377][ T5557] hsr_slave_0: entered promiscuous mode [ 158.441885][ T5557] hsr_slave_1: entered promiscuous mode [ 158.448114][ T5557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.468767][ T5557] Cannot create hsr debugfs directory [ 158.531947][ T5560] hsr_slave_0: entered promiscuous mode [ 158.558439][ T5560] hsr_slave_1: entered promiscuous mode [ 158.574344][ T5560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.590502][ T5560] Cannot create hsr debugfs directory [ 158.591200][ T54] Bluetooth: hci4: command tx timeout [ 158.722165][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.835509][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.943061][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 159.067960][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.095614][ T5726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.128896][ T5726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.168264][ T5726] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 159.196711][ T5726] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.317368][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.572526][ T5645] team0: Port device team_slave_0 added [ 160.716191][ T5645] team0: Port device team_slave_1 added [ 160.846383][ T5728] [U] v3f"S/4:XTzWtlW= [ 161.138522][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.149837][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.198580][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.235209][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.243501][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.275453][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.296819][ T5536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.400980][ T5536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.420042][ T5727] [U] J"e:" [ 161.429632][ T5536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.561167][ T5536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.835808][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.883494][ T29] audit: type=1400 audit(1723538510.719:273): avc: denied { read } for pid=5733 comm="syz.2.84" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.949524][ T29] audit: type=1400 audit(1723538510.719:274): avc: denied { open } for pid=5733 comm="syz.2.84" path="/dev/iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.976050][ T29] audit: type=1400 audit(1723538510.719:275): avc: denied { ioctl } for pid=5733 comm="syz.2.84" path="/dev/iommu" dev="devtmpfs" ino=626 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.016169][ T5645] hsr_slave_0: entered promiscuous mode [ 162.025815][ T5645] hsr_slave_1: entered promiscuous mode [ 162.033085][ T5645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.041373][ T5645] Cannot create hsr debugfs directory [ 162.074238][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.227269][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.354988][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.953384][ T29] audit: type=1400 audit(1723538511.759:276): avc: denied { create } for pid=5749 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.036880][ T29] audit: type=1400 audit(1723538511.769:277): avc: denied { setopt } for pid=5749 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.087633][ T29] audit: type=1400 audit(1723538511.769:278): avc: denied { ioctl } for pid=5749 comm="syz.2.85" path="socket:[9398]" dev="sockfs" ino=9398 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.139858][ T29] audit: type=1400 audit(1723538511.769:279): avc: denied { write } for pid=5749 comm="syz.2.85" name="rdma_cm" dev="devtmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 163.496994][ T11] bridge_slave_1: left allmulticast mode [ 163.520546][ T11] bridge_slave_1: left promiscuous mode [ 163.527317][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.552470][ T11] bridge_slave_0: left allmulticast mode [ 163.558146][ T11] bridge_slave_0: left promiscuous mode [ 163.570942][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.589442][ T11] bridge_slave_1: left allmulticast mode [ 163.595314][ T11] bridge_slave_1: left promiscuous mode [ 163.601991][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.619437][ T11] bridge_slave_0: left allmulticast mode [ 163.640604][ T11] bridge_slave_0: left promiscuous mode [ 163.649722][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.895266][ T5760] [U] v3f"S/4:XTzWtlW= [ 163.901215][ T5760] [U] J"e:" [ 164.553908][ T5756] [U] fBq38)bL(L{2-A"OU^paH()d-Ry [ 164.838751][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.882314][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.904326][ T11] bond0 (unregistering): Released all slaves [ 165.094256][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.115613][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.129903][ T11] bond0 (unregistering): Released all slaves [ 165.156360][ T5536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.436644][ T5536] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.484686][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.491936][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.519725][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.526883][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.693291][ T5536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.844888][ T11] hsr_slave_0: left promiscuous mode [ 166.885805][ T11] hsr_slave_1: left promiscuous mode [ 166.939122][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.955129][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.977460][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.995305][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.038139][ T11] hsr_slave_0: left promiscuous mode [ 167.058745][ T11] hsr_slave_1: left promiscuous mode [ 167.075590][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.103628][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.138184][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.163669][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.288055][ T11] veth1_macvtap: left promiscuous mode [ 167.295500][ T11] veth0_macvtap: left promiscuous mode [ 167.309736][ T11] veth1_vlan: left promiscuous mode [ 167.316633][ T11] veth0_vlan: left promiscuous mode [ 167.345913][ T11] veth1_macvtap: left promiscuous mode [ 167.357212][ T11] veth0_macvtap: left promiscuous mode [ 167.368836][ T11] veth1_vlan: left promiscuous mode [ 167.383686][ T11] veth0_vlan: left promiscuous mode [ 168.535328][ T11] team0 (unregistering): Port device team_slave_1 removed [ 168.591768][ T11] team0 (unregistering): Port device team_slave_0 removed [ 169.118776][ T5817] xt_recent: hitcount (184549376) is larger than allowed maximum (65535) [ 169.120181][ T29] audit: type=1400 audit(1723538517.949:280): avc: denied { setopt } for pid=5816 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.407236][ T5819] [U] v3f"S/4:XTzWtlW= [ 169.669127][ T11] team0 (unregistering): Port device team_slave_1 removed [ 169.743683][ T11] team0 (unregistering): Port device team_slave_0 removed [ 170.088893][ T5818] [U] J"e:" [ 170.477257][ T5557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.602160][ T5557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.631368][ T5557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.659045][ T5557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.817813][ T5560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.846327][ T5560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.928649][ T5645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.982057][ T5560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.094982][ T5645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.118261][ T5560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.188218][ T5536] veth0_vlan: entered promiscuous mode [ 171.244537][ T5645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.336819][ T5536] veth1_vlan: entered promiscuous mode [ 171.348535][ T29] audit: type=1400 audit(1723538520.179:281): avc: denied { bind } for pid=5828 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.381598][ T29] audit: type=1400 audit(1723538520.199:282): avc: denied { getopt } for pid=5828 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.408636][ T29] audit: type=1400 audit(1723538520.199:283): avc: denied { getopt } for pid=5828 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.488898][ T5645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.714920][ T5536] veth0_macvtap: entered promiscuous mode [ 171.783109][ T5536] veth1_macvtap: entered promiscuous mode [ 171.858244][ T5831] [U] v3f"S/4:XTzWtlW= [ 171.864195][ T5831] [U] J"e:" [ 171.963794][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.975105][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.985191][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.997037][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.022290][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.052274][ T5557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.145493][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.161448][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.177517][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.189598][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.208864][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.262578][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.303993][ T5557] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.315781][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.339924][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.395716][ T5830] [U] fBq38)bL(L{2-A"OU^paH()d-Ry [ 172.409964][ T5536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.430831][ T5536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.444339][ T5536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.456069][ T5536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.472154][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.494278][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.538747][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.545902][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.588130][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.595355][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.652294][ T5560] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.007713][ T5557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.018373][ T5557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.635973][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.643200][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.653935][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.661100][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.922005][ T29] audit: type=1400 audit(1723538522.759:284): avc: denied { read } for pid=5845 comm="syz.2.95" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 173.986749][ T29] audit: type=1400 audit(1723538522.759:285): avc: denied { open } for pid=5845 comm="syz.2.95" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.128720][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.155423][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.678108][ T29] audit: type=1400 audit(1723538523.209:286): avc: denied { read } for pid=5845 comm="syz.2.95" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.879817][ T29] audit: type=1400 audit(1723538523.209:287): avc: denied { open } for pid=5845 comm="syz.2.95" path="/dev/ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.921580][ T29] audit: type=1400 audit(1723538523.239:288): avc: denied { ioctl } for pid=5845 comm="syz.2.95" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.957702][ T29] audit: type=1400 audit(1723538523.329:289): avc: denied { create } for pid=5845 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.983248][ T29] audit: type=1400 audit(1723538523.339:290): avc: denied { bind } for pid=5845 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.007799][ T29] audit: type=1400 audit(1723538523.339:291): avc: denied { name_bind } for pid=5845 comm="syz.2.95" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 175.028575][ T29] audit: type=1400 audit(1723538523.339:292): avc: denied { node_bind } for pid=5845 comm="syz.2.95" saddr=fe88::3 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 175.051003][ T29] audit: type=1400 audit(1723538523.489:293): avc: denied { write } for pid=5845 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.082570][ T2591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.101745][ T2591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.204038][ T29] audit: type=1400 audit(1723538524.039:294): avc: denied { mount } for pid=5536 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.215611][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.277357][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.513890][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.890934][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.898047][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.008278][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.015501][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.058453][ T5557] veth0_vlan: entered promiscuous mode [ 176.080838][ T5858] warning: `syz.2.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.207104][ T5557] veth1_vlan: entered promiscuous mode [ 176.355089][ T5560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.583891][ T5557] veth0_macvtap: entered promiscuous mode [ 176.638575][ T5557] veth1_macvtap: entered promiscuous mode [ 176.776106][ T29] audit: type=1400 audit(1723538525.609:295): avc: denied { setopt } for pid=5869 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.843220][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.891545][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.931260][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.942383][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.978490][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.010461][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.052190][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.098285][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.110135][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.129115][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.165895][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.198585][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.235593][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.277032][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.372980][ T5557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.411541][ T5557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.443082][ T5557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.473815][ T5557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.717754][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.955686][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.957048][ T5560] veth0_vlan: entered promiscuous mode [ 177.982766][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.125637][ T5560] veth1_vlan: entered promiscuous mode [ 178.145638][ T2591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.170476][ T2591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.268206][ T5645] veth0_vlan: entered promiscuous mode [ 178.378544][ T5560] veth0_macvtap: entered promiscuous mode [ 178.407611][ T5645] veth1_vlan: entered promiscuous mode [ 178.485841][ T5560] veth1_macvtap: entered promiscuous mode [ 178.634172][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.675170][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.685645][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.700433][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.715253][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.754862][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.775104][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.805382][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.830119][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.903673][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.946987][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.970283][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.010374][ T5275] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 179.028222][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.059192][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.457721][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.478935][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.491267][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.509898][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.545183][ T5560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.849744][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 179.849759][ T29] audit: type=1400 audit(1723538527.989:300): avc: denied { ioctl } for pid=5883 comm="syz.2.98" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 179.883279][ T5560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.892680][ T5560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.908021][ T5275] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 179.915856][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 179.927366][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.939296][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 179.939465][ T5560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.965019][ T29] audit: type=1400 audit(1723538528.309:301): avc: denied { search } for pid=4653 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.987052][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 180.097408][ T5645] veth0_macvtap: entered promiscuous mode [ 180.119009][ T5275] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 180.141114][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 180.176772][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.224023][ T29] audit: type=1400 audit(1723538529.059:302): avc: denied { append } for pid=5887 comm="syz.2.99" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.232280][ T5645] veth1_macvtap: entered promiscuous mode [ 180.256848][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 180.279961][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 180.315247][ T5275] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 180.373139][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 180.438994][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.479404][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 180.495329][ T5275] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 180.517416][ T5275] usb 4-1: string descriptor 0 read error: -22 [ 180.528354][ T5275] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.544959][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.557746][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.566527][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.590996][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.609289][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.625163][ T5275] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 180.634914][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.687415][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.728485][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.765980][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.784762][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.798027][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.829435][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.961622][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.983472][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.000476][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.062235][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.080898][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.129676][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.181512][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.216120][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.260272][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.291288][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.303341][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.366528][ T5645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.382120][ T5645] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.392199][ T5645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.407906][ T5645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.502931][ T1303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.523894][ T1303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.826867][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.863353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.847892][ T1303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.862195][ T1303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.905754][ T25] usb 4-1: USB disconnect, device number 2 [ 182.907208][ T29] audit: type=1400 audit(1723538531.709:303): avc: denied { write } for pid=4653 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.171248][ T29] audit: type=1400 audit(1723538531.709:304): avc: denied { remove_name } for pid=4653 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.350343][ T29] audit: type=1400 audit(1723538531.709:305): avc: denied { rename } for pid=4653 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.470863][ T29] audit: type=1400 audit(1723538531.709:306): avc: denied { add_name } for pid=4653 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.674695][ T29] audit: type=1400 audit(1723538531.709:307): avc: denied { unlink } for pid=4653 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.729433][ T29] audit: type=1400 audit(1723538531.709:308): avc: denied { create } for pid=4653 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.818455][ T2591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.830430][ T29] audit: type=1400 audit(1723538533.479:309): avc: denied { write } for pid=5908 comm="syz.3.103" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.888989][ T2591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.778628][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 185.864097][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 185.990497][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 185.997505][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 186.212630][ T5930] infiniband syz1: set active [ 186.217359][ T5930] infiniband syz1: added vcan0 [ 186.331478][ T5930] RDS/IB: syz1: added [ 186.335527][ T5930] smc: adding ib device syz1 with port count 1 [ 186.342191][ T5930] smc: ib device syz1 port 1 has pnetid [ 186.390791][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 186.588098][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 186.736935][ T5273] vcan0 speed is unknown, defaulting to 1000 [ 186.744988][ T25] vcan0 speed is unknown, defaulting to 1000 [ 186.753354][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 186.883931][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 187.012790][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 187.138582][ T5930] vcan0 speed is unknown, defaulting to 1000 [ 187.551325][ T5936] FAULT_INJECTION: forcing a failure. [ 187.551325][ T5936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.656188][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: syz.3.108 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 187.666831][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 187.676889][ T5936] Call Trace: [ 187.680168][ T5936] [ 187.683097][ T5936] dump_stack_lvl+0x16c/0x1f0 [ 187.687792][ T5936] should_fail_ex+0x497/0x5b0 [ 187.692504][ T5936] _copy_from_iter+0x2a1/0x1150 [ 187.697441][ T5936] ? __alloc_skb+0x1fe/0x380 [ 187.702032][ T5936] ? __pfx__copy_from_iter+0x10/0x10 [ 187.707320][ T5936] ? __virt_addr_valid+0x5e/0x590 [ 187.712349][ T5936] ? __phys_addr_symbol+0x30/0x80 [ 187.717401][ T5936] ? __check_object_size+0x497/0x720 [ 187.722700][ T5936] netlink_sendmsg+0x813/0xd70 [ 187.727472][ T5936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.732756][ T5936] ? __import_iovec+0x1fd/0x6e0 [ 187.737607][ T5936] ____sys_sendmsg+0xab5/0xc90 [ 187.742386][ T5936] ? copy_msghdr_from_user+0x10b/0x160 [ 187.747857][ T5936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.753162][ T5936] ? find_held_lock+0x2d/0x110 [ 187.757930][ T5936] ? __pfx___lock_acquire+0x10/0x10 [ 187.763126][ T5936] ___sys_sendmsg+0x135/0x1e0 [ 187.767799][ T5936] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.773011][ T5936] ? ksys_write+0x21c/0x260 [ 187.777532][ T5936] ? __fget_light+0x173/0x210 [ 187.782211][ T5936] __sys_sendmsg+0x117/0x1f0 [ 187.786805][ T5936] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.791928][ T5936] do_syscall_64+0xcd/0x250 [ 187.796442][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.802348][ T5936] RIP: 0033:0x7f851d5799f9 [ 187.806758][ T5936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.826365][ T5936] RSP: 002b:00007f851e332038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.834778][ T5936] RAX: ffffffffffffffda RBX: 00007f851d715f80 RCX: 00007f851d5799f9 [ 187.842737][ T5936] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 187.850704][ T5936] RBP: 00007f851e332090 R08: 0000000000000000 R09: 0000000000000000 [ 187.858665][ T5936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.866631][ T5936] R13: 0000000000000000 R14: 00007f851d715f80 R15: 00007fff4f314658 [ 187.874596][ T5936] [ 189.189895][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.199204][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.207340][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.215706][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.224600][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 189.233447][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.769113][ T5944] vcan0 speed is unknown, defaulting to 1000 [ 191.381875][ T5235] Bluetooth: hci6: command tx timeout [ 191.419866][ T5963] ALSA: seq fatal error: cannot create timer (-22) [ 193.810248][ T5235] Bluetooth: hci6: command tx timeout [ 193.927731][ T29] audit: type=1400 audit(1723538542.759:310): avc: denied { create } for pid=5964 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.006692][ T29] audit: type=1400 audit(1723538542.789:311): avc: denied { getopt } for pid=5964 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.114274][ T5970] vcan0 speed is unknown, defaulting to 1000 [ 194.811718][ T29] audit: type=1400 audit(1723538543.649:312): avc: denied { read write } for pid=5976 comm="syz.4.117" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 194.938273][ T29] audit: type=1400 audit(1723538543.649:313): avc: denied { open } for pid=5976 comm="syz.4.117" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 194.971616][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.986481][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.356688][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 195.765448][ T5983] bridge0: port 3(team0) entered blocking state [ 195.786278][ T5983] bridge0: port 3(team0) entered disabled state [ 195.852945][ T5983] team0: entered allmulticast mode [ 195.868630][ T5235] Bluetooth: hci6: command tx timeout [ 195.928815][ T5983] team_slave_0: entered allmulticast mode [ 195.939443][ T5983] team_slave_1: entered allmulticast mode [ 195.981976][ T5983] team0: entered promiscuous mode [ 196.004162][ T5983] team_slave_0: entered promiscuous mode [ 196.139654][ T5983] team_slave_1: entered promiscuous mode [ 196.392744][ T5983] bridge0: port 3(team0) entered blocking state [ 196.399635][ T5983] bridge0: port 3(team0) entered forwarding state [ 196.569821][ T5989] [U] v3f"S/4:XTzWtlW= [ 196.575777][ T5989] [U] J"e:" [ 196.862364][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.920604][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.963682][ T5944] bridge_slave_0: entered allmulticast mode [ 196.988332][ T5944] bridge_slave_0: entered promiscuous mode [ 197.006546][ T5988] [U] fBq38)bL(L{2-A"OU^paH()d-Ry [ 197.038796][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.054709][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.062941][ T5944] bridge_slave_1: entered allmulticast mode [ 197.079376][ T5944] bridge_slave_1: entered promiscuous mode [ 197.312029][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 197.571279][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.695215][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.835801][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.950483][ T5235] Bluetooth: hci6: command tx timeout [ 198.134414][ T5944] team0: Port device team_slave_0 added [ 198.214975][ T5944] team0: Port device team_slave_1 added [ 198.533348][ T6010] ALSA: seq fatal error: cannot create timer (-22) [ 200.284099][ T6009] sched: RT throttling activated [ 203.053279][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 203.183413][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.336280][ T6015] omfs: Invalid superblock (0) [ 208.797830][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.971195][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.021222][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.215238][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.851953][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.111236][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.118225][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.248136][ T29] audit: type=1400 audit(1723538560.079:314): avc: denied { ioctl } for pid=6032 comm="syz.2.130" path="socket:[11646]" dev="sockfs" ino=11646 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.329374][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.515212][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.525657][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.534521][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.551552][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.560468][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.632185][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.740372][ T5369] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 211.930335][ T5369] usb 3-1: Using ep0 maxpacket: 32 [ 211.946816][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.956682][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.964847][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.976847][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.985044][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.992939][ T5369] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.014947][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.038902][ T5369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 212.104987][ T5369] usb 3-1: string descriptor 0 read error: -22 [ 212.127246][ T5369] usb 3-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 212.156317][ T5369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.167570][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.177053][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.188288][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.196841][ T5369] usb 3-1: config 0 descriptor?? [ 212.262668][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.271605][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.279088][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.682887][ T5944] hsr_slave_0: entered promiscuous mode [ 212.709303][ T5944] hsr_slave_1: entered promiscuous mode [ 212.725103][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.738839][ T5944] Cannot create hsr debugfs directory [ 212.780861][ T6040] vcan0 speed is unknown, defaulting to 1000 [ 213.184673][ T6035] vcan0 speed is unknown, defaulting to 1000 [ 213.244198][ T12] bridge_slave_1: left allmulticast mode [ 213.249943][ T12] bridge_slave_1: left promiscuous mode [ 213.285253][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.323352][ T12] bridge_slave_0: left allmulticast mode [ 213.329096][ T12] bridge_slave_0: left promiscuous mode [ 213.350980][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.702128][ T5235] Bluetooth: hci5: command tx timeout [ 214.104657][ T5235] Bluetooth: hci0: command tx timeout [ 214.122216][ T5369] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 214.151203][ T5369] usb 3-1: USB disconnect, device number 3 [ 214.221523][ T6059] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 214.222221][ T29] audit: type=1400 audit(1723538563.049:315): avc: denied { bind } for pid=6058 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.234223][ T6059] netlink: 'syz.2.131': attribute type 2 has an invalid length. [ 214.286399][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.288190][ T29] audit: type=1400 audit(1723538563.099:316): avc: denied { ioctl } for pid=6058 comm="syz.2.131" path="socket:[11735]" dev="sockfs" ino=11735 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.337241][ T29] audit: type=1400 audit(1723538563.159:317): avc: denied { watch watch_reads } for pid=6058 comm="syz.2.131" path="/58" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.361025][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.369967][ T29] audit: type=1400 audit(1723538563.159:318): avc: denied { ioctl } for pid=6058 comm="syz.2.131" path="socket:[12826]" dev="sockfs" ino=12826 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.397382][ T12] bond0 (unregistering): Released all slaves [ 214.421200][ T5235] Bluetooth: hci7: command tx timeout [ 214.451761][ T6042] vcan0 speed is unknown, defaulting to 1000 [ 214.811064][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 215.780388][ T5235] Bluetooth: hci5: command tx timeout [ 215.875144][ T12] hsr_slave_0: left promiscuous mode [ 215.901859][ T12] hsr_slave_1: left promiscuous mode [ 215.907887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.970500][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.011348][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.039912][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.190820][ T5235] Bluetooth: hci0: command tx timeout [ 216.237622][ T12] veth1_macvtap: left promiscuous mode [ 216.243522][ T12] veth0_macvtap: left promiscuous mode [ 216.256465][ T12] veth1_vlan: left promiscuous mode [ 216.265887][ T12] veth0_vlan: left promiscuous mode [ 216.501254][ T5235] Bluetooth: hci7: command tx timeout [ 217.465862][ T12] team0 (unregistering): Port device team_slave_1 removed [ 217.514415][ T12] team0 (unregistering): Port device team_slave_0 removed [ 217.863707][ T5235] Bluetooth: hci5: command tx timeout [ 218.238280][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 218.270539][ T5235] Bluetooth: hci0: command tx timeout [ 218.660534][ T5235] Bluetooth: hci7: command tx timeout [ 219.721653][ T29] audit: type=1400 audit(1723538567.829:319): avc: denied { name_connect } for pid=6107 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 219.811610][ T29] audit: type=1400 audit(1723538567.869:320): avc: denied { accept } for pid=6107 comm="syz.2.135" lport=45322 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.066616][ T5235] Bluetooth: hci5: command tx timeout [ 220.219904][ T6042] chnl_net:caif_netlink_parms(): no params data found [ 220.259040][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 220.324686][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.337545][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.340349][ T5235] Bluetooth: hci0: command tx timeout [ 220.350560][ T6040] bridge_slave_0: entered allmulticast mode [ 220.357934][ T6040] bridge_slave_0: entered promiscuous mode [ 220.368707][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.377634][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.385299][ T6040] bridge_slave_1: entered allmulticast mode [ 220.393570][ T6040] bridge_slave_1: entered promiscuous mode [ 220.499883][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.573689][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.582485][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.589755][ T6035] bridge_slave_0: entered allmulticast mode [ 220.603641][ T6035] bridge_slave_0: entered promiscuous mode [ 220.623523][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.699863][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.715894][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.731793][ T6042] bridge_slave_0: entered allmulticast mode [ 220.739708][ T6042] bridge_slave_0: entered promiscuous mode [ 220.748023][ T5235] Bluetooth: hci7: command tx timeout [ 220.768866][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.790569][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.808421][ T6035] bridge_slave_1: entered allmulticast mode [ 220.819687][ T6035] bridge_slave_1: entered promiscuous mode [ 221.011985][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.030940][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.038226][ T6042] bridge_slave_1: entered allmulticast mode [ 221.055258][ T6042] bridge_slave_1: entered promiscuous mode [ 221.106549][ T6132] [U] v3f"S/4:XTzWtlW= [ 221.112479][ T6132] [U] J"e:" [ 221.142531][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.246577][ T6040] team0: Port device team_slave_0 added [ 221.296685][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.357299][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.384061][ T6040] team0: Port device team_slave_1 added [ 221.390641][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.408811][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.433063][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.531171][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.556987][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.578099][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.615207][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.712281][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.755304][ T6131] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 221.806433][ T6035] team0: Port device team_slave_0 added [ 221.823673][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.830859][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.856774][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.865180][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.890502][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.897672][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.923666][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.933103][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.031641][ T6042] team0: Port device team_slave_0 added [ 222.045659][ T6035] team0: Port device team_slave_1 added [ 222.127911][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.162836][ T29] audit: type=1400 audit(1723538570.999:321): avc: denied { connect } for pid=6136 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 222.195411][ T6042] team0: Port device team_slave_1 added [ 222.326895][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.334816][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.346559][ T6139] raw_sendmsg: syz.2.139 forgot to set AF_INET. Fix it! [ 222.360720][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.362301][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.562425][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.579846][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.605817][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.627590][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.697404][ T6040] hsr_slave_0: entered promiscuous mode [ 222.704991][ T6040] hsr_slave_1: entered promiscuous mode [ 222.715644][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.725011][ T6040] Cannot create hsr debugfs directory [ 222.842374][ T6142] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 222.969031][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.033324][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.191724][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.218847][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.233287][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.262969][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.319190][ T6035] hsr_slave_0: entered promiscuous mode [ 223.327468][ T6035] hsr_slave_1: entered promiscuous mode [ 223.337372][ T6035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.347939][ T6035] Cannot create hsr debugfs directory [ 223.534364][ T6042] hsr_slave_0: entered promiscuous mode [ 223.550896][ T6042] hsr_slave_1: entered promiscuous mode [ 223.558201][ T6042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.566347][ T6042] Cannot create hsr debugfs directory [ 223.574388][ T6144] omfs: Invalid superblock (0) [ 224.882909][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.050701][ T6149] omfs: Invalid superblock (0) [ 230.153562][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.398227][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.489393][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.675278][ T6042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.803333][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.913211][ T6042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.967771][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.064290][ T6042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.092902][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.100055][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.128382][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.135716][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.255958][ T6042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.369523][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.864860][ T29] audit: type=1400 audit(1723538580.629:322): avc: denied { create } for pid=6167 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.981359][ T6179] tmpfs: Bad value for 'mpol' [ 232.127779][ T6180] Bluetooth: MGMT ver 1.23 [ 232.466413][ T6178] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 232.600350][ T29] audit: type=1400 audit(1723538580.749:323): avc: denied { bind } for pid=6167 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.647128][ T29] audit: type=1400 audit(1723538580.779:324): avc: denied { listen } for pid=6167 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.674528][ T12] bridge_slave_1: left allmulticast mode [ 232.710338][ T12] bridge_slave_1: left promiscuous mode [ 232.716183][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.751515][ T29] audit: type=1400 audit(1723538580.949:325): avc: denied { bind } for pid=6167 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.785674][ T12] bridge_slave_0: left allmulticast mode [ 232.809624][ T12] bridge_slave_0: left promiscuous mode [ 232.829620][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.858013][ T12] bridge_slave_1: left allmulticast mode [ 232.878606][ T12] bridge_slave_1: left promiscuous mode [ 232.894265][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.909348][ T12] bridge_slave_0: left allmulticast mode [ 232.917244][ T12] bridge_slave_0: left promiscuous mode [ 232.923762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.942557][ T12] team0: left allmulticast mode [ 232.947467][ T12] team_slave_0: left allmulticast mode [ 232.966038][ T12] team_slave_1: left allmulticast mode [ 232.977761][ T12] team0: left promiscuous mode [ 232.989113][ T12] team_slave_0: left promiscuous mode [ 233.007246][ T12] team_slave_1: left promiscuous mode [ 233.013604][ T12] bridge0: port 3(team0) entered disabled state [ 233.033801][ T12] bridge_slave_1: left allmulticast mode [ 233.039489][ T12] bridge_slave_1: left promiscuous mode [ 233.057178][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.075437][ T12] bridge_slave_0: left allmulticast mode [ 233.085539][ T12] bridge_slave_0: left promiscuous mode [ 233.093390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.539162][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.551886][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.563529][ T12] bond0 (unregistering): Released all slaves [ 234.688843][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.700712][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.719205][ T12] bond0 (unregistering): Released all slaves [ 234.832708][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.844958][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.856224][ T12] bond0 (unregistering): Released all slaves [ 235.081866][ T29] audit: type=1400 audit(1723538583.919:326): avc: denied { mount } for pid=6227 comm="syz.2.144" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 235.136944][ T29] audit: type=1400 audit(1723538583.969:327): avc: denied { unlink } for pid=6227 comm="syz.2.144" name="#1" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.176659][ T6228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.205084][ T6231] FAULT_INJECTION: forcing a failure. [ 235.205084][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 235.208955][ T6042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.229511][ T29] audit: type=1400 audit(1723538584.039:328): avc: denied { mount } for pid=6227 comm="syz.2.144" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.277901][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.2.144 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 235.288563][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 235.298617][ T6231] Call Trace: [ 235.301892][ T6231] [ 235.304813][ T6231] dump_stack_lvl+0x16c/0x1f0 [ 235.309491][ T6231] should_fail_ex+0x497/0x5b0 [ 235.314192][ T6231] ? fs_reclaim_acquire+0xae/0x160 [ 235.319336][ T6231] should_failslab+0xc2/0x120 [ 235.324042][ T6231] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 235.329415][ T6231] ? getname_flags.part.0+0x4c/0x550 [ 235.334699][ T6231] getname_flags.part.0+0x4c/0x550 [ 235.339805][ T6231] __x64_sys_mkdir+0xd8/0x140 [ 235.344472][ T6231] do_syscall_64+0xcd/0x250 [ 235.348974][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.354874][ T6231] RIP: 0033:0x7f032ab799f9 [ 235.359274][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.378876][ T6231] RSP: 002b:00007f032b936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 235.387716][ T6231] RAX: ffffffffffffffda RBX: 00007f032ad16058 RCX: 00007f032ab799f9 [ 235.395677][ T6231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 235.403644][ T6231] RBP: 00007f032b936090 R08: 0000000000000000 R09: 0000000000000000 [ 235.411616][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.419573][ T6231] R13: 0000000000000000 R14: 00007f032ad16058 R15: 00007fff5bed6428 [ 235.427539][ T6231] [ 235.485364][ T29] audit: type=1400 audit(1723538584.319:329): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 235.537036][ T6042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.558115][ T6042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.635643][ T6042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.767706][ T6238] syz.2.145[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.775902][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.878685][ T29] audit: type=1400 audit(1723538584.709:330): avc: denied { write } for pid=6236 comm="syz.2.145" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 236.056266][ T29] audit: type=1400 audit(1723538584.889:331): avc: denied { create } for pid=6245 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.121626][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 236.549033][ T5944] veth0_vlan: entered promiscuous mode [ 236.713465][ T5944] veth1_vlan: entered promiscuous mode [ 237.086498][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.181116][ T5944] veth0_macvtap: entered promiscuous mode [ 237.391421][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.423339][ T5944] veth1_macvtap: entered promiscuous mode [ 237.959120][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.966375][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.034688][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.041958][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.103032][ T12] hsr_slave_0: left promiscuous mode [ 238.109486][ T12] hsr_slave_1: left promiscuous mode [ 238.119757][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.142800][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.162094][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.178089][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.230687][ T12] hsr_slave_0: left promiscuous mode [ 238.257482][ T12] hsr_slave_1: left promiscuous mode [ 238.269798][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.290052][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.317434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.327301][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.362614][ T12] hsr_slave_0: left promiscuous mode [ 238.406140][ T12] hsr_slave_1: left promiscuous mode [ 238.437999][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.471754][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.499779][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.509066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.651636][ T12] veth1_macvtap: left promiscuous mode [ 238.671889][ T12] veth0_macvtap: left promiscuous mode [ 238.678497][ T12] veth1_vlan: left promiscuous mode [ 238.688626][ T12] veth0_vlan: left promiscuous mode [ 238.705266][ T12] veth1_macvtap: left promiscuous mode [ 238.711236][ T12] veth0_macvtap: left promiscuous mode [ 238.721458][ T12] veth1_vlan: left promiscuous mode [ 238.727089][ T12] veth0_vlan: left promiscuous mode [ 238.738436][ T12] veth1_macvtap: left promiscuous mode [ 238.751502][ T12] veth0_macvtap: left promiscuous mode [ 238.769598][ T12] veth1_vlan: left promiscuous mode [ 238.775315][ T12] veth0_vlan: left promiscuous mode [ 239.422648][ T12] infiniband syz1: set down [ 239.959204][ T12] team0 (unregistering): Port device team_slave_1 removed [ 240.000231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 240.833020][ T12] team0 (unregistering): Port device team_slave_1 removed [ 240.877718][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.315348][ T2552] smc: removing ib device syz1 [ 242.398162][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.585504][ T12] team0 (unregistering): Port device team_slave_0 removed [ 243.452506][ T6040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.476358][ T6040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.497465][ T6267] bridge0: port 3(team0) entered blocking state [ 243.509048][ T6267] bridge0: port 3(team0) entered disabled state [ 243.519926][ T6267] team0: entered allmulticast mode [ 243.535247][ T6267] team_slave_0: entered allmulticast mode [ 243.547975][ T6267] team_slave_1: entered allmulticast mode [ 243.555931][ T6267] team0: entered promiscuous mode [ 243.573834][ T6267] team_slave_0: entered promiscuous mode [ 243.579676][ T6267] team_slave_1: entered promiscuous mode [ 243.587573][ T6267] bridge0: port 3(team0) entered blocking state [ 243.593979][ T6267] bridge0: port 3(team0) entered forwarding state [ 243.601100][ T46] vcan0 speed is unknown, defaulting to 1000 [ 243.604628][ T6040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.643788][ T6040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.883978][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.899722][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.924153][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.935071][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.947931][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.957791][ T6042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.988880][ T6035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.035507][ T6035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.074819][ T6035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.102078][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.127804][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.150790][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.181970][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.202812][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.229214][ T6035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.273346][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.291059][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.312476][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.345595][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.716833][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.827954][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.879951][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.044164][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.075423][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.104862][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.197546][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.233126][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.285247][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.292491][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.506671][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.513933][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.981864][ T29] audit: type=1400 audit(1723538594.469:332): avc: denied { mount } for pid=6293 comm="syz.0.107" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 246.197110][ T29] audit: type=1400 audit(1723538594.479:333): avc: denied { ioctl } for pid=6293 comm="syz.0.107" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.492786][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.601695][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.608938][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.644103][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.651398][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.084509][ T6042] veth0_vlan: entered promiscuous mode [ 248.264810][ T6042] veth1_vlan: entered promiscuous mode [ 248.627849][ T6042] veth0_macvtap: entered promiscuous mode [ 248.649176][ T6042] veth1_macvtap: entered promiscuous mode [ 249.383787][ T5235] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 249.392753][ T5235] Bluetooth: hci6: Injecting HCI hardware error event [ 249.402209][ T5235] Bluetooth: hci6: hardware error 0x00 [ 249.479497][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.517476][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.540410][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.572554][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.585952][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.599992][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.618210][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.672500][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.695278][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.705985][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.727818][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.737919][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.750478][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.769646][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.995546][ T8] IPVS: starting estimator thread 0... [ 250.005971][ T6042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.015442][ T6042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.027537][ T6042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.036469][ T6042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.092563][ T6337] IPVS: using max 31 ests per chain, 74400 per kthread [ 250.113799][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.145572][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.407355][ T6040] veth0_vlan: entered promiscuous mode [ 250.435408][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.455832][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.500765][ T6040] veth1_vlan: entered promiscuous mode [ 250.709426][ T6339] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 250.733919][ T6035] veth0_vlan: entered promiscuous mode [ 250.750596][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.779712][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.835483][ T6035] veth1_vlan: entered promiscuous mode [ 251.027990][ T6040] veth0_macvtap: entered promiscuous mode [ 251.081107][ T6040] veth1_macvtap: entered promiscuous mode [ 251.103258][ T29] audit: type=1400 audit(1723538599.939:334): avc: denied { mount } for pid=6345 comm="syz.4.128" name="/" dev="ramfs" ino=14889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 251.161352][ T6035] veth0_macvtap: entered promiscuous mode [ 251.187412][ T6347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.188559][ T6035] veth1_macvtap: entered promiscuous mode [ 251.209082][ T6350] [U] v3f"S/4:XTzWtlW= [ 251.215026][ T6350] [U] J"e:" [ 251.229124][ T29] audit: type=1400 audit(1723538599.989:335): avc: denied { ioctl } for pid=6346 comm="syz.0.159" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 251.290068][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 251.325070][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.337262][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.348647][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.360494][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.371143][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.382593][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.408696][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.425985][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.448517][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.486832][ T29] audit: type=1400 audit(1723538600.309:336): avc: denied { unmount } for pid=6042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 251.515264][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.524767][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.614366][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.630899][ T5235] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 251.647126][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.669689][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.685910][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.697177][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.709377][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.719895][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.734507][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.868823][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.905418][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.545762][ T6341] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 252.562583][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.751937][ T29] audit: type=1400 audit(1723538601.579:337): avc: denied { read } for pid=6356 comm="syz.0.161" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 252.775563][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.808383][ T29] audit: type=1400 audit(1723538601.579:338): avc: denied { open } for pid=6356 comm="syz.0.161" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 252.810763][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.890491][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.905703][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.926231][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.944137][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.964314][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.975347][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.040864][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.087751][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.109452][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.148160][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.197167][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.206381][ T29] audit: type=1400 audit(1723538602.029:339): avc: denied { ioctl } for pid=6366 comm="syz.2.163" path="socket:[14923]" dev="sockfs" ino=14923 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.216087][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.244879][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.256028][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.267013][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.279823][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.293045][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.308187][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.341326][ T5269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 253.364149][ T6040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.395953][ T6040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.445139][ T6040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.477154][ T6040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.584562][ T6035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.631247][ T5269] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.654381][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.658240][ T6035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.683095][ T5269] usb 1-1: Product: syz [ 253.687323][ T5269] usb 1-1: Manufacturer: syz [ 253.707672][ T6035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.728353][ T5269] usb 1-1: SerialNumber: syz [ 253.747166][ T6035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.763670][ T5269] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 253.954854][ T5270] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.159328][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.211252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.230836][ T5270] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 255.288271][ T5270] ath9k_htc: Failed to initialize the device [ 256.210634][ T5221] usb 1-1: USB disconnect, device number 2 [ 256.247612][ T5221] usb 1-1: ath9k_htc: USB layer deinitialized [ 256.312271][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.343667][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.352039][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.358403][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.467488][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.501310][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.604428][ T6387] netlink: 'syz.3.127': attribute type 11 has an invalid length. [ 256.707014][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.756004][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.164256][ T29] audit: type=1400 audit(1723538605.999:340): avc: denied { mount } for pid=6389 comm="syz.2.167" name="/" dev="pstore" ino=2580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 257.209796][ T6394] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.300460][ T5271] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 257.357095][ T6398] 9pnet_fd: Insufficient options for proto=fd [ 257.438658][ T29] audit: type=1400 audit(1723538606.259:341): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 257.530628][ T5271] usb 4-1: Using ep0 maxpacket: 8 [ 257.598994][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 257.622337][ T5271] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 257.655763][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 257.833229][ T5271] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 257.843041][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.858922][ T5271] usb 4-1: Product: syz [ 257.875349][ T5271] usb 4-1: Manufacturer: syz [ 258.676674][ T5271] usb 4-1: SerialNumber: syz [ 258.732299][ T5271] usb 4-1: config 0 descriptor?? [ 258.905070][ T5271] redrat3 4-1:0.0: Couldn't find all endpoints [ 259.276498][ T6419] FAULT_INJECTION: forcing a failure. [ 259.276498][ T6419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.442782][ T6423] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 259.450613][ T6423] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.172'. [ 260.020902][ T6400] [U] v3f"S/4:XTzWtlW= [ 260.026964][ T6400] [U] J"e:" [ 260.043757][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.4.173 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 260.054457][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 260.064522][ T6419] Call Trace: [ 260.067823][ T6419] [ 260.070772][ T6419] dump_stack_lvl+0x16c/0x1f0 [ 260.075489][ T6419] should_fail_ex+0x497/0x5b0 [ 260.080206][ T6419] _copy_from_user+0x30/0xf0 [ 260.084829][ T6419] copy_msghdr_from_user+0x99/0x160 [ 260.090048][ T6419] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.095877][ T6419] ? find_held_lock+0x2d/0x110 [ 260.100665][ T6419] ? __pfx___lock_acquire+0x10/0x10 [ 260.105865][ T6419] ___sys_sendmsg+0xff/0x1e0 [ 260.110447][ T6419] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.115723][ T6419] ? ksys_write+0x21c/0x260 [ 260.120223][ T6419] ? __fget_light+0x173/0x210 [ 260.124915][ T6419] __sys_sendmsg+0x117/0x1f0 [ 260.129490][ T6419] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.134598][ T6419] do_syscall_64+0xcd/0x250 [ 260.139096][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.144989][ T6419] RIP: 0033:0x7f3a66d799f9 [ 260.149393][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.169020][ T6419] RSP: 002b:00007f3a67b92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.177450][ T6419] RAX: ffffffffffffffda RBX: 00007f3a66f15f80 RCX: 00007f3a66d799f9 [ 260.185952][ T6419] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 260.193932][ T6419] RBP: 00007f3a67b92090 R08: 0000000000000000 R09: 0000000000000000 [ 260.201992][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.209967][ T6419] R13: 0000000000000000 R14: 00007f3a66f15f80 R15: 00007ffec24b8998 [ 260.217937][ T6419] [ 260.248682][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.420599][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.535871][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.549318][ T6425] FAULT_INJECTION: forcing a failure. [ 260.549318][ T6425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.577594][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.0.174 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 260.588200][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 260.598263][ T6425] Call Trace: [ 260.601560][ T6425] [ 260.604480][ T6425] dump_stack_lvl+0x16c/0x1f0 [ 260.609159][ T6425] should_fail_ex+0x497/0x5b0 [ 260.613837][ T6425] _copy_from_iter+0x44f/0x1150 [ 260.618691][ T6425] ? __alloc_skb+0x1fe/0x380 [ 260.623286][ T6425] ? __pfx__copy_from_iter+0x10/0x10 [ 260.628596][ T6425] ? __virt_addr_valid+0x5e/0x590 [ 260.633714][ T6425] ? __phys_addr_symbol+0x30/0x80 [ 260.639536][ T6425] ? __check_object_size+0x497/0x720 [ 260.644832][ T6425] netlink_sendmsg+0x813/0xd70 [ 260.649631][ T6425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.654935][ T6425] ? __import_iovec+0x1fd/0x6e0 [ 260.659803][ T6425] ____sys_sendmsg+0xab5/0xc90 [ 260.664592][ T6425] ? copy_msghdr_from_user+0x10b/0x160 [ 260.670042][ T6425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.675321][ T6425] ? find_held_lock+0x2d/0x110 [ 260.680078][ T6425] ? __pfx___lock_acquire+0x10/0x10 [ 260.685272][ T6425] ___sys_sendmsg+0x135/0x1e0 [ 260.689950][ T6425] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.695146][ T6425] ? ksys_write+0x21c/0x260 [ 260.699646][ T6425] ? __fget_light+0x173/0x210 [ 260.704327][ T6425] __sys_sendmsg+0x117/0x1f0 [ 260.708914][ T6425] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.714024][ T6425] do_syscall_64+0xcd/0x250 [ 260.718533][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.724438][ T6425] RIP: 0033:0x7fb3929799f9 [ 260.728836][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.748442][ T6425] RSP: 002b:00007fb3937f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.756851][ T6425] RAX: ffffffffffffffda RBX: 00007fb392b15f80 RCX: 00007fb3929799f9 [ 260.764820][ T6425] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 260.772781][ T6425] RBP: 00007fb3937f6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.780739][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.788804][ T6425] R13: 0000000000000000 R14: 00007fb392b15f80 R15: 00007ffec1247ee8 [ 260.796855][ T6425] [ 260.847430][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.875392][ T5270] usb 4-1: USB disconnect, device number 3 [ 261.290229][ T6395] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 261.338195][ T6437] [U] v3f"S/4:XTzWtlW= [ 261.344144][ T6437] [U] J"e:" [ 262.176439][ T29] audit: type=1400 audit(1723538610.989:342): avc: denied { create } for pid=6440 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.206915][ T29] audit: type=1400 audit(1723538611.009:343): avc: denied { setopt } for pid=6440 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.337560][ T6427] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 262.370671][ T29] audit: type=1400 audit(1723538611.159:344): avc: denied { read } for pid=6440 comm="syz.3.177" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 262.479090][ T29] audit: type=1400 audit(1723538611.159:345): avc: denied { open } for pid=6440 comm="syz.3.177" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 262.614205][ T29] audit: type=1400 audit(1723538611.269:346): avc: denied { map } for pid=6445 comm="syz.1.178" path="socket:[15246]" dev="sockfs" ino=15246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.346180][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 263.621173][ T29] audit: type=1400 audit(1723538612.459:347): avc: denied { create } for pid=6450 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 263.801876][ T6463] FAULT_INJECTION: forcing a failure. [ 263.801876][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.930707][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.0.180 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 263.941448][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.951523][ T6463] Call Trace: [ 263.954795][ T6463] [ 263.957710][ T6463] dump_stack_lvl+0x16c/0x1f0 [ 263.962390][ T6463] should_fail_ex+0x497/0x5b0 [ 263.967062][ T6463] _copy_from_iter+0x2a1/0x1150 [ 263.971908][ T6463] ? __alloc_skb+0x1fe/0x380 [ 263.976495][ T6463] ? __pfx__copy_from_iter+0x10/0x10 [ 263.981776][ T6463] ? __virt_addr_valid+0x5e/0x590 [ 263.986786][ T6463] ? __phys_addr_symbol+0x30/0x80 [ 263.991796][ T6463] ? __check_object_size+0x497/0x720 [ 263.997075][ T6463] netlink_sendmsg+0x813/0xd70 [ 264.001837][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.007116][ T6463] ? __import_iovec+0x1fd/0x6e0 [ 264.011984][ T6463] ____sys_sendmsg+0xab5/0xc90 [ 264.016758][ T6463] ? copy_msghdr_from_user+0x10b/0x160 [ 264.022302][ T6463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.027597][ T6463] ? find_held_lock+0x2d/0x110 [ 264.032359][ T6463] ? __pfx___lock_acquire+0x10/0x10 [ 264.037551][ T6463] ___sys_sendmsg+0x135/0x1e0 [ 264.042222][ T6463] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.047491][ T6463] ? ksys_write+0x21c/0x260 [ 264.051996][ T6463] ? __fget_light+0x173/0x210 [ 264.056680][ T6463] __sys_sendmsg+0x117/0x1f0 [ 264.061269][ T6463] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.066377][ T6463] do_syscall_64+0xcd/0x250 [ 264.070880][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.076858][ T6463] RIP: 0033:0x7fb3929799f9 [ 264.081259][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.100870][ T6463] RSP: 002b:00007fb3937b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.109363][ T6463] RAX: ffffffffffffffda RBX: 00007fb392b16130 RCX: 00007fb3929799f9 [ 264.117323][ T6463] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 264.125281][ T6463] RBP: 00007fb3937b4090 R08: 0000000000000000 R09: 0000000000000000 [ 264.133241][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.141202][ T6463] R13: 0000000000000000 R14: 00007fb392b16130 R15: 00007ffec1247ee8 [ 264.149165][ T6463] [ 264.328778][ T29] audit: type=1400 audit(1723538613.159:348): avc: denied { map } for pid=6465 comm="syz.1.184" path="socket:[16107]" dev="sockfs" ino=16107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.420083][ T29] audit: type=1400 audit(1723538613.159:349): avc: denied { read } for pid=6465 comm="syz.1.184" path="socket:[16107]" dev="sockfs" ino=16107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.550082][ T29] audit: type=1400 audit(1723538613.189:350): avc: denied { create } for pid=6465 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 264.652828][ T29] audit: type=1400 audit(1723538613.199:351): avc: denied { setopt } for pid=6465 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 266.115144][ T6472] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 267.952084][ T6501] FAULT_INJECTION: forcing a failure. [ 267.952084][ T6501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.002361][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.0.193 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 268.012989][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 268.023073][ T6501] Call Trace: [ 268.026341][ T6501] [ 268.029256][ T6501] dump_stack_lvl+0x16c/0x1f0 [ 268.033934][ T6501] should_fail_ex+0x497/0x5b0 [ 268.038610][ T6501] _copy_from_iter+0x2a1/0x1150 [ 268.043457][ T6501] ? __alloc_skb+0x1fe/0x380 [ 268.048039][ T6501] ? __pfx__copy_from_iter+0x10/0x10 [ 268.053405][ T6501] ? __virt_addr_valid+0x5e/0x590 [ 268.058501][ T6501] ? __phys_addr_symbol+0x30/0x80 [ 268.063512][ T6501] ? __check_object_size+0x497/0x720 [ 268.068871][ T6501] netlink_sendmsg+0x813/0xd70 [ 268.073648][ T6501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.078947][ T6501] ? __import_iovec+0x1fd/0x6e0 [ 268.083852][ T6501] ____sys_sendmsg+0xab5/0xc90 [ 268.088623][ T6501] ? copy_msghdr_from_user+0x10b/0x160 [ 268.094091][ T6501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.099387][ T6501] ? find_held_lock+0x2d/0x110 [ 268.104164][ T6501] ? __pfx___lock_acquire+0x10/0x10 [ 268.109367][ T6501] ___sys_sendmsg+0x135/0x1e0 [ 268.114046][ T6501] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.119247][ T6501] ? ksys_write+0x21c/0x260 [ 268.123752][ T6501] ? __fget_light+0x173/0x210 [ 268.128442][ T6501] __sys_sendmsg+0x117/0x1f0 [ 268.133035][ T6501] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.138149][ T6501] do_syscall_64+0xcd/0x250 [ 268.143095][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.149006][ T6501] RIP: 0033:0x7fb3929799f9 [ 268.153420][ T6501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.173220][ T6501] RSP: 002b:00007fb3937f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.181650][ T6501] RAX: ffffffffffffffda RBX: 00007fb392b15f80 RCX: 00007fb3929799f9 [ 268.189628][ T6501] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 268.197606][ T6501] RBP: 00007fb3937f6090 R08: 0000000000000000 R09: 0000000000000000 [ 268.205865][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.213932][ T6501] R13: 0000000000000000 R14: 00007fb392b15f80 R15: 00007ffec1247ee8 [ 268.221905][ T6501] [ 268.703069][ T6511] syz.1.194 uses obsolete (PF_INET,SOCK_PACKET) [ 268.788612][ T6515] FAULT_INJECTION: forcing a failure. [ 268.788612][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.853384][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.0.196 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 268.864014][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 268.874073][ T6515] Call Trace: [ 268.877368][ T6515] [ 268.880317][ T6515] dump_stack_lvl+0x16c/0x1f0 [ 268.885031][ T6515] should_fail_ex+0x497/0x5b0 [ 268.889764][ T6515] _copy_from_iter+0x2a1/0x1150 [ 268.894660][ T6515] ? __alloc_skb+0x1fe/0x380 [ 268.899248][ T6515] ? __pfx__copy_from_iter+0x10/0x10 [ 268.904528][ T6515] ? __virt_addr_valid+0x5e/0x590 [ 268.909552][ T6515] ? __phys_addr_symbol+0x30/0x80 [ 268.914600][ T6515] ? __check_object_size+0x497/0x720 [ 268.919919][ T6515] netlink_sendmsg+0x813/0xd70 [ 268.924717][ T6515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.930026][ T6515] ? __import_iovec+0x1fd/0x6e0 [ 268.934920][ T6515] ____sys_sendmsg+0xab5/0xc90 [ 268.939735][ T6515] ? copy_msghdr_from_user+0x10b/0x160 [ 268.945214][ T6515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.950503][ T6515] ? find_held_lock+0x2d/0x110 [ 268.955282][ T6515] ? __pfx___lock_acquire+0x10/0x10 [ 268.960486][ T6515] ___sys_sendmsg+0x135/0x1e0 [ 268.965165][ T6515] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.970365][ T6515] ? ksys_write+0x21c/0x260 [ 268.974870][ T6515] ? __fget_light+0x173/0x210 [ 268.979561][ T6515] __sys_sendmsg+0x117/0x1f0 [ 268.984154][ T6515] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.989270][ T6515] do_syscall_64+0xcd/0x250 [ 268.993786][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.999697][ T6515] RIP: 0033:0x7fb3929799f9 [ 269.004198][ T6515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.023808][ T6515] RSP: 002b:00007fb3937f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.032227][ T6515] RAX: ffffffffffffffda RBX: 00007fb392b15f80 RCX: 00007fb3929799f9 [ 269.040201][ T6515] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 269.048171][ T6515] RBP: 00007fb3937f6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.056663][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.064635][ T6515] R13: 0000000000000000 R14: 00007fb392b15f80 R15: 00007ffec1247ee8 [ 269.072637][ T6515] [ 270.846708][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 270.846733][ T29] audit: type=1400 audit(1723538619.679:354): avc: denied { connect } for pid=6522 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 271.005668][ T29] audit: type=1400 audit(1723538619.719:355): avc: denied { read } for pid=6522 comm="syz.1.197" laddr=fe80::98a1:c0ff:fea0:d78f lport=2 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 271.364548][ T6522] Process accounting resumed [ 271.934281][ T6541] [U] v3f"S/4:XTzWtlW= [ 271.940323][ T6541] [U] J"e:" [ 272.193796][ T6549] FAULT_INJECTION: forcing a failure. [ 272.193796][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.216982][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.4.204 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 272.227624][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 272.237681][ T6549] Call Trace: [ 272.241002][ T6549] [ 272.243939][ T6549] dump_stack_lvl+0x16c/0x1f0 [ 272.248627][ T6549] should_fail_ex+0x497/0x5b0 [ 272.253335][ T6549] _copy_from_iter+0x2a1/0x1150 [ 272.258204][ T6549] ? __pfx__copy_from_iter+0x10/0x10 [ 272.263521][ T6549] ? __virt_addr_valid+0x5e/0x590 [ 272.268554][ T6549] ? const_folio_flags.constprop.0+0x56/0x150 [ 272.274626][ T6549] ? __phys_addr_symbol+0x30/0x80 [ 272.279683][ T6549] ? __check_object_size+0x497/0x720 [ 272.284974][ T6549] netlink_sendmsg+0x813/0xd70 [ 272.289747][ T6549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.295055][ T6549] ? __import_iovec+0x1fd/0x6e0 [ 272.299914][ T6549] ____sys_sendmsg+0xab5/0xc90 [ 272.304700][ T6549] ? copy_msghdr_from_user+0x10b/0x160 [ 272.310158][ T6549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.315458][ T6549] ? find_held_lock+0x2d/0x110 [ 272.320231][ T6549] ? __pfx___lock_acquire+0x10/0x10 [ 272.325427][ T6549] ___sys_sendmsg+0x135/0x1e0 [ 272.330100][ T6549] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.335324][ T6549] ? ksys_write+0x21c/0x260 [ 272.339908][ T6549] ? __fget_light+0x173/0x210 [ 272.344595][ T6549] __sys_sendmsg+0x117/0x1f0 [ 272.349261][ T6549] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.354396][ T6549] do_syscall_64+0xcd/0x250 [ 272.358931][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.364835][ T6549] RIP: 0033:0x7f3a66d799f9 [ 272.369246][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.388872][ T6549] RSP: 002b:00007f3a67b92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.397293][ T6549] RAX: ffffffffffffffda RBX: 00007f3a66f15f80 RCX: 00007f3a66d799f9 [ 272.405348][ T6549] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 272.413488][ T6549] RBP: 00007f3a67b92090 R08: 0000000000000000 R09: 0000000000000000 [ 272.421465][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.429438][ T6549] R13: 0000000000000000 R14: 00007f3a66f15f80 R15: 00007ffec24b8998 [ 272.437562][ T6549] [ 272.510324][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 272.539177][ T6540] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 273.016392][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.040251][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.079334][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.130236][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.160289][ T29] audit: type=1400 audit(1723538621.979:356): avc: denied { create } for pid=6556 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 273.161864][ T8] usb 1-1: SerialNumber: syz [ 273.290320][ T29] audit: type=1400 audit(1723538621.979:357): avc: denied { write } for pid=6556 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 273.364708][ T29] audit: type=1400 audit(1723538621.979:358): avc: denied { nlmsg_read } for pid=6556 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 273.709256][ T8] usb 1-1: 0:2 : does not exist [ 273.855686][ T8] usb 1-1: USB disconnect, device number 3 [ 275.030705][ T29] audit: type=1400 audit(1723538623.209:359): avc: denied { bind } for pid=6566 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 275.102772][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.723538][ T29] audit: type=1400 audit(1723538625.939:360): avc: denied { setopt } for pid=6579 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.793470][ T6594] tipc: Started in network mode [ 278.833778][ T6594] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 278.855601][ T6594] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 278.978124][ T6594] tipc: Enabled bearer , priority 10 [ 279.539031][ T6612] netlink: 'syz.0.217': attribute type 5 has an invalid length. [ 279.547050][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 280.230752][ T6298] tipc: Node number set to 1 [ 280.243800][ T6586] [U] v3f"S/4:XTzWtlW= [ 280.249853][ T6586] [U] J"e:" [ 281.666525][ T6624] fuse: Unknown parameter 'use00000000000000000000' [ 281.683412][ T29] audit: type=1400 audit(1723538630.519:361): avc: denied { setattr } for pid=6623 comm="syz.1.222" name="NETLINK" dev="sockfs" ino=16495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.031752][ T6630] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.224'. [ 282.045068][ T6629] netlink: 'syz.4.223': attribute type 5 has an invalid length. [ 282.055780][ T6629] netlink: 7 bytes leftover after parsing attributes in process `syz.4.223'. [ 282.340268][ T29] audit: type=1400 audit(1723538631.129:362): avc: denied { watch } for pid=6622 comm="syz.4.223" path="/13/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 285.872683][ T6590] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 285.997427][ T29] audit: type=1400 audit(1723538634.829:363): avc: denied { create } for pid=6648 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 286.024114][ T6654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6654 comm=syz.0.228 [ 286.094214][ T6654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6654 comm=syz.0.228 [ 286.133170][ T29] audit: type=1400 audit(1723538634.889:364): avc: denied { listen } for pid=6652 comm="syz.1.229" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 286.254333][ T29] audit: type=1400 audit(1723538634.929:365): avc: denied { read } for pid=6652 comm="syz.1.229" laddr=127.0.0.1 lport=34972 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 286.333434][ T29] audit: type=1400 audit(1723538635.069:366): avc: denied { audit_write } for pid=6648 comm="syz.0.228" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 286.439383][ T6665] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 286.600875][ T5270] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 286.820830][ T5270] usb 3-1: Using ep0 maxpacket: 32 [ 286.987505][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 288.175665][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.238726][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 288.296025][ T5270] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 288.309113][ T6676] xt_l2tp: v2 tid > 0xffff: 262144 [ 288.317731][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.497763][ T5270] usb 3-1: Product: syz [ 288.510336][ T5270] usb 3-1: Manufacturer: syz [ 288.515462][ T5270] usb 3-1: SerialNumber: syz [ 289.119669][ T5270] usb 3-1: config 0 descriptor?? [ 289.147556][ T5270] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 289.310836][ T5221] usb 3-1: USB disconnect, device number 4 [ 290.049462][ T29] audit: type=1400 audit(1723538638.279:367): avc: denied { sqpoll } for pid=6680 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 290.232602][ T1706] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 290.430268][ T1706] usb 2-1: Using ep0 maxpacket: 8 [ 290.458677][ T1706] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 290.545640][ T1706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.806217][ T1706] usb 2-1: Product: syz [ 290.830255][ T1706] usb 2-1: Manufacturer: syz [ 291.228788][ T1706] usb 2-1: SerialNumber: syz [ 291.336854][ T1706] usb 2-1: config 0 descriptor?? [ 291.487226][ T29] audit: type=1400 audit(1723538640.319:368): avc: denied { unmount } for pid=6040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.681018][ T1706] msi2500 2-1:0.0: Registered as swradio16 [ 291.686887][ T1706] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 292.928368][ T25] usb 2-1: USB disconnect, device number 3 [ 293.203832][ T5270] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.455892][ T5270] usb 4-1: config 0 has no interfaces? [ 293.462824][ T5270] usb 4-1: New USB device found, idVendor=0af0, idProduct=d058, bcdDevice= 0.00 [ 293.482376][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.509154][ T5270] usb 4-1: config 0 descriptor?? [ 293.563592][ T6727] netlink: 76 bytes leftover after parsing attributes in process `syz.0.247'. [ 293.579174][ T6727] Bluetooth: MGMT ver 1.23 [ 293.603084][ T29] audit: type=1400 audit(1723538642.409:369): avc: denied { getopt } for pid=6723 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.930273][ T29] audit: type=1400 audit(1723538642.759:370): avc: denied { create } for pid=6729 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.064808][ T6738] use of bytesused == 0 is deprecated and will be removed in the future, [ 294.085359][ T6738] use the actual size instead. [ 294.085427][ T29] audit: type=1400 audit(1723538642.789:371): avc: denied { bind } for pid=6729 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.242549][ T6744] netlink: 56 bytes leftover after parsing attributes in process `syz.3.244'. [ 295.764221][ T29] audit: type=1400 audit(1723538644.579:372): avc: denied { append } for pid=6757 comm="syz.2.254" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 295.829490][ T29] audit: type=1400 audit(1723538644.639:373): avc: denied { bind } for pid=6758 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.885566][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 297.161077][ T6773] [U] v3f"S/4:XTzWtlW= [ 297.167036][ T6773] [U] J"e:" [ 297.236775][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 297.286085][ T25] usb 5-1: can't read configurations, error -61 [ 297.379972][ T5270] usb 4-1: USB disconnect, device number 4 [ 297.426862][ T6772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.254'. [ 297.436405][ T6772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.254'. [ 297.565199][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 297.742958][ T6767] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 297.832274][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 297.839872][ T25] usb 5-1: can't read configurations, error -61 [ 297.858345][ T25] usb usb5-port1: attempt power cycle [ 298.442902][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 298.516981][ T6787] netlink: 'syz.2.260': attribute type 12 has an invalid length. [ 298.537345][ T5221] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 298.575526][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 298.580888][ T30] INFO: task syz.1.64:5582 blocked for more than 143 seconds. [ 298.595376][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 298.601288][ T29] audit: type=1400 audit(1723538647.339:374): avc: denied { getopt } for pid=6779 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 298.603586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.639865][ T25] usb 5-1: can't read configurations, error -61 [ 298.640452][ T30] task:syz.1.64 state:D stack:27168 pid:5582 tgid:5582 ppid:5232 flags:0x00004004 [ 298.720536][ T30] Call Trace: [ 298.753951][ T30] [ 298.775692][ T5221] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 298.817891][ T30] __schedule+0xe37/0x5490 [ 298.823115][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 298.853784][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 298.859057][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 298.870685][ T5221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.902027][ T5221] usb 2-1: Product: syz [ 298.907733][ T30] ? __pfx___schedule+0x10/0x10 [ 298.931144][ T5221] usb 2-1: Manufacturer: syz [ 298.931322][ T5271] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 298.949192][ T30] ? schedule+0x298/0x350 [ 298.965193][ T5221] usb 2-1: SerialNumber: syz [ 298.971821][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.980439][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.999316][ T30] schedule+0xe7/0x350 [ 299.001171][ T5221] usb 2-1: config 0 descriptor?? [ 299.017667][ T30] do_exit+0x3fe/0x2bb0 [ 299.029280][ T30] ? get_signal+0x8f2/0x2770 [ 299.035813][ T30] ? __pfx_do_exit+0x10/0x10 [ 299.047668][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.057172][ T30] do_group_exit+0xd3/0x2a0 [ 299.073365][ T30] get_signal+0x25fd/0x2770 [ 299.086104][ T30] ? __pfx_get_signal+0x10/0x10 [ 299.100391][ T30] ? __pfx_do_futex+0x10/0x10 [ 299.110294][ T5271] usb 3-1: device descriptor read/64, error -71 [ 299.110538][ T25] usb 5-1: device not accepting address 6, error -71 [ 299.134734][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 299.147409][ T25] usb usb5-port1: unable to enumerate USB device [ 299.150879][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 299.170521][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 299.181916][ T30] do_syscall_64+0xda/0x250 [ 299.186474][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.200314][ T30] RIP: 0033:0x7f13c59799f9 [ 299.217328][ T30] RSP: 002b:00007fff3ed5bf38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 299.243844][ T30] RAX: fffffffffffffdfc RBX: 00000000000222d9 RCX: 00007f13c59799f9 [ 299.285177][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13c5b16064 [ 299.301943][ T30] RBP: 00007f13c5b16064 R08: 00007f13c5b15f80 R09: 00007fff3ed5c21f [ 299.320650][ T30] R10: 00007fff3ed5c030 R11: 0000000000000246 R12: 0000000000000032 [ 299.339129][ T30] R13: 00007fff3ed5c030 R14: 00007fff3ed5c050 R15: 00000000000222a7 [ 299.380195][ T30] [ 299.383418][ T30] INFO: task syz.1.64:5584 blocked for more than 144 seconds. [ 299.403657][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 299.419479][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.432176][ T5271] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 299.448465][ T30] task:syz.1.64 state:D stack:26320 pid:5584 tgid:5582 ppid:5232 flags:0x00004004 [ 299.459855][ T30] Call Trace: [ 299.464787][ T30] [ 299.469142][ T30] __schedule+0xe37/0x5490 [ 299.475241][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 299.486161][ T30] ? __pfx_lockdep_lock+0x10/0x10 [ 299.492909][ T29] audit: type=1400 audit(1723538648.319:375): avc: denied { name_bind } for pid=6782 comm="syz.1.259" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 299.495200][ T30] ? __pfx___schedule+0x10/0x10 [ 299.545778][ T5221] usb 2-1: Firmware: major: 16, minor: 185, hardware type: ATUSB (0) [ 299.550343][ T30] ? schedule+0x298/0x350 [ 299.570303][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.575479][ T30] schedule+0xe7/0x350 [ 299.579628][ T30] schedule_timeout+0x258/0x2a0 [ 299.590334][ T5271] usb 3-1: device descriptor read/64, error -71 [ 299.597531][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 299.610267][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.619337][ T30] __wait_for_common+0x3de/0x5f0 [ 299.635853][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 299.641808][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 299.647361][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 299.654233][ T30] wait_for_completion_state+0x1c/0x40 [ 299.659799][ T30] do_coredump+0x821/0x3de0 [ 299.669896][ T30] ? __pfx_do_coredump+0x10/0x10 [ 299.675274][ T30] ? find_held_lock+0x2d/0x110 [ 299.680087][ T30] get_signal+0x23d4/0x2770 [ 299.685919][ T30] ? __pfx_get_signal+0x10/0x10 [ 299.693207][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 299.699886][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 299.708121][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 299.715577][ T5271] usb usb3-port1: attempt power cycle [ 299.724709][ T30] do_syscall_64+0xda/0x250 [ 299.729468][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.738573][ T30] RIP: 0033:0x7f13c59799f9 [ 299.746363][ T30] RSP: 002b:00007f13c53de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 299.755291][ T30] RAX: 00000000000000ca RBX: 00007f13c5b16060 RCX: 00007f13c59799f9 [ 299.769015][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f13c5b16064 [ 299.778521][ T30] RBP: 00007f13c5b16058 R08: 00007f13c6665080 R09: 0000000000000000 [ 299.790090][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13c5b16064 [ 299.791286][ T5221] usb 2-1: failed to fetch extended address, random address set [ 299.798545][ T30] R13: 0000000000000000 R14: 00007fff3ed5bcf0 R15: 00007fff3ed5bdd8 [ 299.824276][ T30] [ 299.827563][ T30] INFO: task syz.1.64:5585 blocked for more than 144 seconds. [ 299.837633][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 299.855902][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.867993][ T30] task:syz.1.64 state:D stack:26832 pid:5585 tgid:5582 ppid:5232 flags:0x00004004 [ 299.959990][ T30] Call Trace: [ 299.983399][ T30] [ 299.993172][ T30] __schedule+0xe37/0x5490 [ 300.004578][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.011982][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.018497][ T30] ? __pfx___schedule+0x10/0x10 [ 300.024210][ T30] ? schedule+0x298/0x350 [ 300.028850][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.035374][ T5221] usb 2-1: USB disconnect, device number 4 [ 300.052088][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.057742][ T30] schedule+0xe7/0x350 [ 300.062487][ T30] do_exit+0x3fe/0x2bb0 [ 300.066739][ T30] ? get_signal+0x8f2/0x2770 [ 300.077699][ T30] ? __pfx_do_exit+0x10/0x10 [ 300.083105][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.088718][ T30] do_group_exit+0xd3/0x2a0 [ 300.094119][ T30] get_signal+0x25fd/0x2770 [ 300.098748][ T30] ? __pfx_get_signal+0x10/0x10 [ 300.104060][ T30] ? __pfx_do_futex+0x10/0x10 [ 300.109289][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 300.116269][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 300.123257][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 300.129897][ T30] do_syscall_64+0xda/0x250 [ 300.134609][ T5271] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 300.143222][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.143277][ T30] RIP: 0033:0x7f13c59799f9 [ 300.143297][ T30] RSP: 002b:00007f13c53bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 300.143326][ T30] RAX: fffffffffffffe00 RBX: 00007f13c5b16138 RCX: 00007f13c59799f9 [ 300.143344][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13c5b16138 [ 300.143363][ T30] RBP: 00007f13c5b16130 R08: 0000000000000000 R09: 0000000000000000 [ 300.143380][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13c5b1613c [ 300.143398][ T30] R13: 0000000000000000 R14: 00007fff3ed5bcf0 R15: 00007fff3ed5bdd8 [ 300.143420][ T30] [ 300.173273][ T30] [ 300.173273][ T30] Showing all locks held in the system: [ 300.173294][ T30] 1 lock held by khungtaskd/30: [ 300.173313][ T30] #0: ffffffff8ddb5ce0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 300.173430][ T30] 2 locks held by getty/4974: [ 300.173447][ T30] #0: ffff88802f3900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 300.173520][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 300.173589][ T30] 8 locks held by kworker/1:3/5221: [ 300.173604][ T30] #0: ffff888018af2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 300.285961][ T30] #1: ffffc900032c7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 300.297532][ T30] #2: ffff888023aa1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e20 [ 300.306814][ T30] #3: ffff888021fac190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 [ 300.342757][ T5271] usb 3-1: device descriptor read/8, error -71 [ 300.347081][ T30] #4: ffff888020251160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 300.362585][ T30] #5: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: ieee802154_unregister_hw+0x4d/0x100 [ 300.375309][ T30] #6: ffff88806ba48788 (&local->iflist_mtx#2){+.+.}-{3:3}, at: ieee802154_remove_interfaces+0x2d/0x250 [ 300.388960][ T30] #7: ffffffff8ddc1478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 300.407523][ T30] 5 locks held by kworker/0:5/5271: [ 300.414831][ T30] #0: ffff888018af2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 300.428337][ T30] #1: ffffc9000315fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 300.442158][ T30] #2: ffff888023adb190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e20 [ 300.455528][ T30] #3: ffff888023aa4518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2802/0x4e20 [ 300.469270][ T30] #4: ffff888021476268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x282b/0x4e20 [ 300.481936][ T30] 4 locks held by udevd/6659: [ 300.487060][ T30] #0: ffff88807aab18b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 [ 300.500275][ T30] #1: ffff88805f079088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 [ 300.509974][ T30] #2: ffff88802a1b5c38 (kn->active#22){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 300.527529][ T30] #3: ffff888021fac190 (&dev->mutex){....}-{3:3}, at: serial_show+0x26/0xa0 [ 300.537484][ T30] 1 lock held by syz.2.260/6786: [ 300.546553][ T30] [ 300.549435][ T30] ============================================= [ 300.549435][ T30] [ 300.578211][ T30] NMI backtrace for cpu 1 [ 300.582561][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 300.593063][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 300.603114][ T30] Call Trace: [ 300.606393][ T30] [ 300.609318][ T30] dump_stack_lvl+0x116/0x1f0 [ 300.614012][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 300.618952][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.624944][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 300.630934][ T30] watchdog+0xf4e/0x1280 [ 300.635182][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.639866][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.645071][ T30] ? __kthread_parkme+0x148/0x220 [ 300.650105][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.654792][ T30] kthread+0x2c1/0x3a0 [ 300.658858][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.664064][ T30] ? __pfx_kthread+0x10/0x10 [ 300.668655][ T30] ret_from_fork+0x45/0x80 [ 300.673082][ T30] ? __pfx_kthread+0x10/0x10 [ 300.677671][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.682446][ T30] [ 300.686744][ T30] Sending NMI from CPU 1 to CPUs 0: [ 300.688843][ T5271] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 300.692643][ C0] NMI backtrace for cpu 0 [ 300.692656][ C0] CPU: 0 UID: 0 PID: 5271 Comm: kworker/0:5 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 300.692685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 300.692700][ C0] Workqueue: usb_hub_wq hub_event [ 300.692734][ C0] RIP: 0010:delay_tsc+0x49/0xc0 [ 300.692765][ C0] Code: 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 bf 01 00 00 00 e8 e4 e5 54 f6 e8 0f 5c 0c 00 44 39 e0 75 36 0f 01 f9 <66> 90 48 c1 e2 20 48 89 d3 48 09 c3 48 89 d8 48 29 e8 4c 39 e8 73 [ 300.692788][ C0] RSP: 0018:ffffc9000315f3b0 EFLAGS: 00000046 [ 300.692805][ C0] RAX: 000000004a102848 RBX: 0000009c4a1027de RCX: 0000000000000000 [ 300.692821][ C0] RDX: 000000000000009c RSI: ffffffff8bb08e40 RDI: ffffffff8bb08e80 [ 300.692838][ C0] RBP: 0000009c4a101fd4 R08: 0000000000000005 R09: 0000000000000000 [ 300.692852][ C0] R10: 00000000000026c0 R11: 0000000000000000 R12: 0000000000000000 [ 300.692867][ C0] R13: 0000000000000899 R14: fffffbfff2a33f26 R15: dffffc0000000000 [ 300.692883][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 300.692906][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.692923][ C0] CR2: 00000000200f8000 CR3: 000000007ad58000 CR4: 00000000003506f0 [ 300.692938][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.692953][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.692967][ C0] Call Trace: [ 300.692975][ C0] [ 300.692983][ C0] ? show_regs+0x8c/0xa0 [ 300.693017][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 300.693047][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 300.693079][ C0] ? nmi_handle+0x1a9/0x5c0 [ 300.693101][ C0] ? delay_tsc+0x49/0xc0 [ 300.693132][ C0] ? default_do_nmi+0x6a/0x160 [ 300.693167][ C0] ? exc_nmi+0x170/0x1e0 [ 300.693186][ C0] ? end_repeat_nmi+0xf/0x53 [ 300.693214][ C0] ? delay_tsc+0x49/0xc0 [ 300.693241][ C0] ? delay_tsc+0x49/0xc0 [ 300.693269][ C0] ? delay_tsc+0x49/0xc0 [ 300.693296][ C0] [ 300.693303][ C0] [ 300.693310][ C0] wait_for_lsr+0x96/0x180 [ 300.693347][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 300.693378][ C0] serial8250_console_write+0xca3/0x1090 [ 300.693408][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 300.693435][ C0] ? __pfx_lock_release+0x10/0x10 [ 300.693462][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 300.693493][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.693528][ C0] console_flush_all+0x53c/0xd70 [ 300.693563][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 300.693597][ C0] ? lock_acquire+0x1b1/0x560 [ 300.693625][ C0] console_unlock+0xae/0x290 [ 300.693658][ C0] ? __pfx_console_unlock+0x10/0x10 [ 300.693694][ C0] vprintk_emit+0x11a/0x5a0 [ 300.693727][ C0] dev_printk_emit+0xfb/0x140 [ 300.693764][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 300.693802][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 300.693830][ C0] ? device_set_wakeup_capable+0x63/0x1c0 [ 300.693867][ C0] ? hub_port_reset+0x61e/0x1cd0 [ 300.693897][ C0] __dev_printk+0xf5/0x270 [ 300.693921][ C0] _dev_info+0xe5/0x120 [ 300.693946][ C0] ? __pfx__dev_info+0x10/0x10 [ 300.693970][ C0] ? __pfx_hub_port_reset+0x10/0x10 [ 300.694003][ C0] hub_port_init+0x11ac/0x3a50 [ 300.694037][ C0] hub_event+0x2b65/0x4e20 [ 300.694076][ C0] ? __pfx_hub_event+0x10/0x10 [ 300.694110][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 300.694137][ C0] ? __pfx_lock_release+0x10/0x10 [ 300.694167][ C0] process_one_work+0x9c5/0x1b40 [ 300.694200][ C0] ? __pfx_hcd_resume_work+0x10/0x10 [ 300.694239][ C0] ? __pfx_process_one_work+0x10/0x10 [ 300.694271][ C0] ? assign_work+0x1a0/0x250 [ 300.694297][ C0] worker_thread+0x6c8/0xf20 [ 300.694329][ C0] ? __kthread_parkme+0x148/0x220 [ 300.694364][ C0] ? __pfx_worker_thread+0x10/0x10 [ 300.694394][ C0] kthread+0x2c1/0x3a0 [ 300.694413][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.694438][ C0] ? __pfx_kthread+0x10/0x10 [ 300.694458][ C0] ret_from_fork+0x45/0x80 [ 300.694492][ C0] ? __pfx_kthread+0x10/0x10 [ 300.694512][ C0] ret_from_fork_asm+0x1a/0x30 [ 300.694548][ C0] [ 300.733530][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 300.733547][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 300.733575][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 300.733589][ T30] Call Trace: [ 300.733599][ T30] [ 300.733608][ T30] dump_stack_lvl+0x3d/0x1f0 [ 300.733647][ T30] panic+0x6f5/0x7a0 [ 300.733672][ T30] ? __pfx_panic+0x10/0x10 [ 300.733695][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 300.733719][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.733751][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 300.733773][ T30] ? watchdog+0xd8a/0x1280 [ 300.733801][ T30] ? watchdog+0xd7d/0x1280 [ 300.733829][ T30] watchdog+0xd9b/0x1280 [ 300.733859][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.733887][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.733914][ T30] ? __kthread_parkme+0x148/0x220 [ 300.733947][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.733974][ T30] kthread+0x2c1/0x3a0 [ 300.733994][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.734019][ T30] ? __pfx_kthread+0x10/0x10 [ 300.734040][ T30] ret_from_fork+0x45/0x80 [ 300.734070][ T30] ? __pfx_kthread+0x10/0x10 [ 300.734090][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.734124][ T30] [ 300.736218][ T30] Kernel Offset: disabled